]> git.ipfire.org Git - thirdparty/strongswan.git/shortlog
thirdparty/strongswan.git
2022-04-14  Tobias Brunnergithub: Add a build against OpenSSL 3.0
2022-04-14  Tobias Brunnerunit-tests: Add environment variable to skip IPv6 strea...
2022-04-14  Tobias Brunnerunit-tests: Add support for more than one warning per...
2022-04-14  Tobias Brunneropenssl: Move ENGINE-specific code into a separate...
2022-04-14  Tobias Brunneropenssl: Remove checks and legacy compatibility code...
2022-04-14  Tobias Brunneropenssl: Fixes for HMAC with OpenSSL 3.0
2022-04-14  Tobias Brunneropenssl: Fixes for ECDSA with OpenSSL 3.0
2022-04-14  Tobias Brunnerconfigure: Move pkcs8 plugin after plugins that can...
2022-04-14  Tobias Brunnerpkcs8: Parse the decrypted PKCS#8 structure via regular...
2022-04-14  Tobias Brunneropenssl: Fixes for RSA with OpenSSL 3.0
2022-04-14  Tobias Brunneropenssl: Fixes for DH with OpenSSL 3.0
2022-04-14  Tobias Brunneropenssl: Fixes for ECDH with OpenSSL 3.0
2022-04-14  Tobias Brunneropenssl: PRF_KEYED_SHA1 might not be supported
2022-04-14  Tobias Brunnerleak-detective: Whitelist OpenSSL 3.0 functions
2022-04-14  Tobias Brunneropenssl: Move shared secret calculation to get_shared_s...
2022-04-14  Tobias BrunnerMerge branch 'ikev2-kdf-modularization'
2022-04-14  Tobias Brunnerkeymat_v2: Use plugin-provided KDF_PRF to derive SKEYSEED
2022-04-14  Tobias Brunnerunit-tests: Hand out an actual shared secret and pubkey...
2022-04-14  Tobias Brunnerwolfssl: Implement HMAC-based IKEv2 PRFs via wolfSSL...
2022-04-14  Tobias Brunnerbotan: Implement HMAC-based IKEv2 PRFs via Botan's...
2022-04-14  Tobias Brunneropenssl: Implement HMAC-based IKEv2 PRFs via OpenSSL...
2022-04-14  Tobias Brunnerkdf: Implement wrapper for IKEv2 PRFs
2022-04-14  Tobias Brunnertest-vectors: Add vectors for HMAC-based IKEv2 PRFs
2022-04-14  Tobias Brunnercrypto: Add new KDF type for IKEv2 PRFs
2022-04-14  Tobias Brunnercrypto: Adapt kdf_t interface to support KDFs with...
2022-04-14  Tobias Brunnerwolfssl: Implement prf+ via wolfSSL's HKDF implementation
2022-04-14  Tobias Brunnerbotan: Implement prf+ via Botan's HKDF implementation
2022-04-14  Tobias Brunnercrypto: Remove unused prf_plus_t
2022-04-14  Tobias Brunnerkdf: Implement prf+ directly without relying on prf_plus_t
2022-04-14  Tobias Brunnerkeymat_v1: Derive CHILD_SA keys without using prf_plus_t
2022-04-14  Tobias Brunnerunit-tests: Use plugin-provided prf+ in unit test
2022-04-14  Tobias Brunnertls-hkdf: Use plugin-provided prf+
2022-04-14  Tobias Brunnerkeymat_v2: Use plugin-provided prf+ to derive keys
2022-04-14  Tobias Brunnerappveyor: Enable kdf plugin on old images with OpenSSL...
2022-04-14  Tobias Brunnerandroid: Build and load kdf plugin for prf+
2022-04-14  Tobias Brunnertesting: Load kdf plugin in all scenarios that require it
2022-04-14  Tobias Brunnerkeymat_v2: Refactor CHILD_SA key derivation so it only...
2022-04-14  Tobias Brunnerkeymat_v2: Refactor IKE key derivation so it only needs...
2022-04-14  Tobias Brunneropenssl: Add a prf+ implementation based on OpenSSL...
2022-04-14  Tobias Brunnerkdf: Add plugin that provides a default prf+ implementation
2022-04-14  Tobias Brunnertest-vectors: Add test vectors for prf+
2022-04-14  Tobias Brunnerplugin-feature: Add plugin feature for KDFs
2022-04-14  Tobias Brunnerplugin-feature: Remove 'default' case in plugin_feature...
2022-04-14  Tobias Brunnertest-vectors: Add support for KDF test vectors
2022-04-14  Tobias Brunnercrypto-factory: Use actual plugin name when testing...
