Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0cec570a4b NEWS: Add unit testing improvements Martin Willi 2014-01-24 13:18:45 +01:00
• d048a319df ike: Restart inactivity counter after doing a CHILD_SA rekey Martin Willi 2013-11-07 09:21:02 +01:00
• 763e035335 child-sa: Add a getter for CHILD_SA install time Martin Willi 2013-11-07 09:20:40 +01:00
• 76d073c5ab Merge branch 'pam-session' Martin Willi 2014-01-23 16:14:46 +01:00
• 572582f5de NEWS: Introduce PAM session management Martin Willi 2014-01-23 16:11:54 +01:00
• c5dc94dc8a man: Document xauth-pam session option Martin Willi 2014-01-22 14:31:22 +01:00
• 2312504d1e xauth-pam: Open/close a PAM session for each connected client Andrea Bonomi 2014-01-21 09:54:20 +01:00
• 7dc8bf495b xauth-pam: Sanitize XAuth attributes before passing them to PAM Martin Willi 2014-01-22 14:01:01 +01:00
• 5770e28e96 Merge branch 'vendor-ids' Martin Willi 2014-01-23 16:04:48 +01:00
• c7c2e24a56 ikev2: Add Cisco FRAGMENTATION vendor ID Martin Willi 2014-01-17 12:00:13 +01:00
• 2c6d204bec ikev2: Add Cisco Copyright vendor ID Martin Willi 2014-01-17 11:58:12 +01:00
• f84d1cb2f9 ikev2: Add Cisco Delete Reason vendor ID Martin Willi 2014-01-17 11:57:47 +01:00
• a8d8e631f9 ikev2: Use a more dynamic vendor ID database, as we use with IKEv1 Martin Willi 2014-01-17 11:37:35 +01:00
• 6a620f9936 Merge branch 'chunk-mmap' Martin Willi 2014-01-23 15:55:44 +01:00
• 853498155e libpts: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:49:19 +01:00
• 7ae878c357 tnccs: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:49:57 +01:00
• 88fa7f62be pem: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:49:37 +01:00
• ecdef634aa stroke: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:48:03 +01:00
• b8d0103e31 radattr: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:47:23 +01:00
• 39badc53cd libfast: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:48:23 +01:00
• 69be6a9e05 integrity-checker: Use chunk_map() instead of non-portable mmap() Martin Willi 2013-11-21 14:50:30 +01:00
• b9ee059ca9 chunk: Externalize error reporting in chunk_write() Martin Willi 2013-11-21 14:22:01 +01:00
• 37374a292a chunk: Provide a fallback chunk_map() if mmap is not available Martin Willi 2013-11-21 14:07:12 +01:00
• 1c4a3459f7 chunk: Use dynamically allocated buffer in chunk_from_fd() Martin Willi 2013-11-21 12:19:20 +01:00
• 595b6d9a82 chunk: Add functions to map file contents to a chunk Martin Willi 2013-11-21 11:29:46 +01:00
• fa9b6e88a0 Merge branch 'unity-fixes' Tobias Brunner 2014-01-23 11:19:38 +01:00
• 21c18f536d unity: Send all traffic selectors in a single UNITY_SPLIT_INCLUDE attribute Tobias Brunner 2013-11-15 16:45:59 +01:00
• f8262aa1a6 unity: Change local TS to 0.0.0.0/0 as responder Tobias Brunner 2013-11-15 15:15:19 +01:00
• 685579d6d8 unity: Send UNITY_SPLIT_INCLUDE attributes with proper padding Tobias Brunner 2013-11-15 14:54:42 +01:00
• 6b95565767 Merge branch 'ipcomp' Tobias Brunner 2014-01-23 10:27:49 +01:00
• 571025a609 testing: Add ikev2/host2host-transport-nat scenario Tobias Brunner 2013-11-08 14:57:01 +01:00
• 62e050e0ef testing: Add ipv6/rw-compress-ikev2 scenario Tobias Brunner 2013-11-08 12:16:40 +01:00
• 6055e347f8 testing: Add ikev2/compress-nat scenario Tobias Brunner 2013-11-08 11:12:04 +01:00
• 1fde30cc23 testing: Enable firewall for ikev2/compress scenario Tobias Brunner 2013-11-08 10:54:20 +01:00
• fe2a2d1885 kernel-netlink: Set selector on transport mode IPComp SAs Tobias Brunner 2013-11-07 21:02:07 +01:00
