Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | x509: Fix some whitespaces and do some minor style cleanups in acert | Martin Willi | 2014-03-31 | 1 | -72/+76 | |
| | | ||||||
| * | ac: Remove unimplemented equals_holder() method from ac_t | Martin Willi | 2014-03-31 | 1 | -8/+0 | |
|/ | ||||||
* | Added libipsec/net2net-3des scenario | Andreas Steffen | 2014-03-28 | 11 | -0/+1521 | |
| | ||||||
* | Renewed self-signed OCSP signer certificate | Andreas Steffen | 2014-03-27 | 4 | -43/+45 | |
| | ||||||
* | unit-tests: Fix filtered enumerator tests on 64-bit big-endian platforms | Tobias Brunner | 2014-03-27 | 1 | -12/+12 | |
| | | | | | In case of sizeof(void*) == 8 and sizeof(int) == 4 on big-endian hosts the tests failed as the actual integer value got cut off. | |||||
* | travis: Run the "all" test case with leak detective enabled | Tobias Brunner | 2014-03-27 | 2 | -0/+7 | |
| | | | | | | | | But disable the gcrypt plugin, as it causes leaks. Also disable the backtraces by libunwind as they seem to cause threads to get cleaned up after the leak detective already has been disabled, which leads to invalid free()s. | |||||
* | unit-tests: Fix memory leak in ntru tests | Tobias Brunner | 2014-03-27 | 1 | -3/+5 | |
| | ||||||
* | Version bump to 5.1.3rc1 | Andreas Steffen | 2014-03-26 | 1 | -1/+1 | |
| | ||||||
* | Check that valid OCSP responses are received in the ikev2/ocsp-multi-level ↵ | Andreas Steffen | 2014-03-24 | 1 | -0/+4 | |
| | | | | scenario | |||||
* | Updated expired certificates issued by the Research and Sales Intermediate CAs | Andreas Steffen | 2014-03-24 | 21 | -185/+295 | |
| | ||||||
* | Renewed revoked Research CA certificate5.1.3dr1 | Andreas Steffen | 2014-03-22 | 6 | -11/+37 | |
| | ||||||
* | unit-test: added missing TEST_FUNCTION macros | Andreas Steffen | 2014-03-22 | 1 | -8/+16 | |
| | ||||||
* | Added openssl-ikev2/net2net-pgp-v3 scenario | Andreas Steffen | 2014-03-22 | 17 | -0/+208 | |
| | ||||||
* | openssl: Add default fallback when calculating fingerprints of RSA keys | Tobias Brunner | 2014-03-22 | 1 | -1/+15 | |
| | | | | | | We still try to calculate these directly as it can avoid a dependency on the pkcs1 or other plugins. But for e.g. PGPv3 keys we need to delegate the actual fingerprint calculation to the pgp plugin. | |||||
* | Completed integration of ntru_crypto library into ntru plugin | Andreas Steffen | 2014-03-22 | 30 | -1711/+1355 | |
| | ||||||
* | Merge branch 'travis-ci' | Tobias Brunner | 2014-03-20 | 12 | -216/+492 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | Adds a config file and build script for Travis CI. Makes the unit tests buildable with Clang, and test vectors are now actually verified when the unit tests are executed. Also adds options to run only selected test suites and to increase the debug level during unit tests. The --enable/disable configure options have been reordered and grouped, and an option to enable all the features has been added (plus an option to select a specific printf-hook implementation). | |||||
| * | travis: Use parallel build | Tobias Brunner | 2014-03-20 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | Not sure if 4 jobs is optimal, but according to the docs each build host has 1.5 virtual cores available (although "getconf _NPROCESSORS_ONLN" returns 32, which is probably the number of real cores underneath), so more jobs might not actually reduce the build time much more. | |||||
| * | crypto-tester: Don't fail if key size is not supported | Tobias Brunner | 2014-03-20 | 1 | -6/+3 | |
| | | | | | | | | | | | | | | | | The Blowfish and Twofish implementations provided by the gcrypt plugin only support specific key lengths, which we don't know when testing against vectors (either during unit tests or during algorithm registration). The on_create test with a specific key length will be skipped anyway, so there is no point in treating this failure differently. | |||||
| * | unit-tests: Add an option to increase the verbosity when running tests | Tobias Brunner | 2014-03-20 | 1 | -1/+9 | |
| | | | | | | | | | | The TESTS_VERBOSITY option takes an integer from -1 to 4 that sets the default debug level. | |||||
| * | unit-tests: Add an option to run only a subset of all test suites | Tobias Brunner | 2014-03-20 | 1 | -8/+54 | |
| | | | | | | | | | | The TESTS_SUITES environment variable can contain a comma separated list of names of test suites to run. | |||||
| * | unit-tests: Actually verify registered algorithms against test vectors | Tobias Brunner | 2014-03-20 | 2 | -5/+47 | |
| | | | | | | | | | | | | | | | | Previously, the {ns}.crypto_test.on_add option had to be enabled to actually test the algorithms, which we can't enforce for the tests in the test_runner as the option is already read when the crypto factory is initialized. Even so, we wouldn't want to do this for every unit test, which would be the result of enabling that option. | |||||
| * | travis: Add tests for builtin printf hook implementation | Tobias Brunner | 2014-03-20 | 2 | -2/+8 | |
