aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* The pacman tool got replaced by the sec-updater toolTobias Brunner2017-11-155-11/+2
|
* sec-updater: Fix typo in documentationTobias Brunner2017-11-151-1/+1
|
* Fixed some typos, courtesy of codespellTobias Brunner2017-11-1515-19/+19
|
* swanctl: Add check for conflicting short optionsTobias Brunner2017-11-131-0/+9
|
* swanctl: Properly register --counters commmandTobias Brunner2017-11-131-1/+1
| | | | Use C instead of c, which is already used for --load-conns.
* testing: Do not remove all swanctl subdirectoriesAndreas Steffen2017-11-111-3/+3
|
* Version bump to 5.6.1rc15.6.1rc1Andreas Steffen2017-11-113-2/+2615
|
* Merge branch 'swanctl-testing'Andreas Steffen2017-11-11889-4915/+6964
|\
| * libimcv: Updated imv databaseAndreas Steffen2017-11-111-4/+88
| |
| * testing: Converterd tnc to systemdAndreas Steffen2017-11-11124-558/+338
| |
| * testing: Converted sql to systemdAndreas Steffen2017-11-1185-101/+542
| |
| * testing: Converted swanctl to systemdAndreas Steffen2017-11-11181-849/+1170
| |
| * testing: Added legacy ipv6-stroke scenariosAndreas Steffen2017-11-11172-0/+2418
| |
| * testing: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctlAndreas Steffen2017-11-1014-96/+158
| |
| * testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctlAndreas Steffen2017-11-1014-96/+158
| |
| * testing: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctlAndreas Steffen2017-11-1011-66/+113
| |
| * testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctlAndreas Steffen2017-11-1011-63/+112
| |
| * testing: Converted ipv6/rw-rfc3779-ikev2 to swanctlAndreas Steffen2017-11-1022-103/+161
| |
| * testing: Converted ipv6/rw-compress-ikev2 to swanctlAndreas Steffen2017-11-1010-64/+109
| |
| * testing: Converted ipv6/rw-psk-ikev2 to swanctlAndreas Steffen2017-11-1017-96/+174
| |
| * testing: Converted ipv6/rw-psk-ikev1 to swanctlAndreas Steffen2017-11-1017-96/+175
| |
| * testing: Converted ipv6/rw-ikev2 to swanctlAndreas Steffen2017-11-1014-104/+163
| |
| * testing: Converted ipv6/rw-ikev1 to swanctlAndreas Steffen2017-11-1014-107/+160
| |
| * testing: Converted ipv6/net2net-rfc3779-ikev2 to swanctlAndreas Steffen2017-11-1017-88/+128
| |
| * testing: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctlAndreas Steffen2017-11-1010-78/+117
| |
| * testing: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctlAndreas Steffen2017-11-1010-78/+113
| |
| * testing: Converted ipv6/transport-ikev2 to swanctlAndreas Steffen2017-11-1011-76/+116
| |
| * testing: Converted ipv6/transport-ikev1 to swanctlAndreas Steffen2017-11-1011-75/+112
| |
| * testing: Converted ipv6/net2net-ikev2 to swanctlAndreas Steffen2017-11-1011-84/+119
| |
| * testing: Converted ipv6/net2net-ikev1 to swanctlAndreas Steffen2017-11-1011-82/+118
| |
| * testing: Converted ipv6/host2host-ikev2 to swanctlAndreas Steffen2017-11-1011-83/+115
| |
| * testing: Converted ipv6/host2host-ikev1 to swanctlAndreas Steffen2017-11-1011-86/+111
| |
| * testing: Removed libipsec/rw-suite-bAndreas Steffen2017-11-1028-2260/+0
| |
| * testing: Converted libipsec/net2net-null to swanctlAndreas Steffen2017-11-1010-67/+102
| |
| * testing: Converted libipsec/net2net-cert-ipv6 to swanctlAndreas Steffen2017-11-1010-59/+102
| |
| * testing: Converted libipsec/net2net-cert to swanctlAndreas Steffen2017-11-1010-59/+102
| |
| * testing: Converted libipsec/net2net-3des to swanctlAndreas Steffen2017-11-1010-67/+102
| |
| * testing: Converted libipsec/host2host-cert to swanctlAndreas Steffen2017-11-1010-51/+94
| |
| * testing: Converted gcrypt-ikev2 to swanctlAndreas Steffen2017-11-1025-158/+243
| |
| * testing: Converted gcrypt-ikev1 to systemdAndreas Steffen2017-11-108-31/+63
| |
| * testing: Converted af-alg to systemdAndreas Steffen2017-11-109-35/+72
| |
| * testing: Enable systemdAndreas Steffen2017-11-103-3/+4
| |
| * testing: Updated some descriptionsAndreas Steffen2017-11-103-9/+9
|/
* libtpmtss: Added missing argument in hasher_from_signature_scheme()Andreas Steffen2017-11-101-1/+1
|
* charon-tkm: Unlink PID file after deinitTobias Brunner2017-11-101-11/+31
| | | | | | Same change as for charon in the previous commit. References #2460.
* charon: Unlink PID file after daemon deinit (i.e. after unloading plugins etc.)Tobias Brunner2017-11-101-9/+14
| | | | | | | | Make sure, though, that we only remove the file if we actually created it (e.g. not for --help or --version). And do so before deinitializing libstrongswan due to leak detective. Fixes #2460.
* unit-tests: Rename targets for libstrongswan and kernel-netlinkThomas Egerer2017-11-092-10/+10
| | | | | | | | | libstrongswan and kernel-netlink are the only two components which do not adhere to the naming scheme used for all other tests. If the tests are run by an external application this imposes problems due to clashing names. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* Merge branch 'rsassa-pss'Tobias Brunner2017-11-08116-593/+8494
|\ | | | | | | | | | | | | | | | | | | | | This adds support for RSASSA-PSS signatures in IKEv2 digital signature authentication (RFC 7427), certificates and CRLs etc., and when signing credentials via pki tool. For interoperability with older versions, the default is to use classic PKCS#1 signatures. To use PSS padding either enable rsa_pss via strongswan.conf or explicitly use it either via ike:rsa/pss... auth token or the --rsa-padding option of the pki tool. References #2427.
| * auth-cfg: Add RSA/PSS schemes for pubkey and rsa if enabled in strongswan.confTobias Brunner2017-11-084-16/+94
| | | | | | | | Also document the rsa/pss prefix.
| * pki: Enable PSS padding if enabled in strongswan.confTobias Brunner2017-11-085-5/+11
| |