aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* ike: Log SK_p consistently on level 4Tobias Brunner2013-11-281-1/+1
|
* Added DRBG automatic reseeding testsAndreas Steffen2013-11-272-170/+216
|
* Use strongSwan hash plugins for SHA-1 and SHA-256Andreas Steffen2013-11-2720-2764/+178
|
* Extended NIST SP 800-90A HMAC_DRBG test casesAndreas Steffen2013-11-271-21/+103
|
* Cleaned up ntru-crypto libraryAndreas Steffen2013-11-2711-474/+8
|
* Implemented NIST SP 800-90A DRBG_HMAC with SHA-256Andreas Steffen2013-11-2716-1541/+697
|
* Added NTRU key exchange to default IKE proposalAndreas Steffen2013-11-271-0/+4
|
* unit-tests: Added ntru wrong ciphertext testAndreas Steffen2013-11-272-0/+37
|
* unit-tests: Added ntru entropy, retransmission and ciphertext testsAndreas Steffen2013-11-273-0/+69
|
* Any of the four NTRU parameter sets can be selectedAndreas Steffen2013-11-273-55/+130
|
* Make the NTRU parameter set configurableAndreas Steffen2013-11-272-40/+110
|
* unit-tests: first NTRU test caseAndreas Steffen2013-11-274-2/+95
|
* Prototype implementation of IKE key exchange via NTRU encryptionAndreas Steffen2013-11-2740-3/+9380
|
* nm: Require the PSK to be at least 20 characters longTobias Brunner2013-11-272-5/+14
|
* nm: German translation updatedTobias Brunner2013-11-271-76/+81
|
* nm: Handle PSK option in NM backendTobias Brunner2013-11-271-4/+12
|
* nm: Add PSK option to auth-dialogTobias Brunner2013-11-271-3/+10
|
* nm: Add pre-shared key option in GUITobias Brunner2013-11-271-2/+14
|
* nm: Make intltool recognize glade files properlyTobias Brunner2013-11-271-1/+1
|
* charon-tkm: Don't run tests automatically during 'make check'Tobias Brunner2013-11-271-5/+5
| | | | | Due to the external dependencies these tests are quite inconvenient. They can be run from the charon-tkm directory with 'make check-tkm'.
* charon-tkm: Add Binder switches to test project to enable exception backtracesReto Buerki2013-11-271-0/+4
|
* charon-tkm: Migrate tests to our own test runnerTobias Brunner2013-11-2712-129/+227
| | | | | | Due to problems with the external libraries tkm_init/deinit can't be called for each test case. Because of this leak detective has to be disabled for these tests.
* charon-tkm: Support for out-of-tree build addedTobias Brunner2013-11-272-12/+12
|
* chunk: Fix signedness warnings caused by chunk_from_* macrosTobias Brunner2013-11-271-3/+3
| | | | | | There are countless other such warnings because e.g. chunk_create() is called with char*, but at least we prevent users from causing such warnings inadvertently when using these macros.
* tun-device: Include <linux/types.h> before <linux/if_tun.h>Martin Willi2013-11-221-0/+1
| | | | Fixes a build error on CentOS 6.4.
* trap-manager: Reset IKE_SA on bus_t if initiating failsTobias Brunner2013-11-211-0/+1
|
* trap-manager: Prevent deadlock when installing trap policiesTobias Brunner2013-11-211-40/+46
| | | | | | | | | | | Because the write lock was held while calling add_policies() on child_sa_t, which finishes with a call to child_state_change() on bus_t, a deadlock would ensue if CHILD_SAs are concurrently being established, which also causes a call to child_state_change() that will require the read lock in trap_manager_t. No locks are now being held while creating the CHILD_SA and installing the trap policies.
* printf-hook-builtin: Don't use %P to print uppercase hex pointersMartin Willi2013-11-201-6/+0
| | | | We use %P as custom printf specifier for proposals.
* openssl: Verify that a peer's ECDH public value is a point on the elliptic curveTobias Brunner2013-11-191-0/+5
| | | | | This check is mandated by RFC 6989. Since we don't reuse DH secrets, it is mostly a sanity check.
* kernel-netlink: Enable TFC padding only for tunnel mode ESP SAsTobias Brunner2013-11-191-2/+2
| | | | | | | The kernel does not allow them for transport mode SAs or IPComp SAs (and of course not for AH SAs). Fixes #446.
* Implemented libstrongswan.plugins.random.strong_equals_true optionAndreas Steffen2013-11-163-0/+22
|
* android: New release based on 5.1.1Tobias Brunner2013-11-132-4/+5
| | | | | This fixes issues with IVs and padding in ESP handling and removes the Vstr dependency.
* android: Remove dependency on libvstrTobias Brunner2013-11-1318-43/+3
|
* unit-tests: Initialize tests with a callbackTobias Brunner2013-11-063-56/+58
|
* plugin-loader: Convenience function added to add plugin dirs in build treeTobias Brunner2013-11-062-0/+28
|
* unit-tests: Separate test runner to a library, reusable by other testsMartin Willi2013-11-065-68/+168
| | | | | | Other users may make use of the noinst libtest.la helper library to implement unit tests. For libstrongswan, tests.[ch] provide the configuration for test runner to perform unit tests in a simple manner.
* unit-tests: Use some include magic to define test suite constructorsMartin Willi2013-11-062-73/+55
| | | | | Avoid editing of several files when creating test suites by using a single header file to define test suite constructor functions.
* unit-tests: Check printing of strings having zero lengthMartin Willi2013-11-061-0/+2
|
* unit-tests: Add some basic tests if PRI* printf specifiers work as expectedMartin Willi2013-11-061-0/+25
|
* unit-tests: Add a semaphore wait cancel testMartin Willi2013-11-061-0/+44
|
* unit-tests: Add a semaphore absolute timed wait testMartin Willi2013-11-061-0/+27
|
* unit-tests: Add a semaphore timed wait test caseMartin Willi2013-11-061-0/+24
|
* unit-tests: Add a simple semaphore testMartin Willi2013-11-061-0/+40
|
* unit-tests: Add a spinlock test caseMartin Willi2013-11-061-0/+49
|
* unit-tests: Add a rwlock condvar thread cancel testMartin Willi2013-11-061-0/+57
|
* unit-tests: Add a rwlock condvar absolute timed wait testMartin Willi2013-11-061-0/+43
|
* unit-tests: Add a rwlock condvar wait testMartin Willi2013-11-061-0/+40
|
* unit-tests: Add a rwlock condvar broadcast testMartin Willi2013-11-061-0/+43
|
* unit-tests: Add a rwlock condvar testMartin Willi2013-11-061-0/+50
|
* unit-tests: Add a rwlock test caseMartin Willi2013-11-061-0/+62
|