Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add basic tests for linked_list_t | Tobias Brunner | 2013-06-11 | 4 | -1/+288 | |
| | ||||||
* | Redirect test runner output to stderr | Tobias Brunner | 2013-06-11 | 1 | -0/+4 | |
| | | | | This allows redirecting stdout of 'make check' to /dev/null. | |||||
* | Add tests for enumerator_t | Tobias Brunner | 2013-06-11 | 4 | -1/+196 | |
| | ||||||
* | Add test runner for unit tests in libstrongswan | Tobias Brunner | 2013-06-11 | 5 | -0/+83 | |
| | ||||||
* | Added missing string for full-length HMAC-SHA512 signer | Tobias Brunner | 2013-06-10 | 1 | -0/+1 | |
| | ||||||
* | attr: Fix handling of invalid IPs listed after valid ones | Tobias Brunner | 2013-06-05 | 1 | -1/+1 | |
| | | | | | Invalid IPs listed after a valid one resulted in an attribute of the same type but with invalid data. | |||||
* | attr: fix a compiler warning that family is used uninitialized (seen with -Os) | Martin Willi | 2013-06-05 | 1 | -2/+13 | |
| | ||||||
* | Strictly memwipe_check() for magic only in the affected buffer | Martin Willi | 2013-06-05 | 1 | -25/+8 | |
| | | | | | | | Passing back the buffer address we memwipe() is not ideal, as it could, in theory, change the behavior of the compiler and not-optimize memwipe(). But as checking a larger stack is very difficult for different architectures and compilers, we do it nonetheless for now. | |||||
* | Allow memwipe() to be called with NULL argument | Tobias Brunner | 2013-05-27 | 1 | -0/+4 | |
| | ||||||
* | kernel-netlink: add outer addresses to policy when using BEET mode | Michael Rossberg | 2013-05-24 | 1 | -1/+1 | |
| | ||||||
* | openssl: add support for IP addr blocks in X.509 certificates | Michael Rossberg | 2013-05-24 | 1 | -1/+115 | |
| | ||||||
* | Make plugins in standalone libimcv configurable | Andreas Steffen | 2013-05-24 | 1 | -1/+2 | |
| | ||||||
* | host-resolver: don't try to resolve a plain v4 address to an IPv6 address | Volker Rümelin | 2013-05-16 | 1 | -3/+17 | |
| | | | | | Suppress 'Address family for hostname not supported' errors if a IPv6 client connects in a mixed IPv4/IPv6 environment. | |||||
* | traffic-selector: inet_pton is successful only if it returns 1 | Martin Willi | 2013-05-16 | 1 | -23/+17 | |
| | ||||||
* | updown: pass IKE_SA unique ID in PLUTO_UNIQUEID | Emanuil Hristov | 2013-05-16 | 2 | -1/+5 | |
| | ||||||
* | capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore | Martin Willi | 2013-05-15 | 1 | -6/+0 | |
| | ||||||
* | capabilities: initialize supplementary groups only when doing a setuid() | Martin Willi | 2013-05-15 | 1 | -1/+1 | |
| | ||||||
* | af-alg: fix number of signers after adding untruncated HMAC-SHA-512 (1f2a34d6) | Martin Willi | 2013-05-15 | 1 | -1/+1 | |
| | ||||||
* | Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILURE | Martin Willi | 2013-05-15 | 2 | -1/+2 | |
| | ||||||
* | openssl: Only warn about unavailable FIPS mode if the user requested it | Tobias Brunner | 2013-05-08 | 1 | -1/+1 | |
| | ||||||
* | stroke: Add second password if provided | Tobias Brunner | 2013-05-08 | 1 | -0/+13 | |
| | ||||||
* | stroke: Fail silently if another builder calls PW callback after giving up | Tobias Brunner | 2013-05-08 | 1 | -9/+14 | |
| | | | | Also reduced the number of tries to 3. | |||||
* | stroke: Cache passwords so the user is not prompted multiple times for the ↵ | Tobias Brunner | 2013-05-08 | 1 | -1/+13 | |
