diff --git a/test/conf/fwknoprc_hmac_sha512_key b/test/conf/fwknoprc_hmac_sha512_key new file mode 100644 index 00000000..5abf428a --- /dev/null +++ b/test/conf/fwknoprc_hmac_sha512_key @@ -0,0 +1,73 @@ +# .fwknoprc +############################################################################## +# +# Firewall Knock Operator (fwknop) client rc file. +# +# This file contains user-specific fwknop client configuration default +# and named parameter sets for specific invocations of the fwknop client. +# +# Each section (or stanza) is identified and started by a line in this +# file that contains a single identifier surrounded by square brackets. +# +# The parameters within the stanza typicaly match corresponding client +# command-line parameters. +# +# The first one should always be `[default]' as it defines the global +# default settings for the user. These override the program defaults +# for these parameter. If a named stanza is used, its entries will +# override any of the default. Command-line options will trump them +# all. +# +# Subsequent stanzas will have only the overriding and destination +# specific parameters. +# +# Lines starting with `#' and empty lines are ignored. +# +# See the fwknop.8 man page for a complete list of valid parameters +# and their values. +# +############################################################################## +# +# We start with the 'default' stanza. Uncomment and edit for your +# preferences. The client will use its build-in default for those items +# that are commented out. +# +[default] + +#DIGEST_TYPE sha256 +#FW_TIMEOUT 30 +#SPA_SERVER_PORT 62201 +#SPA_SERVER_PROTO udp +#ALLOW_IP +#SPOOF_USER +#SPOOF_SOURCE_IP +#TIME_OFFSET 0 +#USE_GPG N +#GPG_HOMEDIR /path/to/.gnupg +#GPG_SIGNER +#GPG_RECIPIENT +HMAC_DIGEST_TYPE sha512 +KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= +HMAC_KEY_BASE64: d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= + +# User-provided named stanzas: + +# Example for a destination server of 192.168.1.20 to open access to +# SSH for an IP that is resoved externally, and one with a NAT request +# for a specific source IP that maps port 8088 on the server +# to port 88 on 192.168.1.55 with timeout. +# +#[myssh] +#SPA_SERVER 192.168.1.20 +#ACCESS tcp/22 +#ALLOW_IP resolve +# +#[mynatreq] +#SPA_SERVER 192.168.1.20 +#ACCESS tcp/8088 +#ALLOW_IP 10.21.2.6 +#NAT_ACCESS 192.168.1.55,88 +#CLIENT_TIMEOUT 60 +# + +###EOF### diff --git a/test/conf/fwknoprc_hmac_sha512_short_key b/test/conf/fwknoprc_hmac_sha512_short_key new file mode 100644 index 00000000..f9eee9d9 --- /dev/null +++ b/test/conf/fwknoprc_hmac_sha512_short_key @@ -0,0 +1,73 @@ +# .fwknoprc +############################################################################## +# +# Firewall Knock Operator (fwknop) client rc file. +# +# This file contains user-specific fwknop client configuration default +# and named parameter sets for specific invocations of the fwknop client. +# +# Each section (or stanza) is identified and started by a line in this +# file that contains a single identifier surrounded by square brackets. +# +# The parameters within the stanza typicaly match corresponding client +# command-line parameters. +# +# The first one should always be `[default]' as it defines the global +# default settings for the user. These override the program defaults +# for these parameter. If a named stanza is used, its entries will +# override any of the default. Command-line options will trump them +# all. +# +# Subsequent stanzas will have only the overriding and destination +# specific parameters. +# +# Lines starting with `#' and empty lines are ignored. +# +# See the fwknop.8 man page for a complete list of valid parameters +# and their values. +# +############################################################################## +# +# We start with the 'default' stanza. Uncomment and edit for your +# preferences. The client will use its build-in default for those items +# that are commented out. +# +[default] + +#DIGEST_TYPE sha256 +#FW_TIMEOUT 30 +#SPA_SERVER_PORT 62201 +#SPA_SERVER_PROTO udp +#ALLOW_IP +#SPOOF_USER +#SPOOF_SOURCE_IP +#TIME_OFFSET 0 +#USE_GPG N +#GPG_HOMEDIR /path/to/.gnupg +#GPG_SIGNER +#GPG_RECIPIENT +HMAC_DIGEST_TYPE sha512 +KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= +HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== + +# User-provided named stanzas: + +# Example for a destination server of 192.168.1.20 to open access to +# SSH for an IP that is resoved externally, and one with a NAT request +# for a specific source IP that maps port 8088 on the server +# to port 88 on 192.168.1.55 with timeout. +# +#[myssh] +#SPA_SERVER 192.168.1.20 +#ACCESS tcp/22 +#ALLOW_IP resolve +# +#[mynatreq] +#SPA_SERVER 192.168.1.20 +#ACCESS tcp/8088 +#ALLOW_IP 10.21.2.6 +#NAT_ACCESS 192.168.1.55,88 +#CLIENT_TIMEOUT 60 +# + +###EOF### diff --git a/test/conf/hmac_sha512_access.conf b/test/conf/hmac_sha512_access.conf index 024c4a2b..6a5bf9f1 100644 --- a/test/conf/hmac_sha512_access.conf +++ b/test/conf/hmac_sha512_access.conf @@ -1,5 +1,5 @@ SOURCE: ANY; KEY_BASE64: wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= -HMAC_KEY_BASE64: Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== +HMAC_KEY_BASE64: d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= HMAC_DIGEST_TYPE: sha512; FW_ACCESS_TIMEOUT: 3; diff --git a/test/conf/hmac_sha512_short_key_access.conf b/test/conf/hmac_sha512_short_key_access.conf new file mode 100644 index 00000000..024c4a2b --- /dev/null +++ b/test/conf/hmac_sha512_short_key_access.conf @@ -0,0 +1,5 @@ +SOURCE: ANY; +KEY_BASE64: wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= +HMAC_KEY_BASE64: Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== +HMAC_DIGEST_TYPE: sha512; +FW_ACCESS_TIMEOUT: 3;