Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• ef6d78d6ef leak-detective: Register OS X specific hooks just once Martin Willi 2013-11-06 10:09:04 +01:00
• f192526c3f leak-detective: Reset leak list during cleanup Martin Willi 2013-10-16 11:16:41 +02:00
• a426851f63 leak-detective: Use callback functions to report leaks and usage information Martin Willi 2013-10-16 10:37:38 +02:00
• 9ae1140118 unit-tests: Move test suites to its own subfolder Martin Willi 2013-10-14 16:44:27 +02:00
• c49c3f3208 ikev2: Properly free DH secret in case of errors during IKE key derivation Tobias Brunner 2013-11-06 10:20:48 +01:00
• 2da887da35 unit-tests: completed asn1_suite Andreas Steffen 2013-11-04 18:35:25 +01:00
• 79b8a384b5 Updated test_runner.h with new suites Andreas Steffen 2013-11-03 21:34:42 +01:00
• 7817d88e1a unit-tests: 100% function coverage for asn1.c Andreas Steffen 2013-11-03 17:40:51 +01:00
• 54bce665c4 unit-tests: 12 asn1 functions tested Andreas Steffen 2013-11-02 21:20:04 +01:00
• c3103700fc Some minor refactoring in asn1.c Andreas Steffen 2013-11-02 21:17:46 +01:00
• 1347c936bd Do not free zero-length integer Andreas Steffen 2013-11-02 02:11:32 +01:00
• a40c4bc28c unit-tests: Added tests for pen_type_t Andreas Steffen 2013-11-01 22:29:29 +01:00
• 6db81edac3 Added IFOM_CAPABILITY notify message type Andreas Steffen 2013-11-01 14:07:11 +01:00
• dc4dd88c42 Updated copyright statement Andreas Steffen 2013-11-01 13:46:58 +01:00
• 10900ed7e7 charon-xpc: Set AUTH_RULE_IDENTITY_LOOSE on responder config Martin Willi 2013-11-01 12:05:48 +01:00
• b76e96e2ef ike: Don't immediately DPD after deferred DELETEs following IKE_SA rekeying Martin Willi 2013-11-01 11:28:53 +01:00
• 7b8fbd7402 Added security info on CVE-2013-6075 and CVE-2013-6076 Andreas Steffen 2013-10-31 22:11:11 +01:00
• 643da9d2e6 ikev1: Properly initialize list of fragments in case fragment ID is 0 Volker Rümelin 2013-10-11 09:38:24 +02:00
• 7f4a13fffb identification: Properly check length before comparing for binary DN equality Martin Willi 2013-10-07 14:21:57 +02:00
• ed3eb62723 unit-tests: Additionally do reverse match checking with empty identities Martin Willi 2013-10-08 15:43:50 +02:00
• e02b12e374 unit-tests: Test matching against some empty data identities Martin Willi 2013-10-08 14:49:45 +02:00
• df12b3a61f unit-tests: Test for equality against some empty data identities Martin Willi 2013-10-08 14:34:41 +02:00
• c409be2506 unit-tests: Let identity equality test fail if a->equals(b) != b->equals(a) Martin Willi 2013-10-08 14:33:12 +02:00
• 2590cd20d3 PB-TNC PDP_REFERRAL message doesn't have to be in RESULT batch Andreas Steffen 2013-10-31 12:01:47 +01:00
• c501c78c5f Version bump to 5.1.1 Andreas Steffen 2013-10-31 09:42:15 +01:00
• 6d18e23e9f Added test-driver to .gitignore Andreas Steffen 2013-10-30 20:47:44 +01:00
• 7967876257 Encrypt carol's PKCS#8 private key in openssl-ikve2/rw-suite-b-128|192 scenarios Andreas Steffen 2013-10-30 20:46:32 +01:00
• 4334735605 updown: fix segfault when interface name can't be resolved Ansis Atteka 2013-10-29 19:48:51 -07:00
• 588099f772 debian: build debug symbol package Ansis Atteka 2013-10-25 15:42:10 -07:00
• 19046552b6 ipsec: Updated ipsec(8) Tobias Brunner 2013-10-29 17:19:57 +01:00
• 71687f4fad ipsec: Remove unused distro.txt Tobias Brunner 2013-10-29 16:34:10 +01:00
• 5ac29360fc utils: Include stdio.h for fmemopen() replacement Tobias Brunner 2013-10-29 16:18:35 +01:00
• 60ddf6284f Use exact mask when calling umask(2) Tobias Brunner 2013-10-29 15:16:22 +01:00