| | | | | | | | | | | same password To verify/decrypt a PKCS#12 container a password might be needed multiple times. If it was entered correctly we don't want to bother the user again with another password prompt. The passwords for MAC creation and encryption could be different so the user might be prompted multiple times after all. | |||||
* | stroke: Fix prompt and error messages in passphrase callback | Tobias Brunner | 2013-05-08 | 1 | -11/+13 | |
| | ||||||
* | stroke: Load credentials from PKCS#12 files (P12 token) | Tobias Brunner | 2013-05-08 | 1 | -15/+92 | |
| | ||||||
* | openssl: Cleanup thread specific error buffer | Tobias Brunner | 2013-05-08 | 1 | -5/+38 | |
| | ||||||
* | openssl: Don't use deprecated CRYPTO_set_id_callback() with OpenSSL >= 1.0.0 | Tobias Brunner | 2013-05-08 | 1 | -17/+29 | |
| | ||||||
* | openssl: Add PKCS#12 parsing via OpenSSL | Tobias Brunner | 2013-05-08 | 4 | -0/+307 | |
| | ||||||
* | openssl: Properly cleanup OpenSSL library | Tobias Brunner | 2013-05-08 | 2 | -9/+7 | |
| | ||||||
* | charon-cmd: Add support for PKCS#12 files | Tobias Brunner | 2013-05-08 | 4 | -1/+52 | |
| | ||||||
* | PEM plugin loads PKCS#12 containers from (DER-encoded) files | Tobias Brunner | 2013-05-08 | 3 | -0/+24 | |
| | | | | | It is not actually able to handle PEM encoded PKCS#12 files produced by OpenSSL. | |||||
* | Remove pluto specific certificate types | Tobias Brunner | 2013-05-08 | 3 | -14/+1 | |
| | ||||||
* | charon-cmd: match_me/match_other are optional in callback credentials | Tobias Brunner | 2013-05-08 | 1 | -1/+8 | |
| | ||||||
* | charon-cmd: Request password for private keys | Tobias Brunner | 2013-05-08 | 1 | -0/+3 | |
| | ||||||
* | Add support for untruncated HMAC-SHA-512 | Tobias Brunner | 2013-05-08 | 5 | -1/+13 | |
| | ||||||
* | Also support 128-bit RC2 | Tobias Brunner | 2013-05-08 | 1 | -1/+2 | |
| | ||||||
* | Add pkcs12 plugin which adds support for decoding PKCS#12 containers | Tobias Brunner | 2013-05-08 | 10 | -1/+803 | |
| | ||||||
* | Function added to convert a hash algorithm to an HMAC integrity algorithm | Tobias Brunner | 2013-05-08 | 2 | -0/+77 | |
| | ||||||
* | Support the PKCS#5/PKCS#12 encryption scheme used by OpenSSL for private keys | Tobias Brunner | 2013-05-08 | 1 | -0/+6 | |
| | ||||||
* | Register PKCS#8 builder for KEY_ANY | Tobias Brunner | 2013-05-08 | 1 | -0/+1 | |
| | ||||||
* | Add support for PKCS#7/CMS encrypted-data | Tobias Brunner | 2013-05-08 | 6 | -5/+267 | |
| | ||||||
* | Move PKCS#12 key derivation to a separate file | Tobias Brunner | 2013-05-08 | 5 | -147/+238 | |
| | ||||||
* | PKCS#5 wrapper can decrypt PKCS#12-like schemes | Tobias Brunner | 2013-05-08 | 2 | -4/+180 | |
| | ||||||
* | Add test vectors for RC2 | Tobias Brunner | 2013-05-08 | 3 | -0/+118 | |
| | ||||||
* | Fix cleanup in crypto_tester if a crypter fails | Tobias Brunner | 2013-05-08 | 1 | -1/+4 | |
| | ||||||
* | Add implementation of the RC2 block cipher (RFC 2268) | Tobias Brunner | 2013-05-08 | 8 | -4/+555 | |
| | ||||||
* | Extract function to convert ASN.1 INTEGER object to u_int64_t | Tobias Brunner | 2013-05-08 | 3 | -23/+28 | |
| | ||||||
* | Extract PKCS#5 handling from pkcs8 plugin to separate helper class | Tobias Brunner | 2013-05-08 | 5 | -458/+710 | |
| | ||||||
* | charon-cmd: Changed formatting of optional arguments in usage information | Tobias Brunner | 2013-05-08 | 1 | -8/+10 | |
| | | | | Optional arguments have to be specified with = after the option. | |||||
* | charon-cmd: --agent optionally takes the path to an ssh-agent socket | Tobias Brunner | 2013-05-08 | 3 | -16/+24 | |
| | | | | If not given it is read from the SSH_AUTH_SOCK environment variable. |