tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	include: Update xfrm.h to Linux v4.3	Martin Willi	2016-09-30	1	-0/+22
\| \| \| \| \|	We strip the newly introduced <linux/in6.h> include, as this clashes with the <netinet/in6.h> include.
*	Merge branch 'fwd-out-policies-optional'	Tobias Brunner	2016-09-28	6	-44/+93
\|\ \| \| \| \| \| \| \| \| \| \|	This makes the FWD policies in the out direction optional (disabled by default). They may be enabled (e.g. if conflicting drop policies are used) via the policies_fwd_out swanctl.conf option.
\| *	child-sa: Only install outbound FWD policies if explicitly configured	Tobias Brunner	2016-09-28	1	-14/+27
\| \| \| \| \| \| \| \| \| \| \| \|	They are only required if drop policies would otherwise prevent forwarding traffic. This reduces the number of policies and avoids conflicts e.g. with SPD hash thresholds.
\| *	testing: Enable outbound FWD policies in swanctl/manual-prio scenario	Tobias Brunner	2016-09-28	1	-5/+6
\| \|
\| *	vici: Make installation of outbound FWD policies configurable	Tobias Brunner	2016-09-28	2	-25/+36
\| \|
\| *	child-cfg: Add setting that controls whether outbound FWD policies are installed	Tobias Brunner	2016-09-28	2	-0/+24
\|/
*	kernel-netlink: Update cached reqid when updating policies	Tobias Brunner	2016-09-28	1	-0/+2
\|
*	testing: Added swanctl/net2net-multicast scenario	Andreas Steffen	2016-09-27	9	-0/+166
\|
*	testing: Added ikev2/net2net-multicast scenario	Andreas Steffen	2016-09-27	9	-0/+125
\|
*	travis: Use a more recent OS X image	Tobias Brunner	2016-09-27	2	-2/+3
\| \| \| \|	Using the xcode8 image does not work currently (libcurl is not found).
*	Version bump to 5.5.1dr55.5.1dr5	Andreas Steffen	2016-09-22	3	-2/+5
\|
*	testing: Added swanctl/net2net-sha3-rsa-cert and swanctl/rw-eap-tls-sha3-rsa ↵	Andreas Steffen	2016-09-22	46	-0/+1139
\| \| \| \|	scenarios
*	gmp: Support of SHA-3 RSA signatures	Andreas Steffen	2016-09-22	24	-167/+274
\|
*	bliss sampler unit-test: Fixed enumeration type	Andreas Steffen	2016-09-22	1	-2/+2
\|
*	bliss: bliss_sampler expects XOF type	Andreas Steffen	2016-09-22	1	-4/+3
\|
*	unit-tests: MGF1 tests depend on an XOF implementation not just a hash function	Tobias Brunner	2016-09-21	1	-2/+2
\| \| \| \| \|	If the mgf1 plugin was not enabled (e.g. with the default configure options) the tests failed.
*	Version bump to 5.5.1dr45.5.1dr4	Andreas Steffen	2016-09-21	3	-4/+10
\|
*	mgf1: Refactored MGF1 as an XOF	Andreas Steffen	2016-09-21	60	-644/+966
\|
*	leak-detective: Fix compile warning due to unused variable if LD is disabled	Tobias Brunner	2016-09-20	1	-1/+1
\|
*	Merge branch 'testing-leak-detective'	Tobias Brunner	2016-09-20	16	-75/+179
\|\ \| \| \| \| \| \| \| \|	Test scenarios now fail if any leaks are detected by the leak detective. Several leaks found this way have been fixed.
\| *	leak-detective: Whitelist thread ID getter	Tobias Brunner	2016-09-20	1	-1/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	In case an external thread calls into our code and logs messages, a thread object is allocated that will never be released. Even if we try to clean up the object via thread value destructor there is no guarantee that the thread actually terminates before we check for leaks, which seems to be the case for the Ada Tasking threads.
\| *	charon-tkm: Build C code with debug information	Tobias Brunner	2016-09-20	1	-1/+2
\| \|
\| *	leak-detective: Whitelist functions of the Ada runtime related to Tasking	Tobias Brunner	2016-09-20	1	-0/+4
\| \|
\| *	charon-tkm: Free name of the PID file	Tobias Brunner	2016-09-20	1	-0/+1
\| \|
\| *	charon-tkm: Deinitialize tkm before libstrongswan	Tobias Brunner	2016-09-20	1	-1/+1
\| \| \| \| \| \| \| \|	In particular because of leak-detective.
