Skip to content
Browse files

Revert "Tweaks to EXTRA_DIST. Added one missing and removed one inval…

…id entry under the test directory."

This reverts commit 556ca2c.
  • Loading branch information...
1 parent f544a4a commit 617305504a9a54cd841ff5e1e8f84de7bb3995e6 @damienstuart damienstuart committed Nov 19, 2012
Showing with 1 addition and 22,016 deletions.
  1. +1 −1 Makefile.am
  2. +0 −1 client/.deps/fwknop-config_init.Po
  3. +0 −1 client/.deps/fwknop-fwknop.Po
  4. +0 −1 client/.deps/fwknop-getpasswd.Po
  5. +0 −1 client/.deps/fwknop-http_resolve_host.Po
  6. +0 −1 client/.deps/fwknop-spa_comm.Po
  7. +0 −1 client/.deps/fwknop-utils.Po
  8. +0 −767 client/Makefile
  9. +0 −676 client/fwknop.8
  10. +0 −394 common/Makefile
  11. +0 −366 config.h
  12. +0 −2,927 config.log
  13. +0 −2,119 config.status
  14. +0 −703 doc/Makefile
  15. +0 −1,813 doc/libfko.info
  16. BIN fwknop-2.0.4.tar.gz
  17. +0 −1 lib/.deps/base64.Plo
  18. +0 −1 lib/.deps/cipher_funcs.Plo
  19. +0 −1 lib/.deps/digest.Plo
  20. +0 −1 lib/.deps/fko_client_timeout.Plo
  21. +0 −1 lib/.deps/fko_decode.Plo
  22. +0 −1 lib/.deps/fko_digest.Plo
  23. +0 −1 lib/.deps/fko_encode.Plo
  24. +0 −1 lib/.deps/fko_encryption.Plo
  25. +0 −1 lib/.deps/fko_error.Plo
  26. +0 −1 lib/.deps/fko_funcs.Plo
  27. +0 −1 lib/.deps/fko_message.Plo
  28. +0 −1 lib/.deps/fko_nat_access.Plo
  29. +0 −1 lib/.deps/fko_rand_value.Plo
  30. +0 −1 lib/.deps/fko_server_auth.Plo
  31. +0 −1 lib/.deps/fko_timestamp.Plo
  32. +0 −1 lib/.deps/fko_user.Plo
  33. +0 −1 lib/.deps/gpgme_funcs.Plo
  34. +0 −1 lib/.deps/md5.Plo
  35. +0 −1 lib/.deps/rijndael.Plo
  36. +0 −1 lib/.deps/sha1.Plo
  37. +0 −1 lib/.deps/sha2.Plo
  38. +0 −1 lib/.deps/strlcat.Plo
  39. +0 −1 lib/.deps/strlcpy.Plo
  40. +0 −648 lib/Makefile
  41. +0 −10,075 libtool
  42. +0 −1 server/.deps/fwknopd-access.Po
  43. +0 −1 server/.deps/fwknopd-config_init.Po
  44. +0 −1 server/.deps/fwknopd-extcmd.Po
  45. +0 −1 server/.deps/fwknopd-fw_util.Po
  46. +0 −1 server/.deps/fwknopd-fw_util_ipf.Po
  47. +0 −1 server/.deps/fwknopd-fw_util_ipfw.Po
  48. +0 −1 server/.deps/fwknopd-fw_util_iptables.Po
  49. +0 −1 server/.deps/fwknopd-fw_util_pf.Po
  50. +0 −1 server/.deps/fwknopd-fwknopd.Po
  51. +0 −1 server/.deps/fwknopd-fwknopd_errors.Po
  52. +0 −1 server/.deps/fwknopd-incoming_spa.Po
  53. +0 −1 server/.deps/fwknopd-log_msg.Po
  54. +0 −1 server/.deps/fwknopd-pcap_capture.Po
  55. +0 −1 server/.deps/fwknopd-process_packet.Po
  56. +0 −1 server/.deps/fwknopd-replay_cache.Po
  57. +0 −1 server/.deps/fwknopd-sig_handler.Po
  58. +0 −1 server/.deps/fwknopd-tcp_server.Po
  59. +0 −1 server/.deps/fwknopd-utils.Po
  60. +0 −995 server/Makefile
  61. +0 −484 server/fwknopd.8
  62. +0 −1 stamp-h1
View
2 Makefile.am
@@ -122,7 +122,6 @@ EXTRA_DIST = \
test/conf/server-gpg-no-pw/pubring.gpg \
test/conf/server-gpg-no-pw/secring.gpg \
test/conf/server-gpg-no-pw/trustdb.gpg \
- test/conf/android_access.conf \
test/conf/default_access.conf \
test/conf/default_fwknopd.conf \
test/conf/dual_key_usage_access.conf \
@@ -163,6 +162,7 @@ EXTRA_DIST = \
test/conf/tcp_server_fwknopd.conf \
test/conf/spa_replay.pcap \
test/fuzzing/patches/enable_perl_fko_bogus_packets.patch \
+ test/fuzzing/patches/encoding_append_b64_modified_byte \
test/fuzzing/patches/encoding_append_b64_modified_byte_eq.patch \
test/fuzzing/patches/encoding_append_b64_modified_byte.patch \
test/fuzzing/patches/encoding_extra_colon1.patch \
View
1 client/.deps/fwknop-config_init.Po
@@ -1 +0,0 @@
-# dummy
View
1 client/.deps/fwknop-fwknop.Po
@@ -1 +0,0 @@
-# dummy
View
1 client/.deps/fwknop-getpasswd.Po
@@ -1 +0,0 @@
-# dummy
View
1 client/.deps/fwknop-http_resolve_host.Po
@@ -1 +0,0 @@
-# dummy
View
1 client/.deps/fwknop-spa_comm.Po
@@ -1 +0,0 @@
-# dummy
View
1 client/.deps/fwknop-utils.Po
@@ -1 +0,0 @@
-# dummy
View
767 client/Makefile
@@ -1,767 +0,0 @@
-# Makefile.in generated by automake 1.12.4 from Makefile.am.
-# client/Makefile. Generated from Makefile.in by configure.
-
-# Copyright (C) 1994-2012 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-
-
-
-am__make_dryrun = \
- { \
- am__dry=no; \
- case $$MAKEFLAGS in \
- *\\[\ \ ]*) \
- echo 'am--echo: ; @echo "AM" OK' | $(MAKE) -f - 2>/dev/null \
- | grep '^AM OK$$' >/dev/null || am__dry=yes;; \
- *) \
- for am__flg in $$MAKEFLAGS; do \
- case $$am__flg in \
- *=*|--*) ;; \
- *n*) am__dry=yes; break;; \
- esac; \
- done;; \
- esac; \
- test $$am__dry = yes; \
- }
-pkgdatadir = $(datadir)/fwknop
-pkgincludedir = $(includedir)/fwknop
-pkglibdir = $(libdir)/fwknop
-pkglibexecdir = $(libexecdir)/fwknop
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = x86_64-apple-darwin12.2.1
-host_triplet = x86_64-apple-darwin12.2.1
-target_triplet = x86_64-apple-darwin12.2.1
-bin_PROGRAMS = fwknop$(EXEEXT)
-subdir = client
-DIST_COMMON = $(dist_man_MANS) $(srcdir)/Makefile.am \
- $(srcdir)/Makefile.in $(top_srcdir)/config/depcomp
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/libtool.m4 \
- $(top_srcdir)/m4/ltoptions.m4 $(top_srcdir)/m4/ltsugar.m4 \
- $(top_srcdir)/m4/ltversion.m4 $(top_srcdir)/m4/lt~obsolete.m4 \
- $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
- $(ACLOCAL_M4)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-am__installdirs = "$(DESTDIR)$(bindir)" "$(DESTDIR)$(man8dir)"
-PROGRAMS = $(bin_PROGRAMS)
-am_fwknop_OBJECTS = fwknop-fwknop.$(OBJEXT) \
- fwknop-config_init.$(OBJEXT) fwknop-spa_comm.$(OBJEXT) \
- fwknop-utils.$(OBJEXT) fwknop-http_resolve_host.$(OBJEXT) \
- fwknop-getpasswd.$(OBJEXT)
-fwknop_OBJECTS = $(am_fwknop_OBJECTS)
-fwknop_DEPENDENCIES = $(top_builddir)/lib/libfko.la
-DEFAULT_INCLUDES = -I. -I$(top_builddir)
-depcomp = $(SHELL) $(top_srcdir)/config/depcomp
-am__depfiles_maybe = depfiles
-am__mv = mv -f
-COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
- $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
-LTCOMPILE = $(LIBTOOL) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) \
- --mode=compile $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) \
- $(AM_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
-CCLD = $(CC)
-LINK = $(LIBTOOL) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) \
- --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \
- $(LDFLAGS) -o $@
-SOURCES = $(fwknop_SOURCES)
-DIST_SOURCES = $(fwknop_SOURCES)
-am__can_run_installinfo = \
- case $$AM_UPDATE_INFO_DIR in \
- n|no|NO) false;; \
- *) (install-info --version) >/dev/null 2>&1;; \
- esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
- $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
- *) f=$$p;; \
- esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
- srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
- for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
- for p in $$list; do echo "$$p $$p"; done | \
- sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
- $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
- if (++n[$$2] == $(am__install_max)) \
- { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
- END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
- sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
- sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
- test -z "$$files" \
- || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
- || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
- $(am__cd) "$$dir" && rm -f $$files; }; \
- }
-man8dir = $(mandir)/man8
-NROFF = nroff
-MANS = $(dist_man_MANS)
-ETAGS = etags
-CTAGS = ctags
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run aclocal-1.12
-AMTAR = $${TAR-tar}
-AR = ar
-AUTOCONF = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run autoconf
-AUTOHEADER = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run autoheader
-AUTOMAKE = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run automake-1.12
-AWK = gawk
-CC = gcc
-CCDEPMODE = depmode=gcc3
-CFLAGS = -g -O2 -Wall -Wformat -Wformat-security -fstack-protector-all -fstack-protector -fPIE -D_FORTIFY_SOURCE=2
-CPP = gcc -E
-CPPFLAGS =
-CYGPATH_W = echo
-DEFS = -DHAVE_CONFIG_H
-DEPDIR = .deps
-DLLTOOL = false
-DSYMUTIL = dsymutil
-DUMPBIN =
-ECHO_C = \c
-ECHO_N =
-ECHO_T =
-EGREP = /usr/bin/grep -E
-EXEEXT =
-FGREP = /usr/bin/grep -F
-GPGME_CFLAGS = -I/opt/local/include
-GPGME_CONFIG = /opt/local/bin/gpgme-config
-GPGME_LIBS = -L/opt/local/lib -lgpgme -lassuan -lgpg-error
-GPG_EXE = /opt/local/bin/gpg
-GREP = /usr/bin/grep
-INSTALL = /opt/local/bin/ginstall -c
-INSTALL_DATA = ${INSTALL} -m 644
-INSTALL_PROGRAM = ${INSTALL}
-INSTALL_SCRIPT = ${INSTALL}
-INSTALL_STRIP_PROGRAM = $(install_sh) -c -s
-IPFW_EXE = /sbin/ipfw
-IPF_EXE =
-IPTABLES_EXE =
-LD = /usr/llvm-gcc-4.2/libexec/gcc/i686-apple-darwin11/4.2.1/ld
-LDFLAGS = -Wall -Wformat -Wformat-security -fstack-protector-all -fstack-protector -fPIE -pie -D_FORTIFY_SOURCE=2
-LIBOBJS = ${LIBOBJDIR}lstat$U.o
-LIBS =
-LIBTOOL = $(SHELL) $(top_builddir)/libtool
-LIPO = lipo
-LN_S = ln -s
-LTLIBOBJS = ${LIBOBJDIR}lstat$U.lo
-MAKEINFO = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run makeinfo
-MANIFEST_TOOL = :
-MKDIR_P = /opt/local/bin/gmkdir -p
-NM = /usr/bin/nm
-NMEDIT = nmedit
-OBJDUMP = false
-OBJEXT = o
-OTOOL = otool
-OTOOL64 = :
-PACKAGE = fwknop
-PACKAGE_BUGREPORT = dstuart@dstuart.org
-PACKAGE_NAME = fwknop
-PACKAGE_STRING = fwknop 2.0.4
-PACKAGE_TARNAME = fwknop
-PACKAGE_URL =
-PACKAGE_VERSION = 2.0.4
-PATH_SEPARATOR = :
-PF_EXE = /sbin/pfctl
-RANLIB = ranlib
-SED = /opt/local/bin/gsed
-SET_MAKE =
-SHELL = /bin/sh
-STRIP = strip
-VERSION = 2.0.4
-abs_builddir = /Users/dstuart/projects/miranda/fwknop/client
-abs_srcdir = /Users/dstuart/projects/miranda/fwknop/client
-abs_top_builddir = /Users/dstuart/projects/miranda/fwknop
-abs_top_srcdir = /Users/dstuart/projects/miranda/fwknop
-ac_ct_AR = ar
-ac_ct_CC = gcc
-ac_ct_DUMPBIN =
-am__include = include
-am__leading_dot = .
