Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Fetching contributors…

Cannot retrieve contributors at this time

1614 lines (1185 sloc) 58.858 kb
commit c9f5e495bb754213180d2039499b47d1f0f36c8d (HEAD, refs/remotes/web/master, refs/remotes/origin/master, refs/heads/master)
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Dec 9 15:29:46 2012 -0500
bumped libfko and libfko-devel to 1.0.0
fwknop.spec | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
commit 3c11b262433c46bad873191ffd5b5e1be953714f
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Dec 9 15:29:03 2012 -0500
todo.org fwknop-2.0.4 released
todo.org | 2 ++
1 file changed, 2 insertions(+)
commit e4751f9f5e26f0a93dcc47b9f7f77f273407d741
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Dec 9 15:27:36 2012 -0500
fixed fwknop-2.0.4 release date
ChangeLog | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 59fe04787b81d49aacde5ced63c55b42bd40b2c0
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Dec 9 15:25:14 2012 -0500
[test suite] minor 're-run make' bug fix for perl FKO module installation
test/test-fwknop.pl | 20 ++++++++++++++------
1 file changed, 14 insertions(+), 6 deletions(-)
commit 5f598bbf7f7ed8af8c2b60cd272922f6889aac81
Author: Damien Stuart <dstuart@dstuart.org>
Date: Sun Dec 9 12:30:43 2012 -0500
Added Les Aker's changes: Look for glibtoolize if libtoolize is not available (for Macs). Added USE_GPG_AGENT option for .fwknoprc
autogen.sh | 11 ++++++++++-
client/config_init.c | 6 ++++++
2 files changed, 16 insertions(+), 1 deletion(-)
commit 8078b0ec1f1362246537956beb57ce0597dcbc99
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Dec 9 10:28:50 2012 -0500
Commented out Devel::Checklib since this is most likely for CPAN anyway
There were portability issues on FreeBSD when Devel::Checklib was in use, but
this can be added back in for a CPAN version of the perl FKO module.
perl/FKO/Makefile.PL | 11 ++++++-----
perl/FKO/README | 4 ++++
2 files changed, 10 insertions(+), 5 deletions(-)
commit a673406ebdb9910adf69887e0d28dd9382df9b3c
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Dec 8 20:58:17 2012 -0500
[test suite] updated fuzzing tests to allow usernames with '.' chars
test/fuzzing/fuzzing_spa_packets | 4 ----
test/test-fwknop.pl | 1 -
2 files changed, 5 deletions(-)
commit 51a545dbaf7bc960556bf2e269592a879fd87bda
Merge: 05d4299 10f2d29
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Dec 8 16:26:30 2012 -0500
Merge branch 'master' of github.com:mrash/fwknop
commit 10f2d295be41e9237d25436572f17feaf01b15e6
Author: Damien Stuart <dstuart@dstuart.org>
Date: Sat Dec 8 15:40:40 2012 -0500
Have libfko link strlxxx objects directly instead of libfko_util.
lib/Makefile.am | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 05d4299de1668b8486af47eec3e04243a1af9551
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Dec 7 14:53:27 2012 -0500
made compilation warning check case-insensitive
test/test-fwknop.pl | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 39410044c50eb9d7e472aaa201debd37ef2bc188
Author: Damien Stuart <dstuart@dstuart.org>
Date: Fri Dec 7 11:38:31 2012 -0500
Set new libfko version. Client: allow dot (.) in validate_username, and display version and exit without creating an fko context.
client/fwknop.c | 22 +++++++++-------------
lib/Makefile.am | 2 +-
lib/fko_user.c | 4 ++--
3 files changed, 12 insertions(+), 16 deletions(-)
commit 88c66f647fe7690dc10f0f9aa185ca1126e4be24
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Dec 3 22:45:39 2012 -0500
Revert "added got_allow_ip() wrapper around have_allow_ip() to fix an exported symbol issue noticed by Franck"
This reverts commit e57cfa2e235261b960986ecae0c7e86307159529. This is done
because libfko now restricts the symbols it exports to only those functions
that should be visible when making use of the library - internal libfko
functions should not be exported.
lib/fko_message.c | 6 ------
lib/fko_message.h | 1 -
2 files changed, 7 deletions(-)
commit 7df9edc1db9a695bc2bacf860f6fa870839b37e1
Merge: bcea440 e57cfa2
Author: Damien Stuart <dstuart@dstuart.org>
Date: Sun Dec 2 09:59:48 2012 -0500
Merge branch 'master' of github.com:mrash/fwknop
commit bcea440b873aebb56325ca0d3981dcc37b107faa
Author: Damien Stuart <dstuart@dstuart.org>
Date: Sun Dec 2 09:56:57 2012 -0500
Limited exported symbols in libfko to only the public (fko_) functions. Moved strlcat/cpy to a separate libfko_util lib.
client/Makefile.am | 2 +-
lib/Makefile.am | 12 ++++++++----
server/Makefile.am | 2 +-
3 files changed, 10 insertions(+), 6 deletions(-)
commit e57cfa2e235261b960986ecae0c7e86307159529
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Dec 1 22:45:55 2012 -0500
added got_allow_ip() wrapper around have_allow_ip() to fix an exported symbol issue noticed by Franck
lib/fko_message.c | 6 ++++++
lib/fko_message.h | 1 +
2 files changed, 7 insertions(+)
commit e3c4c045c6f609551af9fa4c6fc354d3661017cc
Author: Damien Stuart <dstuart@dstuart.org>
Date: Sat Dec 1 11:06:41 2012 -0500
Changes to address header references, platform support, error messages, and the perl module test suite.
Rearranged headers to reduce duplication and remove local header
references from fko.h.
Removed references to headers that did not need to be explicitly set.
Moved the MAX_PROTO_STR_LEN and MAX_PORT_STR_LEN definitions to the
fko_limits.h file.
Fixed bug where invalid nat_access or command messages were returning
FKO_ERROR_INVALID_SPA_ACCESS_MSG error code instead of the one
appropriate to the message type.
Fixed bad nat_access_msg test in Perl module test suite (caught by new
validation code).
android/project/jni/fwknop/fko.h | 2 --
android/project/jni/fwknop/fko_limits.h | 3 +++
android/project/jni/fwknop/fko_message.h | 13 -------------
common/common.h | 1 +
fwknop.spec | 6 ++++--
lib/Makefile.am | 2 +-
lib/fko.h | 2 --
lib/fko_limits.h | 3 +++
lib/fko_message.c | 6 +++---
lib/fko_message.h | 3 ---
lib/fko_user.h | 2 +-
perl/FKO/t/02_functions.t | 4 ++--
12 files changed, 18 insertions(+), 29 deletions(-)
commit 1ec9f4ae94a76365a0293f50fe1b8475a2d57dcd
Author: Damien Stuart <dstuart@dstuart.org>
Date: Fri Nov 30 23:40:24 2012 -0500
Re-tweaks for accommodating the windows build and systems that do not have strnlen
common/common.h | 6 ++++++
lib/fko_common.h | 28 +++++++++++++++++++++++++---
lib/fko_message.c | 12 +++++++-----
win32/config.h | 3 +++
4 files changed, 41 insertions(+), 8 deletions(-)
commit eaba5813f349fed37664e5832c58f1e1404b7406
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Nov 28 22:39:07 2012 -0500
Bug fix for perl FKO compilation
This commit removes lib/ includes of common/ header files that was breaking
the perl FKO module compilation.
