Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• a2cebbe674 starter: Don't ignore keyingtries with rekey=no Tobias Brunner 2013-09-26 10:15:03 +02:00
• 90031b2fc7 load-tester: Fix crash if private key was not loaded successfully Tobias Brunner 2013-09-24 09:24:59 +02:00
• ed72f2d65e printf-hook: Write to output stream instead of the FD directly when using Vstr Tobias Brunner 2013-09-23 17:01:53 +02:00
• c17cbfdb72 android: New release after improving recovery after connectivity changes Tobias Brunner 2013-09-23 14:33:29 +02:00
• 3817231333 android: Change state handling to display errors occurring while the app is hidden Tobias Brunner 2013-09-20 15:07:41 +02:00
• b4a5b185fc android: Don't update state fragments when they are not displayed Tobias Brunner 2013-09-20 14:07:40 +02:00
• 561f94ae58 ikev2: Force an update of the host addresses on the first response Tobias Brunner 2013-09-20 14:05:53 +02:00
• 9292357030 ike-sa: Resolve hosts before reestablishing an IKE_SA Tobias Brunner 2013-09-20 14:03:23 +02:00
• e3f64a79c2 android: Several plugins were moved from libcharon to libtnccs Tobias Brunner 2013-09-20 11:16:21 +02:00
• c3ee829eee android: Properly handle failures while initializing charon Tobias Brunner 2013-09-20 10:30:02 +02:00
• 255b9dac5d kernel-netlink: Allow to override xfrm_acq_expires value Ansis Atteka 2013-09-22 21:21:39 -07:00
• 2c4d772a79 Implemented TCG/PB-PDP_Referral message Andreas Steffen 2013-09-17 21:57:08 +02:00
• ddfc589600 Allow vendor-specific PB-TNC messages Andreas Steffen 2013-09-17 11:19:11 +02:00
• ab155e6907 ignore *.1 manpage files Andreas Steffen 2013-09-17 10:58:53 +02:00
• f4dd49a5fd Version bump to 5.1.1dr4 Andreas Steffen 2013-09-17 10:57:46 +02:00
• aadf2e01e7 Merge branch 'pubkeys' Tobias Brunner 2013-09-13 15:30:40 +02:00
• 075e80368b sshkey: Add support for parsing keys from files Tobias Brunner 2013-08-19 13:15:28 +02:00
• b2a5317596 sshkey: Add encoding for ECDSA keys Tobias Brunner 2013-08-16 13:13:49 +02:00
• d6b3cc87ca openssl: Add support for generic encoding of EC public keys Tobias Brunner 2013-08-16 13:12:47 +02:00
• 90afd2c929 pki: --pub also accepts public keys (i.e. to convert them to a different format) Tobias Brunner 2013-08-15 12:43:30 +02:00
• 21626bdf77 pki: Add support to encode public keys in SSH key format Tobias Brunner 2013-08-15 12:43:01 +02:00
• f40e9f4d16 sshkey: Add encoder for RSA keys Tobias Brunner 2013-08-15 12:42:09 +02:00
• 3b939e20a9 openssl: Add generic RSA public key encoding Tobias Brunner 2013-08-14 18:23:00 +02:00
• b5cc7053c8 openssl: Add helper function to convert BIGNUMs to chunks Tobias Brunner 2013-08-15 12:29:06 +02:00
• a3232fa802 pki: Load dnskey plugin to encode public keys in RFC 3110 format Tobias Brunner 2013-08-14 18:22:13 +02:00
• d6c43847be Merge branch 'man-pki' Tobias Brunner 2013-09-13 15:15:40 +02:00
• ed56c86ec1 pki: Don't print an error if no arguments are given Tobias Brunner 2013-09-13 15:14:00 +02:00
• 0dc8ba8779 pki: Install pki(1) as utility directly in $prefix/bin Tobias Brunner 2013-09-13 14:52:14 +02:00
• 1a8ffea315 pki: Add example commands to setup a simple CA Tobias Brunner 2013-08-14 16:00:28 +02:00
• b068c4ec9d pki: Add pki --verify man page Tobias Brunner 2013-08-12 17:52:28 +02:00
• 4adeaa5eb9 pki: Add pki --pub man page Tobias Brunner 2013-08-12 17:46:40 +02:00
• a319eff80d pki: Add pki --print man page Tobias Brunner 2013-08-12 17:21:49 +02:00
• e69fd30538 pki: Add pki --keyid man page Tobias Brunner 2013-08-12 17:14:17 +02:00
