Commit Graph

  • 2921f43705 tls-crypto: Simplify handshake/application key derivation and rename methods Tobias Brunner 2020-08-25 13:22:04 +0200
  • fff1974012 tls-hkdf: Make labels enum a proper type Tobias Brunner 2020-08-25 13:35:54 +0200
  • 8495138d4a tls-peer: Support x25519/448 for TLS 1.2 Tobias Brunner 2020-08-26 15:23:53 +0200
  • 3101120c75 tls-crypto: Enumerate x25519/448 and rename constant for consistency Tobias Brunner 2020-08-25 13:16:52 +0200
  • 53ba0801ac tls-crypto: Simplify hash algorithm handling Tobias Brunner 2020-08-25 13:14:05 +0200
  • 43c8f950a7 tls-crypto: Delay instantiation of cipher suites Tobias Brunner 2020-08-25 15:46:29 +0200
  • 281766c5e6 tls-crypto: Filter TLS cipher suites by min/max version Tobias Brunner 2020-08-25 13:54:08 +0200
  • 436571b2f0 tls-crypto: Correctly filter cipher suites based on PRF algorithms Tobias Brunner 2020-08-25 13:47:00 +0200
  • b7ea969b32 tls-crypto: Use correct key length for ChaCha20/Poly1305 Tobias Brunner 2020-08-26 12:18:06 +0200
  • ba3c90ded1 libtls: Some code style fixes Tobias Brunner 2020-08-25 16:32:40 +0200
  • 4099035a0c tls-test: Make address family configurable and simplify DNS/socket handling Tobias Brunner 2020-08-25 13:09:55 +0200
  • 7a2b02667c libtls: Implement TLS 1.3 handshake on client-side bytinbit 2020-05-21 09:37:38 +0200
  • 02d7405512 libtls: Implement HKDF for TLS 1.3 Pascal K 2020-05-21 07:57:14 +0200
  • 3d83d348f4 libtls: Add support to run unit tests with a custom plugin list Tobias Brunner 2020-04-22 16:27:00 +0200
  • 818dc86568 libtls: Add TLS 1.3 implementation of tls_aead_t Tobias Brunner 2020-04-22 16:03:01 +0200
  • ba2bcdd882 libtls: Allow tls_aead_t to change the content type Tobias Brunner 2020-04-22 15:44:31 +0200
  • 0d43b39931 testing: extended sleep time tkm/xfrmproxy tests 5.9.2dr2 Andreas Steffen 2021-02-12 09:44:00 +0100
  • ab58f95b12 Version bump to 5.9.2dr2 Andreas Steffen 2021-02-10 10:04:34 +0100
  • cc25d2195a testing: Copy /etc/resolv.conf from host in chroot script Tobias Brunner 2020-12-18 14:18:47 +0100
  • f3acc0a87b appveyor: Set timezone on the build system Tobias Brunner 2021-02-11 10:20:43 +0100
  • 8ff8b85ce6 appveyor: Create dummy strongswan.conf file to avoid log messages Tobias Brunner 2021-02-10 18:04:41 +0100
  • 671164865b appveyor: Print OpenSSL version Tobias Brunner 2021-02-10 18:04:27 +0100
  • 781ad0b93b openssl: Allocate our own buffer for i2d_* wrapper macro Tobias Brunner 2021-02-10 17:55:06 +0100
  • 6a440f83ab openssl: Reset HMAC key if chunk_empty is passed Tobias Brunner 2020-12-18 14:17:37 +0100
  • cd10ae2ff0 android: Explicitly apply DNS servers to the TUN device Tobias Brunner 2020-11-24 16:50:55 +0100
  • 4dc9edfa55 swanctl: Don't print status message if nothing was loaded to stderr Tobias Brunner 2021-01-27 14:51:56 +0100
  • 2566eb2194 plugin-loader: Add optional filter for plugin features Thomas Egerer 2021-01-28 17:49:08 +0000
  • e6a6fc33b6 path: Also accept / as directory separator on Windows Tobias Brunner 2021-02-01 14:35:09 +0100
  • 3de65f8d67 enumerator: Implement globbing enumerator on Windows Tobias Brunner 2021-01-28 15:10:52 +0100
  • 4525233b1e vici: Fix refcount for CA certificates when reloading authority sections Tobias Brunner 2021-01-20 15:52:33 +0100
  • 6c26267b07 openssl: Fix potential crash with ECDH on Windows Tobias Brunner 2021-01-26 19:33:24 +0100
  • 55df5e9797 openssl: Avoid conflicts with wincrypt.h on Windows Tobias Brunner 2021-01-26 11:17:20 +0100
  • a5f4b996bf appveyor: Also build against newer OpenSSL versions Tobias Brunner 2021-01-26 10:25:03 +0100
