René Fischer
4261fcedec
botan: Use strongSwan's RNG interface in Botan plugin
...
This allows using rng_t implementations provided by other plugins to
serve as RNG for Botan.
Closes strongswan/strongswan#192 .
2021-02-15 09:27:51 +01:00
Tobias Brunner
eb399fb438
botan: Look for Botan 3 in configure script
2021-02-15 09:23:56 +01:00
Andreas Steffen
ab58f95b12
Version bump to 5.9.2dr2
2021-02-12 08:17:54 +01:00
Andreas Steffen
fcb595f961
Version bump to 5.9.2dr1
2021-01-08 11:00:15 +01:00
Andreas Steffen
f397fc02e9
configure: Fixed test for imv_swima
2020-12-24 13:08:49 +01:00
Andreas Steffen
0fc6767097
Version bump to 5.9.1
2020-11-10 20:45:13 +01:00
Andreas Steffen
d63e6156bb
Version bump to 5.9.1rc1
2020-11-01 18:45:34 +01:00
Andreas Steffen
f3d96b7bc9
Version bump to 5.9.1dr1
2020-10-07 16:54:32 +02:00
Andreas Steffen
2205c75bad
Version bump to 5.9.0
2020-07-29 13:08:09 +02:00
Andreas Steffen
2eec7efd46
Version bump to 5.9.0rc1
2020-07-21 22:43:36 +02:00
Tobias Brunner
544ff81911
configure: Ignore unknown Git version number
...
Don't abort the script if the version is reported as UNKNOWN, which happens
on CI hosts where the repository is only cloned with a certain depth (which
may not include the latest tag).
Also, never map VERSION to UNKNOWN.
Fixes: 2e522952c77d ("configure: Optionally use version information obtained from Git in executables")
2020-07-21 12:49:13 +02:00
Tobias Brunner
2e522952c7
configure: Optionally use version information obtained from Git in executables
...
The variable GIT_VERSION is always defined, either obtained from Git or
a file that is embedded in tarballs when they are built. Optionally,
that version is declared as VERSION in config.h so it will be used e.g. in
the daemons when they print the version number.
There is a check that should catch missing tags (i.e. if the version number
in AC_INIT() isn't a prefix of the version obtained via Git).
2020-07-20 14:10:52 +02:00
Andreas Steffen
d470422974
Version bump to 5.9.0dr2
2020-06-14 12:15:44 +02:00
Andreas Steffen
12e4dbb231
Version bump to 5.9.0dr1
2020-06-06 15:02:42 +02:00
Tobias Brunner
b06374f6a5
file-logger: Set owner/group of log file
...
The file is usually opened/created by root, however, if user/group IDs
are configured and the configuration is reloaded, the file will be reopened
as configured user. Like with UNIX sockets we only attempt to change
the user if we have CAP_CHOWN allowing a start as regular user.
We don't have chown() on Windows, so check for it.
2020-05-07 09:30:57 +02:00
Andreas Steffen
3273667b0b
Version bump to 5.8.4
2020-03-29 12:49:52 +02:00
Andreas Steffen
0728387ea9
Version bump to 5.8.3
2020-03-24 16:01:04 +01:00
Andreas Steffen
c88a4996fa
Version bump to 5.8.3rc1
2020-03-19 08:43:10 +01:00
Andreas Steffen
68e8fedccb
Version bump to 5.8.3dr1
2020-03-04 22:27:13 +01:00
Tobias Brunner
1966f4332b
configure: Make sure Python is available for static builds
...
We need Python to create files that reference the plugin constructors.
Without it, empty files are created and plugins can't be loaded.
Fixes #3349 .
2020-02-28 13:55:18 +01:00
Tobias Brunner
cfed3a87ee
charon-nm: Use better default directory for D-Bus policy file
...
Also makes it configurable via configure script. Depending on `$datadir` is
not ideal as package maintainers might set that to a custom value. Depending
on `$datarootdir` might have been better, the default if pkg-config fails is
now based on that.
References #3339 .
2020-02-21 09:46:13 +01:00
Tobias Brunner
b2b69f4156
configure: Depend on libip4tc instead of libiptc
...
The libiptc meta-package apparently will be removed e.g. from Debian.
We currently only need IPv4 support in the connmark and forecast plugins.
Fixes #3338 .
2020-02-14 10:07:23 +01:00
Josh Soref
b3ab7a48cc
Spelling fixes
...
* accumulating
* acquire
* alignment
* appropriate
* argument
* assign
* attribute
* authenticate
* authentication
* authenticator
* authority
* auxiliary
* brackets
* callback
* camellia
* can't
* cancelability
* certificate
* choinyambuu
* chunk
* collector
* collision
* communicating
* compares
* compatibility
* compressed
* confidentiality
* configuration
* connection
* consistency
* constraint
* construction
* constructor
* database
* decapsulated
* declaration
* decrypt
* derivative
* destination
* destroyed
* details
* devised
* dynamic
* ecapsulation
* encoded
* encoding
* encrypted
* enforcing
* enumerator
* establishment
* excluded
* exclusively
* exited
* expecting
* expire
* extension
* filter
* firewall
* foundation
* fulfillment
* gateways
* hashing
* hashtable
* heartbeats
* identifier
* identifiers
* identities
* identity
* implementers
* indicating
* initialize
* initiate
* initiation
* initiator
* inner
* instantiate
* legitimate
* libraries
* libstrongswan
* logger
* malloc
* manager
* manually
* measurement
* mechanism
* message
* network
* nonexistent
* object
* occurrence
* optional
* outgoing
* packages
* packets
* padding
* particular
* passphrase
* payload
* periodically
* policies
* possible
* previously
* priority
* proposal
* protocol
* provide
* provider
* pseudo
* pseudonym
* public
* qualifier
* quantum
* quintuplets
* reached
* reading
* recommendation to
* recommendation
* recursive
* reestablish
* referencing
* registered
* rekeying
* reliable
* replacing
* representing
* represents
* request
* request
* resolver
* result
* resulting
* resynchronization
* retriable
* revocation
* right
* rollback
* rule
* rules
* runtime
* scenario
* scheduled
* security
* segment
* service
* setting
* signature
* specific
* specified
* speed
* started
* steffen
* strongswan
* subjectaltname
* supported
* threadsafe
* traffic
* tremendously
* treshold
* unique
* uniqueness
* unknown
* until
* upper
* using
* validator
* verification
* version
* version
* warrior
Closes strongswan/strongswan#164 .