• 558771400e pki: Add pki --pkcs7 man page Tobias Brunner 2013-08-12 17:04:28 +02:00
• bb8e2e1759 pki: Add pki --req man page Tobias Brunner 2013-08-12 16:49:13 +02:00
• 96aa5a1ddd pki: Add pki --signcrl man page Tobias Brunner 2013-08-12 16:39:21 +02:00
• 42e3a21e24 pki: Add pki --issue man page Tobias Brunner 2013-08-12 16:06:42 +02:00
• 3a643b8901 pki: Add pki --self man page Tobias Brunner 2013-07-31 19:48:45 +02:00
• a612f6e338 pki: Add pki --gen man page Tobias Brunner 2013-07-31 19:19:08 +02:00
• 34cff9349b pki: Add ipsec-pki(8) man page Tobias Brunner 2013-07-31 18:05:10 +02:00
• b07aee496a strongswan.conf: Use configured piddir for UNIX sockets Tobias Brunner 2013-08-12 15:13:20 +02:00
• 8250fc10e8 Build generated man pages via configure script Tobias Brunner 2013-07-31 17:30:40 +02:00
• f5dcb38ead resolve: Remove comment when using resolvconf(8) Tobias Brunner 2013-09-13 10:34:03 +02:00
• 25260a290d .gitignore: Add .dirstamp files touched by automake Martin Willi 2013-09-13 14:11:30 +02:00
• 2b84ccd6a6 libipsec: fix memory management when cloning ip_packet Martin Willi 2013-09-06 14:16:14 +02:00
• 96136a1229 libipsec: check for a policy with the reqid of the SA on decapsulation Martin Willi 2013-09-04 17:12:23 +02:00
• 791fde1669 stroke: don't remove a matching peer config if used by other child configs Martin Willi 2013-09-09 10:43:44 +02:00
• 11ac36b016 conftest: Don't load plugins incrementally Tobias Brunner 2013-09-03 19:02:40 +02:00
• fafa768478 ikev1: Fix double free when searching for redundant CHILD_SAs Tobias Brunner 2013-09-13 10:14:45 +02:00
• be8179abd2 Build all IMC/IMVs with -no-undefined Tobias Brunner 2013-09-04 16:26:27 +02:00
• 7d87b24634 pt-tls-client: Report loaded plugins Tobias Brunner 2013-09-04 14:34:02 +02:00
• 5d45bcfc5f pt-tls-client: Abort if no tnccs-manager is available Tobias Brunner 2013-09-04 14:31:46 +02:00
• 9af44ef5d9 Build all shared libraries with -no-undefined and link them properly Tobias Brunner 2013-09-04 14:25:22 +02:00
• 3cb4552da6 configure: libtls and libtnccs etc. all require libstrongswan Tobias Brunner 2013-09-04 13:51:37 +02:00
• bf32cdfbf6 tun_device: Add warning if TUN devices are not supported by platform Tobias Brunner 2013-09-04 13:40:35 +02:00
• 5ec08a6a05 Make sure libstrongswan is initialized first in IMCs and IMVs Andreas Steffen 2013-09-11 20:58:18 +02:00
• 4eb6149ae8 sockets: Initialize the whole ancillary data buffer not only the actual struct Tobias Brunner 2013-09-10 13:40:16 +02:00
• 7d938be9e9 ikev1: For PFS prefer DH group from IKE_SA over first configured Thomas Egerer 2013-08-23 14:15:44 +02:00
• ec331a7dd6 kernel-netlink: increase buffer size for RT netlink messages Ansis Atteka 2013-09-09 15:42:55 -07:00
• c1ebc7b1cc Fixed double free causing swapped ends to crash Andreas Steffen 2013-09-07 08:25:10 +02:00
• 97346f2a7e Added ikev1/config-payload-push scenario Andreas Steffen 2013-09-07 08:23:58 +02:00
• 847b148f91 Minor performance tuning Andreas Steffen 2013-09-07 07:39:03 +02:00
• fa2f6aa19d Completed NEWS for 5.1.1dr3 Andreas Steffen 2013-09-06 22:11:33 +02:00
• 3adffcd9eb Implemented targeted SWID request Andreas Steffen 2013-09-06 22:06:39 +02:00
• 70aefb9430 Store object files in the same directory as the source files Tobias Brunner 2013-09-05 14:19:14 +02:00
• ae32172619 Make SWID directory where tags are stored configurable Andreas Steffen 2013-09-05 12:25:02 +02:00
• 9b8137fdd3 Added tags table and some tag samples Andreas Steffen 2013-09-05 11:29:23 +02:00
