Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 965348cd7a Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILURE Martin Willi 2013-05-08 11:03:33 +02:00
• c6e1eda6d0 testing: Set terminal title when logging in via SSH Tobias Brunner 2013-05-15 10:32:41 +02:00
• bd538e8c4a openssl: Only warn about unavailable FIPS mode if the user requested it Tobias Brunner 2013-05-08 15:23:14 +02:00
• c1f1df4b40 Merge branch 'charon-cmd-pkcs12' Tobias Brunner 2013-05-08 15:19:38 +02:00
• 6040eff900 stroke: Add second password if provided Tobias Brunner 2013-04-17 17:32:37 +02:00
• b7aa6b789e Load pkcs7 plugin in charon (and while we are at it in nm) Tobias Brunner 2013-04-17 17:13:28 +02:00
• 1c080407b2 stroke: Fail silently if another builder calls PW callback after giving up Tobias Brunner 2013-04-17 16:03:05 +02:00
• 4a64c3e9a0 stroke: Cache passwords so the user is not prompted multiple times for the same password Tobias Brunner 2013-04-17 15:54:23 +02:00
• e240b03e68 stroke: Fix prompt and error messages in passphrase callback Tobias Brunner 2013-04-17 15:51:11 +02:00
• 7971278c92 stroke: Load credentials from PKCS#12 files (P12 token) Tobias Brunner 2013-04-17 13:49:13 +02:00
• 904390e887 openssl: Cleanup thread specific error buffer Tobias Brunner 2013-04-17 13:16:20 +02:00
• 3ee2af97bf openssl: Don't use deprecated CRYPTO_set_id_callback() with OpenSSL >= 1.0.0 Tobias Brunner 2013-04-17 13:00:51 +02:00
• 780900ab0e openssl: Add PKCS#12 parsing via OpenSSL Tobias Brunner 2013-04-17 11:43:06 +02:00
• 651d5ab8e7 openssl: Properly cleanup OpenSSL library Tobias Brunner 2013-04-17 11:35:18 +02:00
• 02116fdc2d charon-cmd: Add support for PKCS#12 files Tobias Brunner 2013-04-12 19:30:03 +02:00
• 3bd498284e PEM plugin loads PKCS#12 containers from (DER-encoded) files Tobias Brunner 2013-04-12 19:00:15 +02:00
• abc04e6b3f Remove pluto specific certificate types Tobias Brunner 2013-04-12 18:41:26 +02:00
• f77d6e16d2 charon-cmd: match_me/match_other are optional in callback credentials Tobias Brunner 2013-04-12 19:32:01 +02:00
• 89d350f46a charon-cmd: Request password for private keys Tobias Brunner 2013-04-12 18:28:17 +02:00
• 1f2a34d6d8 Add support for untruncated HMAC-SHA-512 Tobias Brunner 2013-04-12 12:48:04 +02:00
• d8be7d38bf Also support 128-bit RC2 Tobias Brunner 2013-04-12 12:10:22 +02:00
• feef637368 Add pkcs12 plugin which adds support for decoding PKCS#12 containers Tobias Brunner 2013-04-12 11:59:01 +02:00
• 199fdcadae Function added to convert a hash algorithm to an HMAC integrity algorithm Tobias Brunner 2013-04-11 19:41:48 +02:00
• 047fca1169 Support the PKCS#5/PKCS#12 encryption scheme used by OpenSSL for private keys Tobias Brunner 2013-04-11 19:39:32 +02:00
• 0d0929fa0c Register PKCS#8 builder for KEY_ANY Tobias Brunner 2013-04-11 17:54:45 +02:00
• 8e48e0009a Add support for PKCS#7/CMS encrypted-data Tobias Brunner 2013-04-11 16:19:16 +02:00
• d41e54c68d Move PKCS#12 key derivation to a separate file Tobias Brunner 2013-04-11 15:02:28 +02:00
• 594d847f79 PKCS#5 wrapper can decrypt PKCS#12-like schemes Tobias Brunner 2013-04-11 13:27:02 +02:00
• cb38e2f30a Add test vectors for RC2 Tobias Brunner 2013-04-10 19:26:05 +02:00
• 162c06f2f5 Fix cleanup in crypto_tester if a crypter fails Tobias Brunner 2013-04-10 19:25:26 +02:00
• 9d4fc8677f Add implementation of the RC2 block cipher (RFC 2268) Tobias Brunner 2013-04-10 19:24:09 +02:00
• c734c2d875 Extract function to convert ASN.1 INTEGER object to u_int64_t Tobias Brunner 2013-04-08 18:31:34 +02:00
• 4076e3ee91 Extract PKCS#5 handling from pkcs8 plugin to separate helper class Tobias Brunner 2013-04-08 18:13:03 +02:00
• b715176ec4 Merge branch 'charon-cmd-agent' Tobias Brunner 2013-05-08 14:35:05 +02:00
• 4d38a698b8 charon-cmd: Changed formatting of optional arguments in usage information Tobias Brunner 2013-05-07 15:05:12 +02:00
