strongswan.git
19 months agotls-crypto: Rename methods to calculate finished message
Tobias Brunner [Tue, 25 Aug 2020 14:52:20 +0000 (16:52 +0200)]
tls-crypto: Rename methods to calculate finished message

Instead of the version number use "legacy" for the one for earlier TLS
versions.

19 months agotls-crypto: Use internal PRF of tls-hkdf to generate finished message
Tobias Brunner [Tue, 25 Aug 2020 14:49:52 +0000 (16:49 +0200)]
tls-crypto: Use internal PRF of tls-hkdf to generate finished message

Also adds additional checks.

19 months agotls-hkdf: Add helper method to allocate data from the internal PRF
Tobias Brunner [Tue, 25 Aug 2020 14:44:17 +0000 (16:44 +0200)]
tls-hkdf: Add helper method to allocate data from the internal PRF

19 months agotls-hkdf: Cleanups and refactorings
Tobias Brunner [Tue, 25 Aug 2020 14:01:27 +0000 (16:01 +0200)]
tls-hkdf: Cleanups and refactorings

The main refactoring is how secrets (PSK/DH) are handled.

19 months agotls-crypto: Simplify signature creation/verification
Tobias Brunner [Tue, 25 Aug 2020 13:58:46 +0000 (15:58 +0200)]
tls-crypto: Simplify signature creation/verification

19 months agotls-crypto: Simplify handshake/application key derivation and rename methods
Tobias Brunner [Tue, 25 Aug 2020 11:22:04 +0000 (13:22 +0200)]
tls-crypto: Simplify handshake/application key derivation and rename methods

Also consistently change the ciphers outside of tls_crypto_t and
simplify key derivation in tls_peer_t and fix a memory leak.

19 months agotls-hkdf: Make labels enum a proper type
Tobias Brunner [Tue, 25 Aug 2020 11:35:54 +0000 (13:35 +0200)]
tls-hkdf: Make labels enum a proper type

19 months agotls-peer: Support x25519/448 for TLS 1.2
Tobias Brunner [Wed, 26 Aug 2020 13:23:53 +0000 (15:23 +0200)]
tls-peer: Support x25519/448 for TLS 1.2

These DH groups don't use the point format prefix (RFC 8422 deprecated
any other format anyway).  Since they are enumerated now, they can also
be used by servers for TLS 1.2.

19 months agotls-crypto: Enumerate x25519/448 and rename constant for consistency
Tobias Brunner [Tue, 25 Aug 2020 11:16:52 +0000 (13:16 +0200)]
tls-crypto: Enumerate x25519/448 and rename constant for consistency

19 months agotls-crypto: Simplify hash algorithm handling
Tobias Brunner [Tue, 25 Aug 2020 11:14:05 +0000 (13:14 +0200)]
tls-crypto: Simplify hash algorithm handling

19 months agotls-crypto: Delay instantiation of cipher suites
Tobias Brunner [Tue, 25 Aug 2020 13:46:29 +0000 (15:46 +0200)]
tls-crypto: Delay instantiation of cipher suites

This way we can take into account the version set via setter on tls_t.

19 months agotls-crypto: Filter TLS cipher suites by min/max version
Tobias Brunner [Tue, 25 Aug 2020 11:54:08 +0000 (13:54 +0200)]
tls-crypto: Filter TLS cipher suites by min/max version

There is no point proposing legacy (or future) cipher suites depending on
the proposed TLS versions. It was actually possible to negotiate and use
cipher suites only defined for TLS 1.2 with earlier TLS versions.

19 months agotls-crypto: Correctly filter cipher suites based on PRF algorithms
Tobias Brunner [Tue, 25 Aug 2020 11:47:00 +0000 (13:47 +0200)]
tls-crypto: Correctly filter cipher suites based on PRF algorithms

The previous check operated on the first array element.

19 months agotls-crypto: Use correct key length for ChaCha20/Poly1305
Tobias Brunner [Wed, 26 Aug 2020 10:18:06 +0000 (12:18 +0200)]
tls-crypto: Use correct key length for ChaCha20/Poly1305

19 months agolibtls: Some code style fixes
Tobias Brunner [Tue, 25 Aug 2020 14:32:40 +0000 (16:32 +0200)]
libtls: Some code style fixes

19 months agotls-test: Make address family configurable and simplify DNS/socket handling
Tobias Brunner [Tue, 25 Aug 2020 11:09:55 +0000 (13:09 +0200)]
tls-test: Make address family configurable and simplify DNS/socket handling

19 months agolibtls: Implement TLS 1.3 handshake on client-side
bytinbit [Thu, 21 May 2020 07:37:38 +0000 (09:37 +0200)]
libtls: Implement TLS 1.3 handshake on client-side

The code is a minimal handshake with the HelloRetryRequest message
implementation missing.
Can be tested with an OpenSSL server running TLS 1.3. The server must
be at least version 1.1.1 (September 2018).

