Michael Rash
0529d23595
remove minor debugging statement
2013-03-10 15:13:34 -04:00
Michael Rash
6882ac57ec
add HMAC-SHA1 support
2013-03-10 14:56:39 -04:00
Michael Rash
7821e83dfc
Merge branch 'hmac_support' of github.com:mrash/fwknop into hmac_support
...
Conflicts:
client/fwknop.c
lib/fko_hmac.c
2013-03-10 14:32:07 -04:00
Michael Rash
22dde8eb35
SPA with HMAC SHA256 and SHA384 now works
...
This is a fairly significant commit that lays the groundwork for getting
selectable HMAC modes working for both the client and server. One libfko API
change was required so that the hmac_type is passed into fko_new_with_data().
This allows the server to set the hmac_type via access.conf stanzas. The
effort in this commit will be extended to allow HMAC MD5, SHA1, and SHA512
also function properly.
2013-03-10 14:26:05 -04:00
Damien Stuart
6fa3be393c
Renamed fko_set_hmac_type to fko_set_spa_hmac_type. Incorporated libfko changes and additions to the fko python module code.
2013-03-10 13:21:24 -04:00
Michael Rash
6f45b2c3b1
added HMAC SHA384 and SHA512 support, bug fix to allow shorter HMAC key lengths than associated digest block size
2013-03-09 23:27:08 -05:00
Michael Rash
f9fa3c2b6d
[test suite] derive HMAC digest type from client display context output
2013-03-09 23:25:59 -05:00
Michael Rash
6741cfc22b
convert HMAC functions to static where possible
2013-03-09 16:48:08 -05:00
Michael Rash
3ff39dfab4
[test suite] minor variable conversion to 'our' vars
2013-03-09 16:41:32 -05:00
Michael Rash
1a39047b92
ensure to close access.conf file ptr when an error condition is found and exit() is going to be called
2013-03-08 22:12:19 -05:00
Michael Rash
8b5cf3446f
[test suite] minor bug fix for command line definition for invalid HMAC test
2013-03-08 22:05:11 -05:00
Michael Rash
d13eba7d13
[test suite] minor category/subcategory update for fuzzing tests
2013-03-08 21:48:19 -05:00
Michael Rash
7fe5c55fcf
[test suite] added various hmac verification conf files
2013-03-08 21:10:45 -05:00
Michael Rash
d4362b7b38
[test suite] import test definitions from tests/*.pl files
2013-03-08 21:09:51 -05:00
Michael Rash
44d05a6916
interim commit for supporting multiple HMAC digest types (# 45)
2013-03-07 23:14:48 -05:00
Michael Rash
39ca73a245
[test suite] added OpenSSL HMAC verification ( closes #39 )
2013-03-05 23:29:46 -05:00
Michael Rash
a09392b08d
[test suite] better reporting of test title matching for valgrind coverage test
2013-03-03 17:56:02 -05:00
Michael Rash
5c182c1722
[test suite] added HMAC dual usage test
2013-03-03 16:21:46 -05:00
Michael Rash
e064e39284
Merge branch 'hmac_header_fixes' into hmac_support
2013-03-03 14:36:21 -05:00
Michael Rash
1dc47f80d8
Fix byte order warning
...
This commit fixes a byte order warning for both sha1.c and md5.c like so:
sha1.c:127:6: warning: #warning Undetermined or unsupported Byte Order... We will try LITTLE_ENDIAN [-Wcpp]
Also removed a couple of header includes that appear not be needed.
