aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* unit-tests: Move ntru_test_rng_t to a utility class in libtestTobias Brunner2013-12-046-48/+37
|
* unit-tests: Fix apidoc for libtestTobias Brunner2013-12-042-8/+23
|
* ntru: Fix compiler warning caused by ++/-- on righthand side of an assignmentTobias Brunner2013-12-041-4/+4
| | | | The behavior of stuff like x = --x; (or x++) is not defined.
* testing: Fix status output in build-baseimage scriptReto Buerki2013-12-041-1/+1
|
* Remove check library from HACKING documentReto Buerki2013-12-041-1/+0
|
* charon-tkm: Abort if gprbuild binary is not foundReto Buerki2013-12-041-0/+3
|
* charon-tkm: Update integration testsReto Buerki2013-12-047-1/+49
|
* charon-tkm: Implement IANA DH Id to TKM Id mappingAdrian-Ken Rueegsegger2013-12-035-9/+134
| | | | | | | | | | | | | | | The TKM Diffie-Hellman plugin now maps IANA DH identifiers to TKM DH algorithm identifiers. The mapping is specified in the daemon's 'dh_mapping' section in the strongswan.conf file: dh_mapping { iana_id1 = tkm_id1 iana_id2 = tkm_id2 iana_id3 = tkm_id3 ... } Only the mapped IANA IDs are registered as supported DH groups.
* charon-tkm: Drop unnecessary includeAdrian-Ken Rueegsegger2013-12-031-1/+0
|
* Fixed formatting in strongswan.confAndreas Steffen2013-12-031-3/+7
|
* ike: Log SK_p consistently on level 4Tobias Brunner2013-11-281-1/+1
|
* Updated NEWS for 5.1.2dr15.1.2dr1Andreas Steffen2013-11-271-0/+11
|
* Added DRBG automatic reseeding testsAndreas Steffen2013-11-273-170/+220
|
* Use strongSwan hash plugins for SHA-1 and SHA-256Andreas Steffen2013-11-2720-2764/+178
|
* Extended NIST SP 800-90A HMAC_DRBG test casesAndreas Steffen2013-11-271-21/+103
|
* Cleaned up ntru-crypto libraryAndreas Steffen2013-11-2711-474/+8
|
* Implemented NIST SP 800-90A DRBG_HMAC with SHA-256Andreas Steffen2013-11-2716-1541/+697
|
* Added NTRU key exchange to default IKE proposalAndreas Steffen2013-11-271-0/+4
|
* unit-tests: Added ntru wrong ciphertext testAndreas Steffen2013-11-272-0/+37
|
* unit-tests: Added ntru entropy, retransmission and ciphertext testsAndreas Steffen2013-11-273-0/+69
|
* Any of the four NTRU parameter sets can be selectedAndreas Steffen2013-11-275-57/+140
|
* Make the NTRU parameter set configurableAndreas Steffen2013-11-273-40/+115
|
* unit-tests: first NTRU test caseAndreas Steffen2013-11-274-2/+95
|
* Added ikev2/net2net-ntru-cert and ikev2/rw-ntru-psk scenariosAndreas Steffen2013-11-2723-0/+284
|
* Prototype implementation of IKE key exchange via NTRU encryptionAndreas Steffen2013-11-2742-4/+9386
|
* Merge branch 'nm-psk'Tobias Brunner2013-11-275-87/+128
|\ | | | | | | This adds support for PSK authentication to the NetworkManager frontend.
| * nm: Require the PSK to be at least 20 characters longTobias Brunner2013-11-272-5/+14
| |
| * nm: German translation updatedTobias Brunner2013-11-271-76/+81
| |
| * nm: Handle PSK option in NM backendTobias Brunner2013-11-271-4/+12
| |
| * nm: Add PSK option to auth-dialogTobias Brunner2013-11-271-3/+10
| |
| * nm: Add pre-shared key option in GUITobias Brunner2013-11-271-2/+14
| |
| * nm: Make intltool recognize glade files properlyTobias Brunner2013-11-271-1/+1
|/
* configure: Remove obsolete --enable-unit-tests optionTobias Brunner2013-11-271-12/+0
|
* charon-tkm: Don't run tests automatically during 'make check'Tobias Brunner2013-11-271-5/+5
| | | | | Due to the external dependencies these tests are quite inconvenient. They can be run from the charon-tkm directory with 'make check-tkm'.
* charon-tkm: Add Binder switches to test project to enable exception backtracesReto Buerki2013-11-271-0/+4
|
* charon-tkm: Migrate tests to our own test runnerTobias Brunner2013-11-2712-129/+227
| | | | | | Due to problems with the external libraries tkm_init/deinit can't be called for each test case. Because of this leak detective has to be disabled for these tests.
* charon-tkm: Support for out-of-tree build addedTobias Brunner2013-11-272-12/+12
|
* chunk: Fix signedness warnings caused by chunk_from_* macrosTobias Brunner2013-11-271-3/+3
| | | | | | There are countless other such warnings because e.g. chunk_create() is called with char*, but at least we prevent users from causing such warnings inadvertently when using these macros.
* tun-device: Include <linux/types.h> before <linux/if_tun.h>Martin Willi2013-11-221-0/+1
| | | | Fixes a build error on CentOS 6.4.
* trap-manager: Reset IKE_SA on bus_t if initiating failsTobias Brunner2013-11-211-0/+1
|
* trap-manager: Prevent deadlock when installing trap policiesTobias Brunner2013-11-211-40/+46
| | | | | | | | | | | Because the write lock was held while calling add_policies() on child_sa_t, which finishes with a call to child_state_change() on bus_t, a deadlock would ensue if CHILD_SAs are concurrently being established, which also causes a call to child_state_change() that will require the read lock in trap_manager_t. No locks are now being held while creating the CHILD_SA and installing the trap policies.
* coverage: Report branch coverageTobias Brunner2013-11-211-3/+5
|
* printf-hook-builtin: Don't use %P to print uppercase hex pointersMartin Willi2013-11-201-6/+0
| | | | We use %P as custom printf specifier for proposals.
* testing: Config for Linux kernel 3.12Tobias Brunner2013-11-191-0/+2022
| | | | | | | | The most significant change is that CONFIG_ACPI_PROC_EVENT is now finally removed (after being deprecated for a long time). So to successfully shutdown the guests via ACPI the CONFIG_INPUT_EVDEV option is now enabled.
* openssl: Verify that a peer's ECDH public value is a point on the elliptic curveTobias Brunner2013-11-191-0/+5
| | | | | This check is mandated by RFC 6989. Since we don't reuse DH secrets, it is mostly a sanity check.
* kernel-netlink: Enable TFC padding only for tunnel mode ESP SAsTobias Brunner2013-11-191-2/+2
| | | | | | | The kernel does not allow them for transport mode SAs or IPComp SAs (and of course not for AH SAs). Fixes #446.
* Version bump to 5.1.2dr1Andreas Steffen2013-11-191-1/+1
|
* Implemented libstrongswan.plugins.random.strong_equals_true optionAndreas Steffen2013-11-164-0/+26
|
* android: New release based on 5.1.1Tobias Brunner2013-11-132-4/+5
| | | | | This fixes issues with IVs and padding in ESP handling and removes the Vstr dependency.
* android: Remove dependency on libvstrTobias Brunner2013-11-1320-46/+5
|