Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 14007fd1d9 swid_generator software-id does not generate empty lines any more Andreas Steffen 2014-04-14 11:25:41 +02:00
• 975472e42f Added result information to TPMRA workitems Andreas Steffen 2014-04-12 10:56:16 +02:00
• 1d7324133b Indicate IMV in assessment log statement Andreas Steffen 2014-04-11 16:58:08 +02:00
• 3e7044b45e Implemented segmented SWID tag attributes on IMV side Andreas Steffen 2014-04-11 16:30:55 +02:00
• 8c40609f96 Use python-based swidGenerator to generated SWID tags Andreas Steffen 2014-04-10 10:25:39 +02:00
• 8505ce1cc6 Updated imv database templates Andreas Steffen 2014-04-07 15:17:32 +02:00
• b138bbee4e Optimized PTS measurements Andreas Steffen 2014-04-06 07:18:28 +02:00
• 40e8c67392 Use cached pid for product-based package access Andreas Steffen 2014-04-05 16:11:13 +02:00
• 48f37c448c Make Attestation IMV independent of OS IMV Andreas Steffen 2014-04-05 15:38:06 +02:00
• 4894bfa227 Separated IMV session management from IMV policy database Andreas Steffen 2014-04-04 23:00:40 +02:00
• 0bd64fa5bf Renamed the AIK public key parameter to imc-attestation.aik_pubkey Andreas Steffen 2014-04-02 06:54:16 +02:00
• c54c26dd17 Implemented configurable Device ID in OS IMC Andreas Steffen 2014-03-31 13:00:40 +02:00
• 6d1b4b6baf Version bump to 5.2.0dr1 Andreas Steffen 2014-04-15 09:20:38 +02:00
• 266fcdce2b Version bump to 5.1.3 Andreas Steffen 2014-04-14 15:18:38 +02:00
• e59ce07bfa NEWS: Added info about CVE-2014-2338 Tobias Brunner 2014-04-14 13:32:36 +02:00
• 8503077175 ikev2: Reject CREATE_CHILD_SA exchange on unestablished IKE_SAs Martin Willi 2014-02-20 16:08:43 +01:00
• abd7d3be9c eap-mschapv2: Fix potential leaks in case of invalid messages from servers Tobias Brunner 2014-04-09 18:04:33 +02:00
• f0923ff377 pts: Make sure the complete AIK blob has been read Tobias Brunner 2014-04-09 17:47:32 +02:00
• 8d34e55375 attr: Don't shift the 32-bit netmask by 32 Tobias Brunner 2014-04-09 17:09:55 +02:00
• f738753abc nm: Fix NULL-pointer dereference when handling TUN device failure Tobias Brunner 2014-04-09 16:35:46 +02:00
• f7d04ba6c4 x509: Don't include authKeyIdentifier in self-signed certificates Tobias Brunner 2014-04-09 15:28:54 +02:00
• 3f3680ec3f x509: Initialize certs when building optionalSignature for OCSP requests Tobias Brunner 2014-04-09 15:18:13 +02:00
• a04ef18bda stroke: Fix memory leak when printing unknown AC group OIDs Tobias Brunner 2014-04-09 16:05:55 +02:00
• 297bc06ca9 pki: Fix memory leak when printing unknown AC group OIDs Tobias Brunner 2014-04-09 15:53:35 +02:00
• ce845838ea pki: Removed extra continue statement Tobias Brunner 2014-04-09 15:12:27 +02:00
• 98ae0492b6 Added support for msSmartcardLogon EKU Andreas Steffen 2014-04-08 13:09:03 +02:00
• e2df745122 Added some more OIDs Andreas Steffen 2014-04-08 11:32:30 +02:00
• 6a44fcf929 Initialize m1 to suppress compiler warning Andreas Steffen 2014-04-07 13:29:39 +02:00
• 4e9123a0b1 Fixed another dirname/basename refactoring bug. Andreas Steffen 2014-04-06 17:54:55 +02:00
• d982e38b8b Fixed dirname/basename refactoring bug. Andreas Steffen 2014-04-06 17:26:52 +02:00
• 60451e2fb6 Added SHA3 OIDs Andreas Steffen 2014-04-04 23:44:55 +02:00
• ab8ed95bfc Fixed pretest script in tnc/tnccs-20-pt-tls scenario Andreas Steffen 2014-04-04 23:04:54 +02:00
• 23f34f6ed5 ike-cfg: Properly compare IKE proposals for equality Tobias Brunner 2014-04-02 15:06:56 +02:00
• adc1157487 leak-detective: LEAK_DETECTIVE_DISABLE completely disables LD Tobias Brunner 2014-04-01 10:30:13 +02:00
• 7a61bf9032 testing: Run 'conntrack -F' before all test scenarios Tobias Brunner 2013-07-02 14:01:38 +02:00