lib/fko_message.c | 6 ++++++
lib/fko_message.h | 3 ---
2 files changed, 6 insertions(+), 3 deletions(-)
commit 04e0c9b560f6dcb4136e47fec1120d61628b860e
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Nov 27 22:54:55 2012 -0500
[server] Ignore pcap non-blocking setting in --pcap-file mode
When setting --pcap-file mode from the command line some versions of libpcap
do not appear to allow non-blocking mode to be set and throw the following
error:
[*] Error setting pcap nonblocking to 0:
This commit ignores the non-blocking setting in --pcap-file mode.
server/pcap_capture.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
commit 0337ae9fb66e6d33207d189856f4cf2fc0dffaa3
Merge: 4cb5add 524d69a
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 22 21:43:43 2012 -0500
Merge branch 'master' of github.com:mrash/fwknop
commit 524d69af239939c2faf5d0b09d735c40803b5716
Merge: 5873df7 11124b1
Author: Damien Stuart <dstuart@dstuart.org>
Date: Wed Nov 21 22:33:13 2012 -0500
Merge branch 'master' of github.com:mrash/fwknop
Conflicts:
configure.ac
commit 5873df753ab4f4bac47385d0e07e73cbfb19194b
Author: Damien Stuart <dstuart@dstuart.org>
Date: Wed Nov 21 22:16:39 2012 -0500
Tweaks to fix autoconf-related portability issues and autogen.sh reliability
autogen.sh | 8 +++++++-
configure.ac | 2 +-
2 files changed, 8 insertions(+), 2 deletions(-)
commit 11124b1f9fc99a9a89a89fd3b5c5de71d4815927
Author: Damien Stuart <dstuart@dstuart.org>
Date: Wed Nov 21 22:16:39 2012 -0500
Tweaks to fix autoconf-related portability issues and autogen.sh reliability
autogen.sh | 8 +++++++-
configure.ac | 2 +-
2 files changed, 8 insertions(+), 2 deletions(-)
commit 4cb5add328c655ad5261ab3b5107bea51168b815
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Nov 21 21:49:16 2012 -0500
revert 7db2d1e796bba7af393e2d5c40db65b95fcee066 (--disable-gpg arg) since --without-gpgme works properly
ChangeLog | 3 --
configure.ac | 118 ++++++++++++++++++++++++++--------------------------------
2 files changed, 52 insertions(+), 69 deletions(-)
commit fe8ac9800458e1ddabacc73f007bc86c9fbca212
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Nov 21 21:29:26 2012 -0500
bug fix for firewall rule deletion check in backwards compatibility tests on FreeBSD and OpenBSD
test/test-fwknop.pl | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
commit bda539ebb4105cabb2d0f2f0c7bc5abb8af55d35
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Nov 20 08:28:46 2012 -0500
removed duplicate android_access.conf file introduced in a local mrash commit
Makefile.am | 1 -
1 file changed, 1 deletion(-)
commit 7e583ed5a22b3ddefb6f7c3f9b4358fc3421ec8c
Merge: 049e1e9 1daa1c6
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Nov 20 08:27:33 2012 -0500
Merge branch 'master' of github.com:mrash/fwknop
commit 1daa1c6795b37685f7485787355ccfa7b5edd24c
Author: Damien Stuart <dstuart@dstuart.org>
Date: Mon Nov 19 12:22:40 2012 -0500
Now commiting only the change to Makefile.am this time
Makefile.am | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 617305504a9a54cd841ff5e1e8f84de7bb3995e6
Author: Damien Stuart <dstuart@dstuart.org>
Date: Mon Nov 19 12:19:12 2012 -0500
Revert "Tweaks to EXTRA_DIST. Added one missing and removed one invalid entry under the test directory."
This reverts commit 556ca2c146a598cddada4dd8cdf3f9b12f32f202.
Makefile.am | 2 +-
client/.deps/fwknop-config_init.Po | 1 -
client/.deps/fwknop-fwknop.Po | 1 -
client/.deps/fwknop-getpasswd.Po | 1 -
client/.deps/fwknop-http_resolve_host.Po | 1 -
client/.deps/fwknop-spa_comm.Po | 1 -
client/.deps/fwknop-utils.Po | 1 -
client/Makefile | 767 ---
client/fwknop.8 | 676 --
common/Makefile | 394 --
config.h | 366 --
config.log | 2927 ---------
config.status | 2119 -------
doc/Makefile | 703 ---
doc/libfko.info | 1813 ------
fwknop-2.0.4.tar.gz | Bin 1376603 -> 0 bytes
lib/.deps/base64.Plo | 1 -
lib/.deps/cipher_funcs.Plo | 1 -
lib/.deps/digest.Plo | 1 -
lib/.deps/fko_client_timeout.Plo | 1 -
lib/.deps/fko_decode.Plo | 1 -
lib/.deps/fko_digest.Plo | 1 -
lib/.deps/fko_encode.Plo | 1 -
lib/.deps/fko_encryption.Plo | 1 -
lib/.deps/fko_error.Plo | 1 -
lib/.deps/fko_funcs.Plo | 1 -
lib/.deps/fko_message.Plo | 1 -
lib/.deps/fko_nat_access.Plo | 1 -
lib/.deps/fko_rand_value.Plo | 1 -
lib/.deps/fko_server_auth.Plo | 1 -
lib/.deps/fko_timestamp.Plo | 1 -
lib/.deps/fko_user.Plo | 1 -
lib/.deps/gpgme_funcs.Plo | 1 -
lib/.deps/md5.Plo | 1 -
lib/.deps/rijndael.Plo | 1 -
lib/.deps/sha1.Plo | 1 -
lib/.deps/sha2.Plo | 1 -
lib/.deps/strlcat.Plo | 1 -
lib/.deps/strlcpy.Plo | 1 -
lib/Makefile | 648 --
libtool |10075 ------------------------------
server/.deps/fwknopd-access.Po | 1 -
server/.deps/fwknopd-config_init.Po | 1 -
server/.deps/fwknopd-extcmd.Po | 1 -
server/.deps/fwknopd-fw_util.Po | 1 -
server/.deps/fwknopd-fw_util_ipf.Po | 1 -
server/.deps/fwknopd-fw_util_ipfw.Po | 1 -
server/.deps/fwknopd-fw_util_iptables.Po | 1 -
server/.deps/fwknopd-fw_util_pf.Po | 1 -
server/.deps/fwknopd-fwknopd.Po | 1 -
server/.deps/fwknopd-fwknopd_errors.Po | 1 -
server/.deps/fwknopd-incoming_spa.Po | 1 -
server/.deps/fwknopd-log_msg.Po | 1 -
server/.deps/fwknopd-pcap_capture.Po | 1 -
server/.deps/fwknopd-process_packet.Po | 1 -
server/.deps/fwknopd-replay_cache.Po | 1 -
server/.deps/fwknopd-sig_handler.Po | 1 -
server/.deps/fwknopd-tcp_server.Po | 1 -
server/.deps/fwknopd-utils.Po | 1 -
server/Makefile | 995 ---
server/fwknopd.8 | 484 --
stamp-h1 | 1 -
62 files changed, 1 insertion(+), 22016 deletions(-)
commit f544a4aeb52439a0cd74a19364659bc9d0116c5a
Author: Damien Stuart <dstuart@dstuart.org>
Date: Mon Nov 19 09:48:34 2012 -0500
Added the --icmp-xxxx arg descriptions to the fwknop usage message.
