aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Use strongSwan hash plugins for SHA-1 and SHA-256Andreas Steffen2013-11-2720-2764/+178
|
* Extended NIST SP 800-90A HMAC_DRBG test casesAndreas Steffen2013-11-271-21/+103
|
* Cleaned up ntru-crypto libraryAndreas Steffen2013-11-2711-474/+8
|
* Implemented NIST SP 800-90A DRBG_HMAC with SHA-256Andreas Steffen2013-11-2716-1541/+697
|
* Added NTRU key exchange to default IKE proposalAndreas Steffen2013-11-271-0/+4
|
* unit-tests: Added ntru wrong ciphertext testAndreas Steffen2013-11-272-0/+37
|
* unit-tests: Added ntru entropy, retransmission and ciphertext testsAndreas Steffen2013-11-273-0/+69
|
* Any of the four NTRU parameter sets can be selectedAndreas Steffen2013-11-275-57/+140
|
* Make the NTRU parameter set configurableAndreas Steffen2013-11-273-40/+115
|
* unit-tests: first NTRU test caseAndreas Steffen2013-11-274-2/+95
|
* Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenariosAndreas Steffen2013-11-2723-0/+284
|
* Prototype implementation of IKE key exchange via NTRU encryptionAndreas Steffen2013-11-2742-4/+9386
|
* Merge branch 'nm-psk'Tobias Brunner2013-11-275-87/+128
|\ | | | | | | This adds support for PSK authentication to the NetworkManager frontend.
| * nm: Require the PSK to be at least 20 characters longTobias Brunner2013-11-272-5/+14
| |
| * nm: German translation updatedTobias Brunner2013-11-271-76/+81
| |
| * nm: Handle PSK option in NM backendTobias Brunner2013-11-271-4/+12
| |
| * nm: Add PSK option to auth-dialogTobias Brunner2013-11-271-3/+10
| |
| * nm: Add pre-shared key option in GUITobias Brunner2013-11-271-2/+14
| |
| * nm: Make intltool recognize glade files properlyTobias Brunner2013-11-271-1/+1
|/
* configure: Remove obsolete --enable-unit-tests optionTobias Brunner2013-11-271-12/+0
|
* charon-tkm: Don't run tests automatically during 'make check'Tobias Brunner2013-11-271-5/+5
| | | | | Due to the external dependencies these tests are quite inconvenient. They can be run from the charon-tkm directory with 'make check-tkm'.
* charon-tkm: Add Binder switches to test project to enable exception backtracesReto Buerki2013-11-271-0/+4
|
* charon-tkm: Migrate tests to our own test runnerTobias Brunner2013-11-2712-129/+227
| | | | | | Due to problems with the external libraries tkm_init/deinit can't be called for each test case. Because of this leak detective has to be disabled for these tests.
* charon-tkm: Support for out-of-tree build addedTobias Brunner2013-11-272-12/+12
|
* chunk: Fix signedness warnings caused by chunk_from_* macrosTobias Brunner2013-11-271-3/+3
| | | | | | There are countless other such warnings because e.g. chunk_create() is called with char*, but at least we prevent users from causing such warnings inadvertently when using these macros.
* tun-device: Include <linux/types.h> before <linux/if_tun.h>Martin Willi2013-11-221-0/+1
| | | | Fixes a build error on CentOS 6.4.
* trap-manager: Reset IKE_SA on bus_t if initiating failsTobias Brunner2013-11-211-0/+1
|
* trap-manager: Prevent deadlock when installing trap policiesTobias Brunner2013-11-211-40/+46
| | | | | | | | | | | Because the write lock was held while calling add_policies() on child_sa_t, which finishes with a call to child_state_change() on bus_t, a deadlock would ensue if CHILD_SAs are concurrently being established, which also causes a call to child_state_change() that will require the read lock in trap_manager_t. No locks are now being held while creating the CHILD_SA and installing the trap policies.
* coverage: Report branch coverageTobias Brunner2013-11-211-3/+5
|
* printf-hook-builtin: Don't use %P to print uppercase hex pointersMartin Willi2013-11-201-6/+0
| | | | We use %P as custom printf specifier for proposals.
* testing: Config for Linux kernel 3.12Tobias Brunner2013-11-191-0/+2022
| | | | | | | | The most significant change is that CONFIG_ACPI_PROC_EVENT is now finally removed (after being deprecated for a long time). So to successfully shutdown the guests via ACPI the CONFIG_INPUT_EVDEV option is now enabled.
* openssl: Verify that a peer's ECDH public value is a point on the elliptic curveTobias Brunner2013-11-191-0/+5
| | | | | This check is mandated by RFC 6989. Since we don't reuse DH secrets, it is mostly a sanity check.
* kernel-netlink: Enable TFC padding only for tunnel mode ESP SAsTobias Brunner2013-11-191-2/+2
| | | | | | | The kernel does not allow them for transport mode SAs or IPComp SAs (and of course not for AH SAs). Fixes #446.
* Version bump to 5.1.2dr1Andreas Steffen2013-11-191-1/+1
|
* Implemented libstrongswan.plugins.random.strong_equals_true optionAndreas Steffen2013-11-164-0/+26
|
* android: New release based on 5.1.1Tobias Brunner2013-11-132-4/+5
| | | | | This fixes issues with IVs and padding in ESP handling and removes the Vstr dependency.
* android: Remove dependency on libvstrTobias Brunner2013-11-1320-46/+5
|
* Merge branch 'unit-tests'Martin Willi2013-11-0640-355/+3383
|\ | | | | | | | | | | | | | | | | | | | | | | | | Replace the "check" based libstrongswan unit test framework with our own, giving us more flexibility for our specific needs. The new framework is more portable and uses complete libstrongswan init/deinit cycles for each test to properly catch leaks. It fully supports multi-threaded tests, and brings many of them for all threading primitives, watcher and streams. The --enable-unit-tests option is not required anymore for libstrongswan tests, but still is for the still "check" based charon-tkm tests.
| * unit-tests: Initialize tests with a callbackTobias Brunner2013-11-063-56/+58
| |
| * plugin-loader: Convenience function added to add plugin dirs in build treeTobias Brunner2013-11-062-0/+28
| |
| * unit-tests: Separate test runner to a library, reusable by other testsMartin Willi2013-11-065-68/+168
| | | | | | | | | | | | Other users may make use of the noinst libtest.la helper library to implement unit tests. For libstrongswan, tests.[ch] provide the configuration for test runner to perform unit tests in a simple manner.
| * unit-tests: Use some include magic to define test suite constructorsMartin Willi2013-11-062-73/+55
| | | | | | | | | | Avoid editing of several files when creating test suites by using a single header file to define test suite constructor functions.
| * unit-tests: Check printing of strings having zero lengthMartin Willi2013-11-061-0/+2
| |
| * unit-tests: Add some basic tests if PRI* printf specifiers work as expectedMartin Willi2013-11-061-0/+25
| |
| * unit-tests: Add a semaphore wait cancel testMartin Willi2013-11-061-0/+44
| |
| * unit-tests: Add a semaphore absolute timed wait testMartin Willi2013-11-061-0/+27
| |
| * unit-tests: Add a semaphore timed wait test caseMartin Willi2013-11-061-0/+24
| |
| * unit-tests: Add a simple semaphore testMartin Willi2013-11-061-0/+40
| |
| * unit-tests: Add a spinlock test caseMartin Willi2013-11-061-0/+49
| |
| * unit-tests: Add a rwlock condvar thread cancel testMartin Willi2013-11-061-0/+57
| |
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-04 01:03:41 +0000