tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	testing: Configure logging via syslog in strongswan.conf	Tobias Brunner	2017-11-15	2	-3/+5
\| \| \| \| \|	Globally configure logging in strongswan.conf.testing and replace all charondebug statements with strongswan.conf settings.
*	testing: make curve25519 the default DH group	Andreas Steffen	2016-11-14	2	-2/+4
\|
*	testing: Use TLS 1.2 in RADIUS test cases	Tobias Brunner	2016-06-17	1	-0/+3
\| \| \| \| \| \| \| \| \|	This took a while as in the OpenSSL package shipped with Debian and on which our FIPS-enabled package is based, the function SSL_export_keying_material(), which is used by FreeRADIUS to derive the MSK, did not use the correct digest to calculate the result when TLS 1.2 was used. This caused IKE to fail with "verification of AUTH payload with EAP MSK failed". The fix was only backported to jessie recently.
*	configure: Load fetcher plugins after crypto base plugins	Martin Willi	2014-09-24	2	-2/+2
\| \| \| \| \| \| \| \| \| \|	Some fetcher plugins (such as curl) might build upon OpenSSL to implement HTTPS fetching. As we set (and can't unset) threading callbacks in our openssl plugin, we must ensure that OpenSSL functions don't get called after openssl plugin unloading. We achieve that by loading curl and all other fetcher plugins after the base crypto plugins, including openssl.
*	activated iptables in some ikev2 scenarios	Andreas Steffen	2013-01-17	2	-84/+32
\|
*	Adapt test configurations	Reto Buerki	2013-01-17	6	-125/+0
\| \| \| \|	Adapt test configurations to the new Debian-based system.
*	removed plutostart parameter	Andreas Steffen	2012-06-13	2	-2/+0
\|
*	load nonce plugin	Andreas Steffen	2012-05-23	2	-2/+2
\|
*	upgraded ikev2 scenarios to 5.0.0	Andreas Steffen	2012-05-11	1	-1/+0
\|
*	Run scenarios without xcbc plugin	Andreas Steffen	2011-10-16	2	-2/+2
\|
*	optimized FreeRadius scenarios for debug output	Andreas Steffen	2010-09-02	2	-20/+1
\|
*	defined aaa_identity	Andreas Steffen	2010-09-01	1	-0/+2
\|
*	added ikev2/rw-eap-tls-radius	Andreas Steffen	2010-08-05	12	-0/+355