Tobias Brunner 00830ddc36 ikev2: Make sure to correctly compare nonces of unequal length ...

The previous code would not correctly compare nonces of unequal length
where the shorter is the prefix of the longer one.

2026-07-24 08:47:39 +02:00

..

_updown

…

aikgen

…

cert-enroll

cert-enroll: Support three generations of CA certificates

2024-11-26 08:15:09 +01:00

charon

charon: Avoid potential TOCTOU issues when accessing/writing PID file

2026-07-24 08:47:35 +02:00

charon-cmd

charon-cmd: Make local host configurable

2026-06-01 09:03:02 +02:00

charon-nm

nm: Fix double-free of IKE config in error cases and some leaks and potential NULL dereferences

2026-07-24 08:47:38 +02:00

charon-svc

charon-svc: Add missing closing parenthesis in version output

2023-06-19 14:55:48 +02:00

charon-systemd

charon-systemd: Add a log message when the daemon is starting

2023-04-27 13:52:34 +02:00

charon-tkm

charon-tkm: Fix potential use-after-free in chunk map

2026-07-24 08:47:38 +02:00

checksum

newhope: Remove legacy Newhope key exchange method

2024-11-22 14:05:36 +01:00

conftest

peer-cfg: Use flags for boolean options

2025-04-10 08:31:09 +02:00

frontends

android: Fix reading split-tunneling block settings in managed configs

2026-07-24 08:47:38 +02:00

include

include: Add XFRM mode and attributes for IP-TFS

2025-05-28 16:37:46 +02:00

ipsec

ipsec: Remove mention of NETKEY stack

2023-12-14 11:27:25 +01:00

libcharon

ikev2: Make sure to correctly compare nonces of unequal length

2026-07-24 08:47:39 +02:00

libfast

libfast: Fix incompatible function types warning

2022-07-18 12:42:24 +02:00

libimcv

pts: Fix potential crash when resolving symlinks

2026-07-24 08:47:37 +02:00

libipsec

ip-packet: Properly skip IPv6 fragment headers

2026-07-24 08:47:36 +02:00

libpttls

pt-tls-client: Don't store PT-TLS message on stack

2026-07-24 08:47:38 +02:00

libradius

radius-socket: Fix timeout handling when waiting for responses

2026-07-23 10:26:08 +02:00

libsimaka

simaka-message: Prevent buffer overflow when generating messages

2026-07-24 08:47:38 +02:00

libstrongswan

chunk: Add utility that compares the prefix of two chunks

2026-07-24 08:47:39 +02:00

libtls

tls-eap: Only process ACKs on the server after processing an actual packet

2026-07-24 08:47:37 +02:00

libtnccs

tnccs-dynamic: Add missing checks for underlying TNCCS instance

2026-07-24 08:47:37 +02:00

libtncif

…

libtpmtss

oid: Fix confusing identifiers for elliptic curves over prime fields

2026-05-28 13:30:07 +02:00

manager

…

medsrv

medsrv: Add missing return to avoid infinite loop while verifying username

2026-07-21 10:37:43 +02:00

pki

pki: Make sure options array passed to getopt_long() ends with a NULL entry

2026-05-19 17:27:33 +02:00

pool

…

pt-tls-client

…

sec-updater

sec-updater: Use process_t to avoid potential command injection

2026-07-24 08:47:37 +02:00

starter

Don't reference 5.9 in URLs to docs.strongswan.org

2025-03-11 10:26:31 +01:00

stroke

…

sw-collector

sw-collector: Fix build with DEBUG_LEVEL < 1

2025-01-13 15:33:33 +01:00

swanctl

swanctl: Add option to only list a specific connection with --list-conns

2026-05-28 16:54:06 +02:00

tpm_extendpcr

…

xfrmi

kernel-netlink: Add manager for XFRM interfaces

2023-02-22 13:37:45 +01:00

Makefile.am

cert-enroll: certificate checking and enrollment

2023-10-03 08:45:22 +02:00