Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Version bump to 5.6.0dr25.6.0dr2 | Andreas Steffen | 2017-07-13 | 1 | -1/+1 |
| | |||||
* | libtpmtss: Support of Intel TABRMD interface | Andreas Steffen | 2017-07-12 | 1 | -3/+13 |
| | |||||
* | Version bump to 5.6.0dr15.6.0dr1 | Andreas Steffen | 2017-07-08 | 1 | -1/+1 |
| | | | | | | | This major version includes the new SWIMA IMC/IMV pair which implements the "draft-ietf-sacm-nea-swima-patnc" Internet Draft. Full compliance to the ISO 19770-2:2015 SWID tag standard has been achieved. | ||||
* | libimcv: Moved REST API from imv_swid and imv_swima to libimcv | Andreas Steffen | 2017-07-08 | 1 | -1/+4 |
| | |||||
* | imv-swima: Created SWIMA IMV plugin | Andreas Steffen | 2017-07-08 | 1 | -2/+5 |
| | |||||
* | imc-swima: Created SWIMA IMC plugin | Andreas Steffen | 2017-07-08 | 1 | -1/+4 |
| | |||||
* | pki: Load pubkey plugin to print public keys | Tobias Brunner | 2017-07-05 | 1 | -1/+1 |
| | | | | | | | | Since 3317d0e77b1a the public keys are printed via certificate printer, but that only works if the public key is actually wrapped, which requires the pubkey plugin. Fixes: 3317d0e77b1a ("Standardized printing of certificate information") | ||||
* | eap-aka-3gpp: Add plugin that implements 3GPP MILENAGE algorithm in software | Tobias Brunner | 2017-07-05 | 1 | -0/+4 |
| | | | | | | | | | | This is similar to the eap-aka-3gpp2 plugin. K (optionally concatenated with OPc) may be configured as binary EAP secret in ipsec.secrets or swanctl.conf. Based on a patch by Thomas Strangert. Fixes #2326. | ||||
* | configure: Install charon-systemd.conf | Tobias Brunner | 2017-06-29 | 1 | -0/+1 |
| | | | | Fixes #2370. | ||||
* | configure: Enable coverage for all plugins via PLUGIN_CFLAGS | Tobias Brunner | 2017-06-20 | 1 | -1/+3 |
| | |||||
* | configure: Use pkg-config to determine Ruby CFLAGS/LIBS | Tobias Brunner | 2017-06-07 | 1 | -30/+2 |
| | |||||
* | Version bump to 5.5.35.5.3 | Andreas Steffen | 2017-05-29 | 1 | -1/+1 |
| | |||||
* | configure: Don't modify CFLAGs if fuzzing is enabled | Tobias Brunner | 2017-05-23 | 1 | -5/+0 |
| | | | | Just rely on the flags passed by the build process. | ||||
* | x509: Manually print CRL/OCSP URIs when fuzzing | Tobias Brunner | 2017-05-23 | 1 | -0/+3 |
| | | | | This avoids a warning about the custom %Y printf specifier. | ||||
* | plugin-loader: Add facility to register plugin constructors | Tobias Brunner | 2017-05-23 | 1 | -1/+18 |
| | | | | | | | | | | | | | | Enabled when building monolithically and statically. This should allow us to work around the -whole-archive issue with libtool. If the libraries register the plugin constructors they provide they reference the constructors and will therefore prevent the linker from removing these seemingly unused symbols from the final executable. For use cases where dlsym() can be used, e.g. because the static libraries are manually linked with -whole-archive (Linux) or -force-load (Apple), this can be disabled by passing ss_cv_static_plugin_constructors=no to the configure script. | ||||
* | configure: Don't build static libraries by default | Tobias Brunner | 2017-05-23 | 1 | -0/+1 |
| | | | | | This way we can actually detect if someone wants to build strongSwan statically because --enable-static has to be passed explicitly. | ||||
* | fuzz: Make path to libFuzzer.a configurable | Tobias Brunner | 2017-05-23 | 1 | -0/+1 |
| | |||||
* | fuzz: Add fuzzing boilerplate | Tobias Brunner | 2017-05-23 | 1 | -7/+17 |
| | |||||
* | Version bump to 5.3.3dr25.5.3dr2 | Andreas Steffen | 2017-05-08 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.3dr15.5.3dr1 | Andreas Steffen | 2017-04-26 | 1 | -1/+1 |
| | |||||
* | configure: Include curve25519 in the pki default plugin list | Martin Willi | 2017-04-26 | 1 | -1/+1 |
| | | | | | The plugin provides ed25519 public key support, and is required to generate keys or sign certificates with pki. | ||||
* | Version bump to 5.5.25.5.2 | Andreas Steffen | 2017-03-27 | 1 | -1/+1 |
| | |||||
* | configure: Fix test for libunwind | Tobias Brunner | 2017-03-23 | 1 | -1/+1 |
