Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 62516a7465 testing: Increase base image size so there is space for test results on winnetou Tobias Brunner 2013-06-11 11:01:26 +02:00
• 053ad34959 testing: Ignore errors when searching for imcv log entries in daemon.log Tobias Brunner 2013-06-10 18:52:32 +02:00
• 5d52087b54 Added missing string for full-length HMAC-SHA512 signer Tobias Brunner 2013-06-10 11:48:18 +02:00
• cfae3a227d attr: Fix handling of invalid IPs listed after valid ones Tobias Brunner 2013-06-05 17:10:45 +02:00
• 169bf6745e attr: fix a compiler warning that family is used uninitialized (seen with -Os) Martin Willi 2013-06-05 15:20:37 +02:00
• bc1c92c9e9 Strictly memwipe_check() for magic only in the affected buffer Martin Willi 2013-06-05 14:37:05 +02:00
• c480b5f458 Allow memwipe() to be called with NULL argument Tobias Brunner 2013-05-27 18:41:16 +02:00
• e4d5e0114f kernel-netlink: add outer addresses to policy when using BEET mode Michael Rossberg 2013-05-22 09:55:46 +02:00
• 5e4b1ad20a openssl: add support for IP addr blocks in X.509 certificates Michael Rossberg 2013-05-22 09:51:10 +02:00
• 71d740cac6 Make plugins in standalone libimcv configurable Andreas Steffen 2013-05-24 12:56:21 +02:00
• f8298b9f98 host-resolver: don't try to resolve a plain v4 address to an IPv6 address Volker Rümelin 2013-04-21 15:10:39 +02:00
• 21bade294b traffic-selector: inet_pton is successful only if it returns 1 Martin Willi 2013-05-16 10:59:33 +02:00
• 2ce403438f updown: pass IKE_SA unique ID in PLUTO_UNIQUEID Emanuil Hristov 2013-04-17 12:44:34 +03:00
• e8b2ce1e72 capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore Martin Willi 2013-05-08 14:58:59 +02:00
• b1bd63547b capabilities: initialize supplementary groups only when doing a setuid() Martin Willi 2013-05-08 14:58:28 +02:00
• 2e9201f4ef af-alg: fix number of signers after adding untruncated HMAC-SHA-512 (1f2a34d6) Martin Willi 2013-05-15 16:42:03 +02:00
• 965348cd7a Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILURE Martin Willi 2013-05-08 11:03:33 +02:00
• c6e1eda6d0 testing: Set terminal title when logging in via SSH Tobias Brunner 2013-05-15 10:32:41 +02:00
• bd538e8c4a openssl: Only warn about unavailable FIPS mode if the user requested it Tobias Brunner 2013-05-08 15:23:14 +02:00
• c1f1df4b40 Merge branch 'charon-cmd-pkcs12' Tobias Brunner 2013-05-08 15:19:38 +02:00
• 6040eff900 stroke: Add second password if provided Tobias Brunner 2013-04-17 17:32:37 +02:00
• b7aa6b789e Load pkcs7 plugin in charon (and while we are at it in nm) Tobias Brunner 2013-04-17 17:13:28 +02:00
• 1c080407b2 stroke: Fail silently if another builder calls PW callback after giving up Tobias Brunner 2013-04-17 16:03:05 +02:00
• 4a64c3e9a0 stroke: Cache passwords so the user is not prompted multiple times for the same password Tobias Brunner 2013-04-17 15:54:23 +02:00
• e240b03e68 stroke: Fix prompt and error messages in passphrase callback Tobias Brunner 2013-04-17 15:51:11 +02:00
• 7971278c92 stroke: Load credentials from PKCS#12 files (P12 token) Tobias Brunner 2013-04-17 13:49:13 +02:00
• 904390e887 openssl: Cleanup thread specific error buffer Tobias Brunner 2013-04-17 13:16:20 +02:00
• 3ee2af97bf openssl: Don't use deprecated CRYPTO_set_id_callback() with OpenSSL >= 1.0.0 Tobias Brunner 2013-04-17 13:00:51 +02:00
• 780900ab0e openssl: Add PKCS#12 parsing via OpenSSL Tobias Brunner 2013-04-17 11:43:06 +02:00
• 651d5ab8e7 openssl: Properly cleanup OpenSSL library Tobias Brunner 2013-04-17 11:35:18 +02:00
• 02116fdc2d charon-cmd: Add support for PKCS#12 files Tobias Brunner 2013-04-12 19:30:03 +02:00
• 3bd498284e PEM plugin loads PKCS#12 containers from (DER-encoded) files Tobias Brunner 2013-04-12 19:00:15 +02:00
• abc04e6b3f Remove pluto specific certificate types Tobias Brunner 2013-04-12 18:41:26 +02:00
