Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

main

Mono Color

• c58434aeff proposal: Add a compat alg for ChaCha20Poly1305 with explicit key length Martin Willi 2018-05-08 15:06:33 +02:00
• 10b8acb554 kernel-netlink: Change how routes are un-/installed Tobias Brunner 2018-04-19 18:15:24 +02:00
• 3f003e5e21 Merge branch 'cert-chain-fixes' Tobias Brunner 2018-05-22 09:52:08 +02:00
• 9746c308ff testing: Add ikev2/multi-level-ca-skipped scenario Tobias Brunner 2018-05-03 11:26:34 +02:00
• 0cf3549675 revocation: Fix memory leak if fetching CRL/OCSP fails Tobias Brunner 2018-05-03 11:38:07 +02:00
• cae43b890a revocation: Set defaults if CRL/OCSP checking is disabled in config Tobias Brunner 2018-05-03 11:19:18 +02:00
• b00d3adbd1 revocation: Also store validation results for intermediate CA certificates Tobias Brunner 2018-05-03 11:07:59 +02:00
• 13f76a241c revocation: Ignore CRLs that are not yet valid Tobias Brunner 2018-04-25 11:38:38 +02:00
• 9c6b102ee0 openssl: Fail CRL validity check if thisUpdate is in the future Tobias Brunner 2018-04-25 11:38:22 +02:00
• a0902d1ae0 x509: Fail CRL validity check if thisUpdate is in the future Tobias Brunner 2018-04-25 11:37:43 +02:00
• 6143f926ef ike: Reject certificates that are not compliant with RFC 4945 Tobias Brunner 2018-04-25 11:10:48 +02:00
• 504e12326d openssl: Set IKE compliance flag depending on keyUsage Tobias Brunner 2018-04-25 10:51:51 +02:00
• 920366e688 x509: Set IKE compliance flag depending on keyUsage Tobias Brunner 2018-04-25 10:50:03 +02:00
• 9fcf4fdda1 x509: Add flag that marks compliance with RFC 4945 Tobias Brunner 2018-04-25 10:48:21 +02:00
• 598096e7a2 Merge branch 'dhcp-fixes' Tobias Brunner 2018-05-22 09:44:51 +02:00
• 7b660944b6 dhcp: Only send client identifier if identity_lease is enabled Tobias Brunner 2018-04-11 10:51:01 +02:00
• 0e5b94d038 dhcp: Increase maximum size of client identification option Tobias Brunner 2018-04-10 18:45:16 +02:00
• 30e886fe3b dhcp: Increase buffer size for options in DHCP messages Tobias Brunner 2018-04-10 18:19:35 +02:00
• 13edecdc20 dhcp: Reduce receive buffer size on send socket Tobias Brunner 2018-04-10 18:14:32 +02:00
• becf027cd9 dhcp: Bind server port when a specific server address is specified Tobias Brunner 2018-04-10 17:04:10 +02:00
• e8b5c7b94e dhcp: Fix destination port check in packet filter Tobias Brunner 2018-03-16 09:59:25 +01:00
• 646a492538 dhcp: Fix typos in comments Matt Selsky 2018-04-12 00:17:49 -04:00
• 3594663166 eap-aka-3gpp: Add test vectors from 3GPP TS 35.207 14.0.0 Tobias Brunner 2018-04-23 18:46:30 +02:00
• 8dfc40fa20 appveyor: Also build on Windows Server 2016 Tobias Brunner 2018-03-29 18:22:40 +02:00
• 943f3929f4 pki: --verify command optionally takes directories for CAs and CRLs Tobias Brunner 2018-02-12 11:48:16 +01:00
• 667e74d60a bliss: Fix compilation with non-GNU C libraries Tobias Brunner 2018-04-17 14:19:19 +02:00
• b9fcc61991 Allow strongSwan to be spawned as non-root user Micah Morton 2018-04-17 13:29:03 -07:00
• 0d2e18a189 nm: Update NEWS Tobias Brunner 2018-05-07 12:10:35 +02:00
• 6e5c00b7c7 nm: Don't hardcode install path for .name file Tobias Brunner 2018-04-25 09:45:07 +02:00
• 9c4e4b5e8e nm: Don't rely on NetworkManager.pc for paths when building without libnm-glib Tobias Brunner 2018-04-25 09:33:27 +02:00
• 43a1839cbc libimcv: Added inactive field to device database table Andreas Steffen 2018-04-13 12:25:50 +02:00
• 234ec9225d sw-collector: Added --check option Andreas Steffen 2018-04-26 16:24:59 +02:00
• 8929c700ef ikev1: Ignore roam events for IKEv1 Tobias Brunner 2018-04-25 15:14:21 +02:00
• 4af1fd59dd thread: Properly clean up meta data of thread if pthread_create() fails Tobias Brunner 2018-04-17 11:37:35 +02:00