Co-authored-by: ryru <pascal.knecht@hsr.ch>
19 months agolibtls: Implement HKDF for TLS 1.3
Pascal K [Thu, 21 May 2020 05:57:14 +0000 (07:57 +0200)]
libtls: Implement HKDF for TLS 1.3

TLS 1.3 uses HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
as defined in RFC 5869 to compute traffic secrets.

Co-authored-by: bytinbit <meline.sieber@hsr.ch>
19 months agolibtls: Add support to run unit tests with a custom plugin list
Tobias Brunner [Wed, 22 Apr 2020 14:27:00 +0000 (16:27 +0200)]
libtls: Add support to run unit tests with a custom plugin list

19 months agolibtls: Add TLS 1.3 implementation of tls_aead_t
Tobias Brunner [Wed, 22 Apr 2020 14:03:01 +0000 (16:03 +0200)]
libtls: Add TLS 1.3 implementation of tls_aead_t

The key material, in particular the nonce/IV, is derived differently and
the IV is also generated in a different way.  Additionally, the actual
content type is encrypted and there may be optional padding to mask the
actual size of the encrypted data.

19 months agolibtls: Allow tls_aead_t to change the content type
Tobias Brunner [Wed, 22 Apr 2020 13:44:31 +0000 (15:44 +0200)]
libtls: Allow tls_aead_t to change the content type

The actual content type is encrypted with TLS 1.3, the type in the record
header is always Application Data.

19 months agotesting: extended sleep time tkm/xfrmproxy tests 5.9.2dr2
Andreas Steffen [Fri, 12 Feb 2021 08:44:00 +0000 (09:44 +0100)]
testing: extended sleep time tkm/xfrmproxy tests

19 months agoVersion bump to 5.9.2dr2
Andreas Steffen [Wed, 10 Feb 2021 09:04:34 +0000 (10:04 +0100)]
Version bump to 5.9.2dr2

19 months agotesting: Copy /etc/resolv.conf from host in chroot script
Tobias Brunner [Fri, 18 Dec 2020 13:18:47 +0000 (14:18 +0100)]
testing: Copy /etc/resolv.conf from host in chroot script

This makes installing packages etc. easier.

19 months agoappveyor: Set timezone on the build system
Tobias Brunner [Thu, 11 Feb 2021 09:20:43 +0000 (10:20 +0100)]
appveyor: Set timezone on the build system

For some reason, setting the time zone via TZ to `GST-1GDT` in the utils test
doesn't work anymore (the DST zone is not considered, it's as if only `GST-1`
was configured).

19 months agoappveyor: Create dummy strongswan.conf file to avoid log messages
Tobias Brunner [Wed, 10 Feb 2021 17:04:41 +0000 (18:04 +0100)]
appveyor: Create dummy strongswan.conf file to avoid log messages

Only relevant when increasing the verbosity, but causes quite a lot of
them then.

19 months agoappveyor: Print OpenSSL version
Tobias Brunner [Wed, 10 Feb 2021 17:04:27 +0000 (18:04 +0100)]
appveyor: Print OpenSSL version

19 months agoopenssl: Allocate our own buffer for i2d_* wrapper macro
Tobias Brunner [Wed, 10 Feb 2021 16:55:06 +0000 (17:55 +0100)]
openssl: Allocate our own buffer for i2d_* wrapper macro

If we pass a pointer to NULL, the memory allocated by OpenSSL has to be
freed with OPENSSL_free().  Otherwise, this can lead to random
crashes/freezes for Windows builds as seen on AppVeyor.  To not
complicate things for callers of this macro, we allocate our own memory,
which we already do for other i2d_* calls.

19 months agoopenssl: Reset HMAC key if chunk_empty is passed
Tobias Brunner [Fri, 18 Dec 2020 13:17:37 +0000 (14:17 +0100)]
openssl: Reset HMAC key if chunk_empty is passed

If no valid key is configured (e.g. because it's inadvertently uninitialized),
we should not just reuse the previous key.