• f77d6e16d2 charon-cmd: match_me/match_other are optional in callback credentials Tobias Brunner 2013-04-12 19:32:01 +02:00
• 89d350f46a charon-cmd: Request password for private keys Tobias Brunner 2013-04-12 18:28:17 +02:00
• 1f2a34d6d8 Add support for untruncated HMAC-SHA-512 Tobias Brunner 2013-04-12 12:48:04 +02:00
• d8be7d38bf Also support 128-bit RC2 Tobias Brunner 2013-04-12 12:10:22 +02:00
• feef637368 Add pkcs12 plugin which adds support for decoding PKCS#12 containers Tobias Brunner 2013-04-12 11:59:01 +02:00
• 199fdcadae Function added to convert a hash algorithm to an HMAC integrity algorithm Tobias Brunner 2013-04-11 19:41:48 +02:00
• 047fca1169 Support the PKCS#5/PKCS#12 encryption scheme used by OpenSSL for private keys Tobias Brunner 2013-04-11 19:39:32 +02:00
• 0d0929fa0c Register PKCS#8 builder for KEY_ANY Tobias Brunner 2013-04-11 17:54:45 +02:00
• 8e48e0009a Add support for PKCS#7/CMS encrypted-data Tobias Brunner 2013-04-11 16:19:16 +02:00
• d41e54c68d Move PKCS#12 key derivation to a separate file Tobias Brunner 2013-04-11 15:02:28 +02:00
• 594d847f79 PKCS#5 wrapper can decrypt PKCS#12-like schemes Tobias Brunner 2013-04-11 13:27:02 +02:00
• cb38e2f30a Add test vectors for RC2 Tobias Brunner 2013-04-10 19:26:05 +02:00
• 162c06f2f5 Fix cleanup in crypto_tester if a crypter fails Tobias Brunner 2013-04-10 19:25:26 +02:00
• 9d4fc8677f Add implementation of the RC2 block cipher (RFC 2268) Tobias Brunner 2013-04-10 19:24:09 +02:00
• c734c2d875 Extract function to convert ASN.1 INTEGER object to u_int64_t Tobias Brunner 2013-04-08 18:31:34 +02:00
• 4076e3ee91 Extract PKCS#5 handling from pkcs8 plugin to separate helper class Tobias Brunner 2013-04-08 18:13:03 +02:00
• b715176ec4 Merge branch 'charon-cmd-agent' Tobias Brunner 2013-05-08 14:35:05 +02:00
• 4d38a698b8 charon-cmd: Changed formatting of optional arguments in usage information Tobias Brunner 2013-05-07 15:05:12 +02:00
• 6a6d0ea7cd charon-cmd: --agent optionally takes the path to an ssh-agent socket Tobias Brunner 2013-05-07 15:04:02 +02:00
• efb4cb0bf9 charon-cmd: Stop processing options if an argument is missing or an option not recognized Tobias Brunner 2013-05-07 14:53:27 +02:00
• 410abbd35f charon-cmd: Properly initialize options with no additional lines Tobias Brunner 2013-05-07 14:08:20 +02:00
• e07e489d5f agent: Use sshkey plugin to parse keys, adds support for ECDSA Tobias Brunner 2013-04-01 19:47:23 +02:00
• dd9e366814 sshkey: Add support for ECDSA keys Tobias Brunner 2013-04-01 18:16:17 +02:00
• 87692be215 Load any type (RSA/ECDSA) of public key via left|rightsigkey Tobias Brunner 2013-04-01 16:42:53 +02:00
• fa1d3d39dc left|rightrsasigkey accepts SSH keys but the key format has to be specified explicitly Tobias Brunner 2013-04-01 16:28:28 +02:00
• cc4408abcb sshkey: Added builder for SSHKEY RSA keys Tobias Brunner 2013-04-01 16:02:00 +02:00
• 584d656b77 Add sshkey plugin stub that will parse RFC 4253 public keys Tobias Brunner 2013-04-01 15:20:39 +02:00
• c0bbddfa42 Try to load raw keys from ipsec.conf as PKCS#1 blob first Tobias Brunner 2013-04-01 13:51:37 +02:00
• ee7b73832c charon-cmd: Add --agent option to authenticate using ssh-agent(1) Tobias Brunner 2013-04-01 14:51:09 +02:00
• 4dc50bf9de charon-cmd: Use loose matching of gateway identity Tobias Brunner 2013-04-01 14:48:02 +02:00
• 8372b8fc54 charon-cmd: Load pubkey plugin to load raw keys Tobias Brunner 2013-04-01 14:47:09 +02:00
• e74bca9e19 testing: Don't run tests when building tkm Tobias Brunner 2013-05-07 10:19:37 +02:00
• 9c2aba2735 testing: Don't run tests when building tkm-rpc Tobias Brunner 2013-05-06 17:21:30 +02:00
• a8849e0713 Merge branch 'tun-vip' Martin Willi 2013-05-06 17:04:36 +02:00
• c9a323c1d9 kernel-pfroute: allow only one thread to do a route look up simultaneously Martin Willi 2013-05-06 16:40:19 +02:00
