2017 Commits

Author SHA1 Message Date
Michael Rash
55cbebe7bb ChangeLog and doc updates 2015-04-18 05:30:39 -07:00
Michael Rash
1e9f7e94f0 [server] consolidate chain creation within mk_chain() 2015-04-14 08:21:00 -07:00
Michael Rash
c0f3ed38a8 [server] further error status simplication for firewalld 2015-04-14 08:15:03 -07:00
Michael Rash
cf8c4df50e [server] remove DISABLE_DNAT exception for SPA packets that request a NAT operation - this is reserved for FORCE_NAT scenarios 2015-04-14 08:12:56 -07:00
Michael Rash
912c625e9e [server] remove DISABLE_DNAT exception for SPA packets that request a NAT operation - this is reserved for FORCE_NAT scenarios 2015-04-13 08:34:24 -07:00
Michael Rash
654f455ba6 Revert "[server] use 'success' string for firewalld as returned firewall-cmd for command success"
This reverts commit 1e33119b04a583fbf18b5b562edb14301a2ca7d6.
2015-04-12 15:49:19 -07:00
Michael Rash
ffeb60677d [test suite] update SNAT MASQ test to use force masq access file 2015-04-12 15:49:08 -07:00
Michael Rash
7dc41e68ef [test suite] add open_ports_force_masq_access.conf file 2015-04-12 15:48:14 -07:00
Michael Rash
86cdc90f4a [test suite] add open_ports_force_masq_access.conf file 2015-04-12 15:47:41 -07:00
Michael Rash
5164378b17 [build] add --enable-32bit-mode for ASAN+AFL fuzzing 2015-04-09 22:23:17 -04:00
Michael Rash
513fb239df Merge branch 'master' of ssh://github.com/mrash/fwknop 2015-04-09 21:21:45 -04:00
Michael Rash
87a4acb636 [test suite] added detection for crashes triggered with AddressSanitizer (requires --enable-asan-support) 2015-04-09 18:04:31 -07:00
Michael Rash
1986c9aaf9 [test suite] added AFL results for client-rc fuzzing 2015-04-09 09:20:19 -04:00
Michael Rash
2d0b623a9a [test suite] more FORCE_NAT tests 2015-04-08 18:50:26 -07:00
Michael Rash
ca41ce6e75 [test suite] restore FORCE_SNAT test passing result 2015-04-08 18:40:44 -07:00
Michael Rash
547dbb66b3 [server] minor return value handling update for create_chain() and add_jump_rule() 2015-04-08 18:30:03 -07:00
Michael Rash
1e33119b04 [server] use 'success' string for firewalld as returned firewall-cmd for command success 2015-04-08 18:29:03 -07:00
Michael Rash
429881703f [test suite] minor uninitialized var bug fix 2015-04-08 18:24:26 -07:00
Michael Rash
ab2d9c0aec [test suite] minor path bug fix 2015-04-07 16:35:07 -07:00
Michael Rash
0fa42ae117 [server] allow DISABLE_DNAT to not require FORCE_NAT 2015-04-07 16:34:49 -07:00
Michael Rash
7a21494f39 added --enable-asan-support for Google's Address Sanitizer compiler flags 2015-04-07 16:32:44 -07:00
Michael Rash
21dc1e8968 Merge branch 'master' of ssh://minastirith/Users/mbr/git/fwknop 2015-04-07 08:24:21 -04:00
Michael Rash
3d8b524019 [test suite] FORCE_SNAT requires FORCE_NAT test 2015-04-07 08:23:55 -04:00
Michael Rash
37c9f38565 [test suite] FORCE_SNAT requires FORCE_NAT test 2015-04-06 21:20:31 -04:00
Michael Rash
8e6db3a5da [server] extend FORWARD_ALL to apply to NAT operations
This is a significant commit to allow all ports and protocols to be
NAT'd in conjunction with FORWARD ACCEPT rules. This commit is in
support of 6b7a3bbdae295c29a15a59385e637bd391858bc2 to allow fwknopd to
function as an SPA gateway.
2015-04-06 20:04:33 -04:00
Michael Rash
8010690039 [server] add missing #define's for firewalld 2015-04-06 11:47:07 -07:00
Michael Rash
ef6c0549a5 [test suite] added --prefer-iptables to exclude firewalld 2015-04-06 01:33:18 -07:00
Michael Rash
c25f34e7a2 [server] update firewalld for FORWARD_ALL NAT operations 2015-04-06 01:24:55 -07:00
Michael Rash
ca467b9030 [test suite] added AFL results for spa-pkts and server-digest-cache fuzzing runs 2015-03-31 19:58:18 -04:00
Michael Rash
c4ffd4b00a [extras] minor ramdisk creation bug fix 2015-03-30 21:38:31 -04:00
Michael Rash
a18b3e9027 [server] minor code coverage update for firewalld systems 2015-03-29 18:15:11 -07:00
Michael Rash
244d2692f2 [test suite] added server-access plot data 2015-03-29 08:04:55 -04:00
Michael Rash
cb089c550d [test suite] added server-access AFL results run 2015-03-29 08:00:03 -04:00
Michael Rash
60d982a103 [test suite] added GPG 4096-bit key combination tests 2015-03-28 07:54:30 -04:00
Michael Rash
1dc4a47357 [libfko] minor update to make process_sigs() static 2015-03-26 22:04:20 -04:00
Michael Rash
9de2a61d04 add subkey gpg access.conf file 2015-03-26 22:01:52 -04:00
Michael Rash
0f86406afb [test suite] added gpg subkey signing test 2015-03-26 22:01:02 -04:00
Michael Rash
edd57f48de add test/conf/gpg_large_signing_key_access.conf 2015-03-24 22:45:07 -04:00
Michael Rash
91a4e82f23 [test suite] added 4096-bit signing key test 2015-03-24 22:38:41 -04:00
Michael Rash
59d0ef0b17 [test suite] minor file rename 2015-03-24 22:03:21 -04:00
Michael Rash
1594194e73 [test suite] added new gpg keyrings for large key tests (4096 bits) 2015-03-24 22:01:55 -04:00
Michael Rash
17382953e8 [test suite] minor usage update 2015-03-24 21:44:38 -04:00
Michael Rash
ce0bb64830 [test suite] restructured AFL results directory to results/version/commit/ 2015-03-23 18:07:13 -07:00
Michael Rash
08bc2aa603 [test suite] rely exclusively on tarball for gpg keyrings 2015-03-23 17:55:59 -07:00
Michael Rash
90fb4c9aca minor comment addition 2015-03-22 22:26:29 -04:00
Michael Rash
5aacd6ae21 added convenience script to create a ramdisk for AFL fuzzing runs 2015-03-22 22:18:04 -04:00
Michael Rash
ea7f22f842 fix line separators 2015-03-22 22:12:37 -04:00
Michael Rash
f87e18635c update Makefile.am for latest AFL scripts and test cases 2015-03-22 22:06:19 -04:00
Michael Rash
2414393c94 added the extras/patches/ directory (initial patch to link against pthreads for libfiu support) 2015-03-22 22:02:12 -04:00
Michael Rash
211f1fb5a2 [test suite] update afl-compile-code-coverage.sh to not use afl-gcc 2015-03-22 22:00:21 -04:00