| | | | | | | | | | | | Most functions in libunwind.h are actually mapped via macros to obscure function names, so checking for these would require some elaborate test via AC_LINK_IFELSE(). However, unw_backtrace() seems to be one of the few actual functions so lets use this for now, even though we don't call it ourselves later. Fixes: 016228c15843 ("configure: Check for actual functions in libraries with AC_CHECK_LIB") | ||||
* | Version bump to 5.2.2rc15.5.2rc1 | Andreas Steffen | 2017-03-21 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.2dr75.5.2dr7 | Andreas Steffen | 2017-03-06 | 1 | -1/+1 |
| | |||||
* | aikpub2: Removed aikpub2 tool | Andreas Steffen | 2017-03-06 | 1 | -10/+2 |
| | | | | | | | The aikpub2 tool has been replaced by pki --pub|--req --keyid hex .. where keyid indicates the TPM 2.0 private key object handle. Thus either the public key in PKCS#1 format can be extracted or a PKCS#10 certificate request signed by the TPM private key can be generated. | ||||
* | Version bump to 5.5.2dr65.5.2dr6 | Andreas Steffen | 2017-03-03 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.2dr55.5.2dr5 | Andreas Steffen | 2017-02-23 | 1 | -1/+1 |
| | |||||
* | Use of TPM 2.0 private keys for signatures via tpm plugin | Andreas Steffen | 2017-02-22 | 1 | -3/+9 |
| | |||||
* | bypass-lan: Add plugin that installs bypass policies for locally attached ↵ | Tobias Brunner | 2017-02-08 | 1 | -0/+4 |
| | | | | subnets | ||||
* | Version bump to 5.5.2dr45.5.2dr4 | Andreas Steffen | 2017-01-02 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.2dr3 and Linux kernel 4.95.5.2dr3 | Andreas Steffen | 2016-12-17 | 1 | -1/+1 |
| | |||||
* | configure: Check for actual functions in libraries with AC_CHECK_LIB | Tobias Brunner | 2016-12-02 | 1 | -27/+32 |
| | | | | | | | | | | | | | | | | | Checking for `main` produces code like this in the test program: int main () { return main (); ; return 0; } This recursive call results in a warning message with some compilers (e.g. Clang in newer Xcode versions: "all paths through this function will call itself [-Winfinite-recursion]"), which lets the tests fail when compiling with -Werror. | ||||
* | Version bump to 5.5.2dr25.5.2dr2 | Andreas Steffen | 2016-11-14 | 1 | -1/+1 |
| | |||||
* | configure: Enable curve25519 plugin by default | Tobias Brunner | 2016-11-14 | 1 | -1/+1 |
| | |||||
* | curve25519: Add a plugin providing Curve25519 DH using backend drivers | Martin Willi | 2016-11-14 | 1 | -0/+4 |
| | |||||
* | Version bump to 5.5.2dr15.5.2dr1 | Andreas Steffen | 2016-10-30 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.15.5.1 | Andreas Steffen | 2016-10-20 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.1rc25.5.1rc2 | Andreas Steffen | 2016-10-18 | 1 | -1/+1 |
| | |||||
* | configure: Reorder mgf1 in list of crypto plugins | Tobias Brunner | 2016-10-18 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.1rc15.5.1rc1 | Andreas Steffen | 2016-10-11 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.1dr55.5.1dr5 | Andreas Steffen | 2016-09-22 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.1dr45.5.1dr4 | Andreas Steffen | 2016-09-21 | 1 | -1/+1 |
| | |||||
* | mgf1: Refactored MGF1 as an XOF | Andreas Steffen | 2016-09-21 | 1 | -0/+8 |
| | |||||
* | maemo: Remove unused plugin | Tobias Brunner | 2016-09-15 | 1 | -12/+0 |
| | |||||
* | Version bump to 5.5.1dr3 | Andreas Steffen | 2016-09-15 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.1dr25.5.1dr2 | Andreas Steffen | 2016-08-26 | 1 | -1/+1 |
| | |||||
* | configure: Improve check for built-in __atomic_* functions | Tobias Brunner | 2016-08-26 | 1 | -2/+13 |
| | | | | | | | | | | | | | | With AC_SEARCH_LIBS() we don't succeed if the searched function is a built-in as the check uses the wrong signature so the built-in will not be applied (the warning issued by GCC is "conflicting types for built-in function '...'"). So even if not required, libatomic will be linked if it is found, which could be problematic if compiling on a separate host and the target host does not have libatomic installed. Also, some tests showed that it's more likely that __atomic_and_fetch() requires linking libatomic than __atomic_load_n() does. References #1533. | ||||
* | utils: Fix definition of BYTE_ORDER with MinGW | Tobias Brunner | 2016-08-24 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.5.1dr15.5.1dr1 | Andreas Steffen | 2016-08-10 | 1 | -1/+1 |
| |