Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | appveyor: Run tests on AppVeyor Windows containers | Tobias Brunner | 2017-07-28 | 2 | -3/+30 |
| | | | | | We can't enable leak detective as it is so slow then that we run into a timeout (60 minutes). | ||||
* | peer-cfg: Use an rwlock instead of a mutex to safely access child-cfgs | Tobias Brunner | 2017-07-27 | 1 | -15/+15 |
| | | | | | | | | | | If multiple threads want to enumerate child-cfgs and potentially lock other locks (e.g. check out IKE_SAs) while doing so a deadlock could be caused (as was the case with VICI configs with start_action=start). It should also improve performance for roadwarrior connections and lots of clients connecting concurrently. Fixes #2374. | ||||
* | credential-manager: Log issuer identity if not found | Tobias Brunner | 2017-07-27 | 1 | -0/+2 |
| | |||||
* | auth-cfg: Don't limit subjectAltName check to received certificates | Tobias Brunner | 2017-07-27 | 1 | -1/+1 |
| | | | | Otherwise this won't work if the certificate is only locally available. | ||||
* | swanctl: Read default socket from swanctl.socket option | Tobias Brunner | 2017-07-27 | 2 | -1/+8 |
| | | | | | | | Also read from swanctl.plugins.vici.socket so we get libstrongswan.plugins.vici.socket if it is defined. Fixes #2372. | ||||
* | swanctl: Include config snippets from conf.d subdirectory | Tobias Brunner | 2017-07-27 | 2 | -0/+3 |
| | | | | Fixes #2371. | ||||
* | conf: Add support to generate include statements in .conf files | Tobias Brunner | 2017-07-27 | 1 | -7/+33 |
| | |||||
* | curl: Enable following redirects | Tobias Brunner | 2017-07-27 | 3 | -0/+13 |
| | | | | | | | The maximum number of redirects can be limited. The functionality can also be disabled. Fixes #2366. | ||||
* | ikev2: AES-CMAC-PRF-128 only uses the first 64 bits of each nonce | Tobias Brunner | 2017-07-27 | 1 | -2/+5 |
| | | | | References #2377. | ||||
* | error-notify: Don't stop sending notifies after removing a disconnected listener | Tobias Brunner | 2017-07-27 | 1 | -2/+1 |
| | | | | | | | This prevented new listeners from receiving notifies if they joined after another listener disconnected previously, and if they themselves disconnected their old connection would prevent them again from getting notifies. | ||||
* | farp: Only remove one tracked entry | Tobias Brunner | 2017-07-27 | 1 | -0/+1 |
| | | | | | | | | | Multiple CHILD_SAs sharing the same traffic selectors (e.g. during make-before-break reauthentication) also have the same reqid assigned. If all matching entries are removed we could end up without entry even though an SA exists that still uses these traffic selectors. Fixes #2373. | ||||
* | ike: Trigger CHILD_INSTALLED state change after corresponding log message | Tobias Brunner | 2017-07-27 | 2 | -10/+9 |
| | | | | | | | | This way we get the log message in stroke and swanctl as last message when establishing a connection. It's already like this for the IKE_SA where IKE_ESTABLISHED is set after the corresponding log message. Fixes #2364. | ||||
* | sw-collector: sw-collector.first_file setting retrieves creation date from ↵ | Andreas Steffen | 2017-07-26 | 2 | -2/+52 |
| | | | | file stats | ||||
* | swima-collector: Fix compile error if SWID_DIRECTORY is not defined | Tobias Brunner | 2017-07-24 | 1 | -1/+10 |
| | |||||
* | libimcv: Add missing files to Android.mk | Tobias Brunner | 2017-07-24 | 1 | -0/+11 |
| | |||||
* | Version bump to 5.6.0dr35.6.0dr3 | Andreas Steffen | 2017-07-18 | 2 | -2/+2 |
| | |||||
* | testing: Fixed the path of pt-tls-client | Andreas Steffen | 2017-07-18 | 3 | -5/+5 |
| | |||||
* | checksum: Compile sw-collector before checksum | Andreas Steffen | 2017-07-18 | 1 | -4/+4 |
| | |||||
* | checksum: Added pt-tls-client and sw-collector | Andreas Steffen | 2017-07-18 | 1 | -0/+8 |