-am__quote =
-am__tar = tar --format=ustar -chf - "$$tardir"
-am__untar = tar -xf -
-bindir = ${exec_prefix}/bin
-build = x86_64-apple-darwin12.2.1
-build_alias =
-build_cpu = x86_64
-build_os = darwin12.2.1
-build_vendor = apple
-builddir = .
-datadir = ${datarootdir}
-datarootdir = ${prefix}/share
-docdir = ${datarootdir}/doc/${PACKAGE_TARNAME}
-dvidir = ${docdir}
-exec_prefix = ${prefix}
-host = x86_64-apple-darwin12.2.1
-host_alias =
-host_cpu = x86_64
-host_os = darwin12.2.1
-host_vendor = apple
-htmldir = ${docdir}
-includedir = ${prefix}/include
-infodir = ${datarootdir}/info
-install_sh = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/install-sh
-libdir = ${exec_prefix}/lib
-libexecdir = ${exec_prefix}/libexec
-localedir = ${datarootdir}/locale
-localstatedir = ${prefix}/var
-mandir = ${datarootdir}/man
-mkdir_p = $(MKDIR_P)
-oldincludedir = /usr/include
-pdfdir = ${docdir}
-prefix = /usr/local
-program_transform_name = s,x,x,
-psdir = ${docdir}
-sbindir = ${exec_prefix}/sbin
-sharedstatedir = ${prefix}/com
-srcdir = .
-sysconfdir = ${prefix}/etc
-target = x86_64-apple-darwin12.2.1
-target_alias =
-target_cpu = x86_64
-target_os = darwin12.2.1
-target_vendor = apple
-top_build_prefix = ../
-top_builddir = ..
-top_srcdir = ..
-fwknop_SOURCES = fwknop.c fwknop.h config_init.c config_init.h \
- fwknop_common.h spa_comm.c spa_comm.h utils.c utils.h \
- http_resolve_host.c getpasswd.c getpasswd.h cmd_opts.h
-
-fwknop_CPPFLAGS = -I $(top_srcdir)/lib -I $(top_srcdir)/common
-fwknop_LDADD = $(top_builddir)/lib/libfko.la
-dist_man_MANS = fwknop.8
-EXTRA_DIST = fwknop.8.in
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .c .lo .o .obj
-$(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps)
- @for dep in $?; do \
- case '$(am__configure_deps)' in \
- *$$dep*) \
- ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
- && { if test -f $@; then exit 0; else break; fi; }; \
- exit 1;; \
- esac; \
- done; \
- echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign client/Makefile'; \
- $(am__cd) $(top_srcdir) && \
- $(AUTOMAKE) --foreign client/Makefile
-.PRECIOUS: Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
- @case '$?' in \
- *config.status*) \
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
- *) \
- echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
- cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
- esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure: $(am__configure_deps)
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4): $(am__aclocal_m4_deps)
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-install-binPROGRAMS: $(bin_PROGRAMS)
- @$(NORMAL_INSTALL)
- @list='$(bin_PROGRAMS)'; test -n "$(bindir)" || list=; \
- if test -n "$$list"; then \
- echo " $(MKDIR_P) '$(DESTDIR)$(bindir)'"; \
- $(MKDIR_P) "$(DESTDIR)$(bindir)" || exit 1; \
- fi; \
- for p in $$list; do echo "$$p $$p"; done | \
- sed 's/$(EXEEXT)$$//' | \
- while read p p1; do if test -f $$p || test -f $$p1; \
- then echo "$$p"; echo "$$p"; else :; fi; \
- done | \
- sed -e 'p;s,.*/,,;n;h' -e 's|.*|.|' \
- -e 'p;x;s,.*/,,;s/$(EXEEXT)$$//;$(transform);s/$$/$(EXEEXT)/' | \
- sed 'N;N;N;s,\n, ,g' | \
- $(AWK) 'BEGIN { files["."] = ""; dirs["."] = 1 } \
- { d=$$3; if (dirs[d] != 1) { print "d", d; dirs[d] = 1 } \
- if ($$2 == $$4) files[d] = files[d] " " $$1; \
- else { print "f", $$3 "/" $$4, $$1; } } \
- END { for (d in files) print "f", d, files[d] }' | \
- while read type dir files; do \
- if test "$$dir" = .; then dir=; else dir=/$$dir; fi; \
- test -z "$$files" || { \
- echo " $(INSTALL_PROGRAM_ENV) $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL_PROGRAM) $$files '$(DESTDIR)$(bindir)$$dir'"; \
- $(INSTALL_PROGRAM_ENV) $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL_PROGRAM) $$files "$(DESTDIR)$(bindir)$$dir" || exit $$?; \
- } \
- ; done
-
-uninstall-binPROGRAMS:
- @$(NORMAL_UNINSTALL)
- @list='$(bin_PROGRAMS)'; test -n "$(bindir)" || list=; \
- files=`for p in $$list; do echo "$$p"; done | \
- sed -e 'h;s,^.*/,,;s/$(EXEEXT)$$//;$(transform)' \
- -e 's/$$/$(EXEEXT)/' `; \
- test -n "$$list" || exit 0; \
- echo " ( cd '$(DESTDIR)$(bindir)' && rm -f" $$files ")"; \
- cd "$(DESTDIR)$(bindir)" && rm -f $$files
-
-clean-binPROGRAMS:
- @list='$(bin_PROGRAMS)'; test -n "$$list" || exit 0; \
- echo " rm -f" $$list; \
- rm -f $$list || exit $$?; \
- test -n "$(EXEEXT)" || exit 0; \
- list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \
- echo " rm -f" $$list; \
- rm -f $$list
-fwknop$(EXEEXT): $(fwknop_OBJECTS) $(fwknop_DEPENDENCIES) $(EXTRA_fwknop_DEPENDENCIES)
- @rm -f fwknop$(EXEEXT)
- $(LINK) $(fwknop_OBJECTS) $(fwknop_LDADD) $(LIBS)
-
-mostlyclean-compile:
- -rm -f *.$(OBJEXT)
-
-distclean-compile:
- -rm -f *.tab.c
-
-include ./$(DEPDIR)/fwknop-config_init.Po
-include ./$(DEPDIR)/fwknop-fwknop.Po
-include ./$(DEPDIR)/fwknop-getpasswd.Po
-include ./$(DEPDIR)/fwknop-http_resolve_host.Po
-include ./$(DEPDIR)/fwknop-spa_comm.Po
-include ./$(DEPDIR)/fwknop-utils.Po
-
-.c.o:
- $(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
- $(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-# source='$<' object='$@' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(COMPILE) -c $<
-
-.c.obj:
- $(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
- $(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-# source='$<' object='$@' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(COMPILE) -c `$(CYGPATH_W) '$<'`
-
-.c.lo:
- $(LTCOMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
- $(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Plo
-# source='$<' object='$@' libtool=yes \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(LTCOMPILE) -c -o $@ $<
-
-fwknop-fwknop.o: fwknop.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-fwknop.o -MD -MP -MF $(DEPDIR)/fwknop-fwknop.Tpo -c -o fwknop-fwknop.o `test -f 'fwknop.c' || echo '$(srcdir)/'`fwknop.c
- $(am__mv) $(DEPDIR)/fwknop-fwknop.Tpo $(DEPDIR)/fwknop-fwknop.Po
-# source='fwknop.c' object='fwknop-fwknop.o' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-fwknop.o `test -f 'fwknop.c' || echo '$(srcdir)/'`fwknop.c
-
-fwknop-fwknop.obj: fwknop.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-fwknop.obj -MD -MP -MF $(DEPDIR)/fwknop-fwknop.Tpo -c -o fwknop-fwknop.obj `if test -f 'fwknop.c'; then $(CYGPATH_W) 'fwknop.c'; else $(CYGPATH_W) '$(srcdir)/fwknop.c'; fi`
- $(am__mv) $(DEPDIR)/fwknop-fwknop.Tpo $(DEPDIR)/fwknop-fwknop.Po
-# source='fwknop.c' object='fwknop-fwknop.obj' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-fwknop.obj `if test -f 'fwknop.c'; then $(CYGPATH_W) 'fwknop.c'; else $(CYGPATH_W) '$(srcdir)/fwknop.c'; fi`
-
-fwknop-config_init.o: config_init.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-config_init.o -MD -MP -MF $(DEPDIR)/fwknop-config_init.Tpo -c -o fwknop-config_init.o `test -f 'config_init.c' || echo '$(srcdir)/'`config_init.c
- $(am__mv) $(DEPDIR)/fwknop-config_init.Tpo $(DEPDIR)/fwknop-config_init.Po
-# source='config_init.c' object='fwknop-config_init.o' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-config_init.o `test -f 'config_init.c' || echo '$(srcdir)/'`config_init.c
-
-fwknop-config_init.obj: config_init.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-config_init.obj -MD -MP -MF $(DEPDIR)/fwknop-config_init.Tpo -c -o fwknop-config_init.obj `if test -f 'config_init.c'; then $(CYGPATH_W) 'config_init.c'; else $(CYGPATH_W) '$(srcdir)/config_init.c'; fi`
- $(am__mv) $(DEPDIR)/fwknop-config_init.Tpo $(DEPDIR)/fwknop-config_init.Po
-# source='config_init.c' object='fwknop-config_init.obj' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-config_init.obj `if test -f 'config_init.c'; then $(CYGPATH_W) 'config_init.c'; else $(CYGPATH_W) '$(srcdir)/config_init.c'; fi`
-
-fwknop-spa_comm.o: spa_comm.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-spa_comm.o -MD -MP -MF $(DEPDIR)/fwknop-spa_comm.Tpo -c -o fwknop-spa_comm.o `test -f 'spa_comm.c' || echo '$(srcdir)/'`spa_comm.c
- $(am__mv) $(DEPDIR)/fwknop-spa_comm.Tpo $(DEPDIR)/fwknop-spa_comm.Po
-# source='spa_comm.c' object='fwknop-spa_comm.o' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-spa_comm.o `test -f 'spa_comm.c' || echo '$(srcdir)/'`spa_comm.c
-
-fwknop-spa_comm.obj: spa_comm.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-spa_comm.obj -MD -MP -MF $(DEPDIR)/fwknop-spa_comm.Tpo -c -o fwknop-spa_comm.obj `if test -f 'spa_comm.c'; then $(CYGPATH_W) 'spa_comm.c'; else $(CYGPATH_W) '$(srcdir)/spa_comm.c'; fi`
- $(am__mv) $(DEPDIR)/fwknop-spa_comm.Tpo $(DEPDIR)/fwknop-spa_comm.Po
-# source='spa_comm.c' object='fwknop-spa_comm.obj' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-spa_comm.obj `if test -f 'spa_comm.c'; then $(CYGPATH_W) 'spa_comm.c'; else $(CYGPATH_W) '$(srcdir)/spa_comm.c'; fi`
-
-fwknop-utils.o: utils.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-utils.o -MD -MP -MF $(DEPDIR)/fwknop-utils.Tpo -c -o fwknop-utils.o `test -f 'utils.c' || echo '$(srcdir)/'`utils.c
- $(am__mv) $(DEPDIR)/fwknop-utils.Tpo $(DEPDIR)/fwknop-utils.Po
-# source='utils.c' object='fwknop-utils.o' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-utils.o `test -f 'utils.c' || echo '$(srcdir)/'`utils.c
-
-fwknop-utils.obj: utils.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-utils.obj -MD -MP -MF $(DEPDIR)/fwknop-utils.Tpo -c -o fwknop-utils.obj `if test -f 'utils.c'; then $(CYGPATH_W) 'utils.c'; else $(CYGPATH_W) '$(srcdir)/utils.c'; fi`
- $(am__mv) $(DEPDIR)/fwknop-utils.Tpo $(DEPDIR)/fwknop-utils.Po
-# source='utils.c' object='fwknop-utils.obj' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-utils.obj `if test -f 'utils.c'; then $(CYGPATH_W) 'utils.c'; else $(CYGPATH_W) '$(srcdir)/utils.c'; fi`