| | | | | | | | | | | We can't test Vstr as it does not properly handle negative int arguments for custom format callbacks, so some of the enum tests would fail. | |||||
| * | configure: Add an option to select a specific printf hook implementation | Tobias Brunner | 2014-03-20 | 1 | -20/+35 | |
| | | ||||||
| * | travis: Install dependencies for each test dynamically | Tobias Brunner | 2014-03-20 | 2 | -9/+14 | |
| | | | | | | | | | | Since the installation of all packages alone takes several minutes this should speed up some test cases. | |||||
| * | travis: Enable clang build | Tobias Brunner | 2014-03-20 | 1 | -1/+6 | |
| | | | | | | | | But build the distribution only once. | |||||
| * | unit-tests: Use TEST_FUNCTION macro in ntru tests | Tobias Brunner | 2014-03-20 | 1 | -34/+44 | |
| | | ||||||
| * | unit-tests: Implement registered functions without __builtin_apply() | Tobias Brunner | 2014-03-20 | 1 | -17/+17 | |
| | | | | | | | | | | This makes the tests work with clang, which does not implement said builtin. | |||||
| * | unit-tests: Call functions with TEST_ prefix in ntru test | Tobias Brunner | 2014-03-20 | 1 | -36/+38 | |
| | | ||||||
| * | unit-tests: Prefix imported testable functions with TEST_ | Tobias Brunner | 2014-03-20 | 1 | -3/+3 | |
| | | | | | | | | This avoids any clashes with existing functions in the monolithic build. | |||||
| * | unit-tests: Change how hashtable for testable functions is created | Tobias Brunner | 2014-03-20 | 3 | -28/+49 | |
| | | | | | | | | | | | | | | | | Because GCC does not adhere to the priorities defined for constructors when building with --enable-monolithic (not sure if it was just luck that it worked in non-monolithic mode - anyway, it's not very portable) function registration would fail because the hashtable would not be created yet. | |||||
| * | Add Travis CI config and build script | Tobias Brunner | 2014-03-20 | 2 | -0/+87 | |
| | | ||||||
| * | configure: Add an option to enable all optional features/plugins | Tobias Brunner | 2014-03-20 | 2 | -2/+17 | |
| | | | | | | | | This has probably no real practical use, but it simplifies testing. | |||||
| * | configure: Reorder and group feature options | Tobias Brunner | 2014-03-20 | 1 | -93/+106 | |
| | | ||||||
| * | unit-tests: Generate weak keys with gcrypt plugin (but quickly) | Tobias Brunner | 2014-03-20 | 1 | -0/+3 | |
| | | ||||||
| * | tnc-pdp: Fix monolithic build | Tobias Brunner | 2014-03-20 | 1 | -1/+2 | |
|/ | ||||||
* | plugin-feature: Hash only the actually used feature argument | Tobias Brunner | 2014-03-20 | 1 | -1/+31 | |
| | | | | | | | | Clang does not initialize padding in union members so hashing the complete "arg" union could lead to different hashes if the hashed plugin_feature_t does not have static storage duration. Fixes #549. | |||||
* | Added TPMRA workitem support for [dummy] Trusted Boot measurements | Andreas Steffen | 2014-03-19 | 1 | -0/+16 | |
| | ||||||
* | pki: When dispatching commands, don't look beyond non-null-terminated array | Martin Willi | 2014-03-19 | 1 | -1/+1 | |
| | ||||||
* | pki: Check length of commands array before accessing command in --help | Martin Willi | 2014-03-19 | 1 | -1/+1 | |
| | | | | | | | As --help is counted as command as well, the array is not null-terminated and we have to check for MAX_COMMANDS. Fixes #550. | |||||
* | charon-nm: No additional secrets are required once a password has been entered | Tobias Brunner | 2014-03-18 | 1 | -0/+4 | |
| | | | | | | | Recent versions of NM will call need_secrets() as long as it returns TRUE, but then fail as the number of calls is limited by an assert. Fixes #547. | |||||
* | array: Fix removal of elements in the second half of an array | Tobias Brunner | 2014-03-18 | 1 | -1/+1 | |
| | | | | | | | Memory beyond the end of the array was moved when array elements in the second half of an array were removed. Fixes #548. | |||||
* | plugin-loader: Properly initialize modular plugin list if no plugins are enabled | Tobias Brunner | 2014-03-18 | 1 | -0/+1 | |
| | ||||||
* | Implemented ntru_private_key class | Andreas Steffen | 2014-03-18 | 15 | -1381/+1429 | |
| | ||||||
* | 11 bits are needed to encode a maximum index of 1086 | Andreas Steffen | 2014-03-15 | 1 | -1/+1 | |
| | ||||||
* | Merged libstrongswan options into charon section | Andreas Steffen | 2014-03-15 | 98 | -240/+41 | |
| | ||||||
* | strongswan.conf is not needed on RADIUS server alice | Andreas Steffen | 2014-03-15 | 2 | -0/+2 | |
| | ||||||
* | tnc-ifmap: Get a reference to the client cert as it is also used in an auth ↵ | Tobias Brunner | 2014-03-10 | 1 | -1/+1 | |
| | | | | config | |||||
* | Version bump to 5.1.3dr1 | Andreas Steffen | 2014-03-07 | 1 | -1/+1 | |
| | ||||||
* | Disable mandatory ECP support for attestion | Andreas Steffen | 2014-03-07 | 24 | -9/+347 | |
| | ||||||
* | Refactored NTRU parameter set selection | Andreas Steffen | 2014-03-07 | 3 | -40/+47 | |
| |