2020-02-11 18:23:07 +01:00
Tobias Brunner
2cb4af6696
wolfssl: Use pkg-config to check for wolfSSL
...
The other checks trigger an automatic install of the old and incompatible
Ubuntu package on LGTM.
2020-01-30 17:12:05 +01:00
Tobias Brunner
04ce39e7c0
libtpmtss: Only check for legacy TSS2 libs if newer are not found
...
On LGTM, legacy packages are installed automatically otherwise.
2020-01-30 15:37:45 +01:00
Tobias Brunner
b723431540
vici: Run Python tests via tox if available
...
Since we use the serial test harness we can't use AM_TESTS_ENVIRONMENT.
The script is necessary for out-of-tree builds.
2020-01-14 15:26:52 +01:00
Andreas Steffen
e5f18a46b7
Version bump to 5.8.2
2019-12-17 14:30:41 +01:00
Andreas Steffen
b9eade0ca2
Version bump to 5.8.2rc2
2019-12-16 22:11:43 +01:00
Andreas Steffen
c2d6ac1124
Version bump to 5.8.2rc1
2019-12-07 23:06:22 +01:00
Tobias Brunner
3d40bf6491
configure: Drop unnecessary gperf version check
...
While the check probably made sense when strongSwan 4.x was started, gperf
version 3.0.1 was released in 2003, so it's very unlikely that version 2.x
is still around anywhere.
2019-12-06 10:30:52 +01:00
Tobias Brunner
72373d940a
configure: Abort if gperf is not found but generated files don't exist
...
When building from a tarball gperf is not required as the generated
files already exist, however, when building from the repository that's
not the case, so warn the user if gperf is not found.
2019-12-06 10:30:52 +01:00
Tobias Brunner
251ac44df3
configure: Declare GPERF and PERL as variables
...
These are documented in --help and will be cached.
2019-12-06 10:30:52 +01:00
Andreas Steffen
ccaedf8761
Version bump to 5.8.2dr2
2019-11-26 22:36:55 +01:00
Andreas Steffen
4f4e026d3b
Version bump to 5.8.2dr1
2019-10-18 16:26:41 +02:00
Andreas Steffen
737375a2d2
drbg: Implemented NIST SP-800-90A DRBG
2019-10-16 16:46:24 +02:00
Andreas Steffen
1e38151b30
Version bump to 5.8.1
2019-09-02 14:39:16 +02:00
Andreas Steffen
7cfe85cc85
Version bump to 5.8.1rc2
2019-08-29 11:15:18 +02:00
Andreas Steffen
d2b771203f
Version bump to 5.8.1rc1
2019-08-28 16:38:40 +02:00
Tobias Brunner
149d1bbb05
memory: Use explicit_bzero() as memwipe() if available
2019-08-22 15:04:45 +02:00
Tobias Brunner
05e3751ebb
fuzz: Support build with -fsanitize=fuzzer instead of libFuzzer.a
...
Recent clang versions (6.0+) include libFuzzer and OSS-Fuzz switched to
that mode a while ago.
2019-07-17 11:44:27 +02:00
Andreas Steffen
ab1aa03bf5
Version bump to 5.8.1dr1
2019-06-26 17:32:33 +02:00
Andreas Steffen
55dd0361b8
Version bump to 5.8.0
2019-05-20 12:31:08 +02:00
Andreas Steffen
74ac0c9efd
Version bump to 5.8.0rc1
2019-05-10 12:55:48 +02:00
Tobias Brunner
1815c1de52
init: Rename systemd units
...
Use strongswan-starter for the legacy unit and simply strongswan for the
modern one (strongswan-swanctl is configured as alias, which should
cause the installation of symlinks when the service is enabled via
systemctl).
2019-04-24 13:57:48 +02:00
Tobias Brunner
d50bb81c7d
travis: Run tests against wolfSSL
...
Check for wolfssl/options.h because if it isn't included, checking other
headers will trigger a warning about hardening the wolfSSL build, which
will cause the check to fail with -Werror.
If the file doesn't exist because user_settings.h is used, the check may
be skipped by configuring with `ac_cv_header_wolfssl_options_h=yes`.
2019-04-24 12:26:08 +02:00
Sean Parkinson
c92eade82c
wolfssl: Add wolfSSL plugin for cryptographic implementations
2019-04-24 11:40:14 +02:00
Tobias Brunner
ebe2bedebd
configure: Fix package version for python packages for developer releases
...
According to PEP 440 the suffix for development releases is .devN and
not just devN.
2019-04-04 09:36:38 +02:00
Tobias Brunner
d74ddd7893
xfrmi: Move to a separate directory to fix monolithic build
2019-04-04 09:31:38 +02:00
Andreas Steffen
7b5eee65a0
Version bump to 5.8.0dr2
2019-03-30 17:11:34 +01:00
Andreas Steffen
08a7326181
Version bump to 5.8.0dr1
2019-03-13 19:02:42 +01:00