ChangeLog | 4 ++++
client/config_init.c | 2 ++
2 files changed, 6 insertions(+)
commit 556ca2c146a598cddada4dd8cdf3f9b12f32f202
Author: Damien Stuart <dstuart@dstuart.org>
Date: Mon Nov 19 09:30:15 2012 -0500
Tweaks to EXTRA_DIST. Added one missing and removed one invalid entry under the test directory.
Makefile.am | 2 +-
client/.deps/fwknop-config_init.Po | 1 +
client/.deps/fwknop-fwknop.Po | 1 +
client/.deps/fwknop-getpasswd.Po | 1 +
client/.deps/fwknop-http_resolve_host.Po | 1 +
client/.deps/fwknop-spa_comm.Po | 1 +
client/.deps/fwknop-utils.Po | 1 +
client/Makefile | 767 +++
client/fwknop.8 | 676 ++
common/Makefile | 394 ++
config.h | 366 ++
config.log | 2927 +++++++++
config.status | 2119 +++++++
doc/Makefile | 703 +++
doc/libfko.info | 1813 ++++++
fwknop-2.0.4.tar.gz | Bin 0 -> 1376603 bytes
lib/.deps/base64.Plo | 1 +
lib/.deps/cipher_funcs.Plo | 1 +
lib/.deps/digest.Plo | 1 +
lib/.deps/fko_client_timeout.Plo | 1 +
lib/.deps/fko_decode.Plo | 1 +
lib/.deps/fko_digest.Plo | 1 +
lib/.deps/fko_encode.Plo | 1 +
lib/.deps/fko_encryption.Plo | 1 +
lib/.deps/fko_error.Plo | 1 +
lib/.deps/fko_funcs.Plo | 1 +
lib/.deps/fko_message.Plo | 1 +
lib/.deps/fko_nat_access.Plo | 1 +
lib/.deps/fko_rand_value.Plo | 1 +
lib/.deps/fko_server_auth.Plo | 1 +
lib/.deps/fko_timestamp.Plo | 1 +
lib/.deps/fko_user.Plo | 1 +
lib/.deps/gpgme_funcs.Plo | 1 +
lib/.deps/md5.Plo | 1 +
lib/.deps/rijndael.Plo | 1 +
lib/.deps/sha1.Plo | 1 +
lib/.deps/sha2.Plo | 1 +
lib/.deps/strlcat.Plo | 1 +
lib/.deps/strlcpy.Plo | 1 +
lib/Makefile | 648 ++
libtool |10075 ++++++++++++++++++++++++++++++
server/.deps/fwknopd-access.Po | 1 +
server/.deps/fwknopd-config_init.Po | 1 +
server/.deps/fwknopd-extcmd.Po | 1 +
server/.deps/fwknopd-fw_util.Po | 1 +
server/.deps/fwknopd-fw_util_ipf.Po | 1 +
server/.deps/fwknopd-fw_util_ipfw.Po | 1 +
server/.deps/fwknopd-fw_util_iptables.Po | 1 +
server/.deps/fwknopd-fw_util_pf.Po | 1 +
server/.deps/fwknopd-fwknopd.Po | 1 +
server/.deps/fwknopd-fwknopd_errors.Po | 1 +
server/.deps/fwknopd-incoming_spa.Po | 1 +
server/.deps/fwknopd-log_msg.Po | 1 +
server/.deps/fwknopd-pcap_capture.Po | 1 +
server/.deps/fwknopd-process_packet.Po | 1 +
server/.deps/fwknopd-replay_cache.Po | 1 +
server/.deps/fwknopd-sig_handler.Po | 1 +
server/.deps/fwknopd-tcp_server.Po | 1 +
server/.deps/fwknopd-utils.Po | 1 +
server/Makefile | 995 +++
server/fwknopd.8 | 484 ++
stamp-h1 | 1 +
62 files changed, 22016 insertions(+), 1 deletion(-)
commit f499e3090011176cefdae74387e28e7f105ce37f
Author: Damien Stuart <dstuart@dstuart.org>
Date: Sun Nov 18 23:59:10 2012 -0500
Tweaks to fix issues with building the lib and client under Windows. Added .fwknop.last support on Windows. Bumped the lib version to 0.0.4. Fixed bug in username detection code. Removed -Werror from AM_INIT_AUTOMAKE which prevented setting of CPPFLAG for the lib build in some circumstances.
client/fwknop.c | 32 ++++++--------------------------
client/http_resolve_host.c | 2 ++
client/utils.c | 1 +
client/utils.h | 7 -------
common/common.h | 17 +++++++++++++++++
configure.ac | 2 +-
fwknop.spec | 2 +-
lib/Makefile.am | 4 ++--
lib/fko_decode.c | 2 +-
lib/fko_message.h | 11 ++---------
lib/fko_user.c | 17 ++++++++++-------
win32/libfko.vcproj | 10 +++++-----
12 files changed, 48 insertions(+), 59 deletions(-)
commit 049e1e958f3a3362e64699f0466de386d199ec26
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Nov 17 14:06:39 2012 -0500
[test suite] added android_access.conf file for Android SPA test
Makefile.am | 1 +
1 file changed, 1 insertion(+)
commit 5a2150e070aebfdd2cea5faeef685b393aba38f6
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 15 22:36:29 2012 -0500
[test suite] minor update to not look for lib/.libs/ in --enable-recompile mode
test/test-fwknop.pl | 5 ++++-
todo.org | 7 ++++---
2 files changed, 8 insertions(+), 4 deletions(-)
commit 9921e72d7051a159387420f94f22239e527ce42c
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 15 21:16:11 2012 -0500
[test suite] backwards compatibility tests
Added a few backwards compatibility tests for versions of fwknop going back to
2.0, and also added a compatibility test for an SPA packet produced by Android
4.2.1.
