Skip to content
This repository

Jul 10, 2012

  1. Michael Rash

    switched back to older ChangeLog format which is more readable

    authored

Jul 09, 2012

  1. Michael Rash

    bumped version to 2.0.1-pre1

    authored
  2. Michael Rash

    added dual_key_usage_access.conf to Makefile.am for 'make dist' target

    authored
  3. Michael Rash

    added unique function names to --enable-valgrind suspect functions test

    authored

Jul 08, 2012

  1. Michael Rash

    added new test in --enable-valgrind mode to collect suspect functions

    authored
  2. Michael Rash

    Only cache replay digests for SPA packets that decrypt

    This change ensures that we only cache replay digests for those SPA packets
    that actually decrypt.  Not doing this would have allowed an attacker to
    potentially fill up digest cache space with digests for garbage packets.
    authored
  3. Michael Rash

    Added a test for a dual-usage key in access.conf

    authored
  4. Michael Rash

    Bug fix for multi-stanza key use and replay attack detection

    This commit fixes a bug where the same encryption key used for two stanzas in
    the access.conf file would result in access requests that matched the second
    stanza to always be treated as a replay attack.  This has been fixed for
    the fwknop-2.0.1 release, and was reported by Andy Rowland.  Now the fwknopd
    server computes the SHA256 digest of raw incoming payload data before
    decryption, and compares this against all previous hashes.  Previous to this
    commit, fwknopd would add a new hash to the replay digest list right after
    the first access.conf stanza match, so when SPA packet data matched the
    second access.conf stanza a matching replay digest would already be there.
    authored

May 28, 2012

  1. Michael Rash

    gcc warning fix fox: fko_decode.c:43:17: warning: variable ‘edata_siz…

    …e’ set but not used [-Wunused-but-set-variable]
    authored
  2. Michael Rash

    updated PF anchor check to not rely on listing the PF policy

    authored
  3. Michael Rash

    added Ted Wynnychenko for OpenBSD PF testing

    authored

Jan 15, 2012

  1. Michael Rash

    convert Rijndael blocksize values '16' to use RIJNDAEL_BLOCKSIZE macro

    authored

Jan 02, 2012

  1. Michael Rash

    added --stat output to ChangeLog

    authored
  2. Michael Rash

    moved ChangeLog-v2.0 to ChangeLog

    authored
  3. Michael Rash

    removed old ChangeLog files

    authored
  4. Michael Rash

    Added ChangeLog, ShortLog, and diffstat files for the 2.0 release.

    authored
  5. Michael Rash

    bumped version to 2.0

    authored
  6. Michael Rash

    added FKO_CHECK_COMPILER_ARG_LDFLAGS_ONLY to fix ro-relocations and i…

    …mmediate binding protection compliation warnings on FreeBSD
    authored
  7. Michael Rash

    minor test suite update to look for linker warnings in a more generic…

    … way
    authored
  8. Michael Rash

    minor test suite addition to check for linker input file warnings

    authored
  9. Michael Rash

    bumped version to 2.0

    authored
  10. Michael Rash

    minor wording update subversion -> git

    authored

Dec 29, 2011

  1. Damien Stuart

    Refactored configure.ac to use a custom macro for compiler flag checks.

    Set version to 2.0 (non-release candidate).
    Minor typo fixes.
    damienstuart authored Damien S. Stuart committed

Dec 13, 2011

  1. Michael Rash

    updated copyright and license statement - fwknop is GPL software

    authored

Dec 06, 2011

  1. Michael Rash

    minor addition of the local_spa.key file for 'make dist'

    authored
  2. Michael Rash

    added local_spa.key file

    authored
  3. Michael Rash

    added local_spa.key file

    authored
  4. Michael Rash

    minor addition of the CREDITS file for 'make dist'

    authored
  5. Michael Rash

    Added the CREDITS file for 'make dist'

    authored
  6. Michael Rash

    change log doc updates

    authored
  7. Michael Rash

    Added various files to Makefile.am so that 'make dist' continues to work

    authored
  8. Michael Rash

    added CREDITS file, bumped software version, added ChangeLog files

    authored
  9. Michael Rash

    added CREDITS file, bumped software version, added ChangeLog files

    authored

Dec 04, 2011

  1. Michael Rash

    minor compiler warning fix on OpenBSD

    authored

Dec 03, 2011

  1. Michael Rash

    minor compile fixes for FreeBSD

    authored
Something went wrong with that request. Please try again.