Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 5ef630189a Merge branch 'iv-gen' Tobias Brunner 2013-10-11 15:55:49 +02:00
• 0c6f6c4e34 iv_gen: Mask sequential IVs with a random salt Tobias Brunner 2013-08-05 16:24:40 +02:00
• e8229ad558 iv_gen: Provide external sequence number (IKE, ESP) Tobias Brunner 2013-08-05 15:41:45 +02:00
• d74c254dfd ipsec: Use IV generator to encrypt ESP messages Tobias Brunner 2013-08-05 14:59:10 +02:00
• b5010707a0 ikev2: Use IV generator to encrypt encrypted payload Tobias Brunner 2013-08-05 14:55:51 +02:00
• 50bd28d549 iv_gen: aead_t implementations provide an IV generator Tobias Brunner 2013-08-05 14:52:30 +02:00
• b3e1eb2afe iv_gen: Add IV generator that allocates IVs sequentially Tobias Brunner 2013-08-05 14:43:50 +02:00
• 53d1f2dbfd iv_gen: Add IV generator that allocates IVs randomly Tobias Brunner 2013-08-05 14:19:43 +02:00
• 403057aa5a crypto: Add generic interface for IV generators Tobias Brunner 2013-08-05 14:10:47 +02:00
• b38f7f703b apidoc: Move mac_prf to prf Doxygen group Tobias Brunner 2013-08-05 14:09:43 +02:00
• af22622a9d Merge branch 'radius-unity' Tobias Brunner 2013-10-11 15:52:36 +02:00
• feb3c4ff22 eap-radius: Forward RAT_FRAMED_IP_NETMASK as INTERNAL_IP4_NETMASK Tobias Brunner 2013-08-19 13:31:55 +02:00
• 1a809e46f8 eap-radius: Forward UNITY_SPLIT_INCLUDE or UNITY_LOCAL_LAN attributes Tobias Brunner 2013-08-16 15:25:33 +02:00
• 66229619cf eap-radius: Forward UNITY_DEF_DOMAIN and UNITY_SPLITDNS_NAME attributes Tobias Brunner 2013-08-16 13:41:22 +02:00
• 121c64f0d5 Merge branch 'dnscert' Tobias Brunner 2013-10-11 15:46:09 +02:00
• ca28e13fe8 testing: Add ikev2/net2net-dnscert scenario Tobias Brunner 2013-09-26 18:28:48 +02:00
• a4d6a5a359 testing: Provide moon's and sun's certificate as CERT RR Tobias Brunner 2013-09-26 18:16:10 +02:00
• 99a89ea7f4 testing: Enable dnscert plugin Tobias Brunner 2013-09-26 17:01:11 +02:00
• 42525d1142 testing: Load testing.conf.local from the same directory as testing.conf Tobias Brunner 2013-09-26 17:00:21 +02:00
• b638c131de dnscert: Add DNS CERT support for pubkey authentication Ruslan N. Marchenko 2013-08-30 17:51:12 +02:00
• 8ac54970f5 ipseckey: Properly handle failure to create a certificate Tobias Brunner 2013-08-29 15:58:48 +02:00
• e8130a9498 ipseckey: Refactor creation of certificate enumerator Tobias Brunner 2013-08-29 15:47:05 +02:00
• de5ea570f1 ipseckey: Depend on plugin features to create public key and certificate objects Tobias Brunner 2013-08-29 15:25:23 +02:00
• 6ecf1aab35 unbound: Add support for DLV (DNSSEC Lookaside Validation) Tobias Brunner 2013-08-29 09:04:36 +02:00
• 1ff63f153e Merge branch 'fwmarks' Tobias Brunner 2013-10-11 15:33:06 +02:00
• cd25d291f7 kernel-libipsec: Don't ignore policies of type != POLICY_IPSEC Tobias Brunner 2013-10-10 15:41:29 +02:00
• eeb34af069 kernel-libipsec: Add an option to allow remote TS to match the IKE peer Tobias Brunner 2013-08-13 17:10:00 +02:00
• 80f8b3a6d8 socket-default: Allow setting firewall mark on outbound packets Tobias Brunner 2013-08-13 16:58:33 +02:00
• 51fefe4606 kernel-netlink: Allow setting firewall marks on routing rule Tobias Brunner 2013-08-13 16:53:06 +02:00
• 434e530f75 ipsec_types: Add utility function to parse mark_t from strings Tobias Brunner 2013-08-13 15:15:45 +02:00
• 6d7710a744 Merge branch 'database-transactions' Tobias Brunner 2013-10-11 15:29:30 +02:00
• bd085dd978 attr-sql: Use a serializable transaction when inserting identities Tobias Brunner 2013-10-10 11:02:16 +02:00
• b283a6e9ef database: Add support for serializable transactions Tobias Brunner 2013-10-10 10:58:40 +02:00
• e745f5f69f sql: Don't use MyISAM engine and set collation/charset for all tables Tobias Brunner 2013-09-06 14:09:32 +02:00