test/conf/android_access.conf | 3 +
test/test-fwknop.pl | 510 +++++++++++++++++++++++++++--------------
2 files changed, 346 insertions(+), 167 deletions(-)
commit 31c3100d7f6dc3161ef4958714b99c42f0bb0051
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Nov 14 23:46:29 2012 -0500
minor gcc warnings todo note for OpenBSD
todo.org | 4 ++++
1 file changed, 4 insertions(+)
commit 517f4470281a2486aa4117647e772d3b80e126c7
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Nov 14 23:45:43 2012 -0500
bumped version to 2.0.4
ChangeLog | 2 +-
VERSION | 2 +-
android/project/jni/config.h | 6 +++---
android/project/jni/fwknop/fko.h | 2 +-
configure.ac | 2 +-
fwknop.spec | 9 ++++++---
iphone/Classes/config.h | 6 +++---
lib/fko.h | 2 +-
8 files changed, 17 insertions(+), 14 deletions(-)
commit 38d4b5cc881c6b8278b48bede30429b870538f4d
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Nov 13 21:18:29 2012 -0500
minor marking text update around fuzzing packet count
test/test-fwknop.pl | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 02790628d4534197758b5e67b039a3ff125e90d2
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Nov 13 21:16:27 2012 -0500
additional SPA validation check to ensure no non-ascii printable chars in decoded message
lib/fko_decode.c | 6 ++++++
1 file changed, 6 insertions(+)
commit 70afd9c2d448d84fe28874ed0a7d98a7ba6c59d2
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Nov 13 21:12:41 2012 -0500
minor spacing fix
lib/fko_encode.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
commit bc58b3a15f251a2065877d25e687dee215fad3e8
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Nov 12 21:48:26 2012 -0500
Added chain_exists() check to fwknopd SPA rule creation
Added chain_exists() check to SPA rule creation so that if any
of the fwknop chains are deleted out from under fwknopd they will be
recreated on the fly. This mitigates scenarios where fwknopd might be
started before a system level firewall policy is applied due to init
script ordering, or if an iptables policy is re-applied without
restarting fwknopd.
ChangeLog | 6 +++
server/fw_util_iptables.c | 115 +++++++++++++++++++++++++++++++++------------
server/fw_util_iptables.h | 1 +
3 files changed, 91 insertions(+), 31 deletions(-)
commit c0349a20a3f5de7173f68de84a85faeb668cfcd5
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Nov 9 20:42:43 2012 -0500
added fuzzing packet count to FKO server fuzzing test
test/test-fwknop.pl | 27 +++++++++++++++------------
1 file changed, 15 insertions(+), 12 deletions(-)
commit c354afb3b4acfe8f271306d01db0b29c78aea6f8
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Nov 9 20:42:08 2012 -0500
minor todo reorganization
todo.org | 144 ++++++++++++++++++++++++++++++++------------------------------
1 file changed, 74 insertions(+), 70 deletions(-)
commit 2a3cd1abfe83f313242728753a3722a02219aa41
Merge: 03b222d 5ddf5af
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 22:25:33 2012 -0500
Merge branch 'master' of github.com:mrash/fwknop
commit 03b222dddab5c6c3101e8e61da7c1d36497e98a3
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 22:22:04 2012 -0500
[client] (Franck Joncourt) Fixed Ctrl-C problem where SPA packets were sent anyway
[client] (Franck Joncourt) Contributed a patch to allow the fwknop
client to be stopped during the password entry prompt with Ctrl-C before
any SPA packet is sent on the wire.
CREDITS | 2 +
ChangeLog | 3 ++
client/getpasswd.c | 111 +++++++++++++++++++++++++++++++---------------------
todo.org | 8 ++--
4 files changed, 77 insertions(+), 47 deletions(-)
commit 9f9910c3179e2c7a633259c0e53587ae1dac9378
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 22:09:23 2012 -0500
added blurb about Android-4.1.2
ChangeLog | 2 ++
1 file changed, 2 insertions(+)
commit 16c8be2d839f742666feb776188cb18818453858
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 22:07:16 2012 -0500
minor README update for proper 4.1.2 version of Android
android/README | 20 ++++++++++++++++++--
1 file changed, 18 insertions(+), 2 deletions(-)
commit 585beba951de0f20635b67d032829e532cf8d22b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 22:06:25 2012 -0500
added updated properties files for Android-4.1.2
android/project/build-4.1.2.properties | 16 +++++
android/project/nbproject/project-4.1.2.properties | 67 ++++++++++++++++++++
2 files changed, 83 insertions(+)
commit 4dd65c57611a92412cb5bdecf8a9ccea5d3ff64c
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 21:42:18 2012 -0500
minor bug fix to leverage fko_errstr() returned error string properly
android/project/jni/fwknop/fwknop_client.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit e57156e57df17ac50a1ab3de1bdb33697682fd2b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 21:39:21 2012 -0500
added fko header files for the Android client
android/project/jni/fwknop/fko.h | 288 ++++++++++++++++++++++++++++++
android/project/jni/fwknop/fko_limits.h | 64 +++++++
android/project/jni/fwknop/fko_message.h | 57 ++++++
3 files changed, 409 insertions(+)
commit 66ad134708e3648eb90e4b9256e7b42e3b673a13
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 21:33:23 2012 -0500
[server] Added '--pcap-file <file>' option
Added a new '--pcap-file <file>' option to allow pcap files to
be processed directly by fwknopd instead of sniffing an interface. This
feature is mostly intended for debugging purposes.
ChangeLog | 3 +++
Makefile.am | 1 +
doc/fwknopd.man.asciidoc | 6 +++++
server/cmd_opts.h | 3 +++
server/config_init.c | 22 ++++++++++++---
server/fwknopd.conf | 17 ++++++++----
server/fwknopd_common.h | 1 +
server/incoming_spa.c | 9 ++++++-
server/pcap_capture.c | 53 ++++++++++++++++++++++++------------
test/conf/spa_replay.pcap | Bin 0 -> 910 bytes
test/test-fwknop.pl | 65 ++++++++++++++++++++++++++++++++++++++++++++-
todo.org | 8 +++---
12 files changed, 157 insertions(+), 31 deletions(-)
commit 7afe5b28b7cc1c560bd10e73f51b302ae96ac08e
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 21:03:45 2012 -0500
minor update to use explicit FKO_SUCCESS value in if() result check
lib/fko_encryption.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 2ae14491224d3297046fa8a21e229e65b79203fa
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Nov 8 21:02:44 2012 -0500
allow '_' chars in usernames provided to libfko
lib/fko_user.c | 5 +++--
test/test-fwknop.pl | 2 ++
2 files changed, 5 insertions(+), 2 deletions(-)
commit 5ddf5afec6c691d96406144611c0a3ce16b40284
Author: Damien Stuart <dstuart@dstuart.org>
Date: Thu Nov 8 19:41:46 2012 -0500
Ignore trailing whitespace on .fwknoprc directives
client/config_init.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 36630694fd66f8a2f55336c9d32c0f51022a0714
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Nov 5 20:39:03 2012 -0500
Additional todo tasks
todo.org | 11 +++++++++++
1 file changed, 11 insertions(+)
commit 575e6961642dad2076fc74315f25a6860a5d2a57
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Nov 5 20:38:34 2012 -0500
[test suite] added pinentry check for gpg tests that have keys that require associated passphrases
ChangeLog | 3 +++
test/test-fwknop.pl | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++-
2 files changed, 54 insertions(+), 1 deletion(-)
commit 5c1979e16a8c1a403e88b94743697d9ba3fe0a0b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Nov 4 22:13:52 2012 -0500
Added test suite config file: disable_aging_nat_fwknopd.conf
test/conf/disable_aging_nat_fwknopd.conf | 6 ++++++
1 file changed, 6 insertions(+)
commit 231be81f5bfc1dab10e1e82ee58a611bd06ded0b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Nov 3 23:11:24 2012 -0400
bug fix to include multi-gpg ID no password test
