Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 8e4b258030 message: print attributes for IKEv1 configuration payloads as well Martin Willi 2013-07-19 15:48:06 +02:00
• d787ada894 eap-radius: support XAuth configuration profiles, defining multiple XAuth rounds Martin Willi 2013-07-23 14:46:51 +02:00
• 510ecf612a xauth: add a configuration string option to be passed to XAuth instances Martin Willi 2013-07-23 14:24:58 +02:00
• 7a425fb24c Use ipsec_DATA destination Andreas Steffen 2013-09-02 14:20:33 +02:00
• 0c2348581c Install SWID tag also in /share/ Andreas Steffen 2013-09-02 14:01:05 +02:00
• 9f85122af9 Generate strongSwan SWID tag Andreas Steffen 2013-09-02 13:08:41 +02:00
• 86f00e6aff Added regids table and some sample reqid data Andreas Steffen 2013-09-02 11:59:42 +02:00
• 6fc5cc003d Pull dave for OS info Andreas Steffen 2013-09-01 22:32:13 +02:00
• d1696c0eaa Corrected debug class to DBG_IMC Andreas Steffen 2013-09-01 22:27:21 +02:00
• 5ee0747cfd autoconf: Split PACKAGE_VERSION in four parts Tobias Brunner 2013-09-02 11:26:31 +02:00
• 10a69c32c2 conftest: Fix hook constructor resolution via dlsym() Tobias Brunner 2013-08-30 19:33:22 +02:00
• 4e2a176229 SWID IMC implements recursive tag collection in /usr/share Andreas Steffen 2013-08-30 16:25:44 +02:00
• 2a7a9471dd aes-test: Rename crypt() as it conflicts with a library function on Mac OS X Tobias Brunner 2013-08-30 08:51:09 +02:00
• 45b80880f8 kernel-pfroute: Fix mixed up memset() call in get_route() Mathias Krause 2013-08-29 18:21:58 +02:00
• b656f63efe testing: support a .gitignored testing.conf.local for site-local configurations Martin Willi 2013-07-26 11:43:18 +02:00
• a0cd955f42 charon-xpc: add a note how to build the source tarball Martin Willi 2013-08-29 12:23:48 +02:00
• 74ee1120d7 charon-xpc: include and prefer AES-GCM algorithms in ESP proposal Martin Willi 2013-08-28 11:21:08 +02:00
• ee2d6f8618 Version bump to 5.1.1dr2 Andreas Steffen 2013-08-28 23:00:47 +02:00
• 1e82e27ac5 Added TCG-SWID error handling Andreas Steffen 2013-08-28 22:53:57 +02:00
• db4a072ca9 Added scripts/aes-test to .gitignore Andreas Steffen 2013-08-28 22:52:30 +02:00
• 7bda0f0c8b Added tzset memory leak to whitelist Andreas Steffen 2013-08-28 22:51:17 +02:00
• 0d9e375193 Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin Andreas Steffen 2013-08-26 20:36:07 +02:00
• 9455f8b386 aes-test: Support test vectors at the end of a file Tobias Brunner 2013-08-19 10:38:47 +02:00
• 8972c72237 aes-test: Add script to test AES implementations according to AESAVS/GCMVS Tobias Brunner 2013-08-05 18:20:50 +02:00
• f0c54e8c15 chunk: Print chunks without separator if + modifier is used Tobias Brunner 2013-08-06 17:27:35 +02:00
• 32a145fdbd utils: Add case-insensitive version of strpfx() Tobias Brunner 2013-08-06 17:27:15 +02:00
• 49032d15be stroke: stop enumerating IKE_SAs in statusall if output stream gets closed Martin Willi 2013-08-23 14:22:29 +02:00
• 03d673620d Cleaned configuration files in PT-TLS client scenario Andreas Steffen 2013-08-22 17:24:20 +02:00
• d7ae0b254d kernel: Restore enumeration of all addresses when searching for address in TS Tobias Brunner 2013-08-21 16:52:19 +02:00
• 85ca2f7441 conftest: Disable reset_seq hook on systems other than Linux Tobias Brunner 2013-08-21 11:27:28 +02:00
• e001cc2b07 kernel-netlink: Fix calculation of ESN bitmap length Tobias Brunner 2013-08-21 08:28:12 +02:00
• 2b32884d39 Added stand-alone pt-tls-client to NEWS Andreas Steffen 2013-08-19 12:28:12 +02:00
• aff4367907 Flush iptables rules on alice Andreas Steffen 2013-08-19 12:20:57 +02:00