The `key_set` flag is not necessary anymore because a non-NULL key is set
during initialization since 6b347d5232c7 ("openssl: Ensure underlying hash
algorithm is available during HMAC init").

20 months agoandroid: Explicitly apply DNS servers to the TUN device
Tobias Brunner [Tue, 24 Nov 2020 15:50:55 +0000 (16:50 +0100)]
android: Explicitly apply DNS servers to the TUN device

If the peer deletes the CHILD_SA, we recreate it due to the close
action.  However, if we create a new TUN device, we do so with a new
VpnService.Builder object and on that the DNS servers were never applied.
The latter happened only on the fly in the attribute handler when an
IKE_SA was established.  Now we do this explicitly when creating the TUN
device, like the virtual IPs and routes.  While we could avoid the
recreation of the TUN device if the CHILD_SA is recreated, there is the
theoretical possibility that the remote traffic selectors change.  This
way we also avoid adding stuff to the builder in different places.

Fixes #3637.

20 months agoswanctl: Don't print status message if nothing was loaded to stderr
Tobias Brunner [Wed, 27 Jan 2021 13:51:56 +0000 (14:51 +0100)]
swanctl: Don't print status message if nothing was loaded to stderr

This is not an error (as reflected by the returned status code) so we
should not print to stderr as output there might still be considered an
error (or at least an audit-worthy event) by some scripts.

20 months agoplugin-loader: Add optional filter for plugin features
Thomas Egerer [Thu, 28 Jan 2021 17:49:08 +0000 (17:49 +0000)]
plugin-loader: Add optional filter for plugin features

In some cases, the algorithms that have been compiled into a plugin have
to be disabled at runtime. Based on the array returned by the get_features()
function the optionally provided function can strip algorithms or even
callbacks or registrations from a plugin, giving us a handy and powerful way
for runtime feature configuration aside from the plugin list.

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
20 months agopath: Also accept / as directory separator on Windows
Tobias Brunner [Mon, 1 Feb 2021 13:35:09 +0000 (14:35 +0100)]
path: Also accept / as directory separator on Windows

This adds helper functions to determine the first or last directory separator
in a string and to check if a given character is a separator.

Paths starting with a separator are now also considered absolute on
Windows as these are rooted at the current drive.

Note that it's fine to use DIRECTORY_SEPARATOR when combining strings as
Windows API calls accept both forward and backward slashes as separators.

Co-authored-by: Michał Skalski <mskalski@enigma.com.pl>
References #3684.

20 months agoenumerator: Implement globbing enumerator on Windows
Tobias Brunner [Thu, 28 Jan 2021 14:10:52 +0000 (15:10 +0100)]
enumerator: Implement globbing enumerator on Windows

We don't have glob() available there.  This replacement should work
similarly for simple cases like `include conf.d/*.conf`.

Fixes #3684.

20 months agovici: Fix refcount for CA certificates when reloading authority sections
Tobias Brunner [Wed, 20 Jan 2021 14:52:33 +0000 (15:52 +0100)]
vici: Fix refcount for CA certificates when reloading authority sections

Fixes: 3c5e7eaa88b0 ("vici: Keep track of all CA certificates in vici_authority_t")

20 months agoopenssl: Fix potential crash with ECDH on Windows
Tobias Brunner [Tue, 26 Jan 2021 18:33:24 +0000 (19:33 +0100)]
openssl: Fix potential crash with ECDH on Windows

Apparently, we should use OPENSSL_free() to release memory allocated by
OpenSSL.  While it generally maps to free() that's apparently not the
case on Windows, where the ECP test vectors caused `ACCESS_VIOLATION
exception` crashes (not always the same vector).

Fixes: 74e02ff5e624 ("openssl: Mainly use EVP interface for ECDH")

20 months agoopenssl: Avoid conflicts with wincrypt.h on Windows
Tobias Brunner [Tue, 26 Jan 2021 10:17:20 +0000 (11:17 +0100)]
openssl: Avoid conflicts with wincrypt.h on Windows

There are several conflicts with newer versions of OpenSSL (> 1.0).

20 months agoappveyor: Also build against newer OpenSSL versions
Tobias Brunner [Tue, 26 Jan 2021 09:25:03 +0000 (10:25 +0100)]
appveyor: Also build against newer OpenSSL versions

The original version is 1.0.2, which we keep as that version is not in
use on other platforms anymore.