• f678bce84c unit-tests: Verify two bytes at once when testing chunk_clear() Tobias Brunner 2014-04-02 11:50:11 +02:00
• b87f7840bc Merge branch 'tls-unit-tests' Martin Willi 2014-04-01 14:53:28 +02:00
• 5ba9f73457 tls: Add a test case to check correct enum name mapping of cipher suites Martin Willi 2014-03-25 09:25:14 +01:00
• 2c8d77394c tls: Add socket based tests testing all supported suites with TLS 1.2/1.1/1.0 Martin Willi 2014-03-24 18:01:00 +01:00
• 74162ed997 tls: Remove superfluous initializers in TLS AEAD implementations Martin Willi 2014-04-01 11:45:45 +02:00
• e15f64cc81 tls: Support a maximum TLS version to negotiate using TLS socket abstraction Martin Willi 2014-03-25 10:12:51 +01:00
• 5313880261 tls: Support a null encryption flag on TLS socket abstraction Martin Willi 2014-03-25 10:19:41 +01:00
• ddf5222096 tls: Introduce a generic TLS purpose that accepts NULL encryption ciphers Martin Willi 2014-03-25 09:49:04 +01:00
• ac5717c9e9 tls: Export a function to list supported TLS cipher suites Martin Willi 2014-03-24 14:28:50 +01:00
• c0efaaebe3 tls: Create a unit-test runner Martin Willi 2014-03-24 13:47:03 +01:00
• 70889c42a6 unit-tests: Catch timeouts during test runner deinit function Martin Willi 2014-03-25 14:14:37 +01:00
• 4e8ff4f010 unit-tests: Prevent a failing worker thread to go wild after it fails Martin Willi 2014-03-24 17:17:50 +01:00
• 96e3142c39 Test TLS AEAD cipher suites Andreas Steffen 2014-04-01 10:12:15 +02:00
• 37ef086ea7 Added Ubuntu 14.04 to IMV database Andreas Steffen 2014-03-31 22:22:51 +02:00
• 05eb83e986 Slightly edited evaltest of ikev2/ocsp-untrusted-cert scenario Andreas Steffen 2014-03-31 22:08:50 +02:00
• 036dab0a10 unit-tests: Always load address of testable functions Tobias Brunner 2014-03-31 16:58:46 +02:00
• 2a38b4556e settings: Reduce log verbosity if strongswan.conf does not exist Tobias Brunner 2014-03-31 14:47:00 +02:00
• a800253fbf test-vectors: Renumber AES-GCM test vectors according to original source Tobias Brunner 2014-03-13 14:05:29 +01:00
• e2e0165605 Merge branch 'tls-aead' Martin Willi 2014-03-31 16:17:57 +02:00
• 7dc7fdea72 NEWS: Note TLS AEAD mode Martin Willi 2014-03-31 16:17:15 +02:00
• e67e8dd197 tls: Fix some TLS cipher suite enum names Martin Willi 2014-03-25 09:20:15 +01:00
• b37080f8c9 tls: Include TLS version announced in Client Hello in encrypted premaster Martin Willi 2014-03-25 10:50:51 +01:00
• f93497507f tls: Check for minimal TLS record length before each record iteration Martin Willi 2014-03-21 09:29:44 +01:00
• b886dad498 tls: Fix AEAD algorithm filtering, avoid filtering all suites if no AEAD found Martin Willi 2014-03-11 10:57:18 +01:00
• 48d6b57c30 tls: Offer TLS signature schemes in ClientHello in order of preference Martin Willi 2014-01-15 15:51:03 +01:00
• d06890d6e2 tls: Define AES-GCM cipher suites from RFC 5288/5289 Martin Willi 2014-02-03 18:08:11 +01:00
• f0f301170b tls: Implement the TLS AEAD abstraction for real AEAD modes Martin Willi 2014-02-03 18:03:41 +01:00
• d3204677ba tls: Separate TLS protection to abstracted AEAD modes Martin Willi 2014-02-03 13:20:46 +01:00
• e5d73b0dfa aead: Support custom AEAD salt sizes Martin Willi 2014-01-31 15:53:38 +01:00
• e12eec1008 ikev2: Recreate a CHILD_SA that got a hard lifetime expire without rekeying Martin Willi 2014-02-27 09:36:46 +01:00
• 94fb33bb88 revocation: Log error if no OCSP signer candidate found Martin Willi 2014-03-31 14:53:15 +02:00
• 11614d783b Merge branch 'ocsp-constraints' Martin Willi 2014-03-31 14:44:50 +02:00
• 91d71abb16 revocation: Restrict OCSP signing to specific certificates Martin Willi 2014-03-25 14:34:58 +01:00