• f859645b12 Fixes in tnc scenarios Andreas Steffen 2013-08-19 11:44:51 +02:00
• 10c7ca2399 Added tnc/tnccs-20-pt-tls scenario Andreas Steffen 2013-08-19 11:36:23 +02:00
• e626821677 Version bump to 5.1.1dr1 Andreas Steffen 2013-08-19 10:03:23 +02:00
• 1e92d5f114 Process PB-TNC batches received via PT-TLS asynchronously Andreas Steffen 2013-08-19 09:52:12 +02:00
• 9dc3b2053d Optimize TLS socket buffer for TLS_MAX_FRAGMENT_LEN Andreas Steffen 2013-08-19 09:50:57 +02:00
• 70a80ef5d4 Output handler of a given workitem Andreas Steffen 2013-08-16 14:14:13 +02:00
• 4d2bac37c4 Implemented SWID Tag Inventory attribute Andreas Steffen 2013-08-16 14:13:35 +02:00
• f405c15a59 deleted moved files Andreas Steffen 2013-08-15 23:32:26 +02:00
• b38d9d5a54 Implemented SWID prototype IMC/IMV pair Andreas Steffen 2013-08-15 23:26:00 +02:00
• 0bd29a438e Updated the SWID attributes Andreas Steffen 2013-08-13 22:04:49 +02:00
• e689de6b8c Optimized PT-TLS data transfer Andreas Steffen 2013-08-13 17:09:53 +02:00
• 6aff4b5ce8 Show host address of peer connecting to PT-TLS socket Andreas Steffen 2013-08-12 11:54:25 +02:00
• 0a09b02dcf Set client identity with TLS certificate authentication Andreas Steffen 2013-08-12 11:53:46 +02:00
• 9cc606d22a Fixed memory leak in SASL PLAIN Andreas Steffen 2013-08-12 11:52:32 +02:00
• 663ea1407d added --optionsfrom capability Andreas Steffen 2013-08-12 08:51:13 +02:00
• 7c027f7983 Use client identities from successful authentications, only Andreas Steffen 2013-08-12 08:25:48 +02:00
• d6719c974c Add pt-tls-client to .gitignore Andreas Steffen 2013-08-09 22:18:13 +02:00
• 97b1d39de5 Extract client identity and authentication type from SASL authentication Andreas Steffen 2013-08-09 22:10:37 +02:00
• 6d6100c2bc Added some debug statements Andreas Steffen 2013-08-09 15:21:33 +02:00
• f420d5f380 enabled SASL PLAIN authentication Andreas Steffen 2013-08-09 13:35:02 +02:00
• 8327c44b74 PT-TLS connection is properly terminated Andreas Steffen 2013-08-08 21:48:46 +02:00
• 12b3db5006 moved tnc_imv plugin to libtnccs thanks to recommendation callback function Andreas Steffen 2013-08-08 19:43:43 +02:00
• 9d8c28e2f5 Documented plugin move from libcharon to libtnccs in strongswan.conf Andreas Steffen 2013-08-08 11:17:33 +02:00
• e8f65c5cde Moved tnc-tnccs, tnc-imc, tnccs-11, tnccs-20 and tnccs-dynamic libcharon plugins to libtnccs Andreas Steffen 2013-08-08 11:02:17 +02:00
• 180a2f2642 rapid PT-TLS AR/PDP prototype Andreas Steffen 2013-08-07 19:41:29 +02:00
• f5b5d262e8 Add PT-TLS interface to strongSwan PDP Andreas Steffen 2013-07-31 22:09:38 +02:00
• f853e7bcc0 ikev1: Fix calculation of the number of fragments Tobias Brunner 2013-08-15 15:15:34 +02:00
• c81a6ff907 ikev1: When sending fragments, use ports to decide if a non-ESP marker is added Tobias Brunner 2013-08-15 15:12:00 +02:00
• e42ab08a73 ikev2: Fix segfault when reestablishing CHILD_SAs due to closeaction=restart|hold Tobias Brunner 2013-08-13 10:03:54 +02:00
• 3f29ff82c3 libipsec: Don't limit traditional algorithms to AES and SHA1/2 Tobias Brunner 2013-08-12 12:20:09 +02:00
• 11f468533f kernel-netlink,pfroute: Properly update address flag within ROAM_DELAY Tobias Brunner 2013-08-12 12:06:25 +02:00
• 55da01f348 kernel-pfroute: Implement roam event handling like in the kernel-netlink plugin Tobias Brunner 2013-08-12 11:40:22 +02:00
• 77d4a0281a kernel-netlink: Ensure address changes are not missed in roam events Tobias Brunner 2013-08-12 11:23:34 +02:00
• a24515c515 backtrace: rename clone() method clashing with system call Martin Willi 2013-08-09 09:13:39 +02:00