20 months agoEnable Windows CI build of pkcs11 plugin
Michał Skalski [Sun, 24 Jan 2021 20:30:41 +0000 (21:30 +0100)]
Enable Windows CI build of pkcs11 plugin

20 months agopkcs11: Fix build on Windows
Michał Skalski [Sun, 24 Jan 2021 20:14:57 +0000 (21:14 +0100)]
pkcs11: Fix build on Windows

Windows provides CreateMutexA/W with an alias called CreateMutex that
selects one of the other two based on the UNICODE constant.

20 months agogithub: Enable farp plugin on macOS
Tobias Brunner [Tue, 19 Jan 2021 16:04:58 +0000 (17:04 +0100)]
github: Enable farp plugin on macOS

20 months agocirrus: Build farp plugin on FreeBSD
Tobias Brunner [Tue, 19 Jan 2021 16:03:56 +0000 (17:03 +0100)]
cirrus: Build farp plugin on FreeBSD

20 months agofarp: Add support for macOS and FreeBSD
Dan James [Sun, 20 Dec 2020 00:04:16 +0000 (19:04 -0500)]
farp: Add support for macOS and FreeBSD

Co-authored-by: Tobias Brunner <tobias@strongswan.org>
Closes strongswan/strongswan#189.
References #3498.

20 months agoMerge branch 'openssl-ecp'
Tobias Brunner [Wed, 20 Jan 2021 16:54:42 +0000 (17:54 +0100)]
Merge branch 'openssl-ecp'

Uses the EVP interface for ECDH with newer OpenSSL versions, which,
compared to the previous low-level use of EC_POINT_mul() supports
hardware offloading.  We used this because of the ecp_x_coordinate_only
option, which is now removed as it's been obsolete for a long time and
complicated the code.  There is still some legacy code for OpenSSL 1.0
and the old BoringSSL version we currently use for the Android app.

Closes strongswan/strongswan#186.

20 months agoopenssl: Mainly use EVP interface for ECDH
Tobias Brunner [Tue, 1 Dec 2020 10:45:05 +0000 (11:45 +0100)]
openssl: Mainly use EVP interface for ECDH

Functions like ECDH_compute_key() will be removed with OpenSSL 3 (which
will require additional changes as other functions will be deprecated or
removed too).

20 months agoopenssl: Extract helper function to derive a shared DH secret
Tobias Brunner [Tue, 1 Dec 2020 10:43:40 +0000 (11:43 +0100)]
openssl: Extract helper function to derive a shared DH secret

20 months agoRemove the ecp_x_coordinate_only option
Tobias Brunner [Tue, 1 Dec 2020 09:13:30 +0000 (10:13 +0100)]
Remove the ecp_x_coordinate_only option

This was for compatibility with very old releases and only complicates
things unnecessarily nowadays.

20 months agoopenssl: Use ECDH_compute_key() for 'x-coordinate only' setting
Mahantesh Salimath [Mon, 30 Nov 2020 22:03:03 +0000 (22:03 +0000)]
openssl: Use ECDH_compute_key() for 'x-coordinate only' setting

ECDH_compute_key() was not used because it only gives x-coordinate of
the result. However, the default setting, as per the errata mentioned,
is to use x-coordinate only.
Use ECDH_compute_key() for this setting as it additionally allows HW
offload of the computation using dynamic engine feature in OpenSSL.
EC_POINT_mul() doesn't allow HW offload.

Signed-off-by: Mahantesh Salimath <mahantesh@nvidia.com>
20 months agoRevert "nm: Remove dummy TUN device"
Tobias Brunner [Mon, 30 Nov 2020 10:48:07 +0000 (11:48 +0100)]
Revert "nm: Remove dummy TUN device"

This reverts commit a28c6269a4aeb5369fed8933fa1baf0cd8847622.

We add a dummy TUN device again because systemd-resolved insists on
managing DNS servers per interface.

Fixes #3615.

20 months agoload-tester: Correctly encode serial of generated client certificates
Tobias Brunner [Fri, 8 Jan 2021 09:06:06 +0000 (10:06 +0100)]
load-tester: Correctly encode serial of generated client certificates

The previous approach would lead to additional zero prefixes in the
encoding of the serial (which is a positive integer, not an arbitrary
blob).

Fixes #3667.

20 months agoidentification: Change abbreviation for surname/serialNumber RDNs
Коренберг Марк [Wed, 15 Jul 2020 08:25:56 +0000 (13:25 +0500)]
identification: Change abbreviation for surname/serialNumber RDNs

To align with RFC 4519, section 2.31/32, the abbreviation for surname
is changed to "SN" that was previously used for serialNumber, which does
not have an abbreviation.