• 03c801cb2b pool: Change transaction handling Tobias Brunner 2013-09-06 11:29:17 +02:00
• ec6ad6b086 pool: Move the pool utility to its own directory in src Tobias Brunner 2013-09-05 18:00:48 +02:00
• 5abe3c52d3 attr-sql: Handle concurrent insertion of identities Tobias Brunner 2013-09-13 13:25:49 +02:00
• 4b8b1354ce attr-sql: Don't use database transactions in create_attribute_enumerator Tobias Brunner 2013-09-05 17:03:11 +02:00
• fad11d602d sqlite: Implement transaction handling Tobias Brunner 2013-09-05 16:50:23 +02:00
• f3cb889c9b mysql: Implement transaction handling Tobias Brunner 2013-09-05 16:46:24 +02:00
• 947b76cda8 database: Add interface to handle transactions Tobias Brunner 2013-09-06 08:16:39 +02:00
• 5f6a40827e mysql: Ensure connections are properly released in multi-threaded environments Tobias Brunner 2013-09-05 15:33:24 +02:00
• ec91f15e3b crypto-factory: Try next available RNG implementation if constructor fails Tobias Brunner 2013-10-03 10:24:59 +02:00
• 2e22333fbc crypto-factory: Order entries by algorithm identifier and (optionally) speed Tobias Brunner 2013-10-03 10:23:30 +02:00
• e2c9a03d15 Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required for IKEv2 anyway Tobias Brunner 2013-10-03 10:14:49 +02:00
• 3473cbab9c vstr: Forward actual field width Tobias Brunner 2013-10-11 13:57:05 +02:00
• fc566632da unit-tests: support testing when leak-detective has not been enabled Martin Willi 2013-06-25 17:09:07 +02:00
• 390d2b50b3 NEWS: Updates for the ah, libipsec-usestats and printf-hook merges Martin Willi 2013-10-11 11:40:02 +02:00
• 5900d6d469 Merge branch 'printf-hook' Martin Willi 2013-10-11 11:12:38 +02:00
• 795cbb98c6 printf-hook-builtin: Print NaN/Infinity floating point values as such Martin Willi 2013-09-27 18:16:46 +02:00
• 8af9bf70f5 printf-hook-builtin: Correctly round up floating point values Martin Willi 2013-09-27 16:13:14 +02:00
• edc7a3d02f printf-hook-builtin: Add some preliminary floating point support Martin Willi 2013-10-11 10:55:05 +02:00
• 7e6a4cdc84 printf-hook-builtin: Support GNU %m specifier Martin Willi 2013-09-27 11:16:11 +02:00
• cabe5c0ff4 printf-hook-builtin: Add a new "builtin" backend using its own printf() routines Martin Willi 2013-10-11 11:06:02 +02:00
• ebca34d782 printf-hook: Add some basic printf() string/integer test functions Martin Willi 2013-09-27 12:19:11 +02:00
• 243048248b printf-hook: Move glibc/vstr printf hook backends to separate files Martin Willi 2013-09-27 17:30:17 +02:00
• 11282d0054 Merge branch 'libipsec-usestats' Martin Willi 2013-10-11 10:24:27 +02:00
• d53002f088 libipsec: Enforce byte/packet lifetimes on SAs Martin Willi 2013-09-30 15:47:27 +02:00
• 12fdc2b16b kernel-libipsec: Support ESPv3 TFC padding Martin Willi 2013-09-23 16:26:11 +02:00
• 293515f95c libipsec: remove extra RFC4303 TFC padding appended to inner payload Martin Willi 2013-09-23 16:23:54 +02:00
• d53f9b9637 kernel-libipsec: Support query_sa() to report usage statistics Martin Willi 2013-09-23 12:46:43 +02:00
• b08967d6d8 libipsec: Support usage statistics and query_sa() on IPsec SAs Martin Willi 2013-09-23 12:10:07 +02:00
• d7083b6541 kernel: Use a time_t to report use time in query_policy() Martin Willi 2013-09-23 12:35:33 +02:00
• c99458e94e kernel: Use a time_t to report use time in query_sa() Martin Willi 2013-09-23 12:28:13 +02:00
• b59bcba2b3 Merge branch 'ah' Martin Willi 2013-10-11 10:15:43 +02:00
• 5fdbb3c6ad ipsec.conf: Add a description for the new 'ah' keyword. Martin Willi 2013-10-10 18:09:57 +02:00
• fa7815538f testing: Add an IKEv1 host2host AH transport mode test case Martin Willi 2013-10-09 16:10:33 +02:00