-
-fwknop-http_resolve_host.o: http_resolve_host.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-http_resolve_host.o -MD -MP -MF $(DEPDIR)/fwknop-http_resolve_host.Tpo -c -o fwknop-http_resolve_host.o `test -f 'http_resolve_host.c' || echo '$(srcdir)/'`http_resolve_host.c
- $(am__mv) $(DEPDIR)/fwknop-http_resolve_host.Tpo $(DEPDIR)/fwknop-http_resolve_host.Po
-# source='http_resolve_host.c' object='fwknop-http_resolve_host.o' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-http_resolve_host.o `test -f 'http_resolve_host.c' || echo '$(srcdir)/'`http_resolve_host.c
-
-fwknop-http_resolve_host.obj: http_resolve_host.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-http_resolve_host.obj -MD -MP -MF $(DEPDIR)/fwknop-http_resolve_host.Tpo -c -o fwknop-http_resolve_host.obj `if test -f 'http_resolve_host.c'; then $(CYGPATH_W) 'http_resolve_host.c'; else $(CYGPATH_W) '$(srcdir)/http_resolve_host.c'; fi`
- $(am__mv) $(DEPDIR)/fwknop-http_resolve_host.Tpo $(DEPDIR)/fwknop-http_resolve_host.Po
-# source='http_resolve_host.c' object='fwknop-http_resolve_host.obj' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-http_resolve_host.obj `if test -f 'http_resolve_host.c'; then $(CYGPATH_W) 'http_resolve_host.c'; else $(CYGPATH_W) '$(srcdir)/http_resolve_host.c'; fi`
-
-fwknop-getpasswd.o: getpasswd.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-getpasswd.o -MD -MP -MF $(DEPDIR)/fwknop-getpasswd.Tpo -c -o fwknop-getpasswd.o `test -f 'getpasswd.c' || echo '$(srcdir)/'`getpasswd.c
- $(am__mv) $(DEPDIR)/fwknop-getpasswd.Tpo $(DEPDIR)/fwknop-getpasswd.Po
-# source='getpasswd.c' object='fwknop-getpasswd.o' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-getpasswd.o `test -f 'getpasswd.c' || echo '$(srcdir)/'`getpasswd.c
-
-fwknop-getpasswd.obj: getpasswd.c
- $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -MT fwknop-getpasswd.obj -MD -MP -MF $(DEPDIR)/fwknop-getpasswd.Tpo -c -o fwknop-getpasswd.obj `if test -f 'getpasswd.c'; then $(CYGPATH_W) 'getpasswd.c'; else $(CYGPATH_W) '$(srcdir)/getpasswd.c'; fi`
- $(am__mv) $(DEPDIR)/fwknop-getpasswd.Tpo $(DEPDIR)/fwknop-getpasswd.Po
-# source='getpasswd.c' object='fwknop-getpasswd.obj' libtool=no \
-# DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-# $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(fwknop_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -c -o fwknop-getpasswd.obj `if test -f 'getpasswd.c'; then $(CYGPATH_W) 'getpasswd.c'; else $(CYGPATH_W) '$(srcdir)/getpasswd.c'; fi`
-
-mostlyclean-libtool:
- -rm -f *.lo
-
-clean-libtool:
- -rm -rf .libs _libs
-install-man8: $(dist_man_MANS)
- @$(NORMAL_INSTALL)
- @list1=''; \
- list2='$(dist_man_MANS)'; \
- test -n "$(man8dir)" \
- && test -n "`echo $$list1$$list2`" \
- || exit 0; \
- echo " $(MKDIR_P) '$(DESTDIR)$(man8dir)'"; \
- $(MKDIR_P) "$(DESTDIR)$(man8dir)" || exit 1; \
- { for i in $$list1; do echo "$$i"; done; \
- if test -n "$$list2"; then \
- for i in $$list2; do echo "$$i"; done \
- | sed -n '/\.8[a-z]*$$/p'; \
- fi; \
- } | while read p; do \
- if test -f $$p; then d=; else d="$(srcdir)/"; fi; \
- echo "$$d$$p"; echo "$$p"; \
- done | \
- sed -e 'n;s,.*/,,;p;h;s,.*\.,,;s,^[^8][0-9a-z]*$$,8,;x' \
- -e 's,\.[0-9a-z]*$$,,;$(transform);G;s,\n,.,' | \
- sed 'N;N;s,\n, ,g' | { \
- list=; while read file base inst; do \
- if test "$$base" = "$$inst"; then list="$$list $$file"; else \
- echo " $(INSTALL_DATA) '$$file' '$(DESTDIR)$(man8dir)/$$inst'"; \
- $(INSTALL_DATA) "$$file" "$(DESTDIR)$(man8dir)/$$inst" || exit $$?; \
- fi; \
- done; \
- for i in $$list; do echo "$$i"; done | $(am__base_list) | \
- while read files; do \
- test -z "$$files" || { \
- echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(man8dir)'"; \
- $(INSTALL_DATA) $$files "$(DESTDIR)$(man8dir)" || exit $$?; }; \
- done; }
-
-uninstall-man8:
- @$(NORMAL_UNINSTALL)
- @list=''; test -n "$(man8dir)" || exit 0; \
- files=`{ for i in $$list; do echo "$$i"; done; \
- l2='$(dist_man_MANS)'; for i in $$l2; do echo "$$i"; done | \
- sed -n '/\.8[a-z]*$$/p'; \
- } | sed -e 's,.*/,,;h;s,.*\.,,;s,^[^8][0-9a-z]*$$,8,;x' \
- -e 's,\.[0-9a-z]*$$,,;$(transform);G;s,\n,.,'`; \
- dir='$(DESTDIR)$(man8dir)'; $(am__uninstall_files_from_dir)
-
-ID: $(HEADERS) $(SOURCES) $(LISP) $(TAGS_FILES)
- list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \
- unique=`for i in $$list; do \
- if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
- done | \
- $(AWK) '{ files[$$0] = 1; nonempty = 1; } \
- END { if (nonempty) { for (i in files) print i; }; }'`; \
- mkid -fID $$unique
-tags: TAGS
-
-TAGS: $(HEADERS) $(SOURCES) $(TAGS_DEPENDENCIES) \
- $(TAGS_FILES) $(LISP)
- set x; \
- here=`pwd`; \
- list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \
- unique=`for i in $$list; do \
- if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
- done | \
- $(AWK) '{ files[$$0] = 1; nonempty = 1; } \
- END { if (nonempty) { for (i in files) print i; }; }'`; \
- shift; \
- if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
- test -n "$$unique" || unique=$$empty_fix; \
- if test $$# -gt 0; then \
- $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
- "$$@" $$unique; \
- else \
- $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
- $$unique; \
- fi; \
- fi
-ctags: CTAGS
-CTAGS: $(HEADERS) $(SOURCES) $(TAGS_DEPENDENCIES) \
- $(TAGS_FILES) $(LISP)
- list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \
- unique=`for i in $$list; do \
- if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
- done | \
- $(AWK) '{ files[$$0] = 1; nonempty = 1; } \
- END { if (nonempty) { for (i in files) print i; }; }'`; \
- test -z "$(CTAGS_ARGS)$$unique" \
- || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
- $$unique
-
-GTAGS:
- here=`$(am__cd) $(top_builddir) && pwd` \
- && $(am__cd) $(top_srcdir) \
- && gtags -i $(GTAGS_ARGS) "$$here"
-
-cscopelist: $(HEADERS) $(SOURCES) $(LISP)
- list='$(SOURCES) $(HEADERS) $(LISP)'; \
- case "$(srcdir)" in \
- [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
- *) sdir=$(subdir)/$(srcdir) ;; \
- esac; \
- for i in $$list; do \
- if test -f "$$i"; then \
- echo "$(subdir)/$$i"; \
- else \
- echo "$$sdir/$$i"; \
- fi; \
- done >> $(top_builddir)/cscope.files
-
-distclean-tags:
- -rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-
-distdir: $(DISTFILES)
- @list='$(MANS)'; if test -n "$$list"; then \
- list=`for p in $$list; do \
- if test -f $$p; then d=; else d="$(srcdir)/"; fi; \
- if test -f "$$d$$p"; then echo "$$d$$p"; else :; fi; done`; \
- if test -n "$$list" && \
- grep 'ab help2man is required to generate this page' $$list >/dev/null; then \
- echo "error: found man pages containing the 'missing help2man' replacement text:" >&2; \
- grep -l 'ab help2man is required to generate this page' $$list | sed 's/^/ /' >&2; \
- echo " to fix them, install help2man, remove and regenerate the man pages;" >&2; \
- echo " typically 'make maintainer-clean' will remove them" >&2; \
- exit 1; \
- else :; fi; \
- else :; fi
- @srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
- topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
- list='$(DISTFILES)'; \
- dist_files=`for file in $$list; do echo $$file; done | \
- sed -e "s|^$$srcdirstrip/||;t" \
- -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
- case $$dist_files in \
- */*) $(MKDIR_P) `echo "$$dist_files" | \
- sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
- sort -u` ;; \
- esac; \
- for file in $$dist_files; do \
- if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
- if test -d $$d/$$file; then \
- dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
- if test -d "$(distdir)/$$file"; then \
- find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
- fi; \
- if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
- cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
- find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
- fi; \
- cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
- else \
- test -f "$(distdir)/$$file" \
- || cp -p $$d/$$file "$(distdir)/$$file" \
- || exit 1; \
- fi; \
- done
-check-am: all-am
-check: check-am
-all-am: Makefile $(PROGRAMS) $(MANS)
-installdirs:
- for dir in "$(DESTDIR)$(bindir)" "$(DESTDIR)$(man8dir)"; do \
- test -z "$$dir" || $(MKDIR_P) "$$dir"; \
- done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
- @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
- if test -z '$(STRIP)'; then \
- $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
- install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
- install; \
- else \
- $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
- install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
- "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
- fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
- -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
- -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
- @echo "This command is intended for maintainers to use"
- @echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-binPROGRAMS clean-generic clean-libtool clean-local \
- mostlyclean-am
-
-distclean: distclean-am
- -rm -rf ./$(DEPDIR)
- -rm -f Makefile
-distclean-am: clean-am distclean-compile distclean-generic \
- distclean-tags
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-man
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am: install-binPROGRAMS
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man: install-man8
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
- -rm -rf ./$(DEPDIR)
- -rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-compile mostlyclean-generic \
- mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-binPROGRAMS uninstall-man