This mapping had its origins in the X.509 patch for FreeS/WAN that was
started in 2000.  It was aligned with how OpenSSL did this in earlier
versions.  However, there it was changed already in March 2002 (commit
ffbe98b7630d604263cfb1118c67ca2617a8e222) to make it compatible with
RFC 2256 (predecessor of RFC 4519).

Co-authored-by: Tobias Brunner <tobias@strongswan.org>
Closes strongswan/strongswan#179.

20 months agovici: Decode error messages in Python bindings
Tobias Brunner [Wed, 13 Jan 2021 13:41:50 +0000 (14:41 +0100)]
vici: Decode error messages in Python bindings

Otherwise we might end up with b'<errmsg>' in the output.

20 months agomem-pool: Be less strict when reassigning existing online leases
Tobias Brunner [Tue, 24 Nov 2020 08:24:25 +0000 (09:24 +0100)]
mem-pool: Be less strict when reassigning existing online leases

Also assign online leases to a peer connecting from the same endpoint
when it requests any virtual IP.  This is mainly a workaround for
Windows clients that remember the virtual IPv6 address and re-request it
the next time the connection is initiated (even if it is not a
reauthentication) but don't do the same for virtual IPv4 addresses.
This can result in duplicate policies with different reqids because
these are allocated for unique sets of traffic selectors.

Fixes #3541.

20 months agoMerge branch 'ike-update-event'
Tobias Brunner [Mon, 18 Jan 2021 12:31:01 +0000 (13:31 +0100)]
Merge branch 'ike-update-event'

This modifies the signature of the listener_t::ike_update() callback so
that both addresses are passed and it's only called once if both
addresses change (e.g. for an address family switch).

The callback is now also triggered for MOBIKE updates and the event is
exposed via vici.

Fixes #3602.

20 months agovici: Expose ike-update event
Tobias Brunner [Thu, 22 Oct 2020 17:12:39 +0000 (19:12 +0200)]
vici: Expose ike-update event

20 months agoike-mobike: Use ike_sa_t::update_hosts() to trigger events
Tobias Brunner [Tue, 27 Oct 2020 16:18:41 +0000 (17:18 +0100)]
ike-mobike: Use ike_sa_t::update_hosts() to trigger events

We should trigger the ike_update() event for MOBIKE updates and since
update_hosts() updates the children we can reuse that code too.

20 months agoike-sa: Add flags to force updating hosts/CHILD_SAs
Tobias Brunner [Tue, 27 Oct 2020 18:06:21 +0000 (19:06 +0100)]
ike-sa: Add flags to force updating hosts/CHILD_SAs

This allows more fine grained control over what's updated and does not
require multiple calls of the method. Plus we'll be able to use it in
the ike-mobike task.

20 months agobus: Change ike_update() signature and only call it once
Tobias Brunner [Tue, 27 Oct 2020 16:02:21 +0000 (17:02 +0100)]
bus: Change ike_update() signature and only call it once

This avoids multiple events when both addresses change (e.g. switching
address families).

20 months agotesting: Add scenarios that use a CA with two intermediate CA certificates
Tobias Brunner [Tue, 15 Dec 2020 17:07:28 +0000 (18:07 +0100)]
testing: Add scenarios that use a CA with two intermediate CA certificates

Mainly to test TKM's ability for handling multiple CAs and that the
received intermediate CA certificates are passed in the right order.
But also added a regular scenario where two intermediate CA certificates
are sent by one of the clients.

20 months agocharon-tkm: Don't use starter/stroke with charon-tkm anymore
Tobias Brunner [Tue, 24 Nov 2020 16:33:13 +0000 (17:33 +0100)]
charon-tkm: Don't use starter/stroke with charon-tkm anymore

For the tests, the unused init script that was used before switching to
charon-systemd is repurposed to manage the daemon.

20 months agocharon-tkm: Deinitialize IKE tkm-rpc client
Tobias Brunner [Mon, 9 Nov 2020 14:54:00 +0000 (15:54 +0100)]
charon-tkm: Deinitialize IKE tkm-rpc client

This is necessary if tkm-rpc supports multiple parallel client requests.

20 months agocharon-tkm: Remove -gnat05 option not supported by newer compilers
Tobias Brunner [Mon, 9 Nov 2020 14:52:54 +0000 (15:52 +0100)]
charon-tkm: Remove -gnat05 option not supported by newer compilers

20 months agocharon-tkm: Reverse cert chain processing order
Adrian-Ken Rueegsegger [Thu, 22 Oct 2020 17:11:32 +0000 (19:11 +0200)]
charon-tkm: Reverse cert chain processing order

Verify certificate chains starting from the root CA certificate and
moving towards the leaf/user certificate.

