889 Commits

Author SHA1 Message Date
Michael Rash
0529d23595 remove minor debugging statement 2013-03-10 15:13:34 -04:00
Michael Rash
6882ac57ec add HMAC-SHA1 support 2013-03-10 14:56:39 -04:00
Michael Rash
7821e83dfc Merge branch 'hmac_support' of github.com:mrash/fwknop into hmac_support
Conflicts:
	client/fwknop.c
	lib/fko_hmac.c
2013-03-10 14:32:07 -04:00
Michael Rash
22dde8eb35 SPA with HMAC SHA256 and SHA384 now works
This is a fairly significant commit that lays the groundwork for getting
selectable HMAC modes working for both the client and server.  One libfko API
change was required so that the hmac_type is passed into fko_new_with_data().
This allows the server to set the hmac_type via access.conf stanzas.  The
effort in this commit will be extended to allow HMAC MD5, SHA1, and SHA512
also function properly.
2013-03-10 14:26:05 -04:00
Damien Stuart
6fa3be393c Renamed fko_set_hmac_type to fko_set_spa_hmac_type. Incorporated libfko changes and additions to the fko python module code. 2013-03-10 13:21:24 -04:00
Michael Rash
6f45b2c3b1 added HMAC SHA384 and SHA512 support, bug fix to allow shorter HMAC key lengths than associated digest block size 2013-03-09 23:27:08 -05:00
Michael Rash
f9fa3c2b6d [test suite] derive HMAC digest type from client display context output 2013-03-09 23:25:59 -05:00
Michael Rash
6741cfc22b convert HMAC functions to static where possible 2013-03-09 16:48:08 -05:00
Michael Rash
3ff39dfab4 [test suite] minor variable conversion to 'our' vars 2013-03-09 16:41:32 -05:00
Michael Rash
1a39047b92 ensure to close access.conf file ptr when an error condition is found and exit() is going to be called 2013-03-08 22:12:19 -05:00
Michael Rash
8b5cf3446f [test suite] minor bug fix for command line definition for invalid HMAC test 2013-03-08 22:05:11 -05:00
Michael Rash
d13eba7d13 [test suite] minor category/subcategory update for fuzzing tests 2013-03-08 21:48:19 -05:00
Michael Rash
7fe5c55fcf [test suite] added various hmac verification conf files 2013-03-08 21:10:45 -05:00
Michael Rash
d4362b7b38 [test suite] import test definitions from tests/*.pl files 2013-03-08 21:09:51 -05:00
Michael Rash
44d05a6916 interim commit for supporting multiple HMAC digest types (# 45) 2013-03-07 23:14:48 -05:00
Michael Rash
39ca73a245 [test suite] added OpenSSL HMAC verification (closes #39) 2013-03-05 23:29:46 -05:00
Michael Rash
a09392b08d [test suite] better reporting of test title matching for valgrind coverage test 2013-03-03 17:56:02 -05:00
Michael Rash
5c182c1722 [test suite] added HMAC dual usage test 2013-03-03 16:21:46 -05:00
Michael Rash
e064e39284 Merge branch 'hmac_header_fixes' into hmac_support 2013-03-03 14:36:21 -05:00
Michael Rash
1dc47f80d8 Fix byte order warning
This commit fixes a byte order warning for both sha1.c and md5.c like so:

sha1.c:127:6: warning: #warning Undetermined or unsupported Byte Order... We will try LITTLE_ENDIAN [-Wcpp]