-
-uninstall-man: uninstall-man8
-
-.MAKE: install-am install-strip
-
-.PHONY: CTAGS GTAGS all all-am check check-am clean clean-binPROGRAMS \
- clean-generic clean-libtool clean-local cscopelist ctags \
- distclean distclean-compile distclean-generic \
- distclean-libtool distclean-tags distdir dvi dvi-am html \
- html-am info info-am install install-am install-binPROGRAMS \
- install-data install-data-am install-dvi install-dvi-am \
- install-exec install-exec-am install-html install-html-am \
- install-info install-info-am install-man install-man8 \
- install-pdf install-pdf-am install-ps install-ps-am \
- install-strip installcheck installcheck-am installdirs \
- maintainer-clean maintainer-clean-generic mostlyclean \
- mostlyclean-compile mostlyclean-generic mostlyclean-libtool \
- pdf pdf-am ps ps-am tags uninstall uninstall-am \
- uninstall-binPROGRAMS uninstall-man uninstall-man8
-
-
-#fwknop.8: fwknop.8.in
-fwknop.8: $(top_srcdir)/client/fwknop.8.in
- $(SED) \
- -e 's|[@]prefix@|$(prefix)|g' \
- -e 's|[@]sysconfdir@|$(sysconfdir)|g' \
- -e 's|[@]datarootdir@|$(datarootdir)|g' \
- -e 's|[@]bindir@|$(bindir)|g' \
- -e 's|[@]sbindir@|$(sbindir)|g' \
- -e 's|[@]localstatedir@|$(localstatedir)|g' \
- < $(top_srcdir)/client/fwknop.8.in > "$@"
-
-clean-local:
- rm -f fwknop.8
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
View
676 client/fwknop.8
@@ -1,676 +0,0 @@
-'\" t
-.\" Title: fwknop
-.\" Author: [see the "AUTHORS" section]
-.\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
-.\" Date: 07/06/2011
-.\" Manual: Fwknop Client
-.\" Source: Fwknop Client
-.\" Language: English
-.\"
-.TH "FWKNOP" "8" "07/06/2011" "Fwknop Client" "Fwknop Client"
-.\" -----------------------------------------------------------------
-.\" * set default formatting
-.\" -----------------------------------------------------------------
-.\" disable hyphenation
-.nh
-.\" disable justification (adjust text to left margin only)
-.ad l
-.\" -----------------------------------------------------------------
-.\" * MAIN CONTENT STARTS HERE *
-.\" -----------------------------------------------------------------
-.SH "NAME"
-fwknop \- Firewall Knock Operator
-.SH "SYNOPSIS"
-.sp
-\fBfwknop\fR \fB\-A\fR <\fIproto/ports\fR> \fB\-R\fR|\fB\-a\fR|\fB\-s \-D\fR <\fIhost\fR> [\fIoptions\fR]
-.SH "DESCRIPTION"
-.sp
-\fBfwknop\fR implements an authorization scheme known as Single Packet Authorization (SPA) for Linux systems running iptables\&. This mechanism requires only a single encrypted and non\-replayed packet to communicate various pieces of information including desired access through an iptables or ipfw policy\&. The main application of this program is to use iptables in a default\-drop stance to protect services such as \fISSH\fR with an additional layer of security in order to make the exploitation of vulnerabilities (both 0\-day and unpatched code) much more difficult\&.
-.sp
-An authorization server \fBfwknopd\fR passively monitors authorization packets via \fIlibpcap\fR and hence there is no \(lqserver\(rq to which to connect in the traditional sense\&. Any service protected by \fBfwknop\fR is inaccessible (by using \fIiptables\fR or \fIipfw\fR to intercept packets within the kernel) before authenticating; anyone scanning for the service will not be able to detect that it is even listening\&. Single Packet Authorization offers many advantages over port knocking, including non\-replayability of SPA packets, ability to use asymmetric ciphers (such as Elgamal), and SPA cannot be broken by simply spoofing packets to duplicate ports within the knock sequence on the server to break port knocking authentication\&.
-.sp
-SPA packets can easily be spoofed as well (this is a good thing in this context), and this makes it possible to make it appear as though, say, www\&.yahoo\&.com is trying to authenticate to a target system but in reality the actual connection will come from a seemingly unrelated IP\&.
-.sp
-Authorization packets are either encrypted with the \fIRijndael\fR block cipher or via \fIGnuPG\fR and associated asymmetric ciphers\&. If the symmetric encryption method is chosen, then the encryption key is shared between the client and server (see the fwknopd \fIaccess\&.conf\fR file for details)\&. If the GnuPG method is chosen, then the encryption keys are derived from GnuPG key rings\&. SPA packets generated by fwknop running as a client adhere to the following format (before they are encrypted):
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- random number (16 bytes)
- username
- timestamp
- software version
- mode (command mode (0) or access mode (1))
- if command mode => command to execute
- else access mode => IP,proto,port
- message digest (SHA512 / SHA384 / SHA256 / SHA1 / MD5)
-.fi
-.if n \{\
-.RE
-.\}
-.sp
-Each of the above fields are separated by a ":" character due to the variable length of several of the fields, and those that might contain ":" characters are base64 encoded\&. The message digest (\fBSHA256\fR by default in all versions of \fBfwknop\fR greater than 1\&.9\&.1) allows the server to check message integrity after decryption, and the 16 bytes of random data ensures (with high probability) that no two messages are identical\&. This ensures that replay attacks are not possible against \fBfwknop\fR\&.
-.sp
-For each packet coming from an \fBfwknop\fR client, the \fBfwknopd\fR server can cache the digest calculated over the entire packet and compares against previous packet digests in order to detect attempted replay attacks\&. Syslog alerts are generated if a replay is detected\&.
-.sp
-By default, the \fBfwknop\fR client sends authorization packets over UDP port 62201, but this can be altered with the \fB\-\-server\-port\fR argument\&. The server must first be configured to acquire the SPA data on the changed protocol\-port\&. Also, \fBfwknop\fR can send the SPA packet over a random port via the \fB\-\-rand\-port\fR argument\&. See \fIfwknopd(8)\fR for further details\&. See the \fBEXAMPLES\fR section for example invocations of the \fBfwknop\fR client\&.
-.SH "REQUIRED ARGUMENTS"
-.sp
-These required arguments can be specified via command\-line or from within the \fI\&.fwknoprc\fR file (see \fI\-n, \-\-named\-config\fR option and the FWKNOPRC FILE section below\&.
-.PP
-\fB\-D, \-\-destination\fR=\fI<IP\-address>\fR
-.RS 4
-Direct the
-\fBfwknop\fR
-client to authenticate with the
-\fBfwknopd\fR
-daemon/service at the specified destination hostname or IP address\&. The connection mode is discovered by the
-\fBfwknopd\fR
-daemon/service when it decrypts and parses the authentication packet\&.
-.RE
-.PP
-\fB\-A, \-\-access\fR=\fI<port list>\fR
-.RS 4
-Provide a list of ports and protocols to access on a remote computer running
-\fBfwknopd\fR\&. The format of this list is \(lq<proto>/<port>\&...<proto>/<port>\(rq, e\&.g\&. \(lqtcp/22,udp/53\(rq\&.
-\fBNOTE:\fR
-The vast majority of usages for
-\fBfwknop\fR
-require the
-\fB\-A\fR
-argument, but sending full commands with the
-\fB\-\-server\-cmd\fR
-argument via an SPA packet to be executed by
-\fBfwknopd\fR
-does not require this argument\&.
-.RE
-.PP
-\fB\-R|\-a|\-s\fR
-.RS 4
-One of these options (see below) is required to tell the remote
-\fBfwknopd\fR
-daemon what IP should be let through the local firewall\&. It is recommend to use the
-\fB\-R\fR
-or
-\fB\-a\fR
-options instead of
-\fB\-s\fR
-in order to harden SPA communications against possible
-\fIMan\-In\-The\-Middle\fR
-(MITM) attacks\&.
-.RE
-.SH "GENERAL OPTIONS"
-.PP
-\fB\-h, \-\-help\fR
-.RS 4
-Print a usage summary message and exit\&.
-.RE
-.PP
-\fB\-B, \-\-save\-packet\fR=\fI<file>\fR
-.RS 4
-Instruct the
-\fBfwknop\fR
-client to write a newly created SPA packet out to the specified file so that it can be examined off\-line\&.
-.RE
-.PP
-\fB\-G, \-\-get\-key\fR=\fI<file>\fR
-.RS 4
-Load an encryption key/password from the specified file\&. The key file contains a line for each destination hostname or IP address, a colon (":"), optional space and the password, followed by a newline\&. Note that the last line has to have a terminating newline character\&. Also note: though this is a convenience, have a file on your system with cleartext passwords is not a good idea and is not recommended\&.
-.RE
-.PP
-\fB\-l, \-\-last\-cmd\fR
-.RS 4
-Execute
-\fBfwknop\fR
-with the command\-line arguments from the previous invocation (if any)\&. The previous arguments are parsed out of the
-\fI~/\&.fwknop\&.run\fR
-file\&.
-.RE
-.PP
-\fB\-n, \-\-named\-config\fR=\fI<stanza name>\fR
-.RS 4
-Specify the name of the configuration stanza in the \(lq$HOME/\&.fwknoprc\(rq file to pull configuration and command directives\&. These named stanzas alleviate the need for remembering the various command\-line arguments for frequently used invocations of
-\fBfwknop\fR\&. See the section labeled, FWKNOPRC FILE below for a list of the valid configuration directives in the
-\fI\&.fwknoprc\fR
-file\&.
-.RE
-.PP
-\fB\-\-show\-last\fR
-.RS 4
-Display the last command\-line arguments used by
-\fBfwknop\fR\&.
-.RE
-.PP
-\fB\-T, \-\-test\fR
-.RS 4
-Test mode\&. Generate the SPA packet data, but do not send it\&. Instead, print a break\-down of the SPA data fields, then run the data through the decryption and decoding process and print the break\-down again\&. This is primarily a debugging feature\&.
-.RE
-.PP
-\fB\-v, \-\-verbose\fR
-.RS 4
-Run the
-\fBfwknop\fR
-client in verbose mode\&. This causes
-\fBfwknop\fR
-to print some extra information about the current command and the resulting SPA data\&.
-.RE
-.PP
-\fB\-V, \-\-Version\fR
-.RS 4
-Display version information and exit\&.