Also update TKM-RPC and TKM in testing scripts to version supporting the
reworked CC handling.

20 months agotesting: Use latest TKM RPC library
Adrian-Ken Rueegsegger [Wed, 21 Oct 2020 15:35:12 +0000 (17:35 +0200)]
testing: Use latest TKM RPC library

Brings some cleanups and minor improvements.

20 months agotesting: Use multi-CA aware TKM
Adrian-Ken Rueegsegger [Fri, 25 Sep 2020 16:36:34 +0000 (18:36 +0200)]
testing: Use multi-CA aware TKM

Also add CA ID to tkm_keymanager command.

20 months agotesting: Add CA ID mappings to TKM tests
Adrian-Ken Rueegsegger [Fri, 25 Sep 2020 08:47:46 +0000 (10:47 +0200)]
testing: Add CA ID mappings to TKM tests

Extend the build-certs-chroot script is to fill in the public key
fingerprint of the CA certificate in the appropriate strongswan.con
files.

20 months agocharon-tkm: Add support for multiple CAs
Adrian-Ken Rueegsegger [Wed, 23 Sep 2020 16:59:23 +0000 (18:59 +0200)]
charon-tkm: Add support for multiple CAs

Load CA certificate id mapping from config and pass the correct CA ID to
TKM when checking certificate chains. The mapping of CA certificate to
CA ID is done via SHA-1 hash of the CA certificates subjectPublicKey.

20 months agocharon-tkm: Register TKM cred encoder before init
Adrian-Ken Rueegsegger [Mon, 28 Sep 2020 15:39:18 +0000 (17:39 +0200)]
charon-tkm: Register TKM cred encoder before init

Make sure the credential encoder is available early to allow getting
public key fingerprints.

20 months agotesting: Switch to https for codelabs recipes
Adrian-Ken Rueegsegger [Fri, 25 Sep 2020 16:36:25 +0000 (18:36 +0200)]
testing: Switch to https for codelabs recipes

20 months agotesting: Explicitly encode backing image format in metadata 5.9.2dr1
Tobias Brunner [Fri, 8 Jan 2021 10:08:49 +0000 (11:08 +0100)]
testing: Explicitly encode backing image format in metadata

Apparently, there is no probing anymore in newer versions of qemu due
to security considerations.

20 months agoVersion bump to 5.9.2dr1
Andreas Steffen [Fri, 8 Jan 2021 09:34:48 +0000 (10:34 +0100)]
Version bump to 5.9.2dr1

20 months agoimc_attestation: Fixed double free of tpm_version_info chunk
Andreas Steffen [Thu, 7 Jan 2021 11:59:20 +0000 (12:59 +0100)]
imc_attestation: Fixed double free of tpm_version_info chunk

20 months agotpm: Intel FW TPM always uses locality 0
Andreas Steffen [Thu, 31 Dec 2020 15:00:59 +0000 (16:00 +0100)]
tpm: Intel FW TPM always uses locality 0

20 months agolibimcv: Support symlinks introduced by usrmerge
Andreas Steffen [Wed, 30 Dec 2020 09:16:57 +0000 (10:16 +0100)]
libimcv: Support symlinks introduced by usrmerge

Debian, Ubuntu, Fedora et. al. started to apply usrmerge to their
latest Linux distributions, i.e.  /bin, /sbin, and /lib are now
symbolical links to /usr/bin, /usr/sbin, and /usr/lib, respectively.
Since executables and libraries are contained only once in Linux
packages (e.g. /bin/cp in coreutils but not /usr/bin/cp) this leads
to missing file measurments due to the symlinks when doing remote
attestation.

The new ita_attr_symlinks PA-TNC attribute fixes this problem by
collecting symbolic links pointing to directories on the client
platform.

20 months agolibimcv: Evaluate IMA SHA-256 measurements
Andreas Steffen [Thu, 17 Dec 2020 11:14:23 +0000 (12:14 +0100)]
libimcv: Evaluate IMA SHA-256 measurements

21 months agogithub: Bump wolfSSL to 4.6.0
Tobias Brunner [Mon, 4 Jan 2021 13:47:52 +0000 (14:47 +0100)]
github: Bump wolfSSL to 4.6.0

Also enables Brainpool curves (this only enables the BP curves, while
--enable-ecccustcurves=all would also enable several others we don't support).