2013-03-03 14:29:08 -05:00
Michael Rash
374c573c89
Merge branch 'hmac_header_fixes' into hmac_support
2013-03-03 00:35:39 -05:00
Michael Rash
b86e48dd66
remove a couple of unnecessary header includes
2013-03-02 23:16:26 -05:00
Michael Rash
d27c3e3b09
Merge branch 'hmac_header_fixes' of github.com:mrash/fwknop into hmac_header_fixes
2013-03-02 22:41:15 -05:00
Michael Rash
d94513ee00
[test suite] started adding HMAC equivalent tests for all existing tests
2013-03-02 22:38:26 -05:00
Damien Stuart
f9e1ae4859
Merge my working branch 'hmac_support' into hmac_header_fixes
2013-03-02 17:22:50 -05:00
Damien Stuart
c1baa7e12f
Merge branch 'hmac_support' of github.com:mrash/fwknop into hmac_support
2013-03-02 17:08:55 -05:00
Damien Stuart
6ecf81b16e
First round if refactoring to clean up header dependencies.
2013-03-02 17:03:20 -05:00
Michael Rash
58ba7717e6
[test suite] minor category renaming
2013-03-02 14:13:47 -05:00
Michael Rash
1de684ab16
[test suite] minor spacing fix for hmac_access.conf file
2013-03-02 11:15:19 -05:00
Michael Rash
e4b6f56619
[test suite] minor valgrind coverage dir import status message
2013-03-02 11:10:48 -05:00
Michael Rash
a00de31f5a
[test suite] use find_command() for valgrind path
2013-03-02 10:47:03 -05:00
Michael Rash
1e01d59c91
[test suite] added elapsed time display
2013-03-02 10:18:05 -05:00
Michael Rash
8731f02005
Merge branch 'hmac_support' into hmac_header_fixes
2013-03-01 22:35:19 -05:00
Michael Rash
839cc41603
remove unused vars for pf/ipfw/ipf firewalls until NAT is supported for them
2013-03-01 22:11:22 -05:00
Michael Rash
bf94e79a3b
merged bf990821ffcb44aba4c82a476e0309b49837ebb7 for #20
2013-03-01 21:58:08 -05:00
Michael Rash
73b1931bd8
minor clean up for get_keys() base64 decoded key length
2013-02-28 22:25:04 -05:00
Michael Rash
ffcb77552b
Remove lib/fko.h dependency on rijndael.h
2013-02-28 21:47:43 -05:00
Michael Rash
22316b796c
added test/fko-wrapper/ files for the test suite
2013-02-28 21:42:53 -05:00
Damien Stuart
9c1b1d531d
Merging fixes_for_2.0.4 into hmac_support
2013-02-25 21:46:09 -05:00
Michael Rash
db7f3e2b3c
Added fko_set_spa_encryption_mode() multi-call test to fko-wrapper
2013-02-25 16:50:12 -05:00
Damien Stuart
bf990821ff
Fixed broken configure options for forcing a particular firewall type and path.
2013-02-24 18:09:13 -05:00
Michael Rash
2f1768fcc4
minor CREDITS file formatting update
2013-02-22 20:51:48 -05:00
Michael Rash
bdb32cf634
added decryption tests to fko-wrapper
2013-02-21 22:47:40 -05:00
Michael Rash
6c2b657bfe
[libfko] free dynamically allocated resources for multiple libfko fcn calls
2013-02-21 22:44:33 -05:00
Michael Rash
2b54cb94f5
memory leak bug fix for fko_new() to allow multiple calls without requiring external fko_destroy() call
2013-02-21 08:36:29 -05:00
Michael Rash
74fe3c6330
added fko-wrapper memory validation test
2013-02-21 08:35:17 -05:00
Michael Rash
3ce7a77df3
added global function call number var for fko-wrapper
2013-02-21 08:34:36 -05:00
Michael Rash
52f40fea3c
added 'clean' stanza for fko-wrapper Makefile
2013-02-21 08:33:36 -05:00
Michael Rash
0ae954cb17
completed fko_wrapper Rijndael encryption usage
2013-02-20 23:06:40 -05:00
Michael Rash
cae795f6fd
allow encryption routines to be called multiple times for the same context (deallocate memory from previous calls)
2013-02-20 22:55:26 -05:00