-.RE
-.SH "SPA OPTIONS"
-.PP
-\fB\-a, \-\-allow\-ip\fR=\fI<IP\-address>\fR
-.RS 4
-Specify IP address that should be permitted through the destination
-\fBfwknopd\fR
-server firewall (this IP is encrypted within the SPA packet itself)\&. This is useful to prevent a MTIM attack where a SPA packet can be intercepted enroute and sent from a different IP than the original\&. Hence, if the
-\fBfwknopd\fR
-server trusts the source address on the SPA packet IP header then the attacker gains access\&. The
-\fB\-a\fR
-option puts the source address within the encrypted SPA packet, and so thwarts this attack\&. The
-\fB\-a\fR
-option is also useful to specify the IP that will be granted access when the SPA packet itself is spoofed with the
-\fB\-\-spoof\-src\fR
-option\&. Another related option is
-\fB\-R\fR
-(see below) which instructs the
-\fBfwknop\fR
-client to automatically resolve the externally routable IP address the local system is connected to by querying a website that returns the actual IP address it sees from the calling system\&.
-.RE
-.PP
-\fB\-C, \-\-server\-cmd\fR=\fI<command to execute>\fR
-.RS 4
-Instead of requesting access to a service with an SPA packet, the
-\fB\-\-server\-cmd\fR
-argument specifies a command that will be executed by the
-\fBfwknopd\fR
-server\&. The command is encrypted within the SPA packet and sniffed off the wire (as usual) by the
-\fBfwknopd\fR
-server\&.
-.RE
-.PP
-\fB\-g, \-\-gpg\-encryption\fR
-.RS 4
-Use GPG encryption on the SPA packet (default if not specified is Rijndael)\&.
-\fBNote:\fR
-Use of this option will require the specification of a GPG recipient (see
-\fB\-\-gpg\-recipient\fR
-along with other GPG\-related options below)\&.
-.RE
-.PP
-\fB\-H, \-\-http\-proxy\fR=\fI<proxy\-host>[:port]\fR
-.RS 4
-Specify an HTTP proxy that the
-\fBfwknop\fR
-client will use to send the SPA packet through\&. Using this option will automatically set the SPA packet transmission mode (usually set via the
-\fB\-\-server\-proto\fR
-argument) to "http"\&. You can also specify the proxy port by adding ":<port>" to the proxy host name or ip\&.
-.RE
-.PP
-\fB\-m, \-\-digest\-type\fR=\fI<digest>\fR
-.RS 4
-Specify the message digest algorithm to use in the SPA data\&. Choices are:
-\fBMD5\fR,
-\fBSHA1\fR,
-\fBSHA256\fR
-(the default),
-\fBSHA384\fR, and
-\fBSHA512\fR\&.
-.RE
-.PP
-\fB\-N, \-\-nat\-access\fR=\fI<internalIP:forwardPort>\fR
-.RS 4
-The
-\fBfwknopd\fR
-server offers the ability to provide SPA access through an iptables firewall to an internal service by interfacing with the iptables NAT capabilities\&. So, if the
-\fBfwknopd\fR
-server is protecting an internal network on an RFC\-1918 address space, an external
-\fBfwknop\fR
-client can request that the server port forward an external port to an internal IP, i\&.e\&. \(lq\-\-NAT\-access 192\&.168\&.10\&.2,55000\(rq\&. In this case, access will be granted to 192\&.168\&.10\&.2 via port 55000 to whatever service is requested via the
-\fB\-\-access\fR
-argument (usually tcp/22)\&. Hence, after sending such an SPA packet, one would then do \(lqssh \-p 55000
-user@host\(rq and the connection would be forwarded on through to the internal 192\&.168\&.10\&.2 system automatically\&. Note that the port \(lq55000\(rq can be randomly generated via the
-\fB\-\-nat\-rand\-port\fR
-argument (described later)\&.
-.RE
-.PP
-\fB\-\-nat\-local\fR
-.RS 4
-On the
-\fBfwknopd\fR
-server, a NAT operation can apply to the local system instead of being forwarded through the system\&. That is, for iptables firewalls, a connection to, say, port 55,000 can be translated to port 22 on the local system\&. By making use of the
-\fB\-\-nat\-local\fR
-argument, the
-\fBfwknop\fR
-client can be made to request such access\&. This means that any external attacker would only see a connection over port 55,000 instead of the expected port 22 after the SPA packet is sent\&.
-.RE
-.PP
-\fB\-\-nat\-rand\-port\fR
-.RS 4
-Usually
-\fBfwknop\fR
-is used to request access to a specific port such as tcp/22 on a system running
-\fBfwknopd\fR\&. However, by using the
-\fB\-\-nat\-rand\-port\fR
-argument, it is possible to request access to a particular service (again, such as tcp/22), but have this access granted via a random translated port\&. That is, once the
-\fBfwknop\fR
-client has been executed in this mode and the random port selected by
-\fBfwknop\fR
-is displayed, the destination port used by the follow\-on client must be changed to match this random port\&. For SSH, this is accomplished via the
-\fB\-p\fR
-argument\&. See the
-\fB\-\-nat\-local\fR
-and
-\fB\-\-nat\-access\fR
-command line arguments to
-\fBfwknop\fR
-for additional details on gaining access to services via a NAT operation\&.
-.RE
-.PP
-\fB\-p, \-\-server\-port\fR=\fI<port>\fR
-.RS 4
-Specify the port number where
-\fBfwknopd\fR
-accepts packets via libpcap or ulogd pcap writer\&. By default
-\fBfwknopd\fR
-looks for authorization packets over UDP port 62201\&.
-.RE
-.PP
-\fB\-P, \-\-server\-proto\fR=\fI<protocol>\fR
-.RS 4
-Set the protocol (udp, tcp, http, tcpraw, or icmp) for the outgoing SPA packet\&. Note: The
-\fBtcpraw\fR
-and
-\fBicmp\fR
-modes use raw sockets and thus require root access to run\&. Also note: The
-\fBtcp\fR
-mode expects to establish a TCP connection to the server before sending the SPA packet\&. This is not normally done, but is useful for compatibility with the Tor for strong anonymity; see
-\fIhttp://tor\&.eff\&.org/\fR\&. In this case, the
-\fBfwknopd\fR
-server will need to be configured to listen on the target TCP port (which is 62201 by default)\&.
-.RE
-.PP
-\fB\-Q, \-\-spoof\-src\fR=\fI<IP>\fR
-.RS 4
-Spoof the source address from which the
-\fBfwknop\fR
-client sends SPA packets\&. This requires root on the client side access since a raw socket is required to accomplish this\&. Note that the
-\fB\-\-spoof\-user\fR
-argument can be given in this mode in order to pass any
-\fBREQUIRE_USERNAME\fR
-keyword that might be specified in
-\fI/etc/fwknop/access\&.conf\fR\&.
-.RE
-.PP
-\fB\-r, \-\-rand\-port\fR
-.RS 4
-Instruct the
-\fBfwknop\fR
-client to send an SPA packet over a random destination port between 10,000 and 65535\&. The
-\fBfwknopd\fR
-server must use a
-\fBPCAP_FILTER\fR
-variable that is configured to accept such packets\&. For example, the
-\fBPCAP_FILTER\fR
-variable could be set to: \(lqudp dst portrange 10000\-65535\(rq\&.
-.RE
-.PP
-\fB\-R, \-\-resolve\-ip\-http\fR
-.RS 4
-This is an important option, and instructs the
-\fBfwknop\fR
-client and the
-\fBfwknopd\fR
-daemon/service to query a web server that returns the caller\(cqs IP address (as seen by the web server)\&. In some cases, this is needed to determine the IP address that should be allowed through the iptables policy at the remote fwknopd server side\&. This is useful if the
-\fBfwknop\fR
-client is being used on a system that is behind an obscure NAT address\&. Presently,
-\fBfwknop\fR
-uses the URL:
-\fIhttp://www\&.cipherdyne\&.org/cgi\-bin/myip\fR
-to resolve the caller IP\&.
-.RE
-.PP
-\fB\-\-resolve\-url\fR
-.RS 4
-Override the default URL used for resolving the source IP address\&. For best results, the URL specified here should point to a web service that provides just an IP address in the body of the HTTP response\&.
-.RE
-.PP
-\fB\-s, \-\-source\-ip\fR
-.RS 4
-Instruct the
-\fBfwknop\fR
-client to form an SPA packet that contains the special\-case IP address \(lq0\&.0\&.0\&.0\(rq which will inform the destination
-\fBfwknopd\fR
-SPA server to use the source IP address from which the SPA packet originates as the IP that will be allowed through upon modification of the firewall ruleset\&. This option is useful if the
-\fBfwknop\fR
-client is deployed on a machine that is behind a NAT device\&. The permit\-address options
-\fB\-s\fR,
-\fB\-R\fR
-and
-\fB\-a\fR
-are mutually exclusive\&.
-.RE
-.PP
-\fB\-\-time\-offset\-plus\fR=\fI<time>\fR
-.RS 4
-By default, the
-\fBfwknopd\fR
-daemon on the server side enforces time synchronization between the clocks running on client and server systems\&. The
-\fBfwknop\fR
-client places the local time within each SPA packet as a time stamp to be validated by the fwknopd server after decryption\&. However, in some circumstances, if the clocks are out of sync and the user on the client system does not have the required access to change the local clock setting, it can be difficult to construct and SPA packet with a time stamp the server will accept\&. In this situation, the
-\fB\-\-time\-offset\-plus\fR
-option can allow the user to specify an offset (e\&.g\&. \(lq60sec\(rq \(lq60min\(rq \(lq2days\(rq etc\&.) that is added to the local time\&.
-.RE
-.PP
-\fB\-\-time\-offset\-minus\fR=\fI<time>\fR
-.RS 4
-This is similar to the
-\fB\-\-time\-offset\-plus\fR
-option (see above), but subtracts the specified time offset instead of adding it to the local time stamp\&.
-.RE
-.PP
-\fB\-u, \-\-user\-agent\fR=\fI<user\-agent\-string>\fR
-.RS 4
-Set the HTTP User\-Agent for resolving the external IP via
-\fB\-R\fR, or for sending SPA packets over HTTP\&.
-.RE
-.PP
-\fB\-U, \-\-spoof\-user\fR=\fI<user>\fR
-.RS 4
-Specify the username that is included within SPA packet\&. This allows the
-\fBfwknop\fR
-client to satisfy any non\-root
-\fBREQUIRE_USERNAME\fR
-keyword on the fwknopd server (\fB\-\-spoof\-src\fR
-mode requires that the
-\fBfwknop\fR
-client is executed as root)\&.
-.RE
-.SH "GPG-RELATED OPTIONS"
-.PP
-\fB\-\-gpg\-agent\fR
-.RS 4
-Instruct
-\fBfwknop\fR
-to acquire GnuPG key password from a running gpg\-agent instance (if available)\&.
-.RE
-.PP
-\fB\-\-gpg\-home\-dir\fR=\fI<dir>\fR
-.RS 4
-Specify the path to the GnuPG directory; normally this path is derived from the home directory of the user that is running the
-\fBfwknop\fR
-client\&. This is useful when a \(lqroot\(rq user wishes to log into a remote machine whose sshd daemon/service does not permit root login\&.
-.RE
-.PP
-\fB\-\-gpg\-recipient\fR=\fI<key ID or Name>\fR
-.RS 4
-Specify the GnuPG key ID, e\&.g\&. \(lq1234ABCD\(rq (see the output of "gpg\(emlist\-keys") or the key name (associated email address) of the recipient of the Single Packet Authorization message\&. This key is imported by the
-\fBfwknopd\fR
-server and the associated private key is used to decrypt the SPA packet\&. The recipient\(cqs key must first be imported into the client GnuPG key ring\&.
