<feed xmlns='http://www.w3.org/2005/Atom'>
<title>tteras/strongswan/src/libcharon/encoding/payloads, branch master</title>
<subtitle>tteras' strongSwan tree
</subtitle>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/'/>
<entry>
<title>Fixed some typos, courtesy of codespell</title>
<updated>2017-11-15T09:21:13+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2017-11-15T09:21:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=527b3f0ca5a1cc17306ebb7a5c5f3375f3d812aa'/>
<id>527b3f0ca5a1cc17306ebb7a5c5f3375f3d812aa</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixed some typos, courtesy of codespell</title>
<updated>2017-08-07T15:22:01+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2017-08-07T15:22:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=ca280574baae12159973785b11b48de4b50ee39f'/>
<id>ca280574baae12159973785b11b48de4b50ee39f</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>ikev1: Determine transform ID before mapping integrity algorithm ID</title>
<updated>2017-07-05T08:08:20+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2017-05-30T16:23:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=5d580ae0639e3be6245a377abf642725721e1f41'/>
<id>5d580ae0639e3be6245a377abf642725721e1f41</id>
<content type='text'>
Due to the lookup based on the mapped algorithm ID the resulting AH
proposals were invalid.

Fixes #2347.

Fixes: 8456d6f5a8e9 ("ikev1: Don't require AH mapping for integrity algorithm when generating proposal")
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Due to the lookup based on the mapped algorithm ID the resulting AH
proposals were invalid.

Fixes #2347.

Fixes: 8456d6f5a8e9 ("ikev1: Don't require AH mapping for integrity algorithm when generating proposal")
</pre>
</div>
</content>
</entry>
<entry>
<title>Migrate all enumerators to venumerate() interface change</title>
<updated>2017-05-26T11:56:44+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2017-05-11T07:17:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=95a63bf2813cd6ecad912237688526bbcc3481ee'/>
<id>95a63bf2813cd6ecad912237688526bbcc3481ee</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>ikev1: Don't require AH mapping for integrity algorithm when generating proposal</title>
<updated>2016-08-25T11:34:36+00:00</updated>
<author>
<name>Thomas Egerer</name>
<email>thomas.egerer@secunet.com</email>
</author>
<published>2016-07-04T09:10:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=8456d6f5a8e94948075ad69852ec28d8f9774a49'/>
<id>8456d6f5a8e94948075ad69852ec28d8f9774a49</id>
<content type='text'>
Signed-off-by: Thomas Egerer &lt;thomas.egerer@secunet.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Thomas Egerer &lt;thomas.egerer@secunet.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>ikev1: Add support for extended sequence numbers</title>
<updated>2016-06-29T09:16:48+00:00</updated>
<author>
<name>Thomas Egerer</name>
<email>thomas.egerer@secunet.com</email>
</author>
<published>2016-06-20T16:19:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=40bb4677f7609476f52c36c6acc53ef334c7d3e8'/>
<id>40bb4677f7609476f52c36c6acc53ef334c7d3e8</id>
<content type='text'>
Signed-off-by: Thomas Egerer &lt;thomas.egerer@secunet.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Thomas Egerer &lt;thomas.egerer@secunet.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Use standard unsigned integer types</title>
<updated>2016-03-24T17:52:48+00:00</updated>
<author>
<name>Andreas Steffen</name>
<email>andreas.steffen@strongswan.org</email>
</author>
<published>2016-03-22T12:22:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=b12c53ce77beb8e04b044d0c0dc9249ddba72200'/>
<id>b12c53ce77beb8e04b044d0c0dc9249ddba72200</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>payloads: Verify P-CSCF configuration attributes like others carrying IP addresses</title>
<updated>2016-03-10T10:57:38+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2016-02-03T16:34:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=319b031a8a4b7d26fa55bc4fb6a473d192bf5b14'/>
<id>319b031a8a4b7d26fa55bc4fb6a473d192bf5b14</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>ikev1: Send and verify IPv6 addresses correctly</title>
<updated>2016-03-03T16:32:03+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2016-02-10T09:11:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=91d80298f9de5e7d792b7cb0a6c7a2c61784d744'/>
<id>91d80298f9de5e7d792b7cb0a6c7a2c61784d744</id>
<content type='text'>
According to the mode-config draft there is no prefix sent for
IPv6 addresses in IKEv1.  We still accept 17 bytes long addresses for
backwards compatibility with older strongSwan releases.

Fixes #1304.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
According to the mode-config draft there is no prefix sent for
IPv6 addresses in IKEv1.  We still accept 17 bytes long addresses for
backwards compatibility with older strongSwan releases.

Fixes #1304.
</pre>
</div>
</content>
</entry>
<entry>
<title>ikev1: Assume a default key length of 128-bit for AES-CBC</title>
<updated>2015-08-17T15:13:50+00:00</updated>
<author>
<name>Tobias Brunner</name>
<email>tobias@strongswan.org</email>
</author>
<published>2015-08-13T16:54:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/user/tteras/strongswan/commit/?id=636b2e9b2ae29012b82901e6e5d85a159c359478'/>
<id>636b2e9b2ae29012b82901e6e5d85a159c359478</id>
<content type='text'>
Some implementations don't send a Key Length attribute for AES-128.
This was allowed for IKE in early drafts of RFC 3602, however, some
implementations also seem to do it for ESP, where it never was allowed.
And the final version of RFC 3602 demands a Key Length attribute for both
phases so they shouldn't do it anymore anyway.

Fixes #1064.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Some implementations don't send a Key Length attribute for AES-128.
This was allowed for IKE in early drafts of RFC 3602, however, some
implementations also seem to do it for ESP, where it never was allowed.
And the final version of RFC 3602 demands a Key Length attribute for both
phases so they shouldn't do it anymore anyway.

Fixes #1064.
</pre>
</div>
</content>
</entry>
</feed>