• d402e87d16 whitelist: Read multiple commands until client closes connection Martin Willi 2013-10-29 14:11:41 +01:00
• 348b9d82b4 libtnccs: Add dummy entry to pb_tnc_tcg_msg_infos Tobias Brunner 2013-10-29 13:36:15 +01:00
• 751670a93b swid: Properly clean up after reading SWID tag Tobias Brunner 2013-10-29 13:14:37 +01:00
• bb49dfb02e man: strongswan.conf(5) updated Tobias Brunner 2013-10-29 11:45:25 +01:00
• 1dd58b0e21 Fixed some typos Tobias Brunner 2013-10-29 10:07:03 +01:00
• 1ba47fa565 charon-xpc: Load missing eap-md5 plugin after enabling it Martin Willi 2013-10-28 15:13:54 +01:00
• 9f2a4d3315 charon-xpc: Disable warnings about deprecated functions Martin Willi 2013-10-28 14:40:49 +01:00
• f5ea7d781f charon-xpc: Avoid -all_load linker flag Martin Willi 2013-10-28 14:39:35 +01:00
• a1c2ed8820 charon-xpc: Properly xpc_retain() connections we xpc_release() Martin Willi 2013-10-28 14:29:07 +01:00
• 888d8d73ab charon-xpc: Properly cast SA identifier to uintptr representation Martin Willi 2013-10-28 14:00:22 +01:00
• 3e40dbb128 charon-xpc: Don’t build against libvstr anymore Martin Willi 2013-10-28 13:38:44 +01:00
• 6a3cfbdc0d charon-xpc: Build with EAP-MD5 support Martin Willi 2013-10-28 13:36:01 +01:00
• 9df621d21f utils: Fix check for fmemopen() fallback implementation Martin Willi 2013-10-24 15:58:28 +02:00
• 8465514157 unit-tests: Set sa_len in sockaddr template data, if required Martin Willi 2013-10-24 15:27:28 +02:00
• e71c57467c printf-hook-builtin: Don't rely on isinf() return value signedness Martin Willi 2013-10-24 15:17:30 +02:00
• 5ce3c9b15a watcher: Rebuild fdset when select() fails Martin Willi 2013-10-24 15:07:43 +02:00
• 1a20a22d09 rwlock: Disable thread cancelability while waiting in (fallback) rwlock Martin Willi 2013-10-24 14:46:14 +02:00
• 181d071363 rwlock: Don't use buggy pthread_rwlock on OS X Martin Willi 2013-10-24 13:45:31 +02:00
• 2077d996a9 utils: Provide a fmemopen(3) fallback using BSD funopen() Martin Willi 2013-10-24 11:49:32 +02:00
• 9043cb2f9c Fixed sql/net2net-route-pem scenario evaluation Andreas Steffen 2013-10-23 22:23:47 +02:00
• 5a7e98231b Added some example Debian SWID tags Andreas Steffen 2013-10-23 22:12:12 +02:00
• 34dff30ca0 Added Brainpool ECP support to NEWS Andreas Steffen 2013-10-23 21:11:22 +02:00
• 2efe61e07b Added two Brainpool IKEv2 scenarios Andreas Steffen 2013-10-23 21:08:18 +02:00
• 71c9565a3a pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOB Tobias Brunner 2013-10-22 14:35:13 +02:00
• 46cded2627 chunk: Add helper function to create a chunk from data read from a file descriptor Tobias Brunner 2013-10-22 14:22:35 +02:00
• b08292a520 semaphore: Support cancellation in wait functions of semaphore fallback Martin Willi 2013-10-23 16:05:40 +02:00
• 47c76c1b05 rwlock: Re-acquire rwlock even if condvar wait times out Martin Willi 2013-10-22 18:36:44 +02:00
• b891c22aa9 Updated and split data.sql Andreas Steffen 2013-10-23 00:26:02 +02:00
• 252c04d3f9 Adapted recipe and patches to freeradius-2.2.1 Andreas Steffen 2013-10-22 10:09:24 +02:00
• 50d7a55c96 Support Ubuntu 13.10 measurements Andreas Steffen 2013-10-21 21:33:30 +02:00
• 27bf5c06dc check it specified IF-TNCCS protocol is enabled Andreas Steffen 2013-10-21 21:03:53 +02:00
• 8e8e97d10d kernel-netlink: Check existence of linux/fib_rules.h, don't include it in distribution Tobias Brunner 2013-10-18 09:38:01 +02:00
• 3ea7165a27 Merge branch 'icmp' Tobias Brunner 2013-10-17 16:57:48 +02:00
• 6956061197 ipsec.conf.5: Note about ICMP[v6] message type/code added Tobias Brunner 2013-10-14 17:10:16 +02:00
