github.com/vyos/vyos-strongswan commits | Ecosyste.ms: OpenCollective

Reject RSASSA-PSS params with negative salt length

The `salt_len` member in the struct is of type `ssize_t` because we use
negative values for spec...

d99fe15d9e86c5a4c7546b58f94c9caed68b3953 authored almost 3 years ago by Tobias Brunner <[email protected]>

T1888: deprecate package

f71d48f38f637a3741d63539cbc59fe094fb62f8 authored over 3 years ago by Christian Poessinger <[email protected]>

Debian: bullseye needs libxtables-dev over iptables-dev

8822c451b298b256d4de66cb2e56890b336b6a70 authored over 3 years ago by Christian Poessinger <[email protected]>

Jenkins: enable arm64 builds

329c3e314457e2329c961ada1640ccbab84dd281 authored over 3 years ago by Christian Poessinger <[email protected]>

Jenkins: T2625: migrate to build library

f55c1c12f8b45f6555ae93daf1cc2d133bf6fb01 authored over 4 years ago by Christian Poessinger <[email protected]>

dmvpn: add required patches for FRR NHRP implementation

Patches are not active. To activate bth patches add their corresponding
file name to debian/patc...

1014d39807a14d266d35db5a94eae2d26e6ea336 authored over 4 years ago by Christian Poessinger <[email protected]>

Jenkins: T1870: support GitHub PullRequest builds

fd286871448acc36f8d727c07405ba8ff91d1d2b authored over 4 years ago by Christian Poessinger <[email protected]>

Jenkins: make pipeline branch independent

b73af93684e4ac46fd8c2051345eb015e55f6daf authored almost 5 years ago by Christian Poessinger <[email protected]>

Jenkins: adjust to new Debian Buster build

60c32fc3ea95d37205ac0e73b1ba1396ccf298c3 authored almost 5 years ago by Christian Poessinger <[email protected]>

Jenkins: import Pipeline from vyos-1x commit 2d3539f9dec1

83a8545596f8e6fe627f829047d5156f4f534c9b authored about 5 years ago by Christian Poessinger <[email protected]>

fixes T1070 - SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer

74ade64b6fd0e02c1ccbc521a3ccba986c2063be authored almost 6 years ago by Kim Hagen <[email protected]>

restore ability to remove tunnel connection by source and destination ip

T1070 - SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer

d1681303201c3516d5d8d1cda277bd43f39cae78 authored almost 6 years ago by Kim Hagen <[email protected]>

Add patches for for dmvpn.

Use the daemon facility for IPsec logging (fixes T551).

1cf12b0f2f921bfc51affa3b81226d4a3e9138e7 authored almost 6 years ago by Kim Hagen <[email protected]>

Disable building the charon-nm package, which we do not use.

The practical reason for removing it completely for the time being is that
libnm is not in jessie.

5db01ad9badcea69bbab2006859ab16d7a5e5213 authored almost 6 years ago by Kim Hagen <[email protected]>

upload strongSwan 5.7.2-1 to unstable

0d4aee5440ebef1042bb8d9e65ee3dc127257df8 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

cd899519a1f9c4896b3d339f3dc6aef47c7e4498 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/patches: import patches in gbp pq

b832ef5d09a9fc8c5f6bfe24b01ba98a01b7d5d6 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/u/signing-key.asc: strip signatures from upstream signing key

a612725b0b1bd3a0cde37d94151058139b4199f9 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/libstrongswan.dirs: drop lintian overrides dir

80a184862fd21998ed5aa7df6d9781e23b96af27 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: update standards version to 4.3.0

9195117a3c2f25706e3506f8f307bbdf615ce92b authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/copyright updated

f43b5ef32f59cee562a5449192904acf56efda1a authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.7.2

918094fde55fa0dbfd59a5f88d576efb513a88db authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/copyright update

69bc96f6b0b388d35e983f8d27224fa49d92918c authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

use a clean export for upstream signing key

02b2d82828a478093038f2a8713c7b942e65437b authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

drop unused debconf template

fdb8960fb0806c19e52c177081a1f796aff453d9 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: update standards version to 4.2.1

a8ac65b13f039b6bf40e46733f6cbaa57a2b4f92 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/watch: use HTTPS protocol

57406bca3396c3ffc38508b200860ee534d41d64 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/copyright: fix typos

d15512f555a8f4000cf8104c81bf805e9a375e5d authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: remove Rene from Uploaders, thanks!

c4114c813b8a247b3e6ebdcad1d3b1897f7cae65 authored almost 6 years ago by Yves-Alexis Perez <[email protected]>

upload strongSwan 5.7.1-1 to unstable

7683c1351da72d8ce451277f814a5319902c6032 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

c18b38ede1881bf0301e239315f95a4aa87e9323 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

Update upstream source from tag 'upstream/5.7.1'

Update to upstream version '5.7.1'
with Debian dir 72f82c6dc54a03e0a4ef30d019024a741edf8eb4

db444b349d9e135dc54b3d07fa845ef952183f0b authored about 6 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.7.1

