Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | chunk: Skip all leading zero bytes in chunk_skip_zero() not just the first | Tobias Brunner | 2016-04-04 | 1 | -12/+16 |
| | |||||
* | string: Gracefully handle NULL in str*eq() macros | Tobias Brunner | 2016-04-04 | 1 | -0/+78 |
| | |||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 10 | -77/+77 |
| | |||||
* | Implemented IPv4/IPv6 subnet and range identities | Andreas Steffen | 2016-03-10 | 1 | -48/+207 |
| | | | | | | The IKEv1 IPV4_ADDR_SUBNET, IPV6_ADDR_SUBNET, IPV4_ADDR_RANGE and IPV6_ADDR_RANGE identities have been fully implemented and can be used as owners of shared secrets (PSKs). | ||||
* | linked-list: Add method to compare two lists of objects for equality | Tobias Brunner | 2016-03-08 | 1 | -0/+91 |
| | |||||
* | auth-cfg: Make IKE signature schemes configurable | Tobias Brunner | 2016-03-04 | 1 | -0/+122 |
| | | | | | | This also restores the charon.signature_authentication_constraints functionality, that is, if no explicit IKE signature schemes are configured we apply all regular signature constraints as IKE constraints. | ||||
* | unit-tests: The pseudonym RDN is now recognized, so use something more exotic | Tobias Brunner | 2016-01-28 | 1 | -3/+3 |
| | |||||
* | array: Add an insert/create function for value based arrays | Martin Willi | 2015-12-07 | 1 | -0/+43 |
| | |||||
* | settings: Add settings_value_as_uint64() helper function | Tobias Brunner | 2015-11-11 | 1 | -0/+24 |
| | |||||
* | traffic-selector: Don't end printf'ed list of traffic selectors with a space | Tobias Brunner | 2015-11-10 | 1 | -3/+3 |
| | |||||
* | testing: Updated hasher tests | Andreas Steffen | 2015-11-06 | 1 | -0/+75 |
| | |||||
* | Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemes | Andreas Steffen | 2015-11-06 | 2 | -30/+38 |
| | |||||
* | unit-tests: Add a test to verify that there is no partial matching of RDNs | Tobias Brunner | 2015-09-09 | 1 | -0/+1 |
| | |||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2015-08-27 | 1 | -1/+1 |
| | |||||
* | unit-tests: Additional test cases to increase coverage | Tobias Brunner | 2015-08-27 | 2 | -9/+611 |
| | |||||
* | identification: Add hash() method | Tobias Brunner | 2015-08-06 | 1 | -1/+90 |
| | | | | | | | Compared to hashing the encoding we can ignore string types of RDNs when hashing DNs, making hash() compatible to equals() that does the same. Fixes #991. | ||||
* | unit-tests: Add unit tests for settings_t.load_string[_section] | Tobias Brunner | 2015-07-28 | 1 | -8/+113 |
| | |||||
* | settings: Add support for multi-line strings | Tobias Brunner | 2015-07-28 | 1 | -8/+17 |
| | | | | Unterminated strings are now an error. | ||||
* | host: Properly handle NULL in host_create_from_string[_and_family] | Tobias Brunner | 2015-07-27 | 1 | -0/+6 |
| | |||||
* | unit-tests: Add tests for iv_gen_seq_t | Tobias Brunner | 2015-06-05 | 1 | -0/+73 |
| | |||||
* | unit-tests: Further increase the test vector testing timeout | Martin Willi | 2015-04-16 | 1 | -1/+1 |
| | | | | Some build bots running make check seem to have longer for the DH testing. | ||||
* | unit-tests: Use progressive testing of transforms with test vectors | Martin Willi | 2015-04-15 | 1 | -7/+26 |
| | | | | | | This allows us to show which transform from which plugin failed. Also, we use the new cleanup handler functionality that allows proper deinitialization on failure or timeout. | ||||
* | enum-names: Fail gracefully when passing a NULL value as enum names | Martin Willi | 2015-04-15 | 1 | -0/+10 |
| | |||||
* | thread: Add a function to pop and call all registered cleanup handlers | Martin Willi | 2015-04-15 | 1 | -0/+31 |
| | |||||
* | unit-tests: Use a larger timeout for test vector testing | Martin Willi | 2015-04-15 | 1 | -0/+1 |
| | | | | | As we test DH calculations this now takes more time. If multiple DH backends are enabled, we likely hit the default test timeout. | ||||
* | utils: Add malloc/free wrappers returning aligned data | Martin Willi | 2015-04-15 | 1 | -0/+39 |