• 4c185d11ad updown: Properly configure ICMP[v6] message type and code in firewall rules Tobias Brunner 2013-10-17 16:29:30 +02:00
• 9739a0bf67 updown: Pass ICMP[v6] message type and code to updown script Tobias Brunner 2013-10-14 17:08:09 +02:00
• 59213396fa kernel-pfkey: Install ICMP[v6] type/code as expected by the Linux kernel Tobias Brunner 2013-10-15 14:26:51 +02:00
• 406a504ca7 kernel-netlink: Convert ports in acquires to ICMP[v6] type and code Tobias Brunner 2013-10-15 17:59:26 +02:00
• ddc2d3c8e4 kernel-netlink: Properly install policies with ICMP[v6] types and codes Tobias Brunner 2013-10-14 17:00:18 +02:00
• 000235f1c5 traffic-selector: Print ICMP[v6] message type and code in a more readable way Tobias Brunner 2013-10-14 16:53:42 +02:00
• 4bebe45abb traffic-selector: Store ICMP[v6] message type and code properly Tobias Brunner 2013-10-14 16:52:20 +02:00
• d6a1960d34 traffic-selector: Move class to its own Doxygen group Tobias Brunner 2013-10-15 10:04:04 +02:00
• 5eb802ab18 Merge branch 'ecc-brainpool' Tobias Brunner 2013-10-17 16:56:31 +02:00
• 7313499914 proposal: Add ECC Brainpool DH groups to the default proposal Tobias Brunner 2013-09-13 11:29:40 +02:00
• 606aae3aa1 openssl: Add workaround if ECC Brainpool curves are not defined Tobias Brunner 2013-10-17 13:31:17 +02:00
• 3c29d2822f openssl: Add support for ECC Brainpool curves for DH, if defined by OpenSSL Tobias Brunner 2013-10-17 13:28:30 +02:00
• cca372465d ecc: Added ECC Brainpool ECDH groups as registered with IANA Andreas Steffen 2013-09-09 09:36:04 +02:00
• be97277bdb unit-tests: Make test for bio_writer_t more portable Tobias Brunner 2013-10-12 01:56:24 +02:00
• f6cadb7f54 libipsec: Don't print ciphertext with ICV in log message Tobias Brunner 2013-10-17 11:36:32 +02:00
• f5c5fd6f74 libipsec: Properly calculate padding length especially for AES-GCM Tobias Brunner 2013-10-12 01:09:53 +02:00
• 812ae898bf utils: Add utility function to calculate padding length Tobias Brunner 2013-10-12 01:01:06 +02:00
• 32fef0c6e9 stroke: Reuse reqids of established CHILD_SAs when routing connections Tobias Brunner 2013-09-19 10:59:20 +02:00
• 6278e64230 trap-manager: Make sure a config is not trapped twice Tobias Brunner 2013-09-19 10:53:05 +02:00
• dd438ee22c Doxygen fixes Tobias Brunner 2013-10-15 11:16:09 +02:00
• a37ab690cc Set recommendation in the case of PCR measurement failures Andreas Steffen 2013-10-13 22:17:18 +02:00
• b0761f1f0a Add linux/fip_rules.h to include files Andreas Steffen 2013-10-13 20:51:10 +02:00
• 6623dfa84d Revert refactoring which broke CentOS build Andreas Steffen 2013-10-13 19:56:04 +02:00
• 1ca57d497f Increase debug level in libipsec/rw-suite-b scenario Andreas Steffen 2013-10-11 21:34:59 +02:00
• 1486fe786a Use bold font to display key size Andreas Steffen 2013-10-11 21:23:10 +02:00
• fcf355036f Added swid_directory option Andreas Steffen 2013-10-11 20:59:24 +02:00
• 3bd4536185 Added tnc/tnccs-11-supplicant scenario Andreas Steffen 2013-10-11 20:18:59 +02:00
• cae778147a Define aaa.strongswan.org in /etc/hosts Andreas Steffen 2013-10-11 20:16:59 +02:00
• d14ba7e7fd testing: Add libipsec/host2host-cert scenario Tobias Brunner 2013-10-11 18:04:48 +02:00
• d9020264f4 checksum: The pool utility was moved to its own directory Tobias Brunner 2013-10-11 17:33:19 +02:00
• 0f6f7ba22c ccm: Add missing comma in get_iv_gen method signature Tobias Brunner 2013-10-11 17:26:57 +02:00
• bfeb8b5c47 iv-gen: Add missing header files to Makefile.am Tobias Brunner 2013-10-11 17:22:30 +02:00
• 1c1ba803ac NEWS: Updates for the recent merges Tobias Brunner 2013-10-11 16:20:41 +02:00