• cc04a6db3e kernel-netlink: Selectively add selector on SAs that use IPComp Tobias Brunner 2013-11-07 20:58:42 +01:00
• 7e3bbcf77a updown: Increase buffer size for script and environment variables Tobias Brunner 2013-11-07 20:56:30 +01:00
• 6d1198e71d updown: Allow IPIP traffic if IPComp was negotiated Tobias Brunner 2013-11-07 17:50:02 +01:00
• cf4a7395aa updown: Add PLUTO_IPCOMP to indicate if IPComp was negotiated Tobias Brunner 2013-11-07 17:48:40 +01:00
• 72a92d4f7d curl: Replace spaces in URIs with %20 Tobias Brunner 2013-11-22 10:42:18 +01:00
• ccb6758e5b utils: Add strreplace function Tobias Brunner 2013-11-22 10:30:16 +01:00
• f44b1eb444 stroke: Ensure the buffer of strings in a stroke_msg_t is null-terminated Tobias Brunner 2013-11-29 17:42:11 +01:00
• 5ab03863b0 stroke: Add an option to prevent log level changes via stroke socket Tobias Brunner 2013-11-29 17:27:23 +01:00
• 040cf911a6 pki: Make sure no command registers too many options Tobias Brunner 2013-12-11 17:38:18 +01:00
• 079e6c2b04 pki: Increase MAX_COMMANDS to cover all currently available commands Tobias Brunner 2013-12-11 17:24:03 +01:00
• 2b8224fce3 pki: Print a warning if MAX_COMMANDS is too low Tobias Brunner 2013-12-11 17:23:43 +01:00
• b0e14fcba6 pki: Properly use ?: when defining option arrays Tobias Brunner 2013-12-11 17:21:06 +01:00
• 2d7852d29a configure: Add -Wno-format-security to default CFLAGS Tobias Brunner 2013-11-25 18:20:13 +01:00
• 54ca25800c agent: Keep CAP_DAC_OVERRIDE to connect to ssh-agent socket Tobias Brunner 2013-11-21 17:12:21 +01:00
• 53d2164c5d ike: Simplify error handling if name resolution failed Tobias Brunner 2013-11-11 16:17:35 +01:00
• be8af56e7a ike: Use proper hostname(s) when name resolution failed Tobias Brunner 2013-11-11 16:16:03 +01:00
• 72ffb20318 ikev2: Wipe (optional) shared secret during CHILD_SA key derivation Tobias Brunner 2013-11-06 10:30:27 +01:00
• e465c006e5 checksum must be the last subdir included Tobias Brunner 2014-01-23 09:41:35 +01:00
• b034131555 unit-tests: Pass a test suite collection name to print during test execution Martin Willi 2014-01-21 17:48:08 +01:00
• 589fab2260 array: Add an array_get() function Martin Willi 2014-01-21 13:23:32 +01:00
• 027cf7ddcf watcher: Don't complain if select() syscall got interrupted Martin Willi 2014-01-22 14:25:03 +01:00
• e49b299867 stream: Make sure no watcher callback is active while changing stream callbacks Martin Willi 2014-01-21 17:36:38 +01:00
• a40c66194e checksum: Read executables from DESTDIR Tobias Brunner 2014-01-21 14:53:46 +01:00
• 50d292d7d8 man: Add documentation of the dhcp interface option Thomas Egerer 2013-11-19 13:42:54 +01:00
• 3711f66e54 dhcp: Allow binding of socket to particular interface Thomas Egerer 2013-11-18 13:15:02 +01:00
• 568e302260 proposal: Add possibility to register custom proposal keyword parser Thomas Egerer 2013-11-29 13:17:30 +01:00
• 303ec3956c unit-tests: Add environment variable to reduce the number of generated keys Tobias Brunner 2014-01-20 15:35:13 +01:00
• 3d097e1024 unit-tests: Generate RSA key with 768 bits not 786 Tobias Brunner 2014-01-20 15:27:09 +01:00
• b190899473 ike_sa: Defer task manager destruction after child destruction Thomas Egerer 2014-01-16 13:24:08 +01:00
• 800b361e19 Version bump to 5.1.2rc1 Andreas Steffen 2014-01-16 01:47:34 +01:00
• eeaa8a2417 Added TPMRA workitem support in PTS database Andreas Steffen 2014-01-16 01:46:55 +01:00
• 2e89bc4b66 printf-hook-builtin: Correctly calculate written bytes in print_in_hook() Martin Willi 2014-01-15 18:18:24 +01:00
