Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 76f7d80e80 Introduce "features" for the kernel backends returning kernel capabilities Martin Willi 2013-02-21 09:39:23 +01:00
• 9a70fe8412 testing: Add a script to easily connect to a host via SSH Tobias Brunner 2013-02-19 14:17:26 +01:00
• 81f9cd39fd openssl: Provide AES-GCM implementation Tobias Brunner 2013-02-12 16:46:56 +01:00
• a89ebab62e Fix cleanup in crypto_tester if AEAD implementation fails Tobias Brunner 2013-02-12 16:42:45 +01:00
• 5f7f4fa398 Order of arguments in Doxygen comment fixed Tobias Brunner 2013-02-12 16:40:54 +01:00
• 8656f35ae1 Fix auth_cfg_t.clone() for single-valued auth rules Tobias Brunner 2013-02-18 17:23:04 +01:00
• 6e935c6fe0 Trigger an updown event when destroying an IKE_SA based on INITIAL_CONTACT Tobias Brunner 2013-02-18 12:05:58 +01:00
• 61f1693df1 Support different authentication schemes for PT-TLS Martin Willi 2013-02-28 12:03:40 +01:00
• 807f2facd0 Request a TLS client certificate even if no peer identity is given Martin Willi 2013-02-28 12:34:53 +01:00
• 257c80cb5b Wrap tls_t.get_{server,peer}_id methods in tls_socket_t Martin Willi 2013-02-28 11:44:33 +01:00
• 2de481e32b Delegate tls_t.get_{peer,server}_id to handshake layer Martin Willi 2013-02-28 11:39:55 +01:00
• 2ae0c9e618 Implement a SASL PLAIN mechanism using shared secrets Martin Willi 2013-02-27 16:27:59 +01:00
• 66d8fd690c Implement SASL authentication in PT-TLS client Martin Willi 2013-02-27 13:47:08 +01:00
• 3542c4f18a Implement SASL authentication in PT-TLS server Martin Willi 2013-02-27 11:43:29 +01:00
• 5b1a10836c Define PT-TLS SASL result codes Martin Willi 2013-02-27 11:40:48 +01:00
• 4a801beb3e Define an interface for SASL mechanisms and provide a static factory Martin Willi 2013-02-26 14:54:36 +01:00
• 806126eab2 Pass a client identity to pt_tls_client, usable for TLS or SASL authentication Martin Willi 2013-02-27 14:11:00 +01:00
• 55854ecc25 Don't close underlying file descriptor before destroying a tls_socket Martin Willi 2013-02-18 11:45:01 +01:00
• d8a94c18c6 Apply a mutual EAP auth_cfg not before the EAP method completes Martin Willi 2013-02-26 13:07:11 +01:00
• cc787697b8 Be a little more verbose why a peer_cfg is inacceptable Martin Willi 2013-02-26 12:26:31 +01:00
• 289b9b7b31 Refactor auth_cfg applying to a common function Martin Willi 2013-02-26 12:16:31 +01:00
• bc07fef09c Use SIGUSR2 for SIG_CANCEL on Android Tobias Brunner 2013-02-26 11:07:28 +01:00
• 0ac34e9e6a Android.mk updated to latest Makefiles Tobias Brunner 2013-02-26 10:11:36 +01:00
• e2857be823 For IKEv1 Main Mode, use message hash to detect early retransmissions Martin Willi 2013-02-25 12:08:36 +01:00
• cdf75a39e3 Move initial message dropping to task manager Martin Willi 2013-02-25 11:42:50 +01:00
• 9eaed7a5bb Use INIT macro to initialize IKE_SA manager entries Martin Willi 2013-02-25 11:52:55 +01:00
• b32e732b2f Check kvm command existence in start-testing Reto Buerki 2013-02-22 15:16:37 +01:00
• b443fa6123 Don't reject OPAQUE ports while verifying traffic selector substructure Martin Willi 2013-02-21 11:45:24 +01:00
• 0abeac3a0b Document ipsec.conf leftprotoport extensions in manpage Martin Willi 2013-02-21 11:32:10 +01:00
• 0e7ef7f522 Optionally support port ranges in leftprotoport Martin Willi 2013-02-21 11:24:37 +01:00
• fd658bce28 Support %opaque keyword in leftprotoport for "opaque" ports Martin Willi 2013-02-21 11:13:26 +01:00
• cd41b951ee Pass complete port range over stroke interface for more flexibility Martin Willi 2013-02-21 11:11:29 +01:00