2022-04-14  Tobias Brunnercrypto-tester: Add facility to test KDFs
2022-04-14  Tobias Brunnervici: Report registered KDFs
2022-04-14  Tobias Brunnerstroke: List registered KDFs
2022-04-14  Tobias Brunnercrypto-factory: Add constructor and methods to create...
2022-04-14  Tobias Brunnerpkcs5: Rename kdf_t to avoid conflict
2022-04-14  Tobias Brunnertransform: Add private transform for KDFs
2022-04-14  Tobias Brunnercrypto: Add interface for key derivation functions
2022-04-14  Tobias BrunnerMerge branch 'labeled-ipsec'
2022-04-14  Tobias Brunnertesting: Add DSCP scenario that uses simple labels
2022-04-14  Tobias Brunnerswanctl: Add options to filter CHILD_SAs in --list-sas
2022-04-14  Tobias Brunnervici: Add options to only return specific CHILD_SAs...
2022-04-14  Tobias Brunnertesting: Copy comments to test log
2022-04-14  Tobias Brunnerswanctl: Report labels in --list-* commands
2022-04-14  Tobias Brunnervici: Report security label on CHILD_SA, policies and...
2022-04-14  Tobias Brunnervici: Make security labels and mode configurable
2022-04-14  Tobias Brunnerkernel-netlink: Forward labels from acquires
2022-04-14  Tobias Brunnertrap-manager: Add support to handle acquires with secur...
2022-04-14  Tobias Brunnerkernel-handler: Log security label received with acquire
2022-04-14  Tobias Brunnerkernel-interface: Optionally pass security label with...
2022-04-14  Tobias Brunnerike-sa: Accept optional security label when initiating...
2022-04-14  Tobias Brunnerchild-rekey: Maintain security label during rekeying
2022-04-14  Tobias Brunnerselinux: Add plugin to install trap policies with gener...
2022-04-14  Tobias Brunnerike-sa: Add helper to determine an IKE_SA's dynamic...
2022-04-14  Tobias Brunnertrap-manager: Add facility to install externally manage...
2022-04-14  Tobias Brunnerchild-sa: Allocate a new reqid if dynamic traffic selec...
2022-04-14  Tobias Brunnerkernel-netlink: Allow reqid updates for policies again
2022-04-14  Tobias Brunnerkernel-interface: Add support to change the reqid in...
2022-04-14  Tobias Brunnerkernel-wfp: Use new UDP ports in update_sa()
2022-04-14  Tobias Brunnerchild-sa: Support dynamically updating trap policies
2022-04-14  Tobias Brunnerchild-create: Add support to handle security labels
2022-04-14  Tobias Brunnerchild-create: Consider security label when comparing...
2022-04-14  Tobias Brunnerchild-sa: Add support for security labels
2022-04-14  Tobias Brunnerkernel-interface: Optionally consider security label...
2022-04-14  Tobias Brunnerpeer-cfg: Consider security labels when selecting child...
2022-04-14  Tobias Brunnerchild-cfg: Add method to select a security label
2022-04-14  Tobias Brunnerchild-cfg: Add optional security label and mode
2022-04-14  Tobias Brunnerkernel-netlink: Add support for optional security label...
2022-04-14  Tobias Brunnerencoding: Remove unused TS_TYPE and ADDRESS encodings
2022-04-14  Tobias Brunnerts-payload: Add support for TS of type TS_SECLABEL
2022-04-14  Tobias Brunnertraffic-selector-substructure: Add support for TS_SECLABEL
2022-04-14  Tobias Brunnertraffic-selector: Add TS_SECLABEL type
2022-04-14  Tobias Brunnerleak-detective: Whitelist selinux_check_access()
2022-04-14  Tobias Brunnersec-label: Add enum for security label mode
2022-04-14  Tobias Brunnersec-label: Add class to represent security labels
2022-04-14  Tobias Brunnerconfigure: Add option to link against libselinux
2022-04-14  Tobias Brunnervici: Make combination of 'trap' and 'start' configurable
2022-04-14  Tobias Brunnerenum: Add helper to parse enum flags from strings
2022-04-14  Tobias Brunnerike: Treat action_t as flags so 'start' and 'trap'...
2022-04-14  Tobias Brunnerenum: Allow specifying the name used when none of the...
2022-04-14  Tobias Brunnerchild-create: Abort initiating a duplicate CHILD_SA
2022-04-14  Tobias Brunnerchild-create: Just abort CREATE_CHILD_SA request if...
2022-04-14  Tobias Brunnerkernel-listener: Use a struct to pass data from acquires
2022-04-14  Tobias Brunnerkernel-netlink: Read protocol of acquire not from template
2022-04-14  Tobias Brunnerike-sa: Use a struct to pass optional arguments when...
2022-04-14  Tobias Brunnerike: Don't reset optional CHILD_SA properties when...
next