aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* sw-collector: Query central collector databaseAndreas Steffen2017-07-089-42/+601
|
* libimcv: Moved REST API from imv_swid and imv_swima to libimcvAndreas Steffen2017-07-0810-241/+114
|
* swidtag: strongSwan swidtag file with double underscoresAndreas Steffen2017-07-084-12/+10
|
* sw-collector: Collects endpoint software eventsAndreas Steffen2017-07-0810-3/+1434
|
* imv-swima: Created SWIMA IMV pluginAndreas Steffen2017-07-0812-2/+1682
|
* imc-swima: Created SWIMA IMC pluginAndreas Steffen2017-07-0810-1/+711
|
* unit-tests: Added IETF SWIMA PA-TNC attribute testsAndreas Steffen2017-07-083-2/+1127
|
* libimcv: Implemented IETF SW PA-TNC attributesAndreas Steffen2017-07-0826-14/+3532
|
* libimcv: Fixed memory leakAndreas Steffen2017-07-081-0/+2
|
* libimcv: Corrected order of subscription flagsAndreas Steffen2017-07-082-4/+4
|
* libimcv: Added IETF Software PA-TNC attributesAndreas Steffen2017-07-084-13/+70
|
* libtncif: Added IETF Software PA-TNC message subtypeAndreas Steffen2017-07-082-6/+7
|
* libimcv: SWID tag generation and discoveryAndreas Steffen2017-07-0811-271/+40
|
* libimcv: Update database to ISO 19770-2:2015 SWID standardAndreas Steffen2017-07-086-155/+257
|
* testing: Fixed typo in openssl-ikev2/rw-suite-b-192 scenarioAndreas Steffen2017-07-081-1/+1
|
* testing: Support running multiple tests with * as wildcard (e.g. ikev2/ocsp-*)Tobias Brunner2017-07-071-6/+10
|
* x509: Correctly encode nonce in OCSP requestTobias Brunner2017-07-071-1/+2
| | | | | The nonce value is encoded as OCTET STRING, however, the extension values themselves must also be encoded as OCTET STRING.
* swanctl: Document eap_id in remote sectionsTobias Brunner2017-07-051-0/+6
|
* kernel-pfroute: Make sure there is a netmask when enumerating subnetsTobias Brunner2017-07-051-2/+2
|
* pki: Load pubkey plugin to print public keysTobias Brunner2017-07-051-1/+1
| | | | | | | | Since 3317d0e77b1a the public keys are printed via certificate printer, but that only works if the public key is actually wrapped, which requires the pubkey plugin. Fixes: 3317d0e77b1a ("Standardized printing of certificate information")
* pki: Fix typo in --print man pageTobias Brunner2017-07-051-3/+3
|
* sql: Use qualified names in SQL query statementsTobias Brunner2017-07-052-49/+54
| | | | | | | VIRTUAL is a new reserved keyword in MySQL 5.7.6 that caused some of these queries to fail. Fixes #2359.
* stroke: Don't load configs with invalid proposalsTobias Brunner2017-07-051-7/+20
| | | | References #2347.
* ikev1: Determine transform ID before mapping integrity algorithm IDTobias Brunner2017-07-051-1/+1
| | | | | | | | | Due to the lookup based on the mapped algorithm ID the resulting AH proposals were invalid. Fixes #2347. Fixes: 8456d6f5a8e9 ("ikev1: Don't require AH mapping for integrity algorithm when generating proposal")
* eap-aka-3gpp: Add plugin that implements 3GPP MILENAGE algorithm in softwareTobias Brunner2017-07-0516-2/+1395
| | | | | | | | | | This is similar to the eap-aka-3gpp2 plugin. K (optionally concatenated with OPc) may be configured as binary EAP secret in ipsec.secrets or swanctl.conf. Based on a patch by Thomas Strangert. Fixes #2326.
* utils: Make second argument to memxor() constTobias Brunner2017-07-052-2/+2
|
* android: New release after fixing issues with older Android versions and DB ↵Tobias Brunner2017-07-041-2/+2
| | | | upgrade
* android: Fix database update from older versionsTobias Brunner2017-07-041-50/+80
|
* android: Fix version string on older Android releasesTobias Brunner2017-07-041-2/+6
| | | | SECURITY_PATCH is apparently only available since Android 6.
* android: New release after fixing crash with existing profilesTobias Brunner2017-07-031-2/+2
|
* android: Fix null pointer dereference with existing profilesTobias Brunner2017-07-031-1/+1
|
* android: Only show disconnect button if actually connectedTobias Brunner2017-07-031-5/+11
|
* android: New release after adding lots of new stuffTobias Brunner2017-07-031-2/+2
|
* Merge branch '2309-android-disconnect-button'Tobias Brunner2017-07-0312-6/+104
|\ | | | | | | | | | | Adds a disconnect button to the permanent notification. Fixes #2309.
| * android: Close activity when dialog is canceled if it was not visible beforeTobias Brunner2017-07-031-8/+42
| | | | | | | | | | onPause/onResume() won't work because onPause() is called right before onNewIntent().
| * android: Allow disconnecting via MainActivity but display a confirmation dialogTobias Brunner2017-07-039-6/+65
| |
| * android: Add disconnect button to notificationTobias Brunner2017-07-034-0/+5
|/
* Merge branch 'android-certreq'Tobias Brunner2017-07-0314-6/+79
|\ | | | | | | | | This adds an option that allows disabling certificate requests during IKE_AUTH.
| * android: Make sending certificate requests configurable in the GUITobias Brunner2017-07-039-2/+43
| |
| * android: Import the flag to suppress certificate requestsTobias Brunner2017-07-031-0/+7
| |
| * android: Add flag to suppress sending certificate requestsTobias Brunner2017-07-033-1/+6
| |
| * android: Add property for simple flagsTobias Brunner2017-07-032-3/+23
|/
* Merge branch '2365-android-nat-keepalive'Tobias Brunner2017-07-0315-7/+79
|\ | | | | | | | | | | This makes the NAT-T keepalive interval configurable per connection. Fixes #2365.
| * android: Import NAT-T keepalive intervalTobias Brunner2017-07-031-0/+1
| |
| * android: Make NAT-T keepalive interval configurable in the GUITobias Brunner2017-07-0310-1/+49
| |
| * android: Use configured NAT-T keepalive intervalTobias Brunner2017-07-032-3/+6
| |
| * android: Add property for NAT-T keepalive intervalTobias Brunner2017-07-032-3/+23
|/
* Merge branch 'android-updates'Tobias Brunner2017-07-0354-120/+3444
|\ | | | | | | | | | | | | This adds support for configuring split-tunneling and per-app VPN, adds a simple HTTP/S fetcher and enables the revocation plugin, makes the log view more efficient, imports profiles via SAF and changes multiple other things.
| * android: Use arrays as primary config option for subnets in profile filesTobias Brunner2017-07-031-4/+22
| |
| * android: Change format of address ranges and print setsTobias Brunner2017-07-034-2/+24
| |