-.RE
-.PP
-\fB\-\-gpg\-signer\-key\fR=\fI<key ID or Name>\fR
-.RS 4
-Specify the GnuPG key ID, e\&.g\&. \(lqABCD1234\(rq (see the output of "gpg \-\-list\-keys") or the key name to use when signing the SPA message\&. The user is prompted for the associated GnuPG password to create the signature\&. This adds a cryptographically strong mechanism to allow the
-\fBfwknopd\fR
-daemon on the remote server to authenticate who created the SPA message\&.
-.RE
-.SH "FWKNOPRC FILE"
-.sp
-The \fI\&.fwknoprc\fR file is used to set various parameters to override default program parameters at runtime\&. It also allows for additional named configuration \fIstanzas\fR for setting program parameters for a particular invocation\&.
-.sp
-The \fBfwkop\fR client will create this file if it does not exist in the user\(cqs home directory\&. This initial version has some sample directives that are commented out\&. It is up to the user to edit this file to meet their needs\&.
-.sp
-The \fI\&.fwkoprc\fR file contains a default configuration area or stanza which holds global configuration directives that override the program defaults\&. You can edit this file and create additonal \fInamed stanzas\fR that can be specified with the \fB\-n\fR or \fB\-\-named\-config\fR option\&. Parameters defined in the named stanzas will override any matching \fIdefault\fR stanza directives\&. Note that command\-line options will still override any corresponding \fI\&.fwknoprc\fR directives\&.
-.sp
-There are directives to match most of the command\-line parameters \fBfwknop\fR supports\&. Here is the current list of each directive along with a brief description and its matching command\-line option(s):
-.PP
-\fBDIGEST_TYPE\fR
-.RS 4
-Set the SPA message digest type (\fI\-m, \-\-digest\-type\fR)\&.
-.RE
-.PP
-\fBSPA_SERVER_PROTO\fR
-.RS 4
-Set the protocol to use for sending the SPA packet (\fI\-P, \-\-server\-proto\fR)\&.
-.RE
-.PP
-\fBSPA_SERVER\fR
-.RS 4
-Specify the IP or hostname of the destination (\fBfwknopd\fR) server (\'\-D, \-\-destination)\&.
-.RE
-.PP
-\fBSPA_SERVER_PORT\fR
-.RS 4
-Set the server port to use for sending the SPA packet (\fI\-p, \-\-server\-port\fR)\&.
-.RE
-.PP
-\fBSPA_SOURCE_PORT\fR
-.RS 4
-Set the source port to use for sending the SPA packet (\fI\-S, \-\-source\-port\fR)\&.
-.RE
-.PP
-\fBFW_TIMEOUT\fR
-.RS 4
-Set the firewall rule timeout value (\fI\-f, \-\-fw\-timeout\fR)\&.
-.RE
-.PP
-\fBALLOW_IP\fR
-.RS 4
-Specify the address to allow within the SPA data\&. Note: This parameter covers the
-\fB\-a\fR,
-\fB\-s\fR, and
-\fB\-R\fR
-command\-line options\&. You can specify a hostname or IP address (the
-\fB\-a\fR
-option), specify the word "source" to tell the
-\fBfwknopd\fR
-server to accept the source IP of the packet as the IP to allow (the
-\fB\-s\fR
-option), or use the word "resolve" to have
-\fBfwknop\fR
-resolve the external network IP via HTTP request (the
-\fB\-R\fR
-option)\&.
-.RE
-.PP
-\fBRESOLVE_URL\fR
-.RS 4
-Set to a URL that will be used for resolving the source IP address (\-\-resolve\-url)\&.
-.RE
-.PP
-\fBTIME_OFFSET\fR
-.RS 4
-Set a value to apply to the timestamp in the SPA packet\&. This can be either a positive or negative value (\fI\-\-time\-offset\-plus/minus\fR)\&.
-.RE
-.PP
-\fBUSE_GPG\fR
-.RS 4
-Set to
-\fIY\fR
-to specify the use of GPG for encryption (\fI\-\-gpg\-encryption\fR)\&.
-.RE
-.PP
-\fBGPG_SIGNER\fR
-.RS 4
-Specify the GPG key name or ID for signing the GPG\-encrypted SPA data (\fI\-\-gpg\-signer\-key\fR)\&.
-.RE
-.PP
-\fBGPG_RECIPIENT\fR
-.RS 4
-Specify the GPG key name or ID for the recipient of the GPG\-encrypted SPA data (\fI\-\-gpg\-recipient\-key\fR)\&.
-.RE
-.PP
-\fBGPG_HOMEDIR\fR
-.RS 4
-Specify the GPG home directory (\fI\-\-gpg\-home\-dir\fR)\&.
-.RE
-.PP
-\fBSPOOF_USER\fR
-.RS 4
-Set the username in the SPA data to the specified value (\fI\-U, \-\-spoof\-user\fR)\&.
-.RE
-.PP
-\fBSPOOF_SOURCE_IP\fR
-.RS 4
-Set the source IP of the outgoing SPA packet to the specified value (\fI\-Q, \-\-spoof\-source\fR)\&.
-.RE
-.PP
-\fBACCESS\fR
-.RS 4
-Set the one or more protocol/ports to open on the firewall (\fI\-A, \-\-access\fR)\&.
-.RE
-.PP
-\fBRAND_PORT\fR
-.RS 4
-Send the SPA packet over a randomly assigned port (\fI\-r, \-\-rand\-port\fR)\&.
-.RE
-.PP
-\fBKEY_FILE\fR
-.RS 4
-Load an encryption key/password from a file (\fI\-G, \-\-get\-key\fR)\&.
-.RE
-.PP
-\fBHTTP_USER_AGENT\fR
-.RS 4
-Set the HTTP User\-Agent for resolving the external IP via \-R, or for sending SPA packets over HTTP (\fI\-u, \-\-user\-agent\fR)\&.
-.RE
-.PP
-\fBNAT_ACCESS\fR
-.RS 4
-Gain NAT access to an internal service protected by the fwknop server (\fI\-N, \-\-nat\-access\fR)\&.
-.RE
-.PP
-\fBNAT_LOCAL\fR
-.RS 4
-Access a local service via a forwarded port on the fwknopd server system (\fI\-\-nat\-local\fR)\&.
-.RE
-.PP
-\fBNAT_PORT\fR
-.RS 4
-Specify the port to forward to access a service via NAT (\fI\-\-nat\-port\fR)\&.
-.RE
-.PP
-\fBNAT_RAND_PORT\fR
-.RS 4
-Have the fwknop client assign a random port for NAT access (\fI\-\-nat\-rand\-port\fR)\&.
-.RE
-.SH "ENVIRONMENT"
-.sp
-\fBSPOOF_USER\fR, \fBGPG_AGENT_INFO\fR (only used in \fB\-\-gpg\-agent\fR mode)\&.
-.SH "EXAMPLES"
-.sp
-The following examples illustrate the command line arguments that could be supplied to the fwknop client in a few situations:
-.SS "Access mode examples"
-.sp
-Packet contents printed to stdout at the fwknop client when creating an \(lqaccess mode\(rq SPA packet:
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- Random data: 6565240948266426
- Username: mbr
- Timestamp: 1203863233
- Version: 1\&.9\&.2
- Type: 1 (access mode)
- Access: 127\&.0\&.0\&.2,tcp/22
- SHA256 sum: gngquSL8AuM7r27XsR4qPmJhuBo9pG2PYwII06AaJHw
-.fi
-.if n \{\
-.RE
-.\}
-.sp
-Use the Single Packet Authorization mode to gain access to tcp/22 (ssh) and udp/53 running on the system 10\&.0\&.0\&.123 from the IP 192\&.168\&.10\&.4:
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- $ fwknop \-A "tcp/22,udp/53" \-a 192\&.168\&.10\&.4 \-D 10\&.0\&.0\&.123
-.fi
-.if n \{\
-.RE
-.\}
-.sp
-Same as above example, but gain access from whatever source IP is seen by the fwknop server (useful if the fwknop client is behind a NAT device):
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- $ fwknop \-A "tcp/22,udp/53" \-s \-D 10\&.0\&.0\&.123
-.fi
-.if n \{\
-.RE
-.\}
-.sp
-Same as above example, but use an IP identification website to derive the client IP address\&. This is a safer method of acquiring the client IP address than using the \fB\-s\fR option because the source IP is put within the encrypted packet instead of having the \fBfwknopd\fR daemon grant the requested access from whatever IP address the SPA packet originates:
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- $ fwknop \-A "tcp/22,udp/53" \-R \-D 10\&.0\&.0\&.123
-.fi
-.if n \{\
-.RE
-.\}
-.sp
-Use the Single Packet Authorization mode to gain access to tcp/22 (ssh) and udp/53 running on the system 10\&.0\&.0\&.123, and use GnuPG keys to encrypt and decrypt:
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- $ fwknop \-A "tcp/22,udp/53" \-\-gpg\-sign ABCD1234 \-\-gpg\-\-recipient
- 1234ABCD \-R \-D 10\&.0\&.0\&.123
-.fi
-.if n \{\
-.RE
-.\}
-.sp
-Instruct the fwknop server running at 10\&.0\&.0\&.123 to allow 172\&.16\&.5\&.4 to connect to TCP/22, but spoof the authorization packet from an IP associated with www\&.yahoo\&.com:
-.sp
-.if n \{\
-.RS 4
-.\}
-.nf
- # fwknop \-\-Spoof\-src \(cqwww\&.yahoo\&.com\(cq \-A tcp/22 \-a 172\&.16\&.5\&.4 \-D
- 10\&.0\&.0\&.123
-.fi
-.if n \{\
-.RE
-.\}
-.SH "DEPENDENCIES"
-.sp
-\fBfwknop\fR requires \fIlibfko\fR (which is normally included with both source and binary distributions)\&.
-.sp
-For GPG functionality, GnuPG must also be correctly installed and configured\&.
-.sp
-To take advantage of all of the authentication and access management features of the \fBfwknopd\fR daemon/service a functioning iptables firewall is required on the underlying operating system\&.
-.SH "DIAGNOSTICS"
-.sp
-fwknop can be run with the \fB\-T\fR (or \fB\-\-test\fR) command line option\&. This will have \fBfwknop\fR simply create and print the SPA packet information, then run it through a decrypt/decode cycle and print it again\&.
-.SH "SEE ALSO"
-.sp
-fwknopd(8), iptables(8), gpg(1), libfko documentation\&.
-.sp
-More information on Single Packet Authorization can be found in the paper \(lqSingle Packet Authorization with fwknop\(rq available at \fIhttp://www\&.cipherdyne\&.org/fwknop/docs/SPA\&.html\fR\&.
-.SH "AUTHORS"
-.sp
-Damien Stuart <dstuart@dstuart\&.org>, Michael Rash <mbr@cipherdyne\&.org>
-.SH "CONTRIBUTORS"
-.sp
-This \(lqC\(rq version of fwknop was derived from the original Perl\-based version on which many people who are active in the open source community have contributed\&. See the CREDITS file in the fwknop sources, or visit \fIhttp://www\&.cipherdyne\&.org/fwknop/docs/contributors\&.html\fR to view the online list of contributors\&.
-.sp
-The phrase \(lqSingle Packet Authorization\(rq was coined by MadHat and Simple Nomad at the BlackHat Briefings of 2005 (see: \fIhttp://www\&.nmrc\&.org\fR)\&.
-.SH "BUGS"
-.sp
-Send bug reports to dstuart@dstuart\&.org\&. Suggestions and/or comments are always welcome as well\&.