• b28686d530 swid_inventory object has a get_count method Andreas Steffen 2013-09-04 21:56:25 +02:00
• bd3eaaef9b Count collected SWID tags or tag IDs Andreas Steffen 2013-09-04 21:30:28 +02:00
• cee1a86385 Proceed with attestation only if Attestation IMC returns a discovery response Andreas Steffen 2013-09-04 21:00:54 +02:00
• a4b996c0bc libipsec: Properly initialize variables when creating AEAD wrapper Tobias Brunner 2013-09-04 16:17:17 +02:00
• c742905f50 android: Fix compilation after PTS header files were moved Tobias Brunner 2013-09-04 16:13:52 +02:00
• cd764f42b9 libpts: Android.mk updated Tobias Brunner 2013-09-04 16:13:12 +02:00
• de4637718e Version bump to 5.1.1dr3 Andreas Steffen 2013-09-04 16:15:52 +02:00
• 38fb8e4ed5 NEWS: 5.1.1 update for merged branches Martin Willi 2013-09-04 11:06:58 +02:00
• 1fd5c7fbac load-tester: support extended traffic selector syntax, as in leftsubnet Martin Willi 2013-08-07 17:06:36 +02:00
• 47b4a51402 load-tester: add an option to test transport/beet connections Martin Willi 2013-08-07 16:32:21 +02:00
• 60fcbb8ba8 Merge branch 'ike-address-ranges' Martin Willi 2013-09-04 10:43:35 +02:00
• 6301ec0ac5 man: add support for multiple addresses/ranges/subnets in ipsec.conf left= Martin Willi 2013-07-25 16:43:19 +02:00
• 3070697f9f ike: support multiple addresses, ranges and subnets in IKE address config Martin Willi 2013-07-25 15:37:13 +02:00
• beffdc6ab8 ike-cfg: remove the to be obsoleted allow any parameter in get_my/other_addr Martin Willi 2013-07-25 14:07:40 +02:00
• 62282ec0ed backends: use ike_cfg host matching functions Martin Willi 2013-07-25 13:42:11 +02:00
• 6f666192bb ike-cfg: add methods to match a host against configured local/remote addresses Martin Willi 2013-07-25 13:41:33 +02:00
• 7446fa2860 trap-manager: use ike_cfg resolver functions Martin Willi 2013-07-25 13:40:53 +02:00
• 0edce68767 ike-sa: use ike_cfg resolver functions Martin Willi 2013-07-25 13:40:26 +02:00
• e743275cae ike-cfg: add a method to resolve local/remote hosts with port Martin Willi 2013-07-25 13:39:15 +02:00
• f7cb6eaaa8 Merge branch 'ikev1-pushmode' Martin Willi 2013-09-04 10:35:26 +02:00
• a858064455 stroke: ignore a leftsourceip if a rightsourceip is given as well Martin Willi 2013-09-03 15:44:43 +02:00
• 16149401e9 man: update ipsec.conf modeconfig keyword Martin Willi 2013-07-19 16:01:36 +02:00
• e3311e9b87 ikev1: implement mode config push mode Martin Willi 2013-07-19 15:58:15 +02:00
• 2bae838d5e stroke: re-enable modeconfig keyword Martin Willi 2013-07-19 15:47:33 +02:00
• 9aeaa7396e peer-cfg: add a pull/push mode option to use with mode config Martin Willi 2013-07-19 14:24:04 +02:00
• 0b47bb5377 pubkey_speed: Add missing plugins Tobias Brunner 2013-09-04 09:47:23 +02:00
• f17322dccb pubkey_speed: sudo is not required Tobias Brunner 2013-09-04 09:28:49 +02:00
• f1d5d87619 pubkey_speed: Add header and fix usage Tobias Brunner 2013-09-04 09:08:46 +02:00
• 478f9e772b Merge branch 'xauth-radius-multi' Martin Willi 2013-09-03 16:32:27 +02:00
• e8b36eb92f charon-cmd: support prompting for a PIN Martin Willi 2013-07-24 13:19:57 +02:00
• 45797bd50b xauth-generic: honor requested XAuth credential types as a client Martin Willi 2013-07-24 13:18:26 +02:00
• 3482cc9cf6 attributes: shorten some Unity and XAuth attribute short names Martin Willi 2013-07-24 13:44:22 +02:00
• 61b0079881 message: print type of configuration payload Martin Willi 2013-07-19 15:57:53 +02:00