• a844b65890 revocation: Don't merge auth config of CLR/OCSP trustchain validation Martin Willi 2014-03-27 10:59:29 +01:00
• efce234de4 hashtable: Make key arguments const Tobias Brunner 2014-03-27 11:57:54 +01:00
• 3b09c02ec0 Properly hash pointers for hash tables where appropriate Tobias Brunner 2014-03-27 11:37:16 +01:00
• 7522fcffd2 kernel-pfroute: Let get_nexthop() default to destination address Tobias Brunner 2014-03-11 15:19:33 +01:00
• 5119c5fe97 x509: CERT_DECODE actually requires KEY_ANY Tobias Brunner 2014-03-06 12:20:55 +01:00
• 0524028054 pkcs1: KEY_ANY public key decoder soft depends on specific decoders Tobias Brunner 2014-03-06 12:20:05 +01:00
• 00b91c4325 eap-radius: Add option to not close IKE_SAs on timeouts during interim accouting updates Tobias Brunner 2014-03-05 15:17:25 +01:00
• a30e0001e4 ikev1: Accept SPI size of any length <= 16 in ISAKMP proposal Tobias Brunner 2014-03-03 14:03:46 +01:00
• a213944d4a proposal: Don't fail DH proposal matching if peer includes NONE Tobias Brunner 2014-02-28 15:27:52 +01:00
• 9fa7b03769 conf: Order settings in man page alphabetically Tobias Brunner 2014-03-01 17:01:53 +01:00
• 1766ede330 Merge branch 'acerts' Martin Willi 2014-03-31 12:11:04 +02:00
• 8101e6aa17 NEWS: Add acert and pki changes for 5.1.3 Martin Willi 2014-03-31 11:23:22 +02:00
• dbd4fc074a openac: Remove obsolete openac utility Martin Willi 2014-03-31 11:30:51 +02:00
• 3941d55f01 pki: Document --not-before/after and --dateform options in manpages Martin Willi 2014-03-27 16:12:29 +01:00
• 2769a22e1f pki: Support absolute --this/next-update CRL lifetimes Martin Willi 2014-03-27 15:56:20 +01:00
• d6e921181a pki: Support absolute --not-before/after issued certificate lifetimes Martin Willi 2014-03-27 15:45:52 +01:00
• aa8732eb68 pki: Support absolute --not-before/after self-signed certificate lifetimes Martin Willi 2014-03-27 15:45:32 +01:00
• 6f90e8e664 pki: Support absolute --not-before/after acert lifetimes Martin Willi 2014-03-27 14:47:18 +01:00
• 06d3b6e9c9 pki: Add a certificate lifetime calculation helper function Martin Willi 2014-03-27 14:46:41 +01:00
• babd848778 testing: Add an acert test that forces a fallback connection based on groups Martin Willi 2014-02-07 11:51:08 +01:00
• 1a4d3222be testing: Add an acert test case sending attribute certificates inline Martin Willi 2014-02-07 11:22:39 +01:00
• 9f676321a9 testing: Add an acert test using locally cached attribute certificates Martin Willi 2014-02-07 10:28:50 +01:00
• c602ee65dc testing: build strongSwan with acert plugin Martin Willi 2014-02-07 10:26:08 +01:00
• 3a2deb98bc ikev2: Cache all received attribute certificates to auth config Martin Willi 2014-02-05 17:56:05 +01:00
• d417900335 ikev2: Send all known and valid attribute certificates for subject cert Martin Willi 2014-02-05 17:48:35 +01:00
• a14f7edfb2 ikev2: Slightly refactor certificate payload construction to separate functions Martin Willi 2014-02-05 17:25:48 +01:00
• f316116c88 ike: Support encoding of attribute certificates in CERT payloads Martin Willi 2014-02-05 17:46:01 +01:00
• 83f8cdde46 auth-cfg: Declare an attribute certificate helper type to exchange acerts Martin Willi 2014-02-05 17:15:45 +01:00
• 5ac0e66879 acert: Implement a plugin finding, validating and evaluating attribute certs Martin Willi 2014-02-05 16:59:55 +01:00
• b06283f1e3 x509: Match acert has_subject() against entityName or holder serial Martin Willi 2014-02-05 14:45:47 +01:00
• 6e8c665a51 pki: Add acert and extend pki/print manpages Martin Willi 2014-02-05 12:49:10 +01:00
• 35a783cff7 pki: Implement an acert command to issue attribute certificates Martin Willi 2014-02-05 12:28:00 +01:00