  • 14a0c08235 Enable Windows CI build of pkcs11 plugin Michał Skalski 2021-01-24 21:30:41 +0100
  • f30187d422 pkcs11: Fix build on Windows Michał Skalski 2021-01-24 21:14:57 +0100
  • 8d8739ace6 github: Enable farp plugin on macOS Tobias Brunner 2021-01-19 17:04:58 +0100
  • 1af4ae8732 cirrus: Build farp plugin on FreeBSD Tobias Brunner 2021-01-19 17:03:56 +0100
  • 95a0d800c9 farp: Add support for macOS and FreeBSD Dan James 2020-12-19 19:04:16 -0500
  • 8e367df6db Merge branch 'openssl-ecp' Tobias Brunner 2021-01-20 17:54:42 +0100
  • 74e02ff5e6 openssl: Mainly use EVP interface for ECDH Tobias Brunner 2020-12-01 11:45:05 +0100
  • 5fdc979770 openssl: Extract helper function to derive a shared DH secret Tobias Brunner 2020-12-01 11:43:40 +0100
  • 86fb24c2c5 Remove the ecp_x_coordinate_only option Tobias Brunner 2020-12-01 10:13:30 +0100
  • 7733ff7d4e openssl: Use ECDH_compute_key() for 'x-coordinate only' setting Mahantesh Salimath 2020-11-30 22:03:03 +0000
  • aa3d5bf791 Revert "nm: Remove dummy TUN device" Tobias Brunner 2020-11-30 11:48:07 +0100
  • bd9b50dcd3 load-tester: Correctly encode serial of generated client certificates Tobias Brunner 2021-01-08 10:06:06 +0100
  • d8e4a2a777 identification: Change abbreviation for surname/serialNumber RDNs Коренберг Марк 2020-07-15 13:25:56 +0500
  • 2610cd7928 vici: Decode error messages in Python bindings Tobias Brunner 2021-01-13 14:41:50 +0100
  • 414f2c3754 mem-pool: Be less strict when reassigning existing online leases Tobias Brunner 2020-11-24 09:24:25 +0100
  • f97875b72e Merge branch 'ike-update-event' Tobias Brunner 2021-01-18 13:31:01 +0100
  • d79cefc3fc vici: Expose ike-update event Tobias Brunner 2020-10-22 19:12:39 +0200
  • 2b255f01af ike-mobike: Use ike_sa_t::update_hosts() to trigger events Tobias Brunner 2020-10-27 17:18:41 +0100
  • 51c7cf9a04 ike-sa: Add flags to force updating hosts/CHILD_SAs Tobias Brunner 2020-10-27 19:06:21 +0100
  • 08a3ee0cce bus: Change ike_update() signature and only call it once Tobias Brunner 2020-10-27 17:02:21 +0100
  • 5ef10ec326 testing: Add scenarios that use a CA with two intermediate CA certificates Tobias Brunner 2020-12-15 18:07:28 +0100
  • 16fcdb460a charon-tkm: Don't use starter/stroke with charon-tkm anymore Tobias Brunner 2020-11-24 17:33:13 +0100
  • b322539ef5 charon-tkm: Deinitialize IKE tkm-rpc client Tobias Brunner 2020-11-09 15:54:00 +0100
  • e637cf8b4a charon-tkm: Remove -gnat05 option not supported by newer compilers Tobias Brunner 2020-11-09 15:52:54 +0100
  • a0a0571bd1 charon-tkm: Reverse cert chain processing order Adrian-Ken Rueegsegger 2020-10-22 19:11:32 +0200
  • 532023dcf1 testing: Use latest TKM RPC library Adrian-Ken Rueegsegger 2020-10-21 17:35:12 +0200
  • eccca505aa testing: Use multi-CA aware TKM Adrian-Ken Rueegsegger 2020-09-25 18:36:34 +0200
  • d6cf4a165b testing: Add CA ID mappings to TKM tests Adrian-Ken Rueegsegger 2020-09-25 10:47:46 +0200
  • f8242127a2 charon-tkm: Add support for multiple CAs Adrian-Ken Rueegsegger 2020-09-23 18:59:23 +0200
  • 73d2a11aee charon-tkm: Register TKM cred encoder before init Adrian-Ken Rueegsegger 2020-09-28 17:39:18 +0200
  • 524751ae76 testing: Switch to https for codelabs recipes Adrian-Ken Rueegsegger 2020-09-25 18:36:25 +0200
  • fde5374a86 testing: Explicitly encode backing image format in metadata 5.9.2dr1 Tobias Brunner 2021-01-08 11:08:49 +0100
  • fcb595f961 Version bump to 5.9.2dr1 Andreas Steffen 2021-01-08 10:34:48 +0100
  • 2889133cc0 imc_attestation: Fixed double free of tpm_version_info chunk Andreas Steffen 2021-01-07 12:59:20 +0100
