4f60b72a81
Version bump to 5.6.2dr1
2017-12-05 22:23:43 +01:00
71cf3d709a
pt-tls-client: Load certificates via handle from smartcard or TPM
2017-12-05 21:31:31 +01:00
e850d000b8
libtpmtss: Load X.509 certificates from TPM 2.0 NV RAM
2017-12-05 21:31:31 +01:00
fb1cf320a2
libtpmtss: Extend TPM 2.0 capability info
2017-12-05 21:31:31 +01:00
0729be1bfe
Merge branch 'android-proposals'
...
Makes IKE and ESP proposals configurable.
2017-11-28 16:23:41 +01:00
4a79434b11
android: Remove modp1024 from the ESP proposals
2017-11-28 16:19:08 +01:00
8517a0edb4
testing: Explicitly deliver all test results as text/plain
2017-11-28 16:17:50 +01:00
203a86ecb8
Version bump to 5.6.1
2017-11-17 22:42:28 +01:00
f60b08ba0d
testing: Added swanctl/rw-cert-pss scenario
2017-11-17 22:42:07 +01:00
5a6f687bdf
android: New release after adding configurable proposals
2017-11-17 18:11:43 +01:00
b03713add4
android: Validate proposal strings when importing profiles
2017-11-17 18:11:43 +01:00
9f962f6c19
android: Validate proposal strings in the GUI
2017-11-17 18:11:43 +01:00
836a943804
android: Add utility JNI function to validate proposal strings
2017-11-17 18:11:39 +01:00
2307bffe56
proposal: Move proposal_t from libcharon to libstrongswan
...
This allows us to use it without having to initialize libcharon, which
was required for the logging (we probably could have included debug.h
instead of daemon.h to workaround that but this seems more correct).
2017-11-17 18:09:54 +01:00
92c1b52487
android: Load JNI libraries in Application class
...
This way they are also loaded when we don't use CharonVpnService.
2017-11-17 18:05:35 +01:00
2d1f65feb3
android: Make IKE/ESP proposals configurable in the GUI
2017-11-17 18:05:35 +01:00
6403ad5457
android: Import IKE/ESP proposals
...
We currently don't validate them here, only when used later will they
get parsed (which includes some checks).
2017-11-17 14:31:06 +01:00
a7c43544dd
android: Use optional custom proposals for IKE and ESP
...
If the proposal is invalid we fall back to the defaults.
2017-11-17 14:31:06 +01:00
24c22a3fa8
android: Add properties for IKE and ESP proposals
2017-11-17 14:31:06 +01:00
8b6c23342c
android: Free settings string passed via JNI
2017-11-17 14:31:06 +01:00
caee751d13
NEWS: Added some news for 5.6.1
2017-11-17 10:00:29 +01:00
f7a73fe0f7
hashers: Change names of SHA2 hash algorithms
...
Keep the lower case names as they are as we use them internally (parsing
and e.g. in OpenSSL as identifier).
2017-11-17 09:32:47 +01:00
36ae037b81
ikev2: Add hash algorithm used for RSASSA-PSS signature to log message
2017-11-17 09:30:53 +01:00
dfd5f090fb
hasher: Add uppercase short names for hash algorithms
2017-11-17 09:30:53 +01:00
ce4aebe00a
testing: Configure logging via syslog in strongswan.conf
...
Globally configure logging in strongswan.conf.testing and replace all
charondebug statements with strongswan.conf settings.
2017-11-15 17:24:04 +01:00
d24d26c4bc
testing: Disable logging via journal in charon-systemd
...
This avoids duplicate log messages as we already log via syslog to get
daemon.log.
2017-11-15 17:12:09 +01:00
be214cb17e
testing: Globally define logging via syslog for charon-systemd
...
We could make the same change for charon (actually setting it for charon
in strongswan.conf.testing would work for charon-systemd too), however,
there are dozens of test cases that currently set charondebug in
ipsec.conf.
2017-11-15 17:09:55 +01:00
7a659c0f99
x509: Initialize signature params when parsing attribute certificates
2017-11-15 14:41:56 +01:00
26d18f4efb
sw-collector: Unmap history file on failure to instantiate extractor
2017-11-15 14:40:10 +01:00
42353849cb
charon: Explicitly check return value of fileno()
...
This is mainly for Coverity because fchown() can't take a negative
value, which the -1 check implies is possible.
2017-11-15 14:37:43 +01:00
be79839ea7
pkcs8: Add explicit comment for RSASSA-PSS fall-through
2017-11-15 14:33:05 +01:00
7f1d944bc9
The pacman tool got replaced by the sec-updater tool
2017-11-15 12:18:17 +01:00
851e51d1cf
sec-updater: Fix typo in documentation
2017-11-15 12:10:33 +01:00
527b3f0ca5
Fixed some typos, courtesy of codespell
2017-11-15 10:21:13 +01:00
c87b16d256
swanctl: Add check for conflicting short options
2017-11-13 10:09:41 +01:00
f0c7cbd1d7
swanctl: Properly register --counters commmand
...
Use C instead of c, which is already used for --load-conns.
2017-11-13 09:45:14 +01:00
859cb93d28
testing: Do not remove all swanctl subdirectories
2017-11-11 19:23:01 +01:00
b20bf062e8
Version bump to 5.6.1rc1
2017-11-11 18:25:17 +01:00
74f8ad7fd9
Merge branch 'swanctl-testing'
2017-11-11 16:42:38 +01:00
7df35af7cc
libimcv: Updated imv database
2017-11-11 16:41:16 +01:00
13a3f20f2e
testing: Converterd tnc to systemd
2017-11-11 16:41:16 +01:00
323f0b05d7
testing: Converted sql to systemd
2017-11-11 16:41:15 +01:00
70dc5bb8ad
testing: Converted swanctl to systemd
2017-11-11 16:41:15 +01:00
65f74cd13d
testing: Added legacy ipv6-stroke scenarios
2017-11-11 16:41:15 +01:00
4402013f05
testing: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctl
2017-11-10 13:54:51 +01:00
b3ccfcd05e
testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl
2017-11-10 13:54:50 +01:00
da5aa6ae6a
testing: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
12dbca721e
testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl
2017-11-10 13:54:50 +01:00
f0476c4a82
testing: Converted ipv6/rw-rfc3779-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
96d7d9392f
testing: Converted ipv6/rw-compress-ikev2 to swanctl
2017-11-10 13:54:50 +01:00
Andreas Steffen