aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* testing: Remove nearly all sleep calls from pretest and posttest scriptsTobias Brunner2015-11-09303-452/+500
* ikev1: Fix calculation of DPD timeoutTobias Brunner2015-11-091-0/+2
* testing: Adapt tests to retransmission settings and reduce DPD delay/timeoutTobias Brunner2015-11-0926-43/+43
* ipsec: Quit script quicker for ipsec stopTobias Brunner2015-11-091-2/+2
* testing: Only send two retransmits after 1 second each to fail negative tests...Tobias Brunner2015-11-091-0/+6
* testing: Add a base strongswan.conf file used by all hosts in all scenariosTobias Brunner2015-11-092-0/+2
* xauth: Call authorize() hook also when xauth-noauth is usedTobias Brunner2015-11-091-2/+8
* libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen()Tobias Brunner2015-11-093-4/+16
* plugin-loader: Optionally use RTLD_NOW with dlopen()Tobias Brunner2015-11-092-6/+15
* windows: Define RTLD_NOW, even if it is not usedTobias Brunner2015-11-091-0/+5
* kernel-pfkey: Enable ENCR_AES_CTR when it's availableRenato Botelho2015-11-091-1/+3
* vici: Add NAT information when listing IKE_SAsTobias Brunner2015-11-092-0/+21
* Merge branch 'iv-gen-null-encr'Tobias Brunner2015-11-0916-1/+1348
|\
| * testing: Add libipsec/net2net-null scenarioTobias Brunner2015-11-0911-0/+1245
| * iv-gen: Use NULL IV generator for NULL encryptionTobias Brunner2015-11-091-0/+5
| * crypto: Add NULL IV generatorTobias Brunner2015-11-094-1/+98
|/
* configure: Load sha1 and random plugins in manager by defaultTobias Brunner2015-11-091-3/+3
* stroke: Make down-nb actually non-blockingTobias Brunner2015-11-091-31/+40
* Version bump to 5.3.4dr2Andreas Steffen2015-11-061-1/+1
* testing: Updated hasher testsAndreas Steffen2015-11-062-4/+83
* Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemesAndreas Steffen2015-11-0612-89/+109
* Version bump to 5.3.4dr15.3.4dr1Andreas Steffen2015-11-042-1/+10
* Use word-aligned XOR in sha3_absorb()Andreas Steffen2015-11-031-4/+47
* testing: BLISS CA uses SHA-3 in its CRLAndreas Steffen2015-11-038-5/+9
* Support BLISS signatures with SHA-3 hashAndreas Steffen2015-11-0310-9/+52
* Implemented SHA-3 hash algorithm including test vectorsAndreas Steffen2015-11-0310-1/+1034
* Defined SHA-3 hashersAndreas Steffen2015-11-033-10/+59
* testing: Update tkm to version 0.1.3Tobias Brunner2015-10-301-1/+1
* libipsec: Properly support CAMELLIA in CTR modeTobias Brunner2015-10-301-0/+1
* ikev2: Fix size of key material for CAMELLIA-CTRTobias Brunner2015-10-301-0/+1
* libipsec: Fix crypter lookup for AES-CTRTobias Brunner2015-10-301-1/+12
* ike-mobike: Send retransmits to the current local and remote addressesTobias Brunner2015-10-301-1/+5
* Merge branch 'ikev1-cache-informational'Tobias Brunner2015-10-301-15/+81
|\
| * ikev1: Handle queued INFORMATIONAL message after receiving the last AM requestTobias Brunner2015-10-301-0/+16
| * ikev1: Queue INFORMATIONAL request if AM is not complete yetTobias Brunner2015-10-301-6/+13
| * ikev1: Handle queued TRANSACTION messages only after processing repliesTobias Brunner2015-10-301-1/+2
| * ikev1: Extract queueing of TRANSACTIONAL requests when MM is not complete yetTobias Brunner2015-10-301-17/+27
| * ikev1: Drop TRANSACTION/QUICK_MODE requests until we received the last AM mes...Tobias Brunner2015-10-301-0/+32
|/
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-302-9/+15
* Fix typo in error handling for sigwaitinfo() in charon-systemd and charon-tkmTobias Brunner2015-10-292-2/+2
* random: Properly handle errors when reading from /dev/[u]randomTobias Brunner2015-10-291-0/+1
* ikev1: Avoid fourth QM message if third QM messages of multiple exchanges are...Tobias Brunner2015-10-292-2/+14
* ikev1: Prevent deadlock when checking for duplicate IKEv1 SAsTobias Brunner2015-10-291-0/+16
* Replace usages of sigwait(3) with sigwaitinfo(2)Tobias Brunner2015-10-299-36/+31
* testing: Actually send an uncompressed packet in the ipv6/rw-compress-ikev2 s...Tobias Brunner2015-10-061-1/+2
* updown: Add rules to allow IP6IP6 traffic used for uncompressed small packetsTobias Brunner2015-09-211-0/+31
* shunt-manager: Resolve %dynamic to %any4/6 before installing policiesTobias Brunner2015-09-161-7/+22
* shunt-manager: Don't install policies in case of an address family or IP prot...Tobias Brunner2015-09-161-0/+20
* openssl: Explicitly include openssl/bn.hTobias Brunner2015-09-165-0/+5
* unit-tests: Add a test to verify that there is no partial matching of RDNsTobias Brunner2015-09-091-0/+1