  • 08760dd927 tpm: Intel FW TPM always uses locality 0 Andreas Steffen 2020-12-31 16:00:59 +0100
  • 2ea1dac203 libimcv: Support symlinks introduced by usrmerge Andreas Steffen 2020-12-30 10:16:57 +0100
  • 9b4a2322d6 libimcv: Evaluate IMA SHA-256 measurements Andreas Steffen 2020-12-17 12:14:23 +0100
  • 839d6c8f80 github: Bump wolfSSL to 4.6.0 Tobias Brunner 2021-01-04 14:47:52 +0100
  • ea7945a4f5 wolfssl: Disable ECC curves based on minimum ECC key size Tobias Brunner 2021-01-04 15:24:54 +0100
  • 6e2e359f38 wolfssl: Correctly enable Brainpool curves Tobias Brunner 2021-01-04 15:58:59 +0100
  • f397fc02e9 configure: Fixed test for imv_swima Andreas Steffen 2020-12-24 13:08:49 +0100
  • 51f4837628 cirrus: Build against tpm2-tss on FreeBSD Tobias Brunner 2020-12-14 15:01:38 +0100
  • ec9f986b61 Ignore verbose parser generator output file more generally Tobias Brunner 2020-12-14 17:52:06 +0100
  • 192581e785 Replace two deprecated parser generator directives Tobias Brunner 2020-12-14 11:36:21 +0100
  • 8468b43891 github: Prevent duplicate CI runs Tobias Brunner 2020-12-11 16:30:04 +0100
  • de401e0e89 github: Migrate from Travis CI to Github Actions Tobias Brunner 2020-11-26 10:53:45 +0100
  • eb4cd8e3b1 imv-scanner: Fix potentially unsafe port filter attribute destruction Tobias Brunner 2020-12-03 12:14:35 +0100
  • 25ec2d04aa child-rekey: Don't migrate child-create task if we already are deleting Tobias Brunner 2020-12-01 12:12:25 +0100
  • 7d2d94f3e1 host-resolver: Don't wait for a reply if there are no threads Tobias Brunner 2020-11-20 15:02:30 +0100
  • 9248f636b0 kernel-netlink: Make sure we successfully opened a Netlink socket Tobias Brunner 2020-11-17 17:55:24 +0100
  • e8fae43768 identification: Validate ASN.1 DN in from_data() constructor Tobias Brunner 2020-11-02 15:09:13 +0100
  • 4c61d7aedc android: New release after avoiding marking VPN connections as metered Tobias Brunner 2020-12-02 16:06:48 +0100
  • b32a9be419 android: Don't default to marking VPN connections as metered Tobias Brunner 2020-12-01 15:54:35 +0100
  • b58740996f testing: Use build-strongswan to implement build-rootimage Tobias Brunner 2020-11-09 15:30:29 +0100
  • 88c94063d2 testing: Make building guest images after strongSwan optional Tobias Brunner 2020-11-09 16:15:20 +0100
  • 386e9a96a1 testing: Optionally build strongSwan from a release tarball Tobias Brunner 2020-11-09 15:18:50 +0100
  • a7d920059e testing: Optionally replace root image when building strongSwan Tobias Brunner 2020-11-09 14:55:46 +0100
  • c1dc7c4149 testing: Optionally use a new strongSwan build directory Tobias Brunner 2020-11-09 14:38:50 +0100
  • 543d09c4b4 testing: Add option to build all software recipes when building strongSwan Tobias Brunner 2020-10-29 17:55:38 +0100
  • edc55f0876 testing: Create root image if it does not exist yet when building strongSwan Tobias Brunner 2020-10-29 18:04:22 +0100
  • 29c59885ca Use Botan 2.17.1 for tests Tobias Brunner 2020-11-09 10:55:46 +0100
  • 1c2f5eea2c testing: Improve building different revisions of Git-recipes Tobias Brunner 2020-11-09 10:51:56 +0100
  • abb3f67bd1 pem: Make sure we actually parsed some data Tobias Brunner 2020-11-10 18:14:36 +0100
  • 38a7816034 appveyor: Also build on Windows Server 2019 Tobias Brunner 2020-11-12 12:06:32 +0100
  • ce433c9b29 kernel-wfp: Declare constants explicitly as extern Tobias Brunner 2020-11-13 11:44:21 +0100
  • 4fc6b79b93 libimcv: Avoid compiler warning in segmentation unit test Tobias Brunner 2020-11-12 19:12:11 +0100
  • eec08b41a8 windows: Don't declare [v]asprintf() Tobias Brunner 2020-11-12 14:20:04 +0100