Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | The pacman tool got replaced by the sec-updater tool | Tobias Brunner | 2017-11-15 | 5 | -11/+2 |
| | |||||
* | sec-updater: Fix typo in documentation | Tobias Brunner | 2017-11-15 | 1 | -1/+1 |
| | |||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2017-11-15 | 15 | -19/+19 |
| | |||||
* | swanctl: Add check for conflicting short options | Tobias Brunner | 2017-11-13 | 1 | -0/+9 |
| | |||||
* | swanctl: Properly register --counters commmand | Tobias Brunner | 2017-11-13 | 1 | -1/+1 |
| | | | | Use C instead of c, which is already used for --load-conns. | ||||
* | testing: Do not remove all swanctl subdirectories | Andreas Steffen | 2017-11-11 | 1 | -3/+3 |
| | |||||
* | Version bump to 5.6.1rc15.6.1rc1 | Andreas Steffen | 2017-11-11 | 3 | -2/+2615 |
| | |||||
* | Merge branch 'swanctl-testing' | Andreas Steffen | 2017-11-11 | 889 | -4915/+6964 |
|\ | |||||
| * | libimcv: Updated imv database | Andreas Steffen | 2017-11-11 | 1 | -4/+88 |
| | | |||||
| * | testing: Converterd tnc to systemd | Andreas Steffen | 2017-11-11 | 124 | -558/+338 |
| | | |||||
| * | testing: Converted sql to systemd | Andreas Steffen | 2017-11-11 | 85 | -101/+542 |
| | | |||||
| * | testing: Converted swanctl to systemd | Andreas Steffen | 2017-11-11 | 181 | -849/+1170 |
| | | |||||
| * | testing: Added legacy ipv6-stroke scenarios | Andreas Steffen | 2017-11-11 | 172 | -0/+2418 |
| | | |||||
| * | testing: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 14 | -96/+158 |
| | | |||||
| * | testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 14 | -96/+158 |
| | | |||||
| * | testing: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -66/+113 |
| | | |||||
| * | testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -63/+112 |
| | | |||||
| * | testing: Converted ipv6/rw-rfc3779-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 22 | -103/+161 |
| | | |||||
| * | testing: Converted ipv6/rw-compress-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 10 | -64/+109 |
| | | |||||
| * | testing: Converted ipv6/rw-psk-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 17 | -96/+174 |
| | | |||||
| * | testing: Converted ipv6/rw-psk-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 17 | -96/+175 |
| | | |||||
| * | testing: Converted ipv6/rw-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 14 | -104/+163 |
| | | |||||
| * | testing: Converted ipv6/rw-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 14 | -107/+160 |
| | | |||||
| * | testing: Converted ipv6/net2net-rfc3779-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 17 | -88/+128 |
| | | |||||
| * | testing: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 10 | -78/+117 |
| | | |||||
| * | testing: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 10 | -78/+113 |
| | | |||||
| * | testing: Converted ipv6/transport-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -76/+116 |
| | | |||||
| * | testing: Converted ipv6/transport-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -75/+112 |
| | | |||||
| * | testing: Converted ipv6/net2net-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -84/+119 |
| | | |||||
| * | testing: Converted ipv6/net2net-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -82/+118 |
| | | |||||
| * | testing: Converted ipv6/host2host-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -83/+115 |
| | | |||||
| * | testing: Converted ipv6/host2host-ikev1 to swanctl | Andreas Steffen | 2017-11-10 | 11 | -86/+111 |
| | | |||||
| * | testing: Removed libipsec/rw-suite-b | Andreas Steffen | 2017-11-10 | 28 | -2260/+0 |
| | | |||||
| * | testing: Converted libipsec/net2net-null to swanctl | Andreas Steffen | 2017-11-10 | 10 | -67/+102 |
| | | |||||
| * | testing: Converted libipsec/net2net-cert-ipv6 to swanctl | Andreas Steffen | 2017-11-10 | 10 | -59/+102 |
| | | |||||
| * | testing: Converted libipsec/net2net-cert to swanctl | Andreas Steffen | 2017-11-10 | 10 | -59/+102 |
| | | |||||
| * | testing: Converted libipsec/net2net-3des to swanctl | Andreas Steffen | 2017-11-10 | 10 | -67/+102 |
| | | |||||
| * | testing: Converted libipsec/host2host-cert to swanctl | Andreas Steffen | 2017-11-10 | 10 | -51/+94 |
| | | |||||
| * | testing: Converted gcrypt-ikev2 to swanctl | Andreas Steffen | 2017-11-10 | 25 | -158/+243 |
| | | |||||
| * | testing: Converted gcrypt-ikev1 to systemd | Andreas Steffen | 2017-11-10 | 8 | -31/+63 |
| | | |||||
| * | testing: Converted af-alg to systemd | Andreas Steffen | 2017-11-10 | 9 | -35/+72 |
| | | |||||
| * | testing: Enable systemd | Andreas Steffen | 2017-11-10 | 3 | -3/+4 |
| | | |||||
| * | testing: Updated some descriptions | Andreas Steffen | 2017-11-10 | 3 | -9/+9 |
|/ | |||||
* | libtpmtss: Added missing argument in hasher_from_signature_scheme() | Andreas Steffen | 2017-11-10 | 1 | -1/+1 |
| | |||||
* | charon-tkm: Unlink PID file after deinit | Tobias Brunner | 2017-11-10 | 1 | -11/+31 |
| | | | | | | Same change as for charon in the previous commit. References #2460. | ||||
* | charon: Unlink PID file after daemon deinit (i.e. after unloading plugins etc.) | Tobias Brunner | 2017-11-10 | 1 | -9/+14 |
| | | | | | | | | Make sure, though, that we only remove the file if we actually created it (e.g. not for --help or --version). And do so before deinitializing libstrongswan due to leak detective. Fixes #2460. | ||||
* | unit-tests: Rename targets for libstrongswan and kernel-netlink | Thomas Egerer | 2017-11-09 | 2 | -10/+10 |
| | | | | | | | | | libstrongswan and kernel-netlink are the only two components which do not adhere to the naming scheme used for all other tests. If the tests are run by an external application this imposes problems due to clashing names. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
* | Merge branch 'rsassa-pss' | Tobias Brunner | 2017-11-08 | 116 | -593/+8494 |
|\ | | | | | | | | | | | | | | | | | | | | | This adds support for RSASSA-PSS signatures in IKEv2 digital signature authentication (RFC 7427), certificates and CRLs etc., and when signing credentials via pki tool. For interoperability with older versions, the default is to use classic PKCS#1 signatures. To use PSS padding either enable rsa_pss via strongswan.conf or explicitly use it either via ike:rsa/pss... auth token or the --rsa-padding option of the pki tool. References #2427. | ||||
| * | auth-cfg: Add RSA/PSS schemes for pubkey and rsa if enabled in strongswan.conf | Tobias Brunner | 2017-11-08 | 4 | -16/+94 |
| | | | | | | | | Also document the rsa/pss prefix. | ||||
| * | pki: Enable PSS padding if enabled in strongswan.conf | Tobias Brunner | 2017-11-08 | 5 | -5/+11 |
| | |