141 Commits

Author SHA1 Message Date
Damien Stuart
61c243f827 Added some more (stubbed-in) server code and functions. Minor doc tweak.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@148 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-14 00:38:31 +00:00
Damien Stuart
8a06e36338 Removed the wipe_pw routine as it could result in segfaults when a static key is used.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@147 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-14 00:37:13 +00:00
Damien Stuart
2bf25e62a7 Added perl/legacy distribution (fwknop-1.9.12). Renamed this distribution from fwknop-c to simply fwknop. Made the version 2.0.0-alpha.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@143 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-11 00:43:24 +00:00
Damien Stuart
a07decf1d9 Added some more stuff to deal with byte order identification on Solaris 10 x86 systems.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@142 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-09 01:38:03 +00:00
Damien Stuart
4fef98682b More tweaks to config file processing, including simple variable expansion.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@141 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-06 02:38:30 +00:00
Damien Stuart
911361deff Minor manpage tweak
git-svn-id: file:///home/mbr/svn/fwknop/trunk@140 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-05 23:41:15 +00:00
Damien Stuart
0c87e7395f Added override config handling and updated the config_init routines to parse everything in the correct order (i.e. config file, override configs, then command-line).
git-svn-id: file:///home/mbr/svn/fwknop/trunk@139 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-05 17:32:15 +00:00
Damien Stuart
998fe8da0a Added more server command-line and config file processing code. Updated autoconf config for new checks and files.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@138 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-05 02:54:42 +00:00
Damien Stuart
791eb4055b Added check for libpcap. More stubbing in on the server code side.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@137 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-04 21:14:44 +00:00
Damien Stuart
f0fa45cec2 Added fwknop.man.asciidoc to docs and fwknop.8 man page to client (derived from fwknop.man.asciidoc).
git-svn-id: file:///home/mbr/svn/fwknop/trunk@136 510a4753-2344-4c79-9c09-4d669213fbeb
2009-09-03 03:25:35 +00:00
Damien Stuart
10c0aabe38 Fixed another minor typo in the doc
git-svn-id: file:///home/mbr/svn/fwknop/trunk@135 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-12 02:11:14 +00:00
Michael Rash
768606906e updated SPA over HTTP packets to always begin the a slash right after the GET string, updated to print SPA packets over HTTP to stderr in test/verbose mode
git-svn-id: file:///home/mbr/svn/fwknop/trunk@134 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-11 03:11:57 +00:00
Damien Stuart
1781e9e758 Updated ip,port format and value check.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@133 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-11 02:04:51 +00:00
Damien Stuart
eaa179a6c1 Changed http_resolve_host code to make it work with or without trailing whitespace in returned content. Updated the IP address format and value checking code. Switched back to whatsmyip.com as default IP resolver.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@132 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-11 01:40:47 +00:00
Damien Stuart
08aa1ef2e8 Updates to accommodate the Windows build.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@131 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-09 17:14:08 +00:00
Damien Stuart
78fb936a55 Some minor refactoring of the TIME_OFFSET handling. Other minor code formatting tweaks.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@130 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-09 16:33:02 +00:00
Damien Stuart
1da9ea0f6b Made the configure help message show --disable-xxx as the options for whether or not to build the server or client.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@129 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-09 16:19:50 +00:00
Damien Stuart
5b3f6f07da Forgot to add the server dir.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@128 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-09 15:45:45 +00:00
Damien Stuart
53b7fae8bb Major rearrangement. Renamed directories: "fko" to "lib", "src" to "client". Added "common" and "server" directories. Setup autoconf to allow disabling the server and/or client builds.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@127 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-09 15:43:16 +00:00
Damien Stuart
078661e355 Fixed typo (actually a cut-and-paste remnant) in the doc.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@126 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-02 21:27:46 +00:00
Damien Stuart
8d789eff4d Update the VS project file for the new SHA digest files and functions.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@125 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-02 18:34:29 +00:00
Damien Stuart
f011889da0 Forgot to add the files for the updated SHA digests (oops).
git-svn-id: file:///home/mbr/svn/fwknop/trunk@124 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-02 18:30:58 +00:00
Damien Stuart
7f45031cef Added SHA384 and SHA512 digests. Tweaks for getting rid of windows warnings. Use recv instead of read on socket. Bumped version to 0.63 (libfko) and 0.23 (FKO perl module).
git-svn-id: file:///home/mbr/svn/fwknop/trunk@123 510a4753-2344-4c79-9c09-4d669213fbeb
2009-08-02 18:28:34 +00:00
Michael Rash
3029e01238 added the --resolve-ip-http and --user-agent command line args so the fwknop-c client can resolve the external network via http://www.cipherdyne.org/cgi/myip.cgi
git-svn-id: file:///home/mbr/svn/fwknop/trunk@121 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-27 05:33:21 +00:00
Michael Rash
9bc2b1539e bugfix to order HTTP request headers properly, updated the user agent for SPA over HTTP to use the options->http_user_agent variable (can be set from the command line)
git-svn-id: file:///home/mbr/svn/fwknop/trunk@120 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-27 05:27:54 +00:00
Michael Rash
868aa6ee37 Added the --source-ip argument to build SPA packets with 0.0.0.0 (the fwknopd server can wrap access controls around this)
git-svn-id: file:///home/mbr/svn/fwknop/trunk@119 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-26 17:28:22 +00:00
Michael Rash
a57baa20d0 minor doc updates
git-svn-id: file:///home/mbr/svn/fwknop/trunk@118 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-26 15:08:46 +00:00
Michael Rash
17ca88ad4c changed the minimum destination SPA port from 1024 to 10,000
git-svn-id: file:///home/mbr/svn/fwknop/trunk@117 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-23 04:35:04 +00:00
Michael Rash
f5849dc68c * Added the --show-last and --no-save command line options to show the
command line used for the previous fwknop invocation, and to have the
  fwknop client not save its command line arguments.
* Bug fix to force libfko to recalculate the random data embedded in the
  the SPA packet after a random port is acquired via --rand-port or
  --nat-rand-port.  This is a precaution so that an attacker cannot guess
  some of the internal SPA data based on the destination port number.