• 69ee158e2a Version bump to 5.6.3dr1 Andreas Steffen 2018-04-19 16:34:06 +02:00
• 51d5b35f51 testing: Fixed ikev2/alg-chacha20poly1305 scenario Andreas Steffen 2018-04-19 16:33:04 +02:00
• a747ad738c ike: Ignore rekeyed and deleted CHILD_SAs when reestablishing IKE_SAs Tobias Brunner 2018-04-10 11:48:26 +02:00
• a1620c16ec ike: Remove special handling for routed CHILD_SAs during reauth/reestablish Tobias Brunner 2018-04-10 11:43:40 +02:00
• 485952ff83 controller: Remove special handling for routed CHILD_SAs when terminating Tobias Brunner 2018-04-12 16:28:39 +02:00
• 5a7b0be294 proposal: Don't specify key length for ChaCha20/Poly1305 Tobias Brunner 2018-04-04 18:08:11 +02:00
• b2163409cc ikev2: Reuse marks and reqid of CHILD_SAs during MBB reauthentication Tobias Brunner 2018-04-04 09:28:28 +02:00
• 21553276a3 revocation: Make sure issuer of fetched CRL matches that of the certificate Tobias Brunner 2018-04-04 16:16:38 +02:00
• 85bfab621d ike: Float to port 4500 if either port is 500 Tobias Brunner 2018-03-29 11:23:15 +02:00
• ce0a770c74 Merge branch 'ikev1-down-reauth' Tobias Brunner 2018-04-12 15:19:49 +02:00
• 40ec7f998a _updown: Remove printf calls for identities Tobias Brunner 2018-03-12 10:20:42 +01:00
• eb82210620 ikev1: Trigger down events for CHILD_SAs if reauthentication failed due to retransmits Tobias Brunner 2018-03-01 18:02:08 +01:00
• ebc6defa05 ikev1: Reestablish SAs if reauthentication failed due to retransmits Tobias Brunner 2018-03-01 17:53:59 +01:00
• a36d8097ed traffic-selector: Always print protocol if either protocol or port is set Tobias Brunner 2018-04-11 12:15:55 +02:00
• 73382f516e Merge branch 'child-deleted' Tobias Brunner 2018-04-09 17:15:24 +02:00
• 3a3136ef33 bus: Don't trigger child_updown for deleted CHILD_SAs Tobias Brunner 2018-03-20 12:44:35 +01:00
• 16898026a5 child-sa: Add new state to track deleted but not yet destroyed CHILD_SAs Tobias Brunner 2018-03-20 12:43:13 +01:00
• e873544080 ikev1: Unify child_updown calls when having duplicate QMs Afschin Hormozdiary 2018-03-27 16:55:59 +02:00
• 55cce124bf libtpmtss: Properly initialize tabrmd tcti_context Andreas Steffen 2018-04-09 11:07:16 +02:00
• c8f45e4573 testing: Fix typo in sysctl.conf file Matt Selsky 2018-03-30 01:35:53 -04:00
• 826b4232d3 pkcs11: Use unused return value of C_GetMechanismList robinleander 2018-03-27 22:50:28 +02:00
• e811659323 kernel-pfkey: Add option to install routes via internal interface Tobias Brunner 2018-03-08 18:34:50 +01:00
• a4727a01a3 Merge branch 'hw-offload-auto' Tobias Brunner 2018-03-21 10:32:48 +01:00
• 8ced1570ab child-cfg: Make HW offload auto mode configurable Adi Nissim 2018-03-12 16:34:21 +02:00
• ee26f7156f kernel-netlink: Cleanup and fix some HW offload code issues Tobias Brunner 2018-03-16 19:34:43 +01:00
• 338cc5812e kernel-netlink: Add new automatic hw_offload mode Adi Nissim 2018-03-12 16:34:20 +02:00
• aad9bd3613 ipsec-types: Create new enum hw_offload_t Adi Nissim 2018-03-12 16:34:19 +02:00
• 3b29590b70 starter: Ignore an existing PID file if it references ourself Martin Willi 2018-03-12 07:26:06 +01:00
• 83187f3883 charon-tkm: Ignore an existing PID file if it references ourself Martin Willi 2018-03-12 07:25:49 +01:00
• 9655a3ffbc charon: Ignore an existing PID file if it references ourself Martin Willi 2018-03-12 07:16:52 +01:00
• a7005e435b diffie-hellman: Remove unused exponent length initialization in get_params() Tobias Brunner 2018-03-13 12:18:56 +01:00
• 8b6f615741 diffie-hellman: Don't set exponent length for DH groups with prime order subgroups Tobias Brunner 2018-03-13 12:13:47 +01:00
• ee019ab321 proposal: Make sure non-AEAD IKE proposals contain integrity algorithms Tobias Brunner 2018-03-08 18:26:19 +01:00