21 months agowolfssl: Disable ECC curves based on minimum ECC key size
Tobias Brunner [Mon, 4 Jan 2021 14:24:54 +0000 (15:24 +0100)]
wolfssl: Disable ECC curves based on minimum ECC key size

wolfSSL 4.6.0 provides a new option to configure the minimum ECC key
size (--with-eccminsz), which currently defaults to 224 bits.

21 months agowolfssl: Correctly enable Brainpool curves
Tobias Brunner [Mon, 4 Jan 2021 14:58:59 +0000 (15:58 +0100)]
wolfssl: Correctly enable Brainpool curves

21 months agoconfigure: Fixed test for imv_swima
Andreas Steffen [Thu, 24 Dec 2020 12:08:49 +0000 (13:08 +0100)]
configure: Fixed test for imv_swima

21 months agocirrus: Build against tpm2-tss on FreeBSD
Tobias Brunner [Mon, 14 Dec 2020 14:01:38 +0000 (15:01 +0100)]
cirrus: Build against tpm2-tss on FreeBSD

This was enabled in the port too.

21 months agoIgnore verbose parser generator output file more generally
Tobias Brunner [Mon, 14 Dec 2020 16:52:06 +0000 (17:52 +0100)]
Ignore verbose parser generator output file more generally

Depending on from where bison is called, the file might not end up in
the same directory as the .y file, but the location of the Makefile.
This has been seen on FreeBSD.

21 months agoReplace two deprecated parser generator directives
Tobias Brunner [Mon, 14 Dec 2020 10:36:21 +0000 (11:36 +0100)]
Replace two deprecated parser generator directives

There is a conflict between Flex's bison-bridge and Bison's api.prefix
options.  Apparently, the former was added without consulting the Bison
devs and requires YYSTYPE, which is not added to the header anymore by
the latter.  Instead, we just provide the proper definition of yyflex()
manually (as recommended by the Bison docs), so the option is not
required anymore.

21 months agogithub: Prevent duplicate CI runs
Tobias Brunner [Fri, 11 Dec 2020 15:30:04 +0000 (16:30 +0100)]
github: Prevent duplicate CI runs

This cancels previous runs of the same branch and skips runs of the same
content (e.g. after merges or tags).

21 months agogithub: Migrate from Travis CI to Github Actions
Tobias Brunner [Thu, 26 Nov 2020 09:53:45 +0000 (10:53 +0100)]
github: Migrate from Travis CI to Github Actions

On travis-ci.com (travis-ci.org will be discontinued by the end of the
year) we are now charged for each minute.  We only got 10000 credits in
a trial plan, which we used up with a few builds.  Minutes also cost a
different amount of credits on different platforms: 10 on Linux,
but 50 on macOS (installing the dependencies on macOS alone took 12-15
minutes on Travis for some reason, takes about half on Github's runners).

No native Windows build yet as we have the same issue as on AppVeyor where
threading/streaming tests might get stuck.  And there is also only a
single Windows platform to test on.  Plus building/testing on Windows is
very slow (and getting ccache to work seems tricky).

The 'sw_collector' test case had to be disabled because we can't access
/usr/local/share on the Github build hosts (the process is just blocked
in readdir() and eventually times out).

Unfortunately, we can't test on different architectures anymore (in
particular ARM and the big-endian IBM Z/x390x).

22 months agoimv-scanner: Fix potentially unsafe port filter attribute destruction
Tobias Brunner [Thu, 3 Dec 2020 11:14:35 +0000 (12:14 +0100)]
imv-scanner: Fix potentially unsafe port filter attribute destruction

DESTROY_IF() checks if the given value is not NULL, before calling
destroy() on it, which does not work for sub-structs.  If
port_filter_attr is NULL, this could crash.

22 months agochild-rekey: Don't migrate child-create task if we already are deleting
Tobias Brunner [Tue, 1 Dec 2020 11:12:25 +0000 (12:12 +0100)]
child-rekey: Don't migrate child-create task if we already are deleting

If we are already deleting the old/redundant CHILD_SA, we must not
migrate the child-create task as that would destroy the new CHILD_SA we
already moved to the IKE_SA.

Fixes #3644.

22 months agohost-resolver: Don't wait for a reply if there are no threads
Tobias Brunner [Fri, 20 Nov 2020 14:02:30 +0000 (15:02 +0100)]
host-resolver: Don't wait for a reply if there are no threads

Without threads handling the resolution, there is no point waiting
for a reply.  If no subsequent resolution successfully starts a
thread (there might not even be one), we'd wait indefinitely.

