[Swan-commit] Changes to ref refs/heads/master

[Paul Wouters]

New commits:
commit c25cda4618160c0c246c7ad994726f32b20d658b
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:26:49 2017 -0400

    testing: update kernel sanitizer for SElinux unknown msg and LEN= firewall

commit 8b9b881a59dc1e1b4f42021156ff2432779e204b
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:26:32 2017 -0400

    testing: updated strongsan sanitizer

commit 71052ced1874919fbe516e0ce295e0f179cab2f8
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:23:45 2017 -0400

    testing: updated TESTLIST

commit 8a0b5b79e440468856b985539d8367a8fe6f59f2
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:23:12 2017 -0400

    testing: massive update for x509-san/ID status updates

commit ebd516a1a100fb67bea90c447a003b9db59bc78f
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:22:41 2017 -0400

    testing: strongswan update for x509-san and strongswan-5.5.2 version

commit 5b9040d926758bf76c3c633157b5b0f6b8adbbbb
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:22:08 2017 -0400

    testing: Added SubjectAltName tests

commit a72edfcd193dccff39d9cff97ef76fcab2c1ca56
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed May 3 18:34:00 2017 -0400

    testing: Add SAN entries to west and east certificates

commit 6806420bfec59c8fa6e44d0a95a52d6878c10a6e
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun May 28 22:09:51 2017 -0400

    pluto: Perform stricter SubjectAltName checks on configured ID's
    
    Just validating a certificate is not enough if NOT using rightid=%fromcert
    
    If an explicit ID is used, such as rightid=1.2.3.4 or rightid=@FQDN or
    rightid=user at fqdn then those IDs MUST be present as SubjectAltName on
    the received/configured certificate.

commit 272ae3fdb74d398aab2ba0fadd3c229eb9d81bfe
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed May 17 00:24:33 2017 -0400

    pluto: name ID field consistently

commit 5f6b3c6be313dec490f3ebee77a4825948fee6f4
Author: Paul Wouters <pwouters at redhat.com>
Date:   Tue May 16 19:31:54 2017 -0400

    pluto: myid should handle ID_FROMCERT

commit 775b70b92d037a008a1d92c532d7869ae1bcb858
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed May 17 00:25:36 2017 -0400

    WIP: add debugging to RSA_check_signature_gen()

commit 5bd36a6ff9420652a563a30662be8b550ccf04d2
Author: Paul Wouters <pwouters at redhat.com>
Date:   Fri May 19 15:54:54 2017 -0400

    IKEv1: Aggressive Mode fixes for sending CERT / CERTREQ payloads
    
    - Fixup CERT / CERTREQ handling
    - Don't give "weak warning" for aggrissive mode with RSA (only for PSK)
    - Cleanups (eg use c instead of st->st_connection)

commit c76ee5524377f2cd0301247c4833991826fec4b1
Author: Paul Wouters <pwouters at redhat.com>
Date:   Tue May 16 19:32:47 2017 -0400

    minor tweaks in comment and logging

commit a68262d750458d987195419246be55cf8f6648f0
Author: Paul Wouters <pwouters at redhat.com>
Date:   Tue May 16 19:32:11 2017 -0400

    pluto: log our/their ID kind and string in status output