• 881e9a7e2e updown: remove description of unsupported PLUTO_ variables Martin Willi 2013-08-08 14:48:32 +02:00
• 3b6d8855e8 scripts: link against librt only if required Martin Willi 2013-08-08 09:12:52 +02:00
• 62e1c80803 scripts: link malloc_speed against librt Martin Willi 2013-08-08 09:09:00 +02:00
• e99cfe5f20 strongswan.conf: Add note about reserved threads Tobias Brunner 2013-08-07 09:06:01 +02:00
• 58e32e4871 tnc-pdp: Initialize struct msghdr properly when reading RADIUS messages Tobias Brunner 2013-07-31 16:24:32 +02:00
• 3a938a6f85 NEWS: Add info about CVE-2013-5018 Tobias Brunner 2013-07-31 15:28:15 +02:00
• d12fc14616 whitelist: Fix compilation on FreeBSD Tobias Brunner 2013-07-31 09:03:48 +02:00
• ed0efaef4c host: Properly initialize struct sockaddr_in[6] when parsing strings Tobias Brunner 2013-07-30 18:44:50 +02:00
• b3393c88c1 asn1: Fix handling of invalid ASN.1 length in is_asn1() Tobias Brunner 2013-07-29 23:45:38 +02:00
• cc5bedbb98 Callback job is not needed any more Andreas Steffen 2013-07-31 22:13:41 +02:00
• 8fa7c5c191 charon-xpc: load missing ctr/ccm/gcm plugins Martin Willi 2013-07-31 16:27:28 +02:00
• aafb6fa6c2 charon-xpc: use kernel-libipsec instead of kernel-pfkey Martin Willi 2013-07-31 11:38:18 +02:00
• 546235d34c charon-xpc: fix TS getting after changing CHILD_SA API Martin Willi 2013-07-31 11:37:39 +02:00
• 83a0b74da8 keychain: be less verbose when loading certificates Martin Willi 2013-07-31 11:36:55 +02:00
• a566c5f837 receiver: Avoid cloning packet data when verifying COOKIE payloads Tobias Brunner 2013-07-29 21:59:40 +02:00
• 1cf8022839 unity: Handle multi-valued UNITY_SPLIT_INCLUDE/UNITY_LOCAL_LAN attributes Tobias Brunner 2013-07-26 09:36:54 +02:00
• e8b8a6d958 version bump to 5.0.1 Andreas Steffen 2013-07-29 17:16:41 +02:00
• ef580b0137 tnc-pdp now uses watcher_t Andreas Steffen 2013-07-29 17:16:21 +02:00
• 4c961168cc Updated PTS database scheme to new workitems model Andreas Steffen 2013-07-29 11:41:33 +02:00
• 4dc8978000 ikev2: Only schedule half-open-timeout delete job after successfully handling IKE_SA_INIT Tobias Brunner 2013-07-25 13:38:35 +02:00
• 68957d1811 NEWS: mention xauth-radius backend in eap-radius plugin Martin Willi 2013-07-29 11:08:54 +02:00
• 2cfe88aacb testing: enforce xauth-eap in ikev1/xauth-rsa-eap-md5-radius Martin Willi 2013-07-29 09:36:28 +02:00
• 14dfdf7dac Merge branch 'xauth-radius' Martin Willi 2013-07-29 09:00:56 +02:00
• 9d75f04eee testing: add a testcase for plain XAuth RADIUS authentication Martin Willi 2013-07-26 13:06:17 +02:00
• 44bb1dc3da charon-cmd: add --eap-identity and --xauth-username options Martin Willi 2013-07-24 13:35:46 +02:00
• 3a399574c2 eap-radius: do RADIUS/IKE attribute forwarding in XAuth backend Martin Willi 2013-07-22 15:59:49 +02:00
• c434b2a4a9 eap-radius: support plain XAuth RADIUS authentication using User-Password Martin Willi 2013-07-22 14:28:12 +02:00
• 6bc0ce020d libradius: support encryption of User-Password attributes Martin Willi 2013-07-22 14:23:01 +02:00
• 84044f9c73 utils: add round_up/down() helper functions Martin Willi 2013-07-22 14:16:38 +02:00
• 15483a6223 libradius: refactor generic RADIUS en-/decryption function to a message method Martin Willi 2013-07-22 13:45:31 +02:00
• 9aeb6cea4c eap-radius: export function to build common attributes of Access-Request Martin Willi 2013-07-22 10:17:38 +02:00
• 94ec80e74c eap-radius: export function to process common attributes of Access-Accept Martin Willi 2013-07-22 09:55:00 +02:00
• 7612a6e42f mem-pool: add option for reusing online leases, and disable it by default Martin Willi 2013-07-24 16:20:46 +02:00