• a1db77de7c Use a complete port range in traffic_selector_create_from_{subnet,cidr} Martin Willi 2013-02-21 11:04:35 +01:00
• c572b5c8c1 Print OPAQUE traffic selectors as what they are, not as port range Martin Willi 2013-02-21 11:51:03 +01:00
• 7b368af61a Support "opaque" ports in traffic selector subset calculation Martin Willi 2013-02-21 10:51:19 +01:00
• 7dbe1feef1 Slightly refactor traffic_selector_t.get_subset() Martin Willi 2013-02-21 10:39:36 +01:00
• de5d569b24 Migrate remaining traffic selector methods to METHOD macro Martin Willi 2013-02-21 10:28:21 +01:00
• 0d237763dc openssl: Disable PKCS#7/CMS when building against OpenSSL < 0.9.8g Tobias Brunner 2013-02-19 14:12:57 +01:00
• a2fd08dd26 Install a route for shunt policies Martin Willi 2013-02-20 16:17:31 +01:00
• 122b4b6e6d Include local address for Unity Split-Exclude shunt policies Martin Willi 2013-02-20 16:15:39 +01:00
• 3dc9d427c9 After IKEv1 reauthentication, reinstall VIP routes after migrating CHILD_SAs Martin Willi 2013-02-20 09:16:00 +01:00
• f836d433a9 When detecting a duplicate IKEv1 SA, adopt children, as it might be a rekeying Martin Willi 2013-02-20 08:57:17 +01:00
• 7a93844f21 version bump to 5.0.3dr2 Andreas Steffen 2013-02-19 20:25:13 +01:00
• 371b752f00 treat IF-M and IF-TNCCS remediation instructions/parameters in an equal way Andreas Steffen 2013-02-19 20:00:48 +01:00
• 295e42a47f systime-fix disables certificate lifetime validation if system time not synced Martin Willi 2013-02-19 15:38:28 +01:00
• 0ed31e7284 Add a stub for systime-fix, a plugin handling certificate lifetimes gracefully Martin Willi 2013-02-19 14:49:38 +01:00
• de399f550d Add a cert_validator hook allowing plugins to provide custom lifetime checking Martin Willi 2013-02-19 11:26:21 +01:00
• 790e00aaa9 Make cert_validator_t.validate optional to implement Martin Willi 2013-02-19 11:22:36 +01:00
• 39db06f155 Merge branch 'dnssec' Tobias Brunner 2013-02-19 12:25:27 +01:00
• d69eb0375f NEWS about ipseckey and unbound plugins added Tobias Brunner 2013-02-19 12:23:27 +01:00
• f0c102cbfa Added ikev2/rw-dnssec scenario Andreas Steffen 2013-02-17 21:49:23 +01:00
• 1d4ff25fb8 Added ikev2/net2net-dnssec scenario Andreas Steffen 2013-02-18 18:06:19 +01:00
• 37c589f0e0 Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org, and root zones Andreas Steffen 2013-02-14 13:32:04 +01:00
• 3fbc328d14 Build unbound and ipseckey plugins on KVM image Andreas Steffen 2013-02-13 13:48:14 +01:00
• 65cdda5cf8 Streamlined log messages in ipseckey plugin Andreas Steffen 2013-02-17 19:31:56 +01:00
• a4ddc0bb26 Encode RSA public keys in RFC 3110 DNSKEY format Andreas Steffen 2013-02-17 17:37:45 +01:00
• f2145c8d3a Moved configuration from resolver manager to unbound plugin Andreas Steffen 2013-02-15 15:12:29 +01:00
• 95650c0836 ipseckey: Report IPSECKEYs with invalid DNSSEC security state Reto Guadagnini 2012-07-05 12:17:49 +02:00
• 932717fbde ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.conf Reto Guadagnini 2012-06-08 17:15:09 +02:00
• a77bbc3b8c Added ipseckey plugin, which provides support for public keys in IPSECKEY RRs Reto Guadagnini 2012-06-08 11:26:50 +02:00
• d786cbda5c Implemented the resolver test script "dnssec" Reto Guadagnini 2012-04-10 17:06:29 +02:00
• cfd07978d0 unbound: Implementation of query method of unbound_resolver_t Reto Guadagnini 2012-04-10 17:05:06 +02:00
• 5a4126b490 unbound: Implemented resolver_response_t as unbound_response_t Reto Guadagnini 2012-04-10 16:59:43 +02:00
• 62ea67e700 Implemented rr_set_t interface Reto Guadagnini 2012-04-03 22:15:00 +02:00
• 4a335a2164 unbound: Implemented rr_t as unbound_rr_t Reto Guadagnini 2012-03-27 18:37:24 +02:00
