{"push_id":906004461,"size":417,"distinct_size":417,"ref":"refs/heads/master","head":"891e9e95ea7644abf7203d0357ced7d2f8680c77","before":"e1943491483f68050c0e06410407c37e169d6201","commits":[{"sha":"63d370387d4118c647e4c86bf8e27eddfc3f5715","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"vici: Certification Authority support added.\n\nCDP and OCSP URIs for a one or multiple certification authorities\ncan be added via the VICI interface. swanctl allows to read\ndefinitions from a new authorities section.","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/63d370387d4118c647e4c86bf8e27eddfc3f5715"},{"sha":"41aa7eb53167488fec86d4b54d07732ab0d71817","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"Version bump to 5.3.3dr1","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/41aa7eb53167488fec86d4b54d07732ab0d71817"},{"sha":"f335e2f848942a867107fd614d4446d5247686aa","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"tests: fixed description of swanctl ip-pool scenarios","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/f335e2f848942a867107fd614d4446d5247686aa"},{"sha":"3d9bfb607c4402d41b315558d0d64de296a5a228","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"tests: fixed evaltest of swanctl/rw-cert scenario","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/3d9bfb607c4402d41b315558d0d64de296a5a228"},{"sha":"6b265c5e5c190917a292d5e83e723989b37cf50b","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"tests: Introduced SWANCTL flag in test.conf","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/6b265c5e5c190917a292d5e83e723989b37cf50b"},{"sha":"db69295d2ecaa0634b71004f84e0efdff0f7bd9a","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"tests: Introduced IPV6 flag in tests.conf","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/db69295d2ecaa0634b71004f84e0efdff0f7bd9a"},{"sha":"73cbd5c7f848d9b0ffb60ba98585b3fd6c82edd6","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"testing: Updated all swanctl scenarios and added some new ones","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/73cbd5c7f848d9b0ffb60ba98585b3fd6c82edd6"},{"sha":"450c6e8dd90c3be32cdfdda8c0d4b6ac4ffe6fdc","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"testing: Added swanctl --list-authorities output to do-tests","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/450c6e8dd90c3be32cdfdda8c0d4b6ac4ffe6fdc"},{"sha":"aaeb524cea6e3fc1e80d8b0e061cd3751697785e","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"testing: Updated loop ca certificates","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/aaeb524cea6e3fc1e80d8b0e061cd3751697785e"},{"sha":"2096d54198141735cab76cd25f1a3bd062acc9e7","author":{"email":"436e370756a35a1eeff7c5e7df088495ebd50473@strongswan.org","name":"Andreas Steffen"},"message":"Improved legibility of swanctl CRL listings","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/2096d54198141735cab76cd25f1a3bd062acc9e7"},{"sha":"65579569adfa0e2c9602ee250f4554169ba5a87d","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"host: Properly handle NULL in host_create_from_string[_and_family]","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/65579569adfa0e2c9602ee250f4554169ba5a87d"},{"sha":"6bfa66069304c1fc1345b4e72762a3b1a80e4338","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"ike-cfg: Add helper function to determine address family of IP addresses\n\nAll configured static addresses (hostnames, ranges or subnets are not\nconsidered) must be of the same family, otherwise AF_UNSPEC is returned.","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/6bfa66069304c1fc1345b4e72762a3b1a80e4338"},{"sha":"834bf7ca5f4dcd68278ea0f6b730f66527be9610","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"ike-cfg: Add unit tests for ike_cfg_get_family() helper","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/834bf7ca5f4dcd68278ea0f6b730f66527be9610"},{"sha":"a11048adee0aeab8af10259f406363d7cc6beccc","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"ike: Use address family of local address when resolving remote host\n\nIf static local addresses are configured we should use their address family\nas a hint when resolving the remote address.\nWe don't do this if %any is configured as this might break existing\nconfigurations (%any4 and %any6 are however used as hint).","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/a11048adee0aeab8af10259f406363d7cc6beccc"},{"sha":"f22c655b1102631f81de54ba43f12eefde93c883","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"Merge branch 'remote-host-family'\n\nConsiders the address family of locally defined addresses when resolving\nthe remote host.\n\nFixes #993.","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/f22c655b1102631f81de54ba43f12eefde93c883"},{"sha":"6f7a3b33bc044e0c212be54be74b9497d513ca86","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"ike: Fall back to the current remote IP if it resolves to %any\n\nIn some situations it might be valid for a host that configures\nright=%any to reestablish or reauthenticate an IKE_SA. Using %any would\nimmediately abort the initiation causing the new SA to fail (which\nmight already have the existing CHILD_SAs assigned).\n\nFixes #1027.","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/6f7a3b33bc044e0c212be54be74b9497d513ca86"},{"sha":"773fcb1605d413997450b59d114a1c035910cc58","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"trap-manager: Properly check-in IKE_SA if initiating fails\n\nThis basically reverts f4e822c1b422 (\"trap-manager: don't check-in\nnonexisting IKE_SA if acquire fails\").  As checkout_by_config() could\nreturn an already existing and established IKE_SA we have to properly\ndestroy it, for instance, in case other threads are waiting to check\nit out.  checkin_and_destroy() should handle the case of a new SA\nproperly (it produces a log message on level 1, though).","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/773fcb1605d413997450b59d114a1c035910cc58"},{"sha":"a229bdce625338117966a53efd0475b2c7c84566","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"trap-manager: Changed how acquires we acted on are tracked\n\nThis fixes potential race conditions in case complete() or flush() is\nexecuted before or concurrently with a thread that handles an acquire.\nIt will also simplify tracking multiple acquires created for the same\ntrap policy in the future.\n\nAlso fixes the behavior in some error situations.","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/a229bdce625338117966a53efd0475b2c7c84566"},{"sha":"12b3cdba7689113558f58a5265827f3086852bae","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"trap-manager: Resolve race conditions between flush() and install()\n\nWhen flush() is called there might be threads in install() waiting for\ntrap policies to get installed (without holding the lock).  We have to\nwait until they updated the entries with the respective CHILD_SAs before\ndestroying the list.\n\nWe also have to prevent further trap policy installations (and wait until\nthreads in install() are really finished), otherwise we might end up\ndestroying CHILD_SA objects after the kernel interface implementations\nhave already been unloaded (avoiding this is the whole point of calling\nflush() before unloading the plugins).","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/12b3cdba7689113558f58a5265827f3086852bae"},{"sha":"f3d39666e0d62fb9a790b72ee7ae2b9255b21cdd","author":{"email":"059b8b880f8441509ec8a65b50b4c6ae74ebea76@strongswan.org","name":"Tobias Brunner"},"message":"shunt-manager: Add a lock to safely access the list of shunt policies","distinct":true,"url":"https://api.github.com/repos/rklabs/strongswan/commits/f3d39666e0d62fb9a790b72ee7ae2b9255b21cdd"}]}