3001f2ed68bf2e519b197a0a33e9976177c002ae authored about 6 years ago by Yves-Alexis Perez <[email protected]>

remove unused lintian overrides

1235601b34833b5af07c380767ff36275705bd7c authored about 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

3f293d5e9a5c99f36e2e3c97da03b4b1fb54324a authored about 6 years ago by Yves-Alexis Perez <[email protected]>

enable chapoly plugin

closes: #814927

37dae128e0447b89302577a7479eb6bc9e887f9d authored about 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: Remove XS-Testsuite field, not needed anymore

80407b2ba6e0a0322182487047b7c768c9c72abf authored about 6 years ago by Ondřej Nový <[email protected]>

d/rules: Remove trailing whitespaces

aebc61cb39283f2d4c471c18823ca6fcdfea5d79 authored about 6 years ago by Ondřej Nový <[email protected]>

d/changelog: Remove trailing whitespaces

ac1d5a02030597ac1cbcfa9cac76fa21aa286a85 authored about 6 years ago by Ondřej Nový <[email protected]>

d/copyright: Use https protocol in Format field

f803f662aba915b0ae33a31ef34d89b37924a969 authored about 6 years ago by Ondřej Nový <[email protected]>

Merge branch 'apparmor-cosmetic-fixes' into 'debian/master'

Apparmor cosmetic fixes

See merge request debian/strongswan!2

43136aa5f2a8d02161a7b271db3c95c01b3a7a6b authored about 6 years ago by Yves-Alexis Perez <[email protected]>

Remove redundant capabilities in charon Apparmor profiles

ae0b23db71d7e1298cf0adcf6bf2a0d50c714481 authored about 6 years ago by Simon Deziel <[email protected]>

Fix typo in comment of charon Apparmor profiles

912855f3b02f430cbbb77d1f6d5cb44d271ee698 authored about 6 years ago by Simon Deziel <[email protected]>

upload strongSwan 5.7.0-1 to unstable

214952b7e4ad76460e8d0b90ab0558d3594cd696 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

b6cc8802ffdff981fca0995d85005ed832913810 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: fix typo in libstrongswan long description

356b2f617675b39607190bea448f332aa628b8c1 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

f65cc3bb766ab5906653496a114f2bd3ca82b893 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

Update upstream source from tag 'upstream/5.7.0'

Update to upstream version '5.7.0'
with Debian dir b608300a1e1f88db62d14d08a55ca09f3603f054

7152c3439f3decbb6366d94464d3c089674c8c30 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.7.0

e0e280b7669435b991b7e457abd8aa450930b3e8 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

d/gbp.conf added, following DEP-14

c2ac4e0da62d859085148d8518d558402e1f9a8c authored about 6 years ago by Yves-Alexis Perez <[email protected]>

update AppArmor templates to handle usr merge

Thanks Christian Ehrhardt for the patch

closes: #905082

bd93d36dc8baa6fb3e76d4808278e077d4b47301 authored about 6 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.3-1

15fcd832de6731ae106eedf3c9e5c8cb5e503e35 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

update changelog for 5.6.3

5fff8c83fc7aa928b29e8cbcab1f3756f36b6607 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

d/p/05_charon-nm-Fix-building-list-of-DNS-MDNS-servers-with removed

included upstream

ba32e7fa5d314427b0f966e9259e1397ecfd600e authored over 6 years ago by Yves-Alexis Perez <[email protected]>

Update upstream source from tag 'upstream/5.6.3'

Update to upstream version '5.6.3'
with Debian dir d2b13199c1ca302286cbf83878342276cb01d710

9207a0837c19c2f1bf9486d1621438693841039f authored over 6 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.6.3

51a71ee15c1bcf0e82f363a16898f571e211f9c3 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

update charon-systemd AppArmor profile

allow access to {,/var}/run/notify

closes: #896813

3456101fa5dfd78d8b74c005b8dad281bb045398 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.2-2

ed98236354e15a8d7f46b860c30ede46f6df1db8 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

89bbf20e482fef1eeb6e1259c1186f78ee8e4062 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

d/rules: drop parallel and autoreconf from dh, done with compat 10

f2399b852c3bc5757570b1376a807de6f93cd5a3 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

d/compat bumped to 10

c66b748423e53755213ea2770864141ef9a33637 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: drop b-d on n-m-dev and make libnm-dev linux-any

closes: #895434

aacad2e6ff4e738121230d2f7a7dac978517df4c authored over 6 years ago by Yves-Alexis Perez <[email protected]>

charon-nm: Fix building list of DNS/MDNS servers with libnm

b7a467883bae8c2e28582697d0689fc5756e7758 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.2-1

a382fd6ae69690b924bf99e4085a4451e5451990 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

finalize changelog

90ab2af4fea53a9e255ea4c633f61e26b929add0 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

install tpm_extendpcr binary in libstrongswan-extra-plugins

5ec27cb91533fc840a9ec59fccb9b73a535420ef authored over 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: update build-deps for libnm port

closes: #862885

112463a84a94e52604482b22228b44c510e0a5c6 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

d/control: move Vcs to salsa

b54d64d6768c0f0eda1578805e4be7d3bb89eccb authored over 6 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.6.2