| | |||||
* | sw-collector: Moved to its own directory and added man page | Andreas Steffen | 2017-07-18 | 18 | -22/+133 |
| | |||||
* | pt-tls-client: Added man page | Andreas Steffen | 2017-07-16 | 4 | -4/+140 |
| | |||||
* | Version bump to 5.6.0dr25.6.0dr2 | Andreas Steffen | 2017-07-13 | 3 | -2/+21 |
| | |||||
* | sw-collector: strip arch suffix from package names | Andreas Steffen | 2017-07-13 | 5 | -34/+22 |
| | |||||
* | sw-collector: Check for epoch-less Debian package versions | Andreas Steffen | 2017-07-12 | 12 | -314/+881 |
| | |||||
* | libtpmtss: Support of Intel TABRMD interface | Andreas Steffen | 2017-07-12 | 2 | -17/+93 |
| | |||||
* | Version bump to 5.6.0dr15.6.0dr1 | Andreas Steffen | 2017-07-08 | 2 | -2/+2 |
| | | | | | | | This major version includes the new SWIMA IMC/IMV pair which implements the "draft-ietf-sacm-nea-swima-patnc" Internet Draft. Full compliance to the ISO 19770-2:2015 SWID tag standard has been achieved. | ||||
* | Merge branch 'swima' | Andreas Steffen | 2017-07-08 | 113 | -629/+10005 |
|\ | |||||
| * | testing: Added tnc/tnccs-20-nea-pt-tls scenario | Andreas Steffen | 2017-07-08 | 29 | -0/+455 |
| | | |||||
| * | testing: Adaptation to ISO 19770-2:2015 SWID standard | Andreas Steffen | 2017-07-08 | 2 | -1/+3 |
| | | |||||
| * | pt-tls-client: Support for TPM keyids | Andreas Steffen | 2017-07-08 | 1 | -10/+27 |
| | | |||||
| * | imv-swima: Implemented SW event processing | Andreas Steffen | 2017-07-08 | 6 | -87/+164 |
| | | |||||
| * | sw-collector: Query central collector database | Andreas Steffen | 2017-07-08 | 9 | -42/+601 |
| | | |||||
| * | libimcv: Moved REST API from imv_swid and imv_swima to libimcv | Andreas Steffen | 2017-07-08 | 10 | -241/+114 |
| | | |||||
| * | swidtag: strongSwan swidtag file with double underscores | Andreas Steffen | 2017-07-08 | 4 | -12/+10 |
| | | |||||
| * | sw-collector: Collects endpoint software events | Andreas Steffen | 2017-07-08 | 10 | -3/+1434 |
| | | |||||
| * | imv-swima: Created SWIMA IMV plugin | Andreas Steffen | 2017-07-08 | 12 | -2/+1682 |
| | | |||||
| * | imc-swima: Created SWIMA IMC plugin | Andreas Steffen | 2017-07-08 | 10 | -1/+711 |
| | | |||||
| * | unit-tests: Added IETF SWIMA PA-TNC attribute tests | Andreas Steffen | 2017-07-08 | 3 | -2/+1127 |
| | | |||||
| * | libimcv: Implemented IETF SW PA-TNC attributes | Andreas Steffen | 2017-07-08 | 26 | -14/+3532 |
| | | |||||
| * | libimcv: Fixed memory leak | Andreas Steffen | 2017-07-08 | 1 | -0/+2 |
| | | |||||
| * | libimcv: Corrected order of subscription flags | Andreas Steffen | 2017-07-08 | 2 | -4/+4 |
| | | |||||
| * | libimcv: Added IETF Software PA-TNC attributes | Andreas Steffen | 2017-07-08 | 4 | -13/+70 |
| | | |||||
| * | libtncif: Added IETF Software PA-TNC message subtype | Andreas Steffen | 2017-07-08 | 2 | -6/+7 |
| | | |||||
| * | libimcv: SWID tag generation and discovery | Andreas Steffen | 2017-07-08 | 11 | -271/+40 |
| | | |||||
| * | libimcv: Update database to ISO 19770-2:2015 SWID standard | Andreas Steffen | 2017-07-08 | 6 | -155/+257 |
|/ | |||||
* | testing: Fixed typo in openssl-ikev2/rw-suite-b-192 scenario | Andreas Steffen | 2017-07-08 | 1 | -1/+1 |
| | |||||
* | testing: Support running multiple tests with * as wildcard (e.g. ikev2/ocsp-*) | Tobias Brunner | 2017-07-07 | 1 | -6/+10 |
| | |||||
* | x509: Correctly encode nonce in OCSP request | Tobias Brunner | 2017-07-07 | 1 | -1/+2 |
| | | | | | The nonce value is encoded as OCTET STRING, however, the extension values themselves must also be encoded as OCTET STRING. | ||||
* | swanctl: Document eap_id in remote sections | Tobias Brunner | 2017-07-05 | 1 | -0/+6 |
| | |||||
* | kernel-pfroute: Make sure there is a netmask when enumerating subnets | Tobias Brunner | 2017-07-05 | 1 | -2/+2 |
| |