strongswan/src
Pascal Knecht 534a781646 tls-hkdf: Always use correct base key to derive finished message
The cached traffic secrets change once the application traffic secrets
are derived, but we must always use the correct base key to derive the
finished message, which are the handshake traffic secrets (RFC 8446,
section 4.4).
2021-02-12 14:35:23 +01:00
..
_copyright copyright: Make strings static const 2020-01-28 15:29:40 +01:00
_updown Fixed some typos, courtesy of codespell 2020-11-04 10:06:46 +01:00
aikgen aikgen: Fix computation of key ID of the AIK public key 2016-06-30 12:56:41 +02:00
charon Simplify handling of terminating signals in all libcharon wrappers 2020-09-30 12:47:39 +02:00
charon-cmd Simplify handling of terminating signals in all libcharon wrappers 2020-09-30 12:47:39 +02:00
charon-nm Revert "nm: Remove dummy TUN device" 2021-01-19 14:49:48 +01:00
charon-svc daemon: Use separate method to set default loggers 2017-01-25 14:58:09 +01:00
charon-systemd Add compile option to disable internal handling of fatal signals 2019-05-28 10:44:48 +02:00
charon-tkm charon-tkm: Don't use starter/stroke with charon-tkm anymore 2021-01-11 15:28:01 +01:00
checksum Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
conftest file-logger: Optionally log the level of each message 2020-10-27 10:42:39 +01:00
frontends android: Explicitly apply DNS servers to the TUN device 2021-02-04 16:52:15 +01:00
include Spelling fixes 2020-02-11 18:23:07 +01:00
ipsec Some whitespace fixes 2019-08-22 15:18:06 +02:00
libcharon tls-socket: Allow configuring both minimum and maximum TLS versions 2021-02-12 11:45:44 +01:00
libfast Spelling fixes 2020-02-11 18:23:07 +01:00
libimcv path: Also accept / as directory separator on Windows 2021-02-03 17:27:57 +01:00
libipsec libipsec: Enable code coverage 2020-09-09 13:25:30 +02:00
libpttls tls-socket: Allow configuring both minimum and maximum TLS versions 2021-02-12 11:45:44 +01:00
libradius Spelling fixes 2020-02-11 18:23:07 +01:00
libsimaka Spelling fixes 2020-02-11 18:23:07 +01:00
libstrongswan diffie-hellman: Add enum names that match proposal keywords 2021-02-12 14:35:23 +01:00
libtls tls-hkdf: Always use correct base key to derive finished message 2021-02-12 14:35:23 +01:00
libtnccs Spelling fixes 2020-02-11 18:23:07 +01:00
libtncif Spelling fixes 2020-02-11 18:23:07 +01:00
libtpmtss tpm: Intel FW TPM always uses locality 0 2021-01-08 11:00:15 +01:00
manager Some whitespace fixes 2019-08-22 15:18:06 +02:00
medsrv Some whitespace fixes 2019-08-22 15:18:06 +02:00
oval-updater tpm: Auto-detection of legacy TPM 2.0 devices 2020-10-07 16:54:32 +02:00
pki Spelling fixes 2020-02-11 18:23:07 +01:00
pool Spelling fixes 2020-02-11 18:23:07 +01:00
pt-tls-client wolfssl: Add wolfSSL plugin for cryptographic implementations 2019-04-24 11:40:14 +02:00
scepclient Spelling fixes 2020-02-11 18:23:07 +01:00
sec-updater Some whitespace fixes 2019-08-22 15:18:06 +02:00
starter Ignore verbose parser generator output file more generally 2020-12-15 10:42:43 +01:00
stroke Fix issue with $< automatic variable on FreeBSD 2019-08-27 18:12:28 +02:00
sw-collector Spelling fixes 2020-02-11 18:23:07 +01:00
swanctl swanctl: Don't print status message if nothing was loaded to stderr 2021-02-04 16:50:36 +01:00
tpm_extendpcr tpm_extendpcr: Extend digests into a TPM PCR 2017-12-13 07:10:28 +01:00
xfrmi xfrmi: Use helpers for nested Netlink attributes 2019-04-04 09:31:38 +02:00
Makefile.am xfrmi: Only build if libcharon is built 2020-05-07 09:19:27 +02:00