• 5c12700f9a kernel-interface: query SAD for last use time if SPD query didn't yield one Martin Willi 2013-04-21 17:05:08 +02:00
• bdaf9f97e6 child-sa: query SAD/SPD just for what we actually need to update statistics Martin Willi 2013-04-21 16:50:17 +02:00
• 470aad7e0c kernel-pfkey: be less verbose about unexpected sequence numbers Martin Willi 2013-04-20 20:54:03 +02:00
• df919d50d0 kernel-pfkey: install exclude routes if kernel-net requires them Martin Willi 2013-04-20 13:29:20 +02:00
• 580b768d03 kernel-pfroute: add a feature flag requesting "exclude" routes Martin Willi 2013-04-20 12:28:05 +02:00
• bd520193a4 kernel-pfroute: remove unused interface address refcounting Martin Willi 2013-04-19 16:58:06 +02:00
• 77b6f19694 kernel-pfroute: mark IPs installed on tun device as virtual Martin Willi 2013-04-19 16:55:38 +02:00
• 2a2d7a4dc8 kernel-pfroute: install virtual IPs using dedicated tun devices Martin Willi 2013-04-19 15:53:45 +02:00
• ca4a14ae83 kernel-pfkey: when installing a route for a virtual IP, use its interface Martin Willi 2013-04-19 14:27:31 +02:00
• f52cf07532 kernel-interface: get_address_by_ts() can tell if a returned IP is virtual Martin Willi 2013-04-19 14:22:45 +02:00
• 1a2a8bffed kernel-interface: support enumeration of virtual-only IPs Martin Willi 2013-04-19 14:52:29 +02:00
• 5f7f8c92ca kernel-pfkey: refactor route installation to a dedicate function Martin Willi 2013-04-19 14:17:22 +02:00
• 121783035c kernel-pfroute: split /0 routes to avoid conflict with default route Martin Willi 2013-04-19 12:17:25 +02:00
• f8646dd65e kernel-pfkey: check if we have a gateway before comparing them Martin Willi 2013-04-19 12:16:12 +02:00
• d4260c5f7f kernel-pfkey: install route along with input, not forward policies Martin Willi 2013-04-19 10:42:23 +02:00
• 6e879a59fc kernel-pfroute: rescan address list for an interface if its state changes Martin Willi 2013-04-19 10:47:34 +02:00
• 0fd409db77 kernel-pfroute: add newly appearing interfaces to the interface cache Martin Willi 2013-04-19 10:46:04 +02:00
• 9bc342eae4 kernel-pfroute: implement get_nexthop() Martin Willi 2013-04-18 18:26:49 +02:00
• 272bcac894 kernel-pfroute: install and uninstall routes Martin Willi 2013-04-18 18:19:24 +02:00
• 3a7f4b5c8d kernel-pfroute: collect replies received for our own queries Martin Willi 2013-04-18 18:15:25 +02:00
• b1c6b68e4c kernel-pfroute: refactor PF_ROUTE message processing, use an enumerator Martin Willi 2013-04-18 17:58:48 +02:00
• 889efae4cf kernel-pfkey: use an int to set esp_port with a sysctl on OS X Martin Willi 2013-04-18 16:53:35 +02:00
• 9650bf3cc7 kernel-pfroute: use INIT() macro for allocations Martin Willi 2013-04-18 16:20:11 +02:00
• 0e107f03ac kernel-pfroute: use only a single PF_ROUTE socket for both events and queries Martin Willi 2013-04-18 16:08:12 +02:00
• e8002956c9 kernel-pfroute: fix length check when receiving PF_ROUTE messages Martin Willi 2013-04-17 14:48:58 +02:00
• 64f309e735 kernel-pfkey: remove obsolete pluto specific behavior Martin Willi 2013-05-06 15:30:07 +02:00
• bc6275d21c kernel-netlink: remove obsolete pluto specific behavior Martin Willi 2013-04-12 11:32:05 +02:00
• 2af65b26d9 tun_device: add a getter for the address previously passed to set_address() Martin Willi 2013-04-12 13:03:21 +02:00
• 60babe0236 tun_device: add a getter for the underlying file descriptor Martin Willi 2013-04-12 12:42:14 +02:00
• d947d0d61a tun-device: use host_create_netmask() to calculate interface netmask Martin Willi 2013-04-16 12:09:18 +02:00
• 2d8a01d1c6 host: add a netmask constructor taking the number of network bits Martin Willi 2013-04-16 12:08:38 +02:00
• 4dc83e9fac host: remove unused host_t.get_differences() method Martin Willi 2013-04-15 16:27:31 +02:00