git-svn-id: file:///home/mbr/svn/fwknop/trunk@116 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-23 04:17:04 +00:00
Michael Rash
70db22064e * Got forward and local NAT modes working with the --nat-access,
--nat-local, --nat-port, and --nat-randport options.  All NAT modes
  are now passing the fwknop test suite.
* Added the --server-command option to build an SPA packet with a command
  for the server to execute.
* Added the --fw-timeout option for client side timeouts to be specified.
* Added the --time-offset-plus and --time-offset-minus options to allow
  the user to influence the timestamp associated with an SPA packet.
* Added the --rand-port option so that the SPA packet destination port can
  be randomized.


git-svn-id: file:///home/mbr/svn/fwknop/trunk@115 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-21 05:18:28 +00:00
Damien Stuart
3a77e0fefa Fixed some formatting errors in the POD.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@114 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-19 20:48:19 +00:00
Damien Stuart
561ba4f7e4 Tweaks to cover WIN32 build. Added print of error if tcp connect() fails.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@113 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-17 01:52:03 +00:00
Michael Rash
6f79b6fb04 - Added the ability to send SPA packets over valid HTTP requests with
the fwknop-c client.
- Added support for transmitting SPA packets over IPv6 via TCP and UDP
sockets, and also via HTTP.
- Added GnuPG 'hQ' base64 encoded prefix handling (this prefix is
stripped out of encrypted SPA packet data).
- Added hostname resolution support to the fwknop-c client if the SPA
server is specified as a hostname instead of an IP address.
- Minor bug fix to allow a GnuPG password to be specified via the
--get-key functionality.



git-svn-id: file:///home/mbr/svn/fwknop/trunk@112 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-16 06:40:51 +00:00
Michael Rash
31ef94024c added B64_GPG_PREFIX 'hQ' string for GnuPG prefix handling (similar to the 'Salted__' handling for Rijndael SPA packet encryption
git-svn-id: file:///home/mbr/svn/fwknop/trunk@111 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-16 00:28:04 +00:00
Michael Rash
111d24c89b initial stab at libfko server daemon TODO's
git-svn-id: file:///home/mbr/svn/fwknop/trunk@110 510a4753-2344-4c79-9c09-4d669213fbeb
2009-07-03 03:34:21 +00:00
Michael Rash
e0e08f0cf2 bug fix suggested by Damien to allow the recompute of the SPA digest to properly happen when calling spa_digest() with a true value
git-svn-id: file:///home/mbr/svn/fwknop/trunk@109 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-29 00:52:12 +00:00
Damien Stuart
5ba9f1ecf9 Fixed spa access message validation routine to allow for multiple comma-separated requests in one message.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@108 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-28 18:19:24 +00:00
Damien Stuart
0bec8bd141 Tweaks to the win32 build (Visual Studio project configs).
git-svn-id: file:///home/mbr/svn/fwknop/trunk@107 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-16 00:18:59 +00:00
Michael Rash
591e5be81e minor typo fix (gps -> gpg)
git-svn-id: file:///home/mbr/svn/fwknop/trunk@106 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-14 23:44:43 +00:00
Damien Stuart
6e167c65df Added handling of Backspace and Ctrl-U in the Win32 handling of get_passswd.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@105 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-14 16:38:17 +00:00
Damien Stuart
33e353b2fc Added the digest types constants to the types and individual export tags.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@104 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-14 14:22:03 +00:00
Michael Rash
44bca33574 minor wording update to match fwknop help to config_init.h for --server-proto option
git-svn-id: file:///home/mbr/svn/fwknop/trunk@103 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-10 04:42:49 +00:00
Damien Stuart
0dae9badba Added a TODO file
git-svn-id: file:///home/mbr/svn/fwknop/trunk@102 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-08 22:55:40 +00:00
Damien Stuart
04690e2f07 Forgot to bump the perl module minor version number.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@101 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 20:46:14 +00:00
Damien Stuart
488ca566e1 Minor updates to non-code-related files. Changed some copyrights to 2009.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