-.SH "DISTRIBUTION"
-.sp
-\fBfwknop\fR is distributed under the GNU General Public License (GPL), and the latest version may be downloaded from \fIhttp://www\&.cipherdyne\&.org\fR\&.
View
394 common/Makefile
@@ -1,394 +0,0 @@
-# Makefile.in generated by automake 1.12.4 from Makefile.am.
-# common/Makefile. Generated from Makefile.in by configure.
-
-# Copyright (C) 1994-2012 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-
-
-am__make_dryrun = \
- { \
- am__dry=no; \
- case $$MAKEFLAGS in \
- *\\[\ \ ]*) \
- echo 'am--echo: ; @echo "AM" OK' | $(MAKE) -f - 2>/dev/null \
- | grep '^AM OK$$' >/dev/null || am__dry=yes;; \
- *) \
- for am__flg in $$MAKEFLAGS; do \
- case $$am__flg in \
- *=*|--*) ;; \
- *n*) am__dry=yes; break;; \
- esac; \
- done;; \
- esac; \
- test $$am__dry = yes; \
- }
-pkgdatadir = $(datadir)/fwknop
-pkgincludedir = $(includedir)/fwknop
-pkglibdir = $(libdir)/fwknop
-pkglibexecdir = $(libexecdir)/fwknop
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = x86_64-apple-darwin12.2.1
-host_triplet = x86_64-apple-darwin12.2.1
-target_triplet = x86_64-apple-darwin12.2.1
-subdir = common
-DIST_COMMON = $(srcdir)/Makefile.am $(srcdir)/Makefile.in
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/libtool.m4 \
- $(top_srcdir)/m4/ltoptions.m4 $(top_srcdir)/m4/ltsugar.m4 \
- $(top_srcdir)/m4/ltversion.m4 $(top_srcdir)/m4/lt~obsolete.m4 \
- $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
- $(ACLOCAL_M4)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-SOURCES =
-DIST_SOURCES =
-am__can_run_installinfo = \
- case $$AM_UPDATE_INFO_DIR in \
- n|no|NO) false;; \
- *) (install-info --version) >/dev/null 2>&1;; \
- esac
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run aclocal-1.12
-AMTAR = $${TAR-tar}
-AR = ar
-AUTOCONF = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run autoconf
-AUTOHEADER = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run autoheader
-AUTOMAKE = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run automake-1.12
-AWK = gawk
-CC = gcc
-CCDEPMODE = depmode=gcc3
-CFLAGS = -g -O2 -Wall -Wformat -Wformat-security -fstack-protector-all -fstack-protector -fPIE -D_FORTIFY_SOURCE=2
-CPP = gcc -E
-CPPFLAGS =
-CYGPATH_W = echo
-DEFS = -DHAVE_CONFIG_H
-DEPDIR = .deps
-DLLTOOL = false
-DSYMUTIL = dsymutil
-DUMPBIN =
-ECHO_C = \c
-ECHO_N =
-ECHO_T =
-EGREP = /usr/bin/grep -E
-EXEEXT =
-FGREP = /usr/bin/grep -F
-GPGME_CFLAGS = -I/opt/local/include
-GPGME_CONFIG = /opt/local/bin/gpgme-config
-GPGME_LIBS = -L/opt/local/lib -lgpgme -lassuan -lgpg-error
-GPG_EXE = /opt/local/bin/gpg
-GREP = /usr/bin/grep
-INSTALL = /opt/local/bin/ginstall -c
-INSTALL_DATA = ${INSTALL} -m 644
-INSTALL_PROGRAM = ${INSTALL}
-INSTALL_SCRIPT = ${INSTALL}
-INSTALL_STRIP_PROGRAM = $(install_sh) -c -s
-IPFW_EXE = /sbin/ipfw
-IPF_EXE =
-IPTABLES_EXE =
-LD = /usr/llvm-gcc-4.2/libexec/gcc/i686-apple-darwin11/4.2.1/ld
-LDFLAGS = -Wall -Wformat -Wformat-security -fstack-protector-all -fstack-protector -fPIE -pie -D_FORTIFY_SOURCE=2
-LIBOBJS = ${LIBOBJDIR}lstat$U.o
-LIBS =
-LIBTOOL = $(SHELL) $(top_builddir)/libtool
-LIPO = lipo
-LN_S = ln -s
-LTLIBOBJS = ${LIBOBJDIR}lstat$U.lo
-MAKEINFO = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/missing --run makeinfo
-MANIFEST_TOOL = :
-MKDIR_P = /opt/local/bin/gmkdir -p
-NM = /usr/bin/nm
-NMEDIT = nmedit
-OBJDUMP = false
-OBJEXT = o
-OTOOL = otool
-OTOOL64 = :
-PACKAGE = fwknop
-PACKAGE_BUGREPORT = dstuart@dstuart.org
-PACKAGE_NAME = fwknop
-PACKAGE_STRING = fwknop 2.0.4
-PACKAGE_TARNAME = fwknop
-PACKAGE_URL =
-PACKAGE_VERSION = 2.0.4
-PATH_SEPARATOR = :
-PF_EXE = /sbin/pfctl
-RANLIB = ranlib
-SED = /opt/local/bin/gsed
-SET_MAKE =
-SHELL = /bin/sh
-STRIP = strip
-VERSION = 2.0.4
-abs_builddir = /Users/dstuart/projects/miranda/fwknop/common
-abs_srcdir = /Users/dstuart/projects/miranda/fwknop/common
-abs_top_builddir = /Users/dstuart/projects/miranda/fwknop
-abs_top_srcdir = /Users/dstuart/projects/miranda/fwknop
-ac_ct_AR = ar
-ac_ct_CC = gcc
-ac_ct_DUMPBIN =
-am__include = include
-am__leading_dot = .
-am__quote =
-am__tar = tar --format=ustar -chf - "$$tardir"
-am__untar = tar -xf -
-bindir = ${exec_prefix}/bin
-build = x86_64-apple-darwin12.2.1
-build_alias =
-build_cpu = x86_64
-build_os = darwin12.2.1
-build_vendor = apple
-builddir = .
-datadir = ${datarootdir}
-datarootdir = ${prefix}/share
-docdir = ${datarootdir}/doc/${PACKAGE_TARNAME}
-dvidir = ${docdir}
-exec_prefix = ${prefix}
-host = x86_64-apple-darwin12.2.1
-host_alias =
-host_cpu = x86_64
-host_os = darwin12.2.1
-host_vendor = apple
-htmldir = ${docdir}
-includedir = ${prefix}/include
-infodir = ${datarootdir}/info
-install_sh = ${SHELL} /Users/dstuart/projects/miranda/fwknop/config/install-sh
-libdir = ${exec_prefix}/lib
-libexecdir = ${exec_prefix}/libexec
-localedir = ${datarootdir}/locale
-localstatedir = ${prefix}/var
-mandir = ${datarootdir}/man
-mkdir_p = $(MKDIR_P)
-oldincludedir = /usr/include
-pdfdir = ${docdir}
-prefix = /usr/local
-program_transform_name = s,x,x,
-psdir = ${docdir}
-sbindir = ${exec_prefix}/sbin
-sharedstatedir = ${prefix}/com
-srcdir = .
-sysconfdir = ${prefix}/etc
-target = x86_64-apple-darwin12.2.1
-target_alias =
-target_cpu = x86_64
-target_os = darwin12.2.1
-target_vendor = apple
-top_build_prefix = ../
-top_builddir = ..
-top_srcdir = ..
-EXTRA_DIST = common.h netinet_common.h
-all: all-am
-
-.SUFFIXES:
-$(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps)
- @for dep in $?; do \
- case '$(am__configure_deps)' in \
- *$$dep*) \
- ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
- && { if test -f $@; then exit 0; else break; fi; }; \
- exit 1;; \
- esac; \
- done; \
- echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign common/Makefile'; \
- $(am__cd) $(top_srcdir) && \
- $(AUTOMAKE) --foreign common/Makefile
-.PRECIOUS: Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
- @case '$?' in \
- *config.status*) \
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
- *) \
- echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
- cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
- esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure: $(am__configure_deps)
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4): $(am__aclocal_m4_deps)
- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-mostlyclean-libtool:
- -rm -f *.lo
-
-clean-libtool:
- -rm -rf .libs _libs
-tags: TAGS
-TAGS:
-
-ctags: CTAGS
-CTAGS:
-
-cscope cscopelist:
-
-
-distdir: $(DISTFILES)
- @srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
- topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
- list='$(DISTFILES)'; \
- dist_files=`for file in $$list; do echo $$file; done | \
- sed -e "s|^$$srcdirstrip/||;t" \
- -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
- case $$dist_files in \
- */*) $(MKDIR_P) `echo "$$dist_files" | \
- sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
- sort -u` ;; \
- esac; \
- for file in $$dist_files; do \
- if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
- if test -d $$d/$$file; then \
- dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
- if test -d "$(distdir)/$$file"; then \
- find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
- fi; \
- if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
- cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
- find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
- fi; \
- cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
- else \
- test -f "$(distdir)/$$file" \
- || cp -p $$d/$$file "$(distdir)/$$file" \
- || exit 1; \
- fi; \
- done
-check-am: all-am
-check: check-am
-all-am: Makefile
-installdirs:
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
- @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
- if test -z '$(STRIP)'; then \
- $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
- install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
- install; \
- else \
- $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
- install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
- "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
- fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
- -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
- -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
- @echo "This command is intended for maintainers to use"
- @echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-am
- -rm -f Makefile
-distclean-am: clean-am distclean-generic
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am:
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
- -rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am:
-
-.MAKE: install-am install-strip
-
-.PHONY: all all-am check check-am clean clean-generic clean-libtool \
- distclean distclean-generic distclean-libtool distdir dvi \
- dvi-am html html-am info info-am install install-am \
- install-data install-data-am install-dvi install-dvi-am \
- install-exec install-exec-am install-html install-html-am \
- install-info install-info-am install-man install-pdf \
- install-pdf-am install-ps install-ps-am install-strip \
- installcheck installcheck-am installdirs maintainer-clean \
- maintainer-clean-generic mostlyclean mostlyclean-generic \
- mostlyclean-libtool pdf pdf-am ps ps-am uninstall uninstall-am
-
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
View
366 config.h
@@ -1,366 +0,0 @@
-/* config.h. Generated from config.h.in by configure. */
-/* config.h.in. Generated from configure.ac by autoheader. */
-
-
-#ifndef FWKNOP_CONFIG_H
-#define FWKNOP_CONFIG_H
-
-
-/* Define if building universal (internal helper macro) */
-/* #undef AC_APPLE_UNIVERSAL_BUILD */
-
-/* Path to firewall command executable (it should match the firewall type). */
-#define FIREWALL_EXE "/sbin/ipfw"
-
-/* The firewall type: ipf. */
-/* #undef FIREWALL_IPF */
-
-/* The firewall type: ipfw. */
-#define FIREWALL_IPFW 1
-
-/* The firewall type: iptables. */
-/* #undef FIREWALL_IPTABLES */
-
-/* The firewall type: pf. */
-/* #undef FIREWALL_PF */
-
-/* Path to gpg executable */
-#define GPG_EXE "/opt/local/bin/gpg"