94218f4dc079e5fcf76b3468b9e40072181246f2 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.6.2

7793611ee71b576dd9c66dee327349fa64e38740 authored over 6 years ago by Yves-Alexis Perez <[email protected]>

strongswan-libcharon: add bypass-lan plugin

not loaded by default

fd2deca589bc3d067f1cbfe59a25d3a90625e02b authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

d/control: remove Romain Françoise from uploaders

96e3719d4ea41f24f9d17ee7bf2676b44f326fde authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

Merge remote-tracking branch 'origin/master'

126877ab5a1624870dc4bdc2529bfde611f68eb7 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.1-3

bc58fcef7000bf7a564d505877119308d3b7ae64 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

update standards version to 4.1.2.

81a201ed39744d5f4425e03f96bff4e1676c8b13 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

move updown plugin from -starter to -libcharon. closes: #884578

212dd67d4515ae78a9ce5d71cc3083c80153ab14 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

changelog update

50347594b2411c23f9314bead2b5cf9ee43cb129 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

d/NEWS: add information about disabled algorithms

closes: #883072

d97dc1c94c3005c1c2cf846a6a135d5cc2c921f6 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.1-2

fdd7bbc42af067d8fd9143e671b29ed2677fc363 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

move counters plugin from -starter to -libcharon. closes: #882431

e89f35cc01d439b9307e6d87dae3f9b918c370a1 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.1-1

5bd78829f39e33cb8ace52c135dfa729944bd37a authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

debian/control: replace dh-systemd build-dep by updated build-dep on

debhelper

fcec72c724e863d31a1bef89401418ec7758c7fd authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

debian/control: update standards version to 4.1.1

f067623df71ed8ace2aceaea179624481d341d89 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

debian/libstrongswan-extra-plugins.install: install tpm plugin

e6933ff25561f1b7e924e57f51434b78ecc9f8ed authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

debian/libstrongswan.install: install MGF1 plugin

needed for RSASSA-PSS signatures support when using the gmp plugin

cbc6ab9a043e471eb848e354544d17d0c3a20ec3 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

debian/strongswan-starter.install: install counters plugin

d14d4c1706b4b09c7b38ba4d7369f3486be6346a authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

debian/rules: explicitly enable tpm plugin

c5043bccb2f23b6fb6143335d25d89c1ebe97679 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

update changelog for new upstream version

41693e1557c2cf0caf081ed5f4673c8fd81e6d00 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

New upstream version 5.6.1

e1d78dc2faaa06e7c3f71ef674a71e4de2f0758e authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

Update upstream source from tag 'upstream/5.6.1'

Update to upstream version '5.6.1'
with Debian dir 3996fc7d7b19a96b252a7fcbac12c94452d1e7d7

6eb3bec5bee061bbb6a5c10f01d9737fb4597265 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

Remove transitional packages

* debian/control:
- remove strongswan-ike{,v1,v2} packages. closes: #878979

745cb3e75fbcd8bc70e8b5f55a91ae2c8a274688 authored almost 7 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.0-2

618cdc83a8824299d5c4eb8fb445743dc40a17bc authored about 7 years ago by Yves-Alexis Perez <[email protected]>

only use dh_missing --fail-missing when doing an architecture dependent

packages.

4d2531e4e5a1c4aa11ffc7a51cea4ff1c2591694 authored about 7 years ago by Yves-Alexis Perez <[email protected]>

release strongSwan 5.6.0-1

adb4e1b128c24b4a3d47e6091872f869fd353519 authored about 7 years ago by Yves-Alexis Perez <[email protected]>

add lintian overrides for private keys directories using 700 permissions.

919e729b2b53f68e014f93688e4202c7928312a5 authored about 7 years ago by Yves-Alexis Perez <[email protected]>

install pt-tls-client in /u/b and also install its manpage.

ef3772494ba19dac499034d4154c9f9babdf9e7a authored about 7 years ago by Yves-Alexis Perez <[email protected]>

remove patch, included upstream

72b95a360acbd4f0b1e4dcd28ceab43949304b1a authored about 7 years ago by Yves-Alexis Perez <[email protected]>

fix insufficient input validation in gmp plugin, which can cause a denial of service vulnerability (CVE-2017-11185) closes: #872155

c69aff447e8a8baff18ccbf97c022e8cc2e372fa authored about 7 years ago by Yves-Alexis Perez <[email protected]>

New upstream release.

23dc3eabd3de992d0d4cdc327929e3b044c5a7d9 authored about 7 years ago by Yves-Alexis Perez <[email protected]>

Updated version 5.6.0 from 'upstream/5.6.0'

with Debian dir e138a03837a338ec35cc53a33de19381770a5f0c

d35f9a428e3443c4478b3ba1b03d7f69ce43436c authored about 7 years ago by Yves-Alexis Perez <[email protected]>