Fixes #3634.

22 months agokernel-netlink: Make sure we successfully opened a Netlink socket
Tobias Brunner [Tue, 17 Nov 2020 16:55:24 +0000 (17:55 +0100)]
kernel-netlink: Make sure we successfully opened a Netlink socket

This is in addition to the fix in the destructor in 991e9e5dc9.

22 months agoidentification: Validate ASN.1 DN in from_data() constructor
Tobias Brunner [Mon, 2 Nov 2020 14:09:13 +0000 (15:09 +0100)]
identification: Validate ASN.1 DN in from_data() constructor

The DN is otherwise not parsed until compared/printed.  This avoids
false detections as ASN.1 DN if e.g. an email address starts with "0",
which is 0x30 = ASN.1 sequence tag, and the next character denotes
the exact length of the rest of the string (see the unit tests for an
example).

22 months agoandroid: New release after avoiding marking VPN connections as metered
Tobias Brunner [Wed, 2 Dec 2020 15:06:48 +0000 (16:06 +0100)]
android: New release after avoiding marking VPN connections as metered

22 months agoandroid: Don't default to marking VPN connections as metered
Tobias Brunner [Tue, 1 Dec 2020 14:54:35 +0000 (15:54 +0100)]
android: Don't default to marking VPN connections as metered

For apps targeting Android 10, where a method to change this was added, the
default changed so that all VPN connections are marked as metered.  This means
certain background operations (e.g. syncing data) are not performed anymore
even when connected to a WiFi.  By setting this to false, the metered state
of the VPN connection reflects that of the underlying networks.

22 months agotesting: Use build-strongswan to implement build-rootimage
Tobias Brunner [Mon, 9 Nov 2020 14:30:29 +0000 (15:30 +0100)]
testing: Use build-strongswan to implement build-rootimage

22 months agotesting: Make building guest images after strongSwan optional
Tobias Brunner [Mon, 9 Nov 2020 15:15:20 +0000 (16:15 +0100)]
testing: Make building guest images after strongSwan optional

This is basically only for the build-rootimage use case.

22 months agotesting: Optionally build strongSwan from a release tarball
Tobias Brunner [Mon, 9 Nov 2020 14:18:50 +0000 (15:18 +0100)]
testing: Optionally build strongSwan from a release tarball

This will allow us to replace the build-rootimage script.

22 months agotesting: Optionally replace root image when building strongSwan
Tobias Brunner [Mon, 9 Nov 2020 13:55:46 +0000 (14:55 +0100)]
testing: Optionally replace root image when building strongSwan

22 months agotesting: Optionally use a new strongSwan build directory
Tobias Brunner [Mon, 9 Nov 2020 13:38:50 +0000 (14:38 +0100)]
testing: Optionally use a new strongSwan build directory

This can be useful when building completely different versions for the
first time to avoid issues with build artifacts of previous builds.

22 months agotesting: Add option to build all software recipes when building strongSwan
Tobias Brunner [Thu, 29 Oct 2020 16:55:38 +0000 (17:55 +0100)]
testing: Add option to build all software recipes when building strongSwan

This is like building the root image but using a specific strongSwan
source tree, which is helpful if code changes depend on other software
packages (e.g. TKM-related or testing new crypto libraries).  If the script
is called and the root image does not exist, the new option is enabled
automatically.

The option to build in a specific guest image is now also moved to an
explicit command line option so that the source dir path is the only
remaining positional argument (see --help for details).

22 months agotesting: Create root image if it does not exist yet when building strongSwan
Tobias Brunner [Thu, 29 Oct 2020 17:04:22 +0000 (18:04 +0100)]
testing: Create root image if it does not exist yet when building strongSwan

This allows running the script directly after building the base image.

22 months agoUse Botan 2.17.1 for tests
Tobias Brunner [Mon, 9 Nov 2020 09:55:46 +0000 (10:55 +0100)]
Use Botan 2.17.1 for tests

22 months agotesting: Improve building different revisions of Git-recipes
Tobias Brunner [Mon, 9 Nov 2020 09:51:56 +0000 (10:51 +0100)]
testing: Improve building different revisions of Git-recipes

If we check out and build a certain revision of a dependency in a branch and
switch to another that requires a different revision and then switch back,
the previous approach installed the wrong revision as it would incorrectly
assume the required revision was already built and ready to install.