• ef4560121d testing: Add an IKEv1 net2net AH test case Martin Willi 2013-10-09 16:10:08 +02:00
• 80a82b8d67 testing: Add an IKEv2 host2host AH transport mode test case Martin Willi 2013-10-09 15:20:22 +02:00
• 850bab6d58 testing: Add an IKEv2 net2net AH test case Martin Willi 2013-10-09 15:10:40 +02:00
• 71d468ec90 testing: Allow AH packets in default INPUT/OUTPUT chains Martin Willi 2013-10-09 15:05:46 +02:00
• 4817595876 updown: Install forwarding rules with the actually used protocol Martin Willi 2013-10-09 14:48:50 +02:00
• c5d9b133e0 updown: Add a PLUTO_PROTO variable set to 'ah' or 'esp' Martin Willi 2013-10-09 14:48:25 +02:00
• e48e530b44 starter: Reject connections having both 'ah' and 'esp' keywords set Martin Willi 2013-10-09 14:09:08 +02:00
• 757343d90e ike: Define keylength for aescmac algorithm Martin Willi 2013-06-21 16:01:03 +02:00
• a1379e3210 ikev1: Support parsing of AH+IPComp proposals Martin Willi 2013-06-21 16:00:22 +02:00
• 25f74be8f9 starter: Remove obsolete 'auth' option Martin Willi 2013-06-20 17:10:13 +02:00
• d489e75579 ikev1: Accept more than two certificate payloads Martin Willi 2013-06-20 17:07:27 +02:00
• 3771b85806 ikev1: Support en-/decoding of SA payloads with AH algorithms Martin Willi 2013-06-20 17:06:46 +02:00
• 44e6aa4fb7 kernel-handler: Whitespace cleanups Martin Willi 2013-06-20 16:16:39 +02:00
• f6037b5506 stroke: List proposals in statusall without leading '/' in AH SAs Martin Willi 2013-06-20 16:16:06 +02:00
• 4bf92306eb ikev1: Delete quick modes with the negotiated SA protocol Martin Willi 2013-06-20 16:15:31 +02:00
• 5d569e07fd trap-manager: Install trap with SA protocol of the first configured proposal Martin Willi 2013-06-20 16:14:52 +02:00
• 21b096f3b8 child-sa: Save protocol during SPI allocation Martin Willi 2013-06-20 16:13:35 +02:00
• 908fe1632d ikev1: Negotiate SPI with the first/negotiated proposal protocol Martin Willi 2013-06-20 16:12:58 +02:00
• cdab8630d9 ikev2: Allocate SPI with the protocol of the first/negotiated proposal Martin Willi 2013-06-20 16:12:14 +02:00
• f0c59e1cf8 proposal: Strip redundant integrity algos for ESP proposals only Martin Willi 2013-06-20 16:10:55 +02:00
• 0576412989 stroke: Configure proposal with AH protocol if 'ah' option set Martin Willi 2013-06-20 16:09:51 +02:00
• a07b97e804 starter: Add an 'ah' keyword for Authentication Header Security Associations Martin Willi 2013-06-20 16:08:23 +02:00
• 4524e128f8 Version bump to 5.1.1rc1 Andreas Steffen 2013-10-11 09:53:42 +02:00
• 3588299fb8 Keep a copy of the tnccs instance for PT-TLS handover Andreas Steffen 2013-10-09 19:03:07 +02:00
• 3e3db3743e xauth-pam: Make trimming of email addresses optional Tobias Brunner 2013-10-04 10:49:54 +02:00
• d2e4dd75b7 ikev1: Accept reauthentication attempts with a keep unique policy from same host Martin Willi 2013-09-18 14:11:40 +02:00
• 9c19d7ca31 ikev1: Don't log a reauthentication detection message if no children adopted Martin Willi 2013-09-18 13:59:44 +02:00
• ee99f37ecc ikev1: Delay a potential delete for a duplicate IKE_SA having a replace policy Martin Willi 2013-09-18 13:56:45 +02:00
• e4b7b48c1e eap-radius: Increase buffer for attributes sent in RADIUS accounting messages Tobias Brunner 2013-09-10 16:51:20 +02:00
• c8f34ba7b6 openssl: Properly log FIPS mode when enabled via openssl.conf Tobias Brunner 2013-09-27 09:11:55 +02:00
• e4d63cfae7 android: New release after fixing remediation instructions regression Tobias Brunner 2013-09-26 13:03:38 +02:00
• 00f7b29422 android: Change progress dialog handling Tobias Brunner 2013-09-26 13:50:23 +02:00
• cfed5679b8 android: Clear remediation instructions when starting a new connection Tobias Brunner 2013-09-26 13:00:45 +02:00