Also removed a couple of header includes that appear not be needed.
2013-03-03 14:29:08 -05:00
Michael Rash
374c573c89 Merge branch 'hmac_header_fixes' into hmac_support 2013-03-03 00:35:39 -05:00
Michael Rash
b86e48dd66 remove a couple of unnecessary header includes 2013-03-02 23:16:26 -05:00
Michael Rash
d27c3e3b09 Merge branch 'hmac_header_fixes' of github.com:mrash/fwknop into hmac_header_fixes 2013-03-02 22:41:15 -05:00
Michael Rash
d94513ee00 [test suite] started adding HMAC equivalent tests for all existing tests 2013-03-02 22:38:26 -05:00
Damien Stuart
f9e1ae4859 Merge my working branch 'hmac_support' into hmac_header_fixes 2013-03-02 17:22:50 -05:00
Damien Stuart
c1baa7e12f Merge branch 'hmac_support' of github.com:mrash/fwknop into hmac_support 2013-03-02 17:08:55 -05:00
Damien Stuart
6ecf81b16e First round if refactoring to clean up header dependencies. 2013-03-02 17:03:20 -05:00
Michael Rash
58ba7717e6 [test suite] minor category renaming 2013-03-02 14:13:47 -05:00
Michael Rash
1de684ab16 [test suite] minor spacing fix for hmac_access.conf file 2013-03-02 11:15:19 -05:00
Michael Rash
e4b6f56619 [test suite] minor valgrind coverage dir import status message 2013-03-02 11:10:48 -05:00
Michael Rash
a00de31f5a [test suite] use find_command() for valgrind path 2013-03-02 10:47:03 -05:00
Michael Rash
1e01d59c91 [test suite] added elapsed time display 2013-03-02 10:18:05 -05:00
Michael Rash
8731f02005 Merge branch 'hmac_support' into hmac_header_fixes 2013-03-01 22:35:19 -05:00
Michael Rash
839cc41603 remove unused vars for pf/ipfw/ipf firewalls until NAT is supported for them 2013-03-01 22:11:22 -05:00
Michael Rash
bf94e79a3b merged bf990821ffcb44aba4c82a476e0309b49837ebb7 for #20 2013-03-01 21:58:08 -05:00
Michael Rash
73b1931bd8 minor clean up for get_keys() base64 decoded key length 2013-02-28 22:25:04 -05:00
Michael Rash
ffcb77552b Remove lib/fko.h dependency on rijndael.h 2013-02-28 21:47:43 -05:00
Michael Rash
22316b796c added test/fko-wrapper/ files for the test suite 2013-02-28 21:42:53 -05:00
Damien Stuart
9c1b1d531d Merging fixes_for_2.0.4 into hmac_support 2013-02-25 21:46:09 -05:00
Michael Rash
db7f3e2b3c Added fko_set_spa_encryption_mode() multi-call test to fko-wrapper 2013-02-25 16:50:12 -05:00
Damien Stuart
bf990821ff Fixed broken configure options for forcing a particular firewall type and path. 2013-02-24 18:09:13 -05:00
Michael Rash
2f1768fcc4 minor CREDITS file formatting update 2013-02-22 20:51:48 -05:00
Michael Rash
bdb32cf634 added decryption tests to fko-wrapper 2013-02-21 22:47:40 -05:00
Michael Rash
6c2b657bfe [libfko] free dynamically allocated resources for multiple libfko fcn calls 2013-02-21 22:44:33 -05:00
Michael Rash
2b54cb94f5 memory leak bug fix for fko_new() to allow multiple calls without requiring external fko_destroy() call 2013-02-21 08:36:29 -05:00
Michael Rash
74fe3c6330 added fko-wrapper memory validation test 2013-02-21 08:35:17 -05:00
Michael Rash
3ce7a77df3 added global function call number var for fko-wrapper 2013-02-21 08:34:36 -05:00
Michael Rash
52f40fea3c added 'clean' stanza for fko-wrapper Makefile 2013-02-21 08:33:36 -05:00
Michael Rash
0ae954cb17 completed fko_wrapper Rijndael encryption usage 2013-02-20 23:06:40 -05:00
Michael Rash
cae795f6fd allow encryption routines to be called multiple times for the same context (deallocate memory from previous calls) 2013-02-20 22:55:26 -05:00