denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,873 Commits 1 Branch 0 Tags
cc546c3ce6a12165f4e73bd19d2cf4c0c192547c
Commit Graph
6873 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen cc546c3ce6 Restrict IMCs and IMVs to call SendMessage() 2011-05-14 13:31:16 +02:00
Tobias Brunner 0e080d9b64 Don't compile login() in openssl_rsa_private_key_t if ENGINE support is disabled in OpenSSL. 2011-05-13 13:11:11 +02:00
Tobias Brunner 38a93a3cd9 fetcher.c added to Android.mk. 2011-05-13 13:09:38 +02:00
Andreas Steffen 8afbc768f3 added ikev2/rw-whitelist scenario 2011-05-12 21:11:01 +02:00
Martin Willi 6fd23444ea Disable whitelist plugin by default 2011-05-12 09:07:14 +02:00
Duncan Salerno 4b6ebf9995 Protect the communication with the SIM card during a transaction from access by a second application 2011-05-12 06:20:11 +02:00
Andreas Steffen e8a512f800 protection against insane IMCs and IMVs 2011-05-11 19:34:01 +02:00
Martin Willi 61e3819d04 Do not use deprecated vte_terminal_fork_command() 2011-05-11 12:12:02 +02:00
Tobias Brunner 38865eced3 Return correct status code in kernel_netlink_ipsec_t.query_sa. 2011-05-10 15:45:42 +02:00
Tobias Brunner 70f918ec1d chunk_clear not clear_chunk. 2011-05-10 15:40:46 +02:00
Thomas Egerer 59965aaf96 pluto: Securely wipe quick mode keys from memory. 
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
 2011-05-10 15:39:00 +02:00
Thomas Egerer 9e6bb93ab9 pluto: Securely wipe sensitive data from memory. 2011-05-10 15:19:46 +02:00
Andreas Steffen 261d5f22db terminate imc/imv that couldn't be initialized properly 2011-05-10 07:03:50 +02:00
Andreas Steffen bb6b2fbb81 lock the set_message_types() method for imvs 2011-05-09 16:46:08 +02:00
Andreas Steffen 375ac27609 cosmetics 2011-05-09 16:46:08 +02:00
Martin Willi f7812f6492 Wipe memory after using key material (incomplete, to be continued) 2011-05-09 14:36:15 +02:00
Martin Willi 7dc48bab1b Use memwipe() in chunk_clear() 2011-05-09 14:36:14 +02:00
Martin Willi ed678b52e2 Added a memwipe() function to safely overwrite sensitive memory 2011-05-09 14:36:14 +02:00
Andreas Steffen 52cab8874b fixed debug output 2011-05-09 00:49:59 +02:00
Andreas Steffen d6eec513f1 adapted state_machine for retry batches 2011-05-09 00:49:36 +02:00
Andreas Steffen 82b43847f5 version bump to 4.5.2rc2 2011-05-08 17:56:05 +02:00
Andreas Steffen ff30e06bf0 lock the set_message_types() method 2011-05-07 17:51:53 +02:00
Andreas Steffen 2c3464af46 added missing comma 2011-05-07 10:22:57 +02:00
Andreas Steffen 50a43c79a6 refactored tnccs->remove_connection() 2011-05-06 15:13:05 +02:00
Andreas Steffen 51f259a82d id of non-registered threads defaults to 0 2011-05-06 06:22:19 +02:00
Martin Willi e7643c92d3 Migrated scheduler_t to INIT/METHOD macros 2011-05-05 11:14:51 +02:00
Martin Willi cda46be72a Migrated callback_job to INIT/METHOD macros 2011-05-05 11:14:51 +02:00
Martin Willi 3316742969 Migrated processor to INIT/METHOD macros 2011-05-05 11:14:50 +02:00
Tobias Brunner 5832d5058b Typo in NEWS fixed. 2011-05-05 10:31:33 +02:00
Tobias Brunner bf3c371531 Note about certificates added to CA section in ipsec.conf man page. 2011-05-05 10:30:51 +02:00
Tobias Brunner a855af9544 testing: Properly align numbers of succeeded and failed tests in overview page. 2011-05-05 10:29:52 +02:00
Tobias Brunner e296fc2d26 testing: Add crumbtrail to overview page which lists all tests. 2011-05-05 10:29:52 +02:00
Tobias Brunner ca25eb9eb3 testing: Directly link to index.html of tests to allow browsing via file://. 2011-05-05 10:29:52 +02:00
Tobias Brunner e8ae55f64b testing: Avoid adding additional spacing around testresults. 2011-05-05 10:29:52 +02:00
Tobias Brunner 074919dcc5 testing: Replace back link in results with crumbtrail to improve navigation. 2011-05-05 10:29:51 +02:00
Martin Willi 92ebb7c5b2 Added NEWS about duplicheck and coupling plugins 2011-05-05 09:38:48 +02:00
Martin Willi e35727c14d Fix algorithm type for signers, fixes warning with gcc 4.5 2011-05-03 11:33:40 +02:00
Tobias Brunner b4c9ab9c79 Cache group name in sys_logger_t to avoid problems with Vstr. 
Because syslog(3) is not replaced when using the Vstr wrapper, %N can
not be resolved properly.
 2011-05-03 10:50:28 +02:00
Tobias Brunner b7cb8100c4 Migrated sys_logger_t to INIT/METHOD macros. 2011-05-03 10:21:58 +02:00
Tobias Brunner 5bbe0ee18c Migrated file_logger_t to INIT/METHOD macros. 2011-05-03 10:21:03 +02:00
Andreas Steffen b58e9783d7 version bump to 4.5.2rc1 2011-05-02 22:15:43 +02:00
Tobias Brunner 7b12521679 Removed superfluous parameter missed in e5e5bcc92f. 2011-05-02 17:13:14 +02:00
Martin Willi aca6434ba9 Fix a potential memleak if two threads fingerprint a credential simultaneously 2011-05-02 15:05:41 +02:00
Martin Willi 33bad71ce9 Accept name fields in EAP-MD5 messages 2011-05-02 09:57:58 +02:00
Andreas Steffen ca0341bf85 added missing tab 2011-04-28 13:30:40 +02:00
Andreas Steffen 083fe967e5 adapted debug output 2011-04-28 13:28:40 +02:00
Andreas Steffen 02472e3417 do not send messages of type TNC_VENDORID_ANY or subtye TNC_SUBTYPE_ANY 2011-04-28 13:28:40 +02:00
Tobias Brunner 68447302d6 Typo fixed. 2011-04-28 12:50:30 +02:00
Andreas Steffen 7d39f3e1b9 log unsupported IMC_IMV message types 2011-04-28 02:27:08 +02:00
Andreas Steffen e7f21e33b1 list registered TNCCS message types 2011-04-28 01:35:45 +02:00