| | | | | | | | | | | | | | While we could use posix_memalign(3), that is not fully portable. Further, it might be difficult on some platforms to properly catch it in leak-detective, which results in invalid free()s when releasing such memory. We instead use a simple wrapper, which allocates larger data, and saves the padding size in the allocated header. This requires that memory is released using a dedicated function. To reduce the risk of invalid free() when working on corrupted data, we fill up all the padding with the padding length, and verify it during free_align(). | ||||
* | utils: Add a constant time chunk_equals() variant for cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -0/+27 |
| | |||||
* | utils: Add a constant time memeq() variant for cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -0/+47 |
| | |||||
* | diffie-hellman: Add a bool return value to set_other_public_value() | Martin Willi | 2015-03-23 | 1 | -7/+7 |
| | |||||
* | diffie-hellman: Add a bool return value to get_my_public_value() | Martin Willi | 2015-03-23 | 1 | -11/+11 |
| | |||||
* | diffie-hellman: Use bool instead of status_t as get_shared_secret() return value | Martin Willi | 2015-03-23 | 1 | -7/+4 |
| | | | | | While such a change is not unproblematic, keeping status_t makes the API inconsistent once we introduce return values for the public value operations. | ||||
* | unit-tests: Fix settings test after merging multi-line strings | Tobias Brunner | 2015-03-23 | 1 | -2/+2 |
| | |||||
* | unit-tests: Depend on SHA1/SHA256 features for mgf1 test cases | Martin Willi | 2015-03-23 | 1 | -4/+14 |
| | |||||
* | public-key: Add helper to determine acceptable signature schemes for keys | Tobias Brunner | 2015-03-04 | 1 | -1/+44 |
| | |||||
* | enum: Extend printf hook to print flags | Thomas Egerer | 2015-03-03 | 1 | -2/+164 |
| | | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
* | unit-tests: Don't fail host_create_from_dns() test if IPv6 not supported | Martin Willi | 2015-03-02 | 1 | -4/+10 |
| | | | | | On some systems, such as the Ubuntu daily build machine, localhost does not resolve to an IPv6 address. Accept such a lookup failure. | ||||
* | Allow SHA256 and SHA384 data hash for BLISS signatures. | Andreas Steffen | 2015-02-26 | 1 | -0/+3 |
| | | | | | The default is SHA512 since this hash function is also used for the c_indices random oracle. | ||||
* | unit-tests: Add host_create_from_dns() test cases resolving "localhost" | Martin Willi | 2015-02-24 | 1 | -0/+42 |
| | |||||
* | unit-tests: Accept numerical protocol/port numbers in traffic selector tests | Martin Willi | 2015-02-23 | 1 | -11/+16 |
| | |||||
* | unit-tests: Add an initial set of traffic selector unit tests | Martin Willi | 2015-02-20 | 1 | -0/+279 |
| | |||||
* | unit-tests: Adapted to coverity fixes | Andreas Steffen | 2014-12-23 | 1 | -3/+15 |
| | |||||
* | Implemented get_byte() method for mgf1_bitspender class | Andreas Steffen | 2014-11-29 | 1 | -6/+16 |
| | | | | | | The new get_byte() method returns a pseudo-random byte at a time. Changed the get_bits() interface to the same interface as get_byte(). Updated the mgf1 unit-tests accordingly. | ||||
* | unit-tests: Created separate mgf1 test suite | Andreas Steffen | 2014-11-29 | 2 | -140/+259 |
| | |||||
* | Moved mgf1 class to libstrongswan/crypto/mgf1 | Andreas Steffen | 2014-11-29 | 1 | -18/+10 |
| | |||||
* | unit-tests: Test cancellability of some cancellation points we rely on | Martin Willi | 2014-11-21 | 1 | -0/+192 |
| | |||||
* | host: Ignore spaces around - when parsing ranges | Tobias Brunner | 2014-10-30 | 1 | -2/+8 |
| | |||||
* | host: Add function to create two hosts from a range definition | Tobias Brunner | 2014-10-30 | 1 | -0/+83 |
| | |||||
* | constraints: Add permitted/excludedNameConstraints check | Martin Willi | 2014-10-30 | 1 | -0/+398 |
| | |||||
* | constraints: Add requireExplicitPolicy tests | Martin Willi | 2014-10-30 | 1 | -0/+44 |
| | |||||
* | constraints: Add inhibitAnyPolicy tests | Martin Willi | 2014-10-30 | 1 | -0/+44 |
| |