Makefile.am | 1 +
test/conf/multi_gpg_no_pw_access.conf | 7 +++++++
test/test-fwknop.pl | 3 ++-
3 files changed, 10 insertions(+), 1 deletion(-)
commit df2bb3e3fd813cba2f9c46723411b0a805b06c70
Merge: dbf6dc8 66467e9
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Nov 3 19:00:56 2012 -0400
Merge branch 'master' of github.com:mrash/fwknop
commit 66467e94492e85e80b09bd2edae3252e5a144453
Merge: 28b2787 daa692c
Author: Michael Rash <michael.rash@gmail.com>
Date: Sat Nov 3 16:00:57 2012 -0700
Merge pull request #11 from tomyuk/master
add missing include files to lib/Makefile.am
commit dbf6dc884676971a13042edad59d61e6925c0f21
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Nov 3 18:09:12 2012 -0400
--enable-recompile try raw make if sudo make fails
test/test-fwknop.pl | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
commit 5218e52f9abb05b6d31f5ecaee3dc95d440aec3c
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Nov 3 16:50:26 2012 -0400
added run-test-suite.sh LD_LIBRARY_PATH wrapper
Makefile.am | 2 ++
test/README | 17 +++++++++++++++++
test/run-test-suite.sh | 14 ++++++++++++++
3 files changed, 33 insertions(+)
commit daa692caf7bbcc0e5f3b755733a7bd89c57aa8f2
Author: Tomoyuki Kano <tomo@appletz.jp>
Date: Sat Nov 3 19:08:10 2012 +0900
Added missing include files
fwknop.spec | 5 +++++
1 file changed, 5 insertions(+)
commit cf783e075e124ae74a4c20b035902d58df58d6f5
Author: Tomoyuki Kano <tomo@appletz.jp>
Date: Sat Nov 3 19:03:48 2012 +0900
add missing include files to lib/Makefile.am
lib/Makefile.am | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 28b2787001a572397b0199a307447b37c64b49e9
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Nov 2 21:07:23 2012 -0400
bug fix to include cmd_access.conf in Makefile.am
Makefile.am | 1 +
1 file changed, 1 insertion(+)
commit 7db2d1e796bba7af393e2d5c40db65b95fcee066
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Oct 31 21:37:55 2012 -0400
[client+server] Added --disable-gpg to the autoconf config
Added --disable-gpg to the autoconf ./configure script
via configure.ac. This makes it easy to not have fwknop/fwknopd
link against libgpgme even if it is installed on the local system.
ChangeLog | 3 ++
configure.ac | 118 ++++++++++++++++++++++++++++++++--------------------------
todo.org | 10 +++--
3 files changed, 75 insertions(+), 56 deletions(-)
commit 8ee9999cbd5b97d9b773f9cbcb84c33ab3c689de
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 30 22:39:36 2012 -0400
added fuzzing patches from the test/fuzzing/patches/ directory
Makefile.am | 9 +++++++++
1 file changed, 9 insertions(+)
commit f488a8d75d94fdd484e31971c187bd593dc15cc6
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 30 22:03:40 2012 -0400
added '-Wformat -Wformat-security' to compile args - no associated warnings in current code
configure.ac | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
commit e103bdf4b005d2a6ef36e9ec67a422dee0cb8bf0
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 30 21:40:21 2012 -0400
Updated build CFLAGS and LDFLAGS for PIE support similar to Debian hardening-includes
The Debian hardening-includes package sets CFLAGS and LDFLAGS as follows for PIE support:
_HARDENED_PIE_CFLAGS := -fPIE
_HARDENED_PIE_LDFLAGS := -fPIE -pie
The configure.ac file has been updated to conform to the above.
ChangeLog | 3 +++
configure.ac | 3 ++-
2 files changed, 5 insertions(+), 1 deletion(-)
commit 8c3a67377e479fd41b7e540c7d909a8f00973f79
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 30 21:23:30 2012 -0400
[test suite] bug fix to ensure binary existence check in build security tests
test/test-fwknop.pl | 30 +++++++++++++++---------------
1 file changed, 15 insertions(+), 15 deletions(-)
commit aa74fa3eeddac5906e042ed0cc73a12caac9f1a8
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Oct 28 23:31:09 2012 -0400
minor fuzzing README update
test/fuzzing/README | 20 ++++++++++++--------
1 file changed, 12 insertions(+), 8 deletions(-)
commit cefac6275b4dce8390e6719e451950f4ac0522cc
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 27 22:45:28 2012 -0400
added non digit rand val fuzzing encoding tests
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++
.../patches/encoding_non_digit_rand_val.patch | 13 +++++++++
2 files changed, 43 insertions(+)
commit dced7c6a775c0478501ff969e9ba3aeae4343021
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 27 22:34:52 2012 -0400
added fuzzing encoding strip eq return packets
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++
.../fuzzing/patches/encoding_strip_eq_return.patch | 12 ++++++++
2 files changed, 42 insertions(+)
commit 4b25e1e24270ac6c26796cfe07c0d0eec41fda0f
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 27 22:28:33 2012 -0400
added encoding_append_b64_modified_byte equals sign fuzzing encoding tests
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++
.../encoding_append_b64_modified_byte_eq.patch | 13 +++++++++
2 files changed, 43 insertions(+)
commit 807dd315e55615f5ade91feb6d53d0b517a74268
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 27 22:07:40 2012 -0400
added encoding_append_b64_modified_byte fuzzing encoding tests
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++
.../encoding_append_b64_modified_byte.patch | 13 +++++++++
2 files changed, 43 insertions(+)
commit 03255a55479a8f8b1ed1ba23f4fddc0cd3d642da
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 23:13:41 2012 -0400
added non-base64 char to access msg for fuzzing encoding tests
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++
.../patches/encoding_non_b64_access_msg.patch | 12 ++++++++
2 files changed, 42 insertions(+)
commit f3c9f49a67be17948bbb89f3b17581ac793be91f
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 23:07:35 2012 -0400
added fuzzing encoding packets (extra colon 3)
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++++
test/fuzzing/patches/encoding_extra_colon3.patch | 13 ++++++++++
2 files changed, 43 insertions(+)
commit e89338c4316e2fa207c10f5a83cc984459346e22
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 23:06:09 2012 -0400
added fuzzing encoding packets (extra colon 2)
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++++
test/fuzzing/patches/encoding_extra_colon2.patch | 13 ++++++++++
2 files changed, 43 insertions(+)
commit 69ed7ee6357780cfbb5b2715ff63cf4d2a4b5c62
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 21:47:08 2012 -0400
added fuzzing encoding packets (extra colon 1)
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++++
test/fuzzing/patches/encoding_extra_colon1.patch | 13 ++++++++++
2 files changed, 43 insertions(+)
commit 37048f359dc556177360be7f7dd4d51810eb9251
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 21:43:24 2012 -0400
added in new test/fuzzing/patches/ files
Makefile.am | 14 ++++++++++----
1 file changed, 10 insertions(+), 4 deletions(-)
commit 830996b3ac7723daed3c196378e45aab54ea9612
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 15:52:09 2012 -0400
added non-base64 encoding fuzzing packets
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++++++++++++
1 file changed, 30 insertions(+)
commit ac38f8d9938146775bb336f5a8b7680492b81102
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 26 15:36:08 2012 -0400
[libfko] bug fix to check b64_decode() return value
Bug fix to check b64_decode() return value to ensure that
non-base64 encoded data is never used. Even though other validation
routines checked decoded results, it is important to discard invalid
data as early as possible. Note too that such invalid data would only
be provided to b64_decode() after proper decryption, so the client must
provide authentic SPA data.
