aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Use MGF1 with SHA-512 as BLISS random oracleAndreas Steffen2015-07-275-72/+63
* Generalize c_indices generation using SHA-512 random oracle.Markku-Juhani Olavi Saarinen2015-07-271-18/+24
* Fixed several bugs in the BLISS signature generation/verification step.Markku-Juhani Olavi Saarinen2015-07-271-4/+8
* ike: Fix memory leak if remote address is keptTobias Brunner2015-07-271-0/+4
* ike-rekey: Fix cleanup() callTobias Brunner2015-07-271-2/+2
* ike-rekey: Reset IKE_SA on bus before sending CREATE_CHILD_SA responseTobias Brunner2015-07-271-1/+2
* ike-rekey: Reset IKE_SA on the bus after destroying new IKE_SATobias Brunner2015-07-271-16/+15
* Merge branch 'trap-shunt-updates'Tobias Brunner2015-07-274-43/+193
|\
| * daemon: Flush shunts before unloading pluginsTobias Brunner2015-07-271-0/+4
| * shunt-manager: Add flush() method to properly uninstall shuntsTobias Brunner2015-07-272-4/+46
| * shunt-manager: Remove stored entries if installation failsTobias Brunner2015-07-271-2/+11
| * shunt-manager: Add a lock to safely access the list of shunt policiesTobias Brunner2015-07-271-3/+17
| * trap-manager: Resolve race conditions between flush() and install()Tobias Brunner2015-07-271-0/+31
| * trap-manager: Changed how acquires we acted on are trackedTobias Brunner2015-07-271-36/+86
| * trap-manager: Properly check-in IKE_SA if initiating failsTobias Brunner2015-07-271-2/+2
|/
* ike: Fall back to the current remote IP if it resolves to %anyTobias Brunner2015-07-271-1/+6
* Merge branch 'remote-host-family'Tobias Brunner2015-07-278-2/+203
|\
| * ike: Use address family of local address when resolving remote hostTobias Brunner2015-07-271-1/+14
| * ike-cfg: Add unit tests for ike_cfg_get_family() helperTobias Brunner2015-07-273-0/+120
| * ike-cfg: Add helper function to determine address family of IP addressesTobias Brunner2015-07-272-1/+59
| * host: Properly handle NULL in host_create_from_string[_and_family]Tobias Brunner2015-07-272-0/+10
|/
* Improved legibility of swanctl CRL listings5.3.3dr1Andreas Steffen2015-07-221-1/+4
* testing: Updated loop ca certificatesAndreas Steffen2015-07-2212-25/+77
* testing: Added swanctl --list-authorities output to do-testsAndreas Steffen2015-07-221-1/+5
* testing: Updated all swanctl scenarios and added some new onesAndreas Steffen2015-07-22102-104/+1744
* tests: Introduced IPV6 flag in tests.confAndreas Steffen2015-07-2120-1/+77
* tests: Introduced SWANCTL flag in test.confAndreas Steffen2015-07-219-23/+57
* tests: fixed evaltest of swanctl/rw-cert scenarioAndreas Steffen2015-07-211-2/+2
* tests: fixed description of swanctl ip-pool scenariosAndreas Steffen2015-07-212-9/+8
* Version bump to 5.3.3dr1Andreas Steffen2015-07-211-1/+1
* vici: Certification Authority support added.Andreas Steffen2015-07-2119-15/+1553
* vici: Compute rekey_bytes and rekey_packets if life_bytes and life_packets ar...Andreas Steffen2015-07-201-6/+20
* testing: Do not attempt to start the test environment if hosts are still runningTobias Brunner2015-07-151-0/+1
* ike-sa-manager: Safely access the RNG instance with an rwlockTobias Brunner2015-07-141-5/+16
* vici: Asynchronize debug loggingMartin Willi2015-07-121-1/+47
* Merge branch 'chapoly'Martin Willi2015-07-1244-32/+2657
|\
| * NEWS: Add ChaCha20/Poly1305 newsMartin Willi2015-07-121-0/+8
| * testing: Enable AESNI/PCLMULQD in moon/sun guests, if supportedMartin Willi2015-07-122-0/+10
| * testing: Do not overwrite kernel configuration if it already existsMartin Willi2015-07-121-1/+4
| * testing: Extract and patch each kernel version only onceMartin Willi2015-07-121-8/+11
| * testing: Build with --enable-chapolyMartin Willi2015-07-121-0/+1
| * libipsec: Add a unit-test for ESP encryption using ChaCha20Poly1305Martin Willi2015-07-123-0/+139
| * libipsec: Add a unit-test test runnerMartin Willi2015-07-126-8/+94
| * unit-tests: Add a IKEv2 message encryption test caseMartin Willi2015-07-123-0/+140
| * unit-tests: Increase failure message buffer to hold larger hex dumpsMartin Willi2015-07-122-2/+2
| * unit-tests: Forward variable argument list in TEST_SUITE_DEPENDMartin Willi2015-07-125-10/+10
| * unit-tests: Load libstrongswan plugins in libcharon testsMartin Willi2015-07-122-0/+16
| * chapoly: Process two Poly1305 blocks in parallel in SSSE3 driverMartin Willi2015-07-121-85/+291
| * chapoly: Process four ChaCha20 blocks in parallel in SSSE3 driverMartin Willi2015-07-121-16/+207
| * chapoly: Add an SSSE3 based driverMartin Willi2015-06-294-1/+514