• 6a6d0ea7cd charon-cmd: --agent optionally takes the path to an ssh-agent socket Tobias Brunner 2013-05-07 15:04:02 +02:00
• efb4cb0bf9 charon-cmd: Stop processing options if an argument is missing or an option not recognized Tobias Brunner 2013-05-07 14:53:27 +02:00
• 410abbd35f charon-cmd: Properly initialize options with no additional lines Tobias Brunner 2013-05-07 14:08:20 +02:00
• e07e489d5f agent: Use sshkey plugin to parse keys, adds support for ECDSA Tobias Brunner 2013-04-01 19:47:23 +02:00
• dd9e366814 sshkey: Add support for ECDSA keys Tobias Brunner 2013-04-01 18:16:17 +02:00
• 87692be215 Load any type (RSA/ECDSA) of public key via left|rightsigkey Tobias Brunner 2013-04-01 16:42:53 +02:00
• fa1d3d39dc left|rightrsasigkey accepts SSH keys but the key format has to be specified explicitly Tobias Brunner 2013-04-01 16:28:28 +02:00
• cc4408abcb sshkey: Added builder for SSHKEY RSA keys Tobias Brunner 2013-04-01 16:02:00 +02:00
• 584d656b77 Add sshkey plugin stub that will parse RFC 4253 public keys Tobias Brunner 2013-04-01 15:20:39 +02:00
• c0bbddfa42 Try to load raw keys from ipsec.conf as PKCS#1 blob first Tobias Brunner 2013-04-01 13:51:37 +02:00
• ee7b73832c charon-cmd: Add --agent option to authenticate using ssh-agent(1) Tobias Brunner 2013-04-01 14:51:09 +02:00
• 4dc50bf9de charon-cmd: Use loose matching of gateway identity Tobias Brunner 2013-04-01 14:48:02 +02:00
• 8372b8fc54 charon-cmd: Load pubkey plugin to load raw keys Tobias Brunner 2013-04-01 14:47:09 +02:00
• e74bca9e19 testing: Don't run tests when building tkm Tobias Brunner 2013-05-07 10:19:37 +02:00
• 9c2aba2735 testing: Don't run tests when building tkm-rpc Tobias Brunner 2013-05-06 17:21:30 +02:00
• a8849e0713 Merge branch 'tun-vip' Martin Willi 2013-05-06 17:04:36 +02:00
• c9a323c1d9 kernel-pfroute: allow only one thread to do a route look up simultaneously Martin Willi 2013-05-06 16:40:19 +02:00
• 5c12700f9a kernel-interface: query SAD for last use time if SPD query didn't yield one Martin Willi 2013-04-21 17:05:08 +02:00
• bdaf9f97e6 child-sa: query SAD/SPD just for what we actually need to update statistics Martin Willi 2013-04-21 16:50:17 +02:00
• 470aad7e0c kernel-pfkey: be less verbose about unexpected sequence numbers Martin Willi 2013-04-20 20:54:03 +02:00
• df919d50d0 kernel-pfkey: install exclude routes if kernel-net requires them Martin Willi 2013-04-20 13:29:20 +02:00
• 580b768d03 kernel-pfroute: add a feature flag requesting "exclude" routes Martin Willi 2013-04-20 12:28:05 +02:00
• bd520193a4 kernel-pfroute: remove unused interface address refcounting Martin Willi 2013-04-19 16:58:06 +02:00
• 77b6f19694 kernel-pfroute: mark IPs installed on tun device as virtual Martin Willi 2013-04-19 16:55:38 +02:00
• 2a2d7a4dc8 kernel-pfroute: install virtual IPs using dedicated tun devices Martin Willi 2013-04-19 15:53:45 +02:00
• ca4a14ae83 kernel-pfkey: when installing a route for a virtual IP, use its interface Martin Willi 2013-04-19 14:27:31 +02:00
• f52cf07532 kernel-interface: get_address_by_ts() can tell if a returned IP is virtual Martin Willi 2013-04-19 14:22:45 +02:00
• 1a2a8bffed kernel-interface: support enumeration of virtual-only IPs Martin Willi 2013-04-19 14:52:29 +02:00
• 5f7f8c92ca kernel-pfkey: refactor route installation to a dedicate function Martin Willi 2013-04-19 14:17:22 +02:00
• 121783035c kernel-pfroute: split /0 routes to avoid conflict with default route Martin Willi 2013-04-19 12:17:25 +02:00
• f8646dd65e kernel-pfkey: check if we have a gateway before comparing them Martin Willi 2013-04-19 12:16:12 +02:00
• d4260c5f7f kernel-pfkey: install route along with input, not forward policies Martin Willi 2013-04-19 10:42:23 +02:00