ChangeLog | 8 +++++++-
lib/fko_decode.c | 30 +++++++++++++++++++++++++-----
lib/fko_encryption.c | 6 ++++--
3 files changed, 36 insertions(+), 8 deletions(-)
commit 60083cc272d05db77303971845b013aa59eb0ed2
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 22:12:47 2012 -0400
added rm colon5 fuzzing packets
test/fuzzing/fuzzing_spa_packets | 30 ++++++++++++++++++++++++++++++
1 file changed, 30 insertions(+)
commit 3ae583813c2bb61d7b04c8e601f88ce2cc8f7550
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 22:04:09 2012 -0400
added fuzzing encoding test that removes colon #5
test/fuzzing/patches/encoding_rm_colon5.patch | 13 +++++++++++++
1 file changed, 13 insertions(+)
commit 91596f4450c55622072a31178f2631ea6d8f25e4
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 22:01:12 2012 -0400
added fuzzing encoding test that removes colon #4
test/fuzzing/fuzzing_spa_packets | 30 +++++++++++++++++++++++++
test/fuzzing/patches/encoding_rm_colon4.patch | 13 +++++++++++
2 files changed, 43 insertions(+)
commit ef635d57e3059aee507fe04bf1e8d294f6829c49
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 21:57:40 2012 -0400
added test/fuzzing/patches/encoding_rm_colon1.patch file
test/fuzzing/patches/encoding_rm_colon1.patch | 13 +++++++++++++
1 file changed, 13 insertions(+)
commit 165e618bade067b9bda6b188fab12ec602b1a470
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 21:55:01 2012 -0400
Added fuzzing encoding tests that remove the 2nd and 3rd colons
test/fuzzing/fuzzing_spa_packets | 60 +++++++++++++++++++++++++
test/fuzzing/patches/encoding_rm_colon2.patch | 13 ++++++
test/fuzzing/patches/encoding_rm_colon3.patch | 13 ++++++
3 files changed, 86 insertions(+)
commit f6b0d23c1ca401846d53eb069a6344a194b2c91b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 21:37:52 2012 -0400
Added fuzzing spa packet generation for invalid encodings
This commit adds the ability to generate SPA packets that are valid except for
the last encoding step before encryption. This is independent of supplying
invalid data for SPA packet fields. To invoke the test suite in this mode,
do something like:
# ./test-fwknop.pl --enable-perl-module-pkt-gen --fuzzing-test-tag "encoded_colon1_missing" --fuzzing-class encoding
This assumes that lib/fko_encode.c has been patched to subvert the encoding
step itself before encryption. In this case, the first colon after the random
value is removed.
test/fuzzing/fuzzing_spa_packets | 30 +++++
test/test-fwknop.pl | 251 ++++++++++++++++++++++++++++++++++----
2 files changed, 256 insertions(+), 25 deletions(-)
commit b3889289b39409119d6da96441f21fcf3f868bbb
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 00:42:02 2012 -0400
added non-base64 user character fuzzing SPA packets
test/fuzzing/fuzzing_spa_packets | 169 ++++++++++++++++++++++++++
test/fuzzing/patches/non_b64_user_char.patch | 12 ++
2 files changed, 181 insertions(+)
commit d16643affa9579135e99c7eaf374bc58f78455e7
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 00:29:01 2012 -0400
added extra_timestamp_digit fuzzing SPA packets
test/fuzzing/fuzzing_spa_packets | 169 ++++++++++++++++++++++
test/fuzzing/patches/extra_timestamp_digit.patch | 13 ++
2 files changed, 182 insertions(+)
commit e8312c26b9012bc99e22ccf9e19e1629903d3c75
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 00:24:19 2012 -0400
added colon_1_to_a fuzzing SPA packets
test/fuzzing/fuzzing_spa_packets | 169 ++++++++++++++++++++++++++++++++++++++
1 file changed, 169 insertions(+)
commit de512e7d8f2bf763ba9258222300900e380621c1
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 00:20:55 2012 -0400
added fuzzing/README file
test/fuzzing/README | 44 ++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 44 insertions(+)
commit 6a649e26e71ecf1a413b8bed218d160cd6fd191e
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 25 00:20:08 2012 -0400
easier SPA fuzzing packet generation and importing
test/fuzzing/bogus_spa_packets | 166 -----
test/fuzzing/fuzzing_spa_packets | 1352 ++++++++++++++++++++++++++++++++++++++
test/test-fwknop.pl | 237 ++++---
3 files changed, 1514 insertions(+), 241 deletions(-)
commit 627035fb22ac375d19cdde3b132f2d7fa85fcbe7
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 23 21:47:56 2012 -0400
Patch from Franck Joncourt for setting permissions via open()
[client+server] Applied patch from Franck Joncourt to remove unnecessary
chmod() call when creating client rc file and server replay cache file.
The permissions are now set appropriately via open(), and at the same
time this patch fixes a potential race condition since the previous code
used fopen() followed by chmod().