-
-/* Define to 1 if you have the <arpa/inet.h> header file. */
-#define HAVE_ARPA_INET_H 1
-
-/* Define to 1 if you have the <arpa/nameser.h> header file. */
-#define HAVE_ARPA_NAMESER_H 1
-
-/* Define to 1 if you have the `bzero' function. */
-#define HAVE_BZERO 1
-
-/* Define to 1 if you have the `chmod' function. */
-#define HAVE_CHMOD 1
-
-/* Define to 1 if you have the `chown' function. */
-#define HAVE_CHOWN 1
-
-/* Define to 1 if you have the <ctype.h> header file. */
-#define HAVE_CTYPE_H 1
-
-/* Define to 1 if you have the <dlfcn.h> header file. */
-#define HAVE_DLFCN_H 1
-
-/* Define to 1 if you have the <endian.h> header file. */
-/* #undef HAVE_ENDIAN_H */
-
-/* Define to 1 if you have the <errno.h> header file. */
-#define HAVE_ERRNO_H 1
-
-/* Define to 1 if you have the `gettimeofday' function. */
-#define HAVE_GETTIMEOFDAY 1
-
-/* Define to 1 if you have the <inttypes.h> header file. */
-#define HAVE_INTTYPES_H 1
-
-/* Define if you have libgdbm */
-/* #undef HAVE_LIBGDBM */
-
-/* Define if you have libgpgme */
-#define HAVE_LIBGPGME 1
-
-/* Define if you have libndbm */
-/* #undef HAVE_LIBNDBM */
-
-/* Define if you have libpcap */
-#define HAVE_LIBPCAP 1
-
-/* Define to 1 if you have the <locale.h> header file. */
-#define HAVE_LOCALE_H 1
-
-/* Define to 1 if your system has a GNU libc compatible `malloc' function, and
- to 0 otherwise. */
-#define HAVE_MALLOC 1
-
-/* Define to 1 if you have the `memmove' function. */
-#define HAVE_MEMMOVE 1
-
-/* Define to 1 if you have the <memory.h> header file. */
-#define HAVE_MEMORY_H 1
-
-/* Define to 1 if you have the `memset' function. */
-#define HAVE_MEMSET 1
-
-/* Define to 1 if you have the <netdb.h> header file. */
-#define HAVE_NETDB_H 1
-
-/* Define to 1 if you have the <netinet/in.h> header file. */
-#define HAVE_NETINET_IN_H 1
-
-/* Define to 1 if you have the <net/ethernet.h> header file. */
-#define HAVE_NET_ETHERNET_H 1
-
-/* Define to 1 if your system has a GNU libc compatible `realloc' function,
- and to 0 otherwise. */
-#define HAVE_REALLOC 1
-
-/* Define to 1 if you have the <resolv.h> header file. */
-#define HAVE_RESOLV_H 1
-
-/* Define to 1 if you have the `socket' function. */
-#define HAVE_SOCKET 1
-
-/* Define to 1 if you have the `stat' function. */
-#define HAVE_STAT 1
-
-/* Define to 1 if `stat' has the bug that it succeeds when given the
- zero-length file name argument. */
-/* #undef HAVE_STAT_EMPTY_STRING_BUG */
-
-/* Define to 1 if you have the <stdint.h> header file. */
-#define HAVE_STDINT_H 1
-
-/* Define to 1 if you have the <stdlib.h> header file. */
-#define HAVE_STDLIB_H 1
-
-/* Define to 1 if you have the `strchr' function. */
-#define HAVE_STRCHR 1
-
-/* Define to 1 if you have the `strcspn' function. */
-#define HAVE_STRCSPN 1
-
-/* Define to 1 if you have the `strdup' function. */
-#define HAVE_STRDUP 1
-
-/* Define to 1 if you have the <strings.h> header file. */
-#define HAVE_STRINGS_H 1
-
-/* Define to 1 if you have the <string.h> header file. */
-#define HAVE_STRING_H 1
-
-/* Define to 1 if you have the `strncasecmp' function. */
-#define HAVE_STRNCASECMP 1
-
-/* Define to 1 if you have the `strndup' function. */
-#define HAVE_STRNDUP 1
-
-/* Define to 1 if you have the `strnlen' function. */
-#define HAVE_STRNLEN 1
-
-/* Define to 1 if you have the `strrchr' function. */
-#define HAVE_STRRCHR 1
-
-/* Define to 1 if you have the `strspn' function. */
-#define HAVE_STRSPN 1
-
-/* Define to 1 if you have the <sys/byteorder.h> header file. */
-/* #undef HAVE_SYS_BYTEORDER_H */
-
-/* Define to 1 if you have the <sys/endian.h> header file. */
-/* #undef HAVE_SYS_ENDIAN_H */
-
-/* Define to 1 if you have the <sys/ethernet.h> header file. */
-/* #undef HAVE_SYS_ETHERNET_H */
-
-/* Define to 1 if you have the <sys/socket.h> header file. */
-#define HAVE_SYS_SOCKET_H 1
-
-/* Define to 1 if you have the <sys/stat.h> header file. */
-#define HAVE_SYS_STAT_H 1
-
-/* Define to 1 if you have the <sys/time.h> header file. */
-#define HAVE_SYS_TIME_H 1
-
-/* Define to 1 if you have the <sys/types.h> header file. */
-#define HAVE_SYS_TYPES_H 1
-
-/* Define to 1 if you have the <sys/wait.h> header file. */
-#define HAVE_SYS_WAIT_H 1
-
-/* Define to 1 if you have the <termios.h> header file. */
-#define HAVE_TERMIOS_H 1
-
-/* Define to 1 if you have the <time.h> header file. */
-#define HAVE_TIME_H 1
-
-/* Define to 1 if you have the <unistd.h> header file. */
-#define HAVE_UNISTD_H 1
-
-/* Define to 1 if `lstat' dereferences a symlink specified with a trailing
- slash. */
-/* #undef LSTAT_FOLLOWS_SLASHED_SYMLINK */
-
-/* Define to the sub-directory in which libtool stores uninstalled libraries.
- */
-#define LT_OBJDIR ".libs/"
-
-/* Define this to disable the digest cache for replay detection - not
- recommended. */
-/* #undef NO_DIGEST_CACHE */
-
-/* Define to 1 if your C compiler doesn't accept -c and -o together. */
-/* #undef NO_MINUS_C_MINUS_O */
-
-/* Name of package */
-#define PACKAGE "fwknop"
-
-/* Define to the address where bug reports for this package should be sent. */
-#define PACKAGE_BUGREPORT "dstuart@dstuart.org"
-
-/* Define to the full name of this package. */
-#define PACKAGE_NAME "fwknop"
-
-/* Define to the full name and version of this package. */
-#define PACKAGE_STRING "fwknop 2.0.4"
-
-/* Define to the one symbol short name of this package. */
-#define PACKAGE_TARNAME "fwknop"
-
-/* Define to the home page for this package. */
-#define PACKAGE_URL ""
-
-/* Define to the version of this package. */
-#define PACKAGE_VERSION "2.0.4"
-
-/* Define if you are running on OpenBSD */
-/* #undef PLATFORM_OPENBSD */
-
-/* The size of `unsigned int', as computed by sizeof. */
-#define SIZEOF_UNSIGNED_INT 4
-
-/* Define to 1 if you have the ANSI C header files. */
-#define STDC_HEADERS 1
-
-/* Define to 1 if you can safely include both <sys/time.h> and <time.h>. */
-#define TIME_WITH_SYS_TIME 1
-
-/* Define this to enable non-gdbm/ndbm digest storing (eliminates gdbm/ndbm
- dependency). */
-#define USE_FILE_CACHE 1
-
-/* Enable extensions on AIX 3, Interix. */
-#ifndef _ALL_SOURCE
-# define _ALL_SOURCE 1
-#endif
-/* Enable GNU extensions on systems that have them. */
-#ifndef _GNU_SOURCE
-# define _GNU_SOURCE 1
-#endif
-/* Enable threading extensions on Solaris. */
-#ifndef _POSIX_PTHREAD_SEMANTICS
-# define _POSIX_PTHREAD_SEMANTICS 1
-#endif
-/* Enable extensions on HP NonStop. */
-#ifndef _TANDEM_SOURCE
-# define _TANDEM_SOURCE 1
-#endif
-/* Enable general extensions on Solaris. */
-#ifndef __EXTENSIONS__
-# define __EXTENSIONS__ 1
-#endif
-
-
-/* Version number of package */
-#define VERSION "2.0.4"
-
-/* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most
- significant byte first (like Motorola and SPARC, unlike Intel). */
-#if defined AC_APPLE_UNIVERSAL_BUILD
-# if defined __BIG_ENDIAN__
-# define WORDS_BIGENDIAN 1
-# endif
-#else
-# ifndef WORDS_BIGENDIAN
-/* # undef WORDS_BIGENDIAN */
-# endif
-#endif
-
-/* Enable large inode numbers on Mac OS X 10.5. */
-#ifndef _DARWIN_USE_64_BIT_INODE
-# define _DARWIN_USE_64_BIT_INODE 1
-#endif
-
-/* Number of bits in a file offset, on hosts where this is settable. */
-/* #undef _FILE_OFFSET_BITS */
-
-/* Define for large files, on AIX-style hosts. */
-/* #undef _LARGE_FILES */
-
-/* Define to 1 if on MINIX. */
-/* #undef _MINIX */
-
-/* Define to 2 if the system does not provide POSIX.1 features except with
- this defined. */
-/* #undef _POSIX_1_SOURCE */
-
-/* Define to 1 if you need to in order for `stat' and other things to work. */
-/* #undef _POSIX_SOURCE */
-
-/* Define for Solaris 2.5.1 so the uint32_t typedef from <sys/synch.h>,
- <pthread.h>, or <semaphore.h> is not used. If the typedef were allowed, the
- #define below would cause a syntax error. */
-/* #undef _UINT32_T */
-
-/* Define for Solaris 2.5.1 so the uint64_t typedef from <sys/synch.h>,
- <pthread.h>, or <semaphore.h> is not used. If the typedef were allowed, the
- #define below would cause a syntax error. */
-/* #undef _UINT64_T */
-
-/* Define for Solaris 2.5.1 so the uint8_t typedef from <sys/synch.h>,
- <pthread.h>, or <semaphore.h> is not used. If the typedef were allowed, the
- #define below would cause a syntax error. */
-/* #undef _UINT8_T */
-
-/* Define to empty if `const' does not conform to ANSI C. */
-/* #undef const */
-
-/* Define to the type of a signed integer type of width exactly 16 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef int16_t */
-
-/* Define to the type of a signed integer type of width exactly 32 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef int32_t */
-
-/* Define to the type of a signed integer type of width exactly 64 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef int64_t */
-
-/* Define to the type of a signed integer type of width exactly 8 bits if such
- a type exists and the standard includes do not define it. */
-/* #undef int8_t */
-
-/* Define to rpl_malloc if the replacement function should be used. */
-/* #undef malloc */
-
-/* Define to `long int' if <sys/types.h> does not define. */
-/* #undef off_t */
-
-/* Define to `int' if <sys/types.h> does not define. */
-/* #undef pid_t */
-
-/* Define to rpl_realloc if the replacement function should be used. */
-/* #undef realloc */
-
-/* Define to `unsigned int' if <sys/types.h> does not define. */
-/* #undef size_t */
-
-/* Define to `int' if <sys/types.h> does not define. */
-/* #undef ssize_t */
-
-/* Define to the type of an unsigned integer type of width exactly 16 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef uint16_t */
-
-/* Define to the type of an unsigned integer type of width exactly 32 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef uint32_t */
-
-/* Define to the type of an unsigned integer type of width exactly 64 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef uint64_t */
-
-/* Define to the type of an unsigned integer type of width exactly 8 bits if
- such a type exists and the standard includes do not define it. */
-/* #undef uint8_t */
-
-
-#endif /* FWKNOP_CONFIG_H */
-
View
2,927