• 6e879a59fc kernel-pfroute: rescan address list for an interface if its state changes Martin Willi 2013-04-19 10:47:34 +02:00
• 0fd409db77 kernel-pfroute: add newly appearing interfaces to the interface cache Martin Willi 2013-04-19 10:46:04 +02:00
• 9bc342eae4 kernel-pfroute: implement get_nexthop() Martin Willi 2013-04-18 18:26:49 +02:00
• 272bcac894 kernel-pfroute: install and uninstall routes Martin Willi 2013-04-18 18:19:24 +02:00
• 3a7f4b5c8d kernel-pfroute: collect replies received for our own queries Martin Willi 2013-04-18 18:15:25 +02:00
• b1c6b68e4c kernel-pfroute: refactor PF_ROUTE message processing, use an enumerator Martin Willi 2013-04-18 17:58:48 +02:00
• 889efae4cf kernel-pfkey: use an int to set esp_port with a sysctl on OS X Martin Willi 2013-04-18 16:53:35 +02:00
• 9650bf3cc7 kernel-pfroute: use INIT() macro for allocations Martin Willi 2013-04-18 16:20:11 +02:00
• 0e107f03ac kernel-pfroute: use only a single PF_ROUTE socket for both events and queries Martin Willi 2013-04-18 16:08:12 +02:00
• e8002956c9 kernel-pfroute: fix length check when receiving PF_ROUTE messages Martin Willi 2013-04-17 14:48:58 +02:00
• 64f309e735 kernel-pfkey: remove obsolete pluto specific behavior Martin Willi 2013-05-06 15:30:07 +02:00
• bc6275d21c kernel-netlink: remove obsolete pluto specific behavior Martin Willi 2013-04-12 11:32:05 +02:00
• 2af65b26d9 tun_device: add a getter for the address previously passed to set_address() Martin Willi 2013-04-12 13:03:21 +02:00
• 60babe0236 tun_device: add a getter for the underlying file descriptor Martin Willi 2013-04-12 12:42:14 +02:00
• d947d0d61a tun-device: use host_create_netmask() to calculate interface netmask Martin Willi 2013-04-16 12:09:18 +02:00
• 2d8a01d1c6 host: add a netmask constructor taking the number of network bits Martin Willi 2013-04-16 12:08:38 +02:00
• 4dc83e9fac host: remove unused host_t.get_differences() method Martin Willi 2013-04-15 16:27:31 +02:00
• 7749eb0d2a host: print %#H format specifiers not as %any, but with the port Martin Willi 2013-04-11 19:51:45 +02:00
• 344a4e54be host: initialize sockaddr->sa_len if it is available Martin Willi 2013-03-20 18:15:26 +01:00
• 60ed88b2c7 child-sa: pass traffic selector to add_sa() regardless of IPsec mode Martin Willi 2013-04-12 13:19:59 +02:00
• dc35d097b3 socket-default: to bind to one dynamic port on OS X, create v4 socket before v6 Martin Willi 2013-04-11 20:22:06 +02:00
• a30727fe2b socket-default: refactor socket pair opening to a function Martin Willi 2013-04-11 20:19:57 +02:00
• 6948df3220 socket-default: Don't try to send packet if we haven't a socket for given family Martin Willi 2013-04-11 19:47:28 +02:00
• e9326eba13 socket-default: Use -1 if socket is not available, as 0 is actually a valid fd Martin Willi 2013-04-11 19:40:31 +02:00
• b0ccd14f2a semaphore: similar to thread_create(), semaphore_create() is used by Mach Martin Willi 2013-04-11 19:20:33 +02:00
• 0c586c0099 .gitignore: add OS X .DS_Store files Martin Willi 2013-04-11 17:34:44 +02:00
• 922e2d1d62 Merge branch 'charon-cmd' Martin Willi 2013-05-06 16:01:25 +02:00
• 68fc0fe32e charon-cmd: add an option to set a different server identity Martin Willi 2013-04-22 12:42:01 +02:00
• a0f6f39343 proposals: try next if IKEv2 algorithm could not be mapped to IKEv1 Martin Willi 2013-04-22 12:33:52 +02:00
• d2e2b9a2da charon-cmd: add support for different IKEv1/IKEv2 authentication profiles Martin Willi 2013-04-22 12:33:10 +02:00
• d6b0c28b25 charon-cmd: support multi-line help text for each option in usage Martin Willi 2013-04-22 11:20:58 +02:00
• 8e53682cd9 charon-cmd: add --local/remote-ts options to set traffic selectors Martin Willi 2013-04-22 10:52:17 +02:00
• 7a86bccd50 charon-cmd: Use dynamic ports with the socket-default plugin Martin Willi 2013-04-11 19:27:27 +02:00