CREDITS | 5 +++++
ChangeLog | 5 +++++
client/config_init.c | 23 +++++++++++++++++++----
client/fwknop.c | 36 +++++++++++++++++++++---------------
client/utils.c | 18 ------------------
client/utils.h | 1 -
server/replay_cache.c | 30 +++++++++++++++++++++---------
server/utils.c | 15 ---------------
server/utils.h | 1 -
9 files changed, 71 insertions(+), 63 deletions(-)
commit 52d023ec60a37e07f8de678fe46b2275375c1b60
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Oct 22 20:31:19 2012 -0400
added validate_username() call to SPA packet encoding routine
lib/fko_encode.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit 23eefbdefad378892f2abe89bdd16c73d092f6ea
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Oct 22 20:30:42 2012 -0400
added MIPS compilation bug for todo.org tracking
todo.org | 43 ++++++++++++++++++++++++++++++++++++-------
1 file changed, 36 insertions(+), 7 deletions(-)
commit 691d9503ee79ca3abdff5eb0083a148791e111a8
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 19 22:14:24 2012 -0400
added test/fuzzing/ directory for fuzzing data and patches
Makefile.am | 7 +
test/bogus_spa_packets | 166 --------------------
test/fuzzing/bogus_spa_packets | 166 ++++++++++++++++++++
.../patches/enable_perl_fko_bogus_packets.patch | 104 ++++++++++++
test/fuzzing/patches/invalid_access_format.patch | 40 +++++
...nvalid_long_proto_define_enc_mode_trigger.patch | 13 ++
...nvalid_long_proto_define_rijndael_trigger.patch | 13 ++
test/fuzzing/patches/long_ip.patch | 13 ++
test/test-fwknop.pl | 2 +-
9 files changed, 357 insertions(+), 167 deletions(-)
commit 95001b7da8f06ee14662b3fc7a4c3516fa15f8dc
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 19 22:11:27 2012 -0400
minor ChangeLog updates
ChangeLog | 20 ++++++++++++++------
1 file changed, 14 insertions(+), 6 deletions(-)
commit 54297086baac78292415a66d81db4681888924cc
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 18 23:10:02 2012 -0400
fixed --enable-recompile argument for OpenBSD
test/test-fwknop.pl | 37 +++++++++++++++++++++++++++----------
1 file changed, 27 insertions(+), 10 deletions(-)
commit 3eaa7dcb5f375b9cda4e509def5e0f4d3e497853
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 18 23:01:54 2012 -0400
added libfko validate_username() for decrypted SPA data
lib/Makefile.am | 4 ++--
lib/fko_common.h | 1 +
lib/fko_decode.c | 5 +++++
lib/fko_user.c | 32 +++++++++++++++++++++++---------
lib/fko_user.h | 41 +++++++++++++++++++++++++++++++++++++++++
test/bogus_spa_packets | 2 --
6 files changed, 72 insertions(+), 13 deletions(-)
commit 692e336880e22aef35204705b49b3be39853123f
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 18 22:24:48 2012 -0400
added 'Rejected' messages to test output for bogus SPA packet perl FKO tests
test/test-fwknop.pl | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
commit d5c3fc4b1c3f333f7f85bf9ef7fb0d29f0558ca9
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 18 22:24:11 2012 -0400
removed non-SPA packet lines
test/bogus_spa_packets | 3 ---
1 file changed, 3 deletions(-)
commit cc58adc7fc505273d08bea805154084b8e34aa90
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 18 22:08:38 2012 -0400
added bogus_spa_packets file for perl FKO fuzzing tests
test/bogus_spa_packets | 171 +++++++++++++++++++++++++++++++
test/test-fwknop.pl | 266 ++++++++++++++++++++++++++++++++++++++++++++++--
2 files changed, 429 insertions(+), 8 deletions(-)
commit b218977c61b60f6c0f2d63af4ab4747be61cc0eb
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 16 21:23:43 2012 -0400
continued validation code driven by perl FKO module
test/test-fwknop.pl | 253 +++++++++++++++++++++++++++++++++++++++++++++------
1 file changed, 223 insertions(+), 30 deletions(-)
commit e0d86f9a336f5b203106c1e24c2151f7001b7d49
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Oct 15 20:52:23 2012 -0400
[libfko] validation of NAT access strings
Added validation of NAT access strings in the various NAT modes in libfko.
This applies to both the client and server, and test suite support was added
as well.
ChangeLog | 2 +
Makefile.am | 1 +
lib/fko_decode.c | 6 ++
lib/fko_message.c | 223 +++++++++++++++++++++++++++-----------------------
lib/fko_message.h | 3 +-
lib/fko_nat_access.c | 5 ++
test/test-fwknop.pl | 120 ++++++++++++++++++++++++++-
7 files changed, 252 insertions(+), 108 deletions(-)
commit bf22778ada205da8bafde8347cd25e3a95f22b9e
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 13 14:08:38 2012 -0400
added perl FKO module client timeout test
test/test-fwknop.pl | 57 +++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 57 insertions(+)
commit 1910cd1ecf1cf5da308818dcf5432aa9c4588b51
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 13 11:38:23 2012 -0400
additional perl FKO module access message test strings
test/test-fwknop.pl | 14 +++++++++++++-
1 file changed, 13 insertions(+), 1 deletion(-)
commit e24cfd014d8314c56c7d034e4acb6664bbe01168
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Oct 13 11:31:31 2012 -0400
added perl FKO module cmd mode tests
test/test-fwknop.pl | 136 +++++++++++++++++++++++++++++++++++++++++++++++----
1 file changed, 126 insertions(+), 10 deletions(-)
commit 5112704ed92b0d86734bc7ca713c77f1de9ba915
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 12 23:52:14 2012 -0400
started on fuzzing tests with the perl FKO module
test/test-fwknop.pl | 394 ++++++++++++++++++++++++++++++++++++++++++++++++++-
1 file changed, 389 insertions(+), 5 deletions(-)
commit 402c7033d50be4b8faa430002f42ebf894539a6d
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 12 23:51:28 2012 -0400
force usernames to be alpha numeric chars and dashes
lib/fko_user.c | 10 ++++++++++
1 file changed, 10 insertions(+)
commit c047dca50d05cfe52b6b31d11c8b237643af4e62
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 11 23:50:16 2012 -0400
minor todo.org update to set icmp type/code task to completed
todo.org | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
commit e4751d1c20796f95ca20a07abf49094d55b36160
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 11 23:40:04 2012 -0400
added icmp type/code blurb
ChangeLog | 5 +++++
client/cmd_opts.h | 4 ++++
client/config_init.c | 19 +++++++++++++++++++
client/fwknop_common.h | 3 +++
client/spa_comm.c | 16 +++++++++++-----
common/common.h | 3 +++
doc/fwknop.man.asciidoc | 8 ++++++++
lib/fko_encryption.c | 4 ++--
test/test-fwknop.pl | 15 +++++++++++++++
todo.org | 7 +++++++
10 files changed, 77 insertions(+), 7 deletions(-)
commit 67f5d1f1e9aea0c45c2da118c07c16a4bc70dae6
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 11 23:36:50 2012 -0400
Applied perl FKO module libfko path patch from Franck Joncourt
Applied patch from Franck Joncourt to have the perl FKO module link
against libfko in the local directory (if it exists) so that it doesn't
have to have libfko completely installed in /usr/lib/. This allows the
test suite to run FKO tests without installing libfko.
Added the ability to the test suite to compile, install, and run some
basic tests against the perl FKO module.
CREDITS | 4 ++
ChangeLog | 4 ++
perl/FKO/Makefile.PL | 5 +-
test/test-fwknop.pl | 178 ++++++++++++++++++++++++++++++++++++++++++++++++++
4 files changed, 189 insertions(+), 2 deletions(-)
commit 6f356a96844214da616ad3b3a994d4d37cd9ed77
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Oct 8 22:06:33 2012 -0400
Added Sean Greven for his FreeBSD port
CREDITS | 4 ++++
1 file changed, 4 insertions(+)
commit d0189b6b7e7c57b7bd08a264246c624033dc69c3
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sun Oct 7 15:11:53 2012 -0400
minor addition of newline before each chain list in --fw-list mode
server/fw_util_iptables.c | 2 ++
1 file changed, 2 insertions(+)
commit 845f81804f47c7fe7addc6e673bbdb4f77467b80
Author: Michael Rash <mbr@cipherdyne.org>
Date: Fri Oct 5 16:12:03 2012 -0400
added test/conf/tcp_server_fwknopd.conf file
Makefile.am | 1 +
1 file changed, 1 insertion(+)
commit 66741b3d81ab8afa6e2c8a98a66efa2bfb22604d
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 4 21:05:55 2012 -0400
Added a test for SPA over TCP
test/conf/tcp_server_fwknopd.conf | 7 +++++++
test/test-fwknop.pl | 18 ++++++++++++++++++
2 files changed, 25 insertions(+)
commit ecce80b92bd201fc02a40506128911bfadf8e81b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Oct 4 21:05:22 2012 -0400
[client] for spoofed SPA packets over ICMP, switche back to sending over echo reply
client/spa_comm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
commit aceb501eca940b005b80b719b5bb718625ea38af
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Oct 3 22:58:06 2012 -0400
minor replay warning msg fix to not include newlines (better for syslog)
server/replay_cache.c | 18 +++++++++---------
1 file changed, 9 insertions(+), 9 deletions(-)
commit 229a36625b24c01d5883d65586dff7670c467064
Author: Michael Rash <mbr@cipherdyne.org>
Date: Wed Oct 3 22:56:10 2012 -0400
Better IP spoofing support (udpraw and icmp)
- [client] Added '-P udpraw' to allow the client to send SPA packets over
UDP with a spoofed source IP address. This is in addition to the
original 'tcpraw' and 'icmp' protocols that also support a spoofed
source IP.