\| *	leak-detective: Whitelist some glib/libsoup functions	Tobias Brunner	2016-09-20	1	-1/+13
\| \| \| \| \| \| \| \| \| \| \| \|	Some of these are pretty broad, so maybe an alternative option is to not use the soup plugin in the openssl-ikev2/rw-suite-b* scenarios. But the plugin is not tested anywhere else so lets go with this for now.
\| *	testing: Use curl instead of soup plugin in libipsec/rw-suite-b scenario	Tobias Brunner	2016-09-20	3	-3/+3
\| \| \| \| \| \| \| \| \| \|	The soup plugin is already used in the openssl-ikev2/rw-suite-b* scenarios.
\| *	eap-peap: Fix memory leaks when handling tunneled methods	Tobias Brunner	2016-09-20	1	-1/+3
\| \|
\| *	ipseckey: Properly free enumerated certificates	Tobias Brunner	2016-09-20	1	-12/+14
\| \|
\| *	ipseckey: Properly free public key after creating certificate	Tobias Brunner	2016-09-20	1	-1/+1
\| \|
\| *	dnscert: Properly free enumerated certificates	Tobias Brunner	2016-09-20	1	-8/+11
\| \|
\| *	unbound: Avoid unnecessary cloning of RR list that caused a memory leak	Tobias Brunner	2016-09-20	1	-2/+1
\| \|
\| *	unbound: Fix memory leak	Tobias Brunner	2016-09-20	1	-0/+2
\| \|
\| *	pool: Fix (known) memory leak when querying leases	Tobias Brunner	2016-09-20	1	-21/+38
\| \|
\| *	leak-detective: Whitelist leak in libldap	Tobias Brunner	2016-09-20	1	-0/+2
\| \|
\| *	testing: Fix totals if post test checks fail	Tobias Brunner	2016-09-20	1	-12/+12
\| \|
\| *	testing: Log leaks and fail tests if any are detected	Tobias Brunner	2016-09-20	3	-1/+32
\| \|
\| *	leak-detective: Optionally write report to a log file	Tobias Brunner	2016-09-20	1	-10/+36
\|/
*	vici: Fix indention of flush_certs() method in Python bindings	Tobias Brunner	2016-09-20	1	-1/+1
\|
*	travis: Run 32-bit Windows build on precise (12.04) image	Tobias Brunner	2016-09-20	2	-1/+5
\| \| \| \|	That's required due to a bug in MinGW 3.1.0 that's shipped with trusty.
*	travis: Properly pass back result of make	Tobias Brunner	2016-09-20	1	-1/+1
\| \| \| \|	Fixes: 4e8f5a189cce ("travis: Add apidoc check")
*	travis: Don't disable connmark and forecast plugins anymore	Tobias Brunner	2016-09-20	1	-5/+1
\| \| \| \|	They build fine on Ubuntu 14.04.
*	Merge branch 'maemo-bye-bye'	Tobias Brunner	2016-09-15	55	-3375/+1
\|\ \| \| \| \| \| \| \| \|	Removes the code and helper files related to the unused and unmaintained Maemo port.
\| *	packages: Remove obsolete Maemo packaging files	Tobias Brunner	2016-09-15	23	-764/+0
\| \|
\| *	maemo: Remove unused plugin	Tobias Brunner	2016-09-15	9	-761/+1
\| \|
\| *	maemo: Remove obsolete status/settings applet	Tobias Brunner	2016-09-15	23	-1850/+0
\|/
*	swanctl: Add man page entry for flush-certs command5.5.1dr3	Tobias Brunner	2016-09-15	1	-3/+4
\|
*	Version bump to 5.5.1dr3	Andreas Steffen	2016-09-15	2	-1/+16
\|
*	Merge branch 'flush-certs'	Andreas Steffen	2016-09-15	9	-1/+160
\|\
\| *	vici: flush-certs command flushes certificate cache	Andreas Steffen	2016-09-13	9	-1/+160
\|/ \| \| \| \| \| \| \| \| \|	When fresh CRLs are released with a high update frequency (e.g. every 24 hours) or OCSP is used then the certificate cache gets quickly filled with stale CRLs or OCSP responses. The new VICI flush-certs command allows to flush e.g. cached CRLs or OCSP responses only. Without the type argument all kind of certificates (e.g. also received end entity and intermediate CA certificates) are purged.