• a48d19a3bf Do PTS measurements only if session initialisation was successful Andreas Steffen 2014-01-15 12:06:22 +01:00
• fde42c15fd Starting with 3.1.7 kernel.org replaced bz2 with xz format Andreas Steffen 2014-01-15 02:14:08 +01:00
• f74c8be19b Version bump to 5.1.2dr3 Andreas Steffen 2014-01-13 12:12:52 +01:00
• 8b36021b5b Catch AIK errors Andreas Steffen 2014-01-13 08:19:10 +01:00
• fbddf52c80 Do TPM measurements only if there is a TPMRA workitem Andreas Steffen 2014-01-10 11:53:50 +01:00
• 81d49c5cfd Allow reason strings to be used as workitem result string Andreas Steffen 2013-12-31 13:13:32 +01:00
• 6009b6e0dd Attestation IMV processes TPMRA workitem Andreas Steffen 2013-12-26 17:39:05 +01:00
• 3254f8b00a Added TPM Remote Attestation (TPMRA) workitem Andreas Steffen 2013-12-26 11:28:51 +01:00
• 2ff62bee04 checksum: Set rpath including DESTDIR for checksum_builder Tobias Brunner 2014-01-08 11:24:24 +01:00
• 94e10f15e5 test-asn1: Fix skipping of >2038 tests on i386 Tobias Brunner 2014-01-06 18:01:06 +01:00
• d62a6ec3f9 chunk: Fix chunk_mac/hash tests on big-endian systems Tobias Brunner 2014-01-06 17:31:07 +01:00
• 13f2d3a2f6 utils: Fix %T printf hook on big-endian systems Tobias Brunner 2014-01-06 15:30:02 +01:00
• 0773c7fd71 checksum: Delay building of checksum_builder until required by make install Tobias Brunner 2014-01-06 14:17:20 +01:00
• 5d826357b8 checksum: Remove unnecessary pluto symbol Tobias Brunner 2014-01-06 13:37:12 +01:00
• 261fd9d33b stroke: Fix error message if parsing leftsourceip fails Tobias Brunner 2014-01-06 12:55:10 +01:00
• 6810388064 Update PCR even if measurement does not equal reference value Andreas Steffen 2013-12-21 00:39:40 +01:00
• bfa2201537 tun-device: Include system headers before our own Tobias Brunner 2013-12-20 11:24:02 +01:00
• 7c4629060a aes-test: Fix compiler warnings from older versions of GCC Tobias Brunner 2013-12-19 11:02:23 +01:00
• f5fd12b932 Fixed check_file_measurement method in pts_database_t Andreas Steffen 2013-12-13 14:37:31 +01:00
• 953a922e9b unit-tests: NTRU test to check a special branch Andreas Steffen 2013-12-08 10:18:33 +01:00
• 84814a6b7c min_MGF_hash_calls parameter is not needed anymore Andreas Steffen 2013-12-07 23:54:53 +01:00
• 5da659523e Optimized MGF1 implementation Andreas Steffen 2013-12-07 23:29:04 +01:00
• abd4797dc1 Implemented ntru_trits class Andreas Steffen 2013-12-07 23:27:59 +01:00
• a978a8194d Streamlined DRBG and MGF1 debug output Andreas Steffen 2013-12-07 00:21:28 +01:00
• bced16ee11 Version bump to 5.1.2dr2 Andreas Steffen 2013-12-06 10:10:24 +01:00
• 933f3c6e8f unit-tests: Added crypter tests Andreas Steffen 2013-12-06 10:09:36 +01:00
• fdc6c682b2 Added own MGF1 mask generating function Andreas Steffen 2013-12-05 22:55:47 +01:00
• 78affed0a0 unit-tests: Added hasher tests Andreas Steffen 2013-12-04 23:09:32 +01:00
• 2006709ec5 Moved test_rng to a test suite of its own Andreas Steffen 2013-12-04 21:23:30 +01:00
• f1e12da7ef unit-tests: Don't use priority for destructor that unregisters testable functions Tobias Brunner 2013-12-02 11:16:04 +01:00
• d5a0abfa92 unit-tests: Export ntru_drbg_create as testable function so no linking is required Tobias Brunner 2013-11-28 18:06:09 +01:00
• 4cea186b64 unit-tests: Add facility to register testable functions Tobias Brunner 2013-11-28 18:02:18 +01:00
• a24eec4649 unit-tests: Move ntru_test_rng_t to a utility class in libtest Tobias Brunner 2013-11-28 18:00:33 +01:00