- [server] Bug fix to accept SPA packets over ICMP if the fwknop client
is executed with '-P icmp' and the user has the required privileges.
ChangeLog | 6 ++
Makefile.am | 2 +
client/config_init.c | 4 +-
client/spa_comm.c | 106 ++++++++++++++++++++++++++++++-
common/common.h | 1 +
doc/fwknop.man.asciidoc | 10 +--
server/process_packet.c | 15 ++++-
test/conf/icmp_pcap_filter_fwknopd.conf | 5 ++
test/conf/tcp_pcap_filter_fwknopd.conf | 5 ++
test/test-fwknop.pl | 50 +++++++++++++++
10 files changed, 195 insertions(+), 9 deletions(-)
commit bb1743d25dc8145252b0e8a90d81766a957dc45a
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 2 23:22:15 2012 -0400
[server] Switched upstart config to use 'expect' section
This change allows fwknopd to write syslog messages to traditional syslog files
while running under upstart. Not forking into the background resulted in
messages meant for syslog were captured under /var/log/upstart/fwknop.log.
extras/upstart/fwknop.conf | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
commit 1828f51b90a925a296d72406f0b8dfb1cfe7e7b1
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Oct 2 23:20:47 2012 -0400
[server] GPG_ALLOW_NO_PW + no KEY bug fix
Bug fix to allow GPG_ALLOW_NO_PW to result in not also having to specify a
Rijndael key.
ChangeLog | 2 ++
server/access.c | 3 ++-
test/conf/gpg_no_pw_access.conf | 1 -
todo.org | 7 +++++++
4 files changed, 11 insertions(+), 2 deletions(-)
commit 2aff47c7a24fdf7733b0b1c520dbbbf1896067d7
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Oct 1 22:49:45 2012 -0400
minor fwknopd man page fixes
doc/fwknopd.man.asciidoc | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
commit 1f4ca20f762881bcbc6202e6b4f20ef4a802799a
Author: Michael Rash <mbr@cipherdyne.org>
Date: Sat Sep 29 21:58:04 2012 -0400
[server] upstart config change to start on network device up
For the upstart config make sure only start fwknopd after a non-loopback
network interface is brought up. Also added a commented post-start script
to send an email whenever fwknopd is (re)started.
extras/upstart/fwknop.conf | 10 +++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)
commit e37409c25092dfe3938dbbf813d19b3d74597f08
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Sep 27 22:01:54 2012 -0400
Added blurb about the new upstart config
ChangeLog | 3 +++
1 file changed, 3 insertions(+)
commit f7472bec0fd6c270d1dd9e08bdc9f9188c8a5f84
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Sep 27 21:58:38 2012 -0400
Added upstart config for Ubuntu systems
fwknop can be easily managed with upstart with the addition of this config.
Here is an example:
# service fwknop start
fwknop start/running, process 4269
Makefile.am | 1 +
extras/upstart/fwknop.conf | 15 +++++++++++++++
todo.org | 9 ++++++---
3 files changed, 22 insertions(+), 3 deletions(-)
commit 91e7b210544375c03753ff4cdd43fe2032247294
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Sep 27 21:57:39 2012 -0400
added log output for the sniffing interface
server/pcap_capture.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
commit 4c852c133b767dfc95f9d103a5f137050037e9da
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Sep 24 22:15:33 2012 -0400
[todo] client/server tests
todo.org | 3 +++
1 file changed, 3 insertions(+)
commit 61021e0f23e795a0442c1a1f599d32c3437e2a2b
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Sep 24 22:15:01 2012 -0400
minor print status update in --Anonymize mode
test/test-fwknop.pl | 4 ++++
1 file changed, 4 insertions(+)
commit 96609e280c1d1e99f9d29bd646e7ae16f20035a0
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Sep 24 21:33:41 2012 -0400
added mbr@cipherdyne.org to bug email list
doc/fwknop.man.asciidoc | 4 ++--
doc/fwknopd.man.asciidoc | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
commit 05eb19738a5363cdcc97c431eb84a1f1db8dbbee
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Sep 13 21:25:43 2012 -0400
added the OpenBSD port from Vlad
CREDITS | 2 ++
1 file changed, 2 insertions(+)
commit 2b09f048f7d0a05633ef82edb9c663a754f6452a
Author: Michael Rash <mbr@cipherdyne.org>
Date: Thu Sep 13 21:24:54 2012 -0400
(Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.3
(Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.3, and this has
been checked in under extras/openbsd/.
ChangeLog | 2 ++
extras/openbsd/distinfo | 5 ++++
extras/openbsd/patches/patch-lib_fko_decode_c | 14 ++++++++++
extras/openbsd/patches/patch-server_replay_cache_c | 27 ++++++++++++++++++++
extras/openbsd/pkg/DESCR | 14 ++++++++++
extras/openbsd/pkg/PFRAG.shared | 2 ++
extras/openbsd/pkg/PLIST | 11 ++++++++
extras/openbsd/pkg/fwknopd.rc | 9 +++++++
8 files changed, 84 insertions(+)
commit f8374c8aefe7a3cf4fcc8763267b139a3504cd66
Author: Michael Rash <mbr@cipherdyne.org>
Date: Tue Sep 11 21:54:26 2012 -0400
[server] (Vlad Glagolev) Submitted a patch to fix command exec mode
(Vlad Glagolev) Submitted a patch to fix command exec mode
under SPA message type validity test. Support for command exec mode was
also added to the test suite.
CREDITS | 3 +++
ChangeLog | 3 +++
lib/fko_decode.c | 29 ++++++++++++++++++++++++-----
test/conf/cmd_access.conf | 4 ++++
test/test-fwknop.pl | 35 +++++++++++++++++++++++++++++++++++
5 files changed, 69 insertions(+), 5 deletions(-)
commit 591416e23bc9e93c83e832bbf504837e7b24be88
Author: Michael Rash <mbr@cipherdyne.org>
Date: Mon Sep 10 21:47:48 2012 -0400
[server] bug fix in --disable-file-cache mode
Applied patch from Vlad Glagolev to fix ndbm/gdbm usage when --disable-file-cache
is used for the autoconf configure script. This functionality was broken in
be4193d734850fe60f14a26b547525ea0b9ce1e9 through improper handling of #define
macros from --disable-file-cache.
CREDITS | 6 ++++++
ChangeLog | 6 ++++++
server/replay_cache.c | 10 +++-------
3 files changed, 15 insertions(+), 7 deletions(-)
Jump to Line
Something went wrong with that request. Please try again.