• 9f963a7cfc Added unbound plugin implementing the resolver interface using libunbound Reto Guadagnini 2012-03-27 09:22:14 +02:00
• b1505b345b Added manager for DNS resolvers Reto Guadagnini 2012-03-23 11:36:49 +01:00
• ffdeeb6609 Added interface for DNS resolvers Reto Guadagnini 2012-03-20 18:49:54 +01:00
• c381e46855 added missing return statement Andreas Steffen 2013-02-19 10:21:36 +01:00
• 69faf63528 Fix encoding of issuerAndSubject while handling SCEP pending state Martin Willi 2013-02-19 09:53:47 +01:00
• 0f7cb0caf4 reject PB-Experimental messages with NOSKIP flag set Andreas Steffen 2013-02-19 09:31:34 +01:00
• 9b4a8e1ced added parameter descriptions Andreas Steffen 2013-02-19 07:44:57 +01:00
• 2c1219c217 removed superfluous debug output Andreas Steffen 2013-02-15 15:19:16 +01:00
• b5b76df012 Add a timeout to clean up PDP RADIUS connections Martin Willi 2012-12-19 18:07:33 +01:00
• dadd9744b6 Keep the PDP connections lock while accessing its objects Martin Willi 2012-12-19 17:55:47 +01:00
• 37884ab10f Add locking to TNC-PDP connections Martin Willi 2012-12-19 17:39:25 +01:00
• d20a2cc5f3 Add IF-M message subtype getter to IMC/IMV messages Martin Willi 2013-01-21 17:01:53 +01:00
• bbe9261bbf Use a generic constructor to create PA-TNC error attributes Martin Willi 2013-01-28 16:29:42 +01:00
• 4755ab505d Add a global return_success() method implementation Martin Willi 2013-01-29 12:20:10 +01:00
• de32b8aed6 Add a convenience method to check pen_type_t for vendor and type Martin Willi 2013-01-31 15:43:45 +01:00
• d03b338487 Add a comparison function for pen_type_t Martin Willi 2013-01-31 15:29:43 +01:00
• 9db54bbcd4 Whitespace and comment cleanups in pen.[ch] Martin Willi 2013-01-31 15:23:25 +01:00
• f838f457a8 resolve dependency on libtls Andreas Steffen 2013-02-02 22:21:36 +01:00
• e212033ef2 Merge branch 'ike-dscp' Martin Willi 2013-02-14 17:11:35 +01:00
• 285668b6e3 Check if recommendations is set before applying language preference Martin Willi 2013-02-14 17:03:10 +01:00
• a9df87bf89 PT-TLS dispatcher TNCCS constructor takes peer identities to pass to factory Martin Willi 2013-02-14 14:48:54 +01:00
• 8b56943222 Merge branch 'pt-tls' Martin Willi 2013-02-14 17:06:07 +01:00
• 46ae05dd17 Remove leading zeros in SCEP certificate serialNumbers Martin Willi 2013-02-13 12:06:09 +01:00
• 96a2d2077b Fix 'stroke loglevel any' Tobias Brunner 2013-02-13 12:11:37 +01:00
• 5374fe3a09 added ikev1/net2net-fragmentation scenario Andreas Steffen 2013-02-12 23:01:48 +01:00
• bac1052dea treat EAP identities as user IDs Andreas Steffen 2013-02-12 21:58:03 +01:00
• 7d355f853d use EAP identity in tnc/tnccs-20-pdp scenario Andreas Steffen 2013-02-12 20:41:37 +01:00
• 2a421163bf make TNC client authentication type available to IMVs Andreas Steffen 2013-02-12 20:38:05 +01:00
• 3e56352815 determine underlying IF-T transport protocol Andreas Steffen 2013-02-12 12:25:39 +01:00
• bd1ee5bdc4 make AR identities available to IMVs via IF-IMV 1.4 draft Andreas Steffen 2013-01-20 23:36:31 +01:00
• ebb87f08f7 Make IKE/EAP IDs available to TNC server/client Andreas Steffen 2013-01-17 23:32:34 +01:00
• 98063d8187 Don't use a time_t variable with fscanf when parsing uptime Tobias Brunner 2013-02-06 16:35:44 +01:00
• af5452ba76 Allow more than one CERTREQ payload for IKEv2 Tobias Brunner 2013-02-08 11:24:39 +01:00
• f476ff84f3 Add a --httptimeout option to scepclient Martin Willi 2013-02-08 10:57:25 +01:00
• 763e86c093 Use CURL_TIMEOUT and not CURL_CONNECTTIMEOUT for FETCHER_TIMEOUT in curl Martin Willi 2013-02-08 10:12:10 +01:00