tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	openssl: BoringSSL doesn't provide curve data for ECC Brainpool curves	Tobias Brunner	2016-12-10	1	-1/+4
\|
*	openssl: Explicitly include openssl/bn.h	Tobias Brunner	2015-09-16	1	-0/+1
\| \| \| \| \| \| \| \|	If OpenSSL is compiled with OPENSSL_NO_DEPRECATED some of the headers we include don't include openssl/bn.h anymore. Therefore, we have to explicitly include it ourselves where we use BN_* functions. Fixes #1113.
*	openssl: Support setting ECDH private values	Martin Willi	2015-04-15	1	-0/+44
\|
*	diffie-hellman: Verify public DH values in backends	Martin Willi	2015-03-23	1	-0/+5
\|
*	diffie-hellman: Add a bool return value to set_other_public_value()	Martin Willi	2015-03-23	1	-3/+4
\|
*	diffie-hellman: Add a bool return value to get_my_public_value()	Martin Willi	2015-03-23	1	-1/+2
\|
*	diffie-hellman: Use bool instead of status_t as get_shared_secret() return value	Martin Willi	2015-03-23	1	-3/+3
\| \| \| \| \|	While such a change is not unproblematic, keeping status_t makes the API inconsistent once we introduce return values for the public value operations.
*	crypto: Define MODP_CUSTOM outside of IKE DH range	Tobias Brunner	2014-12-23	1	-1/+1
\| \| \| \| \| \| \| \| \|	Before this fix it was possible to crash charon with an IKE_SA_INIT message containing a KE payload with DH group MODP_CUSTOM(1025). Defining MODP_CUSTOM outside of the two byte IKE DH identifier range prevents it from getting negotiated. Fixes CVE-2014-9221.
*	lib: All settings use configured namespace	Tobias Brunner	2014-02-12	1	-1/+1
\|
*	openssl: Verify that a peer's ECDH public value is a point on the elliptic curve	Tobias Brunner	2013-11-19	1	-0/+5
\| \| \| \| \|	This check is mandated by RFC 6989. Since we don't reuse DH secrets, it is mostly a sanity check.
*	openssl: Add workaround if ECC Brainpool curves are not defined	Tobias Brunner	2013-10-17	1	-11/+247
\|
*	openssl: Add support for ECC Brainpool curves for DH, if defined by OpenSSL	Tobias Brunner	2013-10-17	1	-6/+47
\| \| \| \|	OpenSSL does not include them in releases before 1.0.2.
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Use chunk_clear to memwipe shared secret	Thomas Egerer	2011-11-04	1	-1/+1
\|
*	Wipe memory after using key material (incomplete, to be continued)	Martin Willi	2011-05-09	1	-1/+1
\|
*	Use a seperate section for each nested struct member in INIT macro	Martin Willi	2010-08-18	1	-6/+8
\|
*	Migrated remaining classes in openssl plugin to INIT/METHOD macros	Martin Willi	2010-08-10	1	-33/+24
\|
*	Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled.	Tobias Brunner	2010-06-22	1	-0/+6
\| \| \| \| \|	That is, enable compilation if OpenSSL was configured with OPENSSL_NO_EC.
*	Adding DBG_LIB to all calls of libstrongswan's version of DBG*.	Tobias Brunner	2010-04-06	1	-2/+2
\|
*	removed trailing spaces ([[:space:]]+$)	Martin Willi	2009-09-04	1	-32/+32
\|
*	make ecp_x_coordinate_only = yes the default	Andreas Steffen	2009-07-06	1	-2/+4
\|
*	ecp_x_coordinate only option allows ECP interoperability with MS Windows	Andreas Steffen	2009-07-06	1	-4/+14
\|
*	removing svn keyword $Id$ from all files	Tobias Brunner	2009-04-30	1	-2/+0
\|
*	removed superfluous get_other_public_value in diffie_hellman_t interface	Martin Willi	2008-11-04	1	-19/+0
\|
*	refactoring	Tobias Brunner	2008-06-10	1	-27/+3
\|
*	fixed some compiler warnings	Martin Willi	2008-05-23	1	-1/+1
\|
*	added the ECP groups from RFC 5114	Tobias Brunner	2008-05-22	1	-0/+6
\|
*	added ECDH with OpenSSL (see RFC 4753)	Tobias Brunner	2008-05-22	1	-0/+360