• 42a6b187f7 proposal: Compress arrays after removing transforms Tobias Brunner 2018-03-08 18:22:55 +01:00
• a48f3d8939 ikev2: Use correct type to check for selected signature scheme Tobias Brunner 2018-03-06 17:28:33 +01:00
• 70d99d67d6 vici: Make sure to read all requested data from socket in Perl binding Tobias Brunner 2018-03-07 10:31:11 +01:00
• d3b9db688a libimcv: Add Debian 8.10 to IMV database Tobias Brunner 2018-03-20 09:19:07 +01:00
• 0acd1ab4d0 stroke: Ensure a minimum message length Tobias Brunner 2018-03-13 18:54:08 +01:00
• 04ede658c8 libipsec: Fix ip_packet_create_from_data() version field in IPv6 header Matus Fabian 2018-03-19 02:19:45 -07:00
• dc2dfedda9 testing: Use HA patch compatible with 4.15.6+ Tobias Brunner 2018-03-08 10:07:33 +01:00
• 39e860ea34 testing: Use a HA patch that's actually compatible with 4.15 kernels Tobias Brunner 2018-03-07 17:16:54 +01:00
• 0f785f6be8 testing: Revert typo fix in FreeRADIUS patch Tobias Brunner 2018-03-07 16:38:18 +01:00
• 53827a5fde load-tester: Start numbering IDs from 1 again Tobias Brunner 2018-02-27 10:31:49 +01:00
• f71cccec6f Merge branch 'pbkdf2-sha2' Tobias Brunner 2018-03-07 15:24:56 +01:00
• 954f73ea6e charon-nm: Parse any type of private key not only RSA Tobias Brunner 2018-03-05 09:47:15 +01:00
• 5808467ed1 pkcs5: Parse PRF algorithms if given in PBKDF2-params as defined in RFC 8018 Tobias Brunner 2018-03-05 09:45:34 +01:00
• e5c5792ff8 prf: Add helper function to convert OIDs to algorithm identifiers Tobias Brunner 2018-03-05 09:43:07 +01:00
• ba16a95454 asn1: Add OIDs for HMAC-based PRFs as defined in RFC 8018 Tobias Brunner 2018-03-05 09:42:41 +01:00
• b53eb857bf Merge branch 'unknown-transform-types' Tobias Brunner 2018-03-07 14:25:48 +01:00
• 6b8749ab18 proposal: Compare algorithms of all transform types for equality Tobias Brunner 2018-02-23 09:59:38 +01:00
• 76c7c951e1 proposal: Make sure to consider all transform types when selecting proposals Tobias Brunner 2018-02-23 09:02:49 +01:00
• 5eb094df11 proposal: Print all algorithms even those with currently unknown transform types Tobias Brunner 2018-02-23 08:43:07 +01:00
• cc55461c8d proposal: Keep track of contained transform types Tobias Brunner 2018-02-23 08:36:33 +01:00
• ec1ebb2377 transform: Move internal identifiers out of private range Tobias Brunner 2018-02-23 08:12:48 +01:00
• 0d06cbd66e unit-tests: Ignore binaries of renamed test runners Tobias Brunner 2018-03-02 17:10:33 +01:00
• cdfa0ba4d1 libimcv: Fix typo in PTS hash algorithm mapping for 512-bit SHA-3 Tobias Brunner 2018-03-02 08:29:34 +01:00
• 2f5d6be5a0 kernel-netlink: Ignore local routes in any table Tobias Brunner 2018-02-26 15:07:15 +01:00
• 9189aec666 kernel-netlink: Ignore routes with next hop during local subnet enumeration Tobias Brunner 2018-02-22 09:50:52 +01:00
• d9400f44d8 kernel-netlink: Simplify rt_entry_t initialization Tobias Brunner 2018-02-22 09:49:57 +01:00
• 958a0545e5 nm: Version bump to 1.4.4 Tobias Brunner 2018-02-23 15:31:01 +01:00
• 07f6cfe910 nm: Update German translation Tobias Brunner 2018-02-23 15:26:00 +01:00
• 5bb197d880 nm: Fix tooltips for proposal text fields Tobias Brunner 2018-02-23 15:25:23 +01:00
• 479af1ed76 Merge branch 'incorrect-inval-ke' Tobias Brunner 2018-02-23 09:28:08 +01:00
• 574f74d232 child-rekey: Don't destroy IKE_SA if initiating CHILD_SA rekeying failed Tobias Brunner 2018-02-19 15:09:34 +01:00
• 4f1bf89ed9 child-create: Fail if we already retried with a requested DH group Tobias Brunner 2018-02-09 15:27:50 +01:00
• 7754c714c1 child-create: Make sure we actually propose the requested DH group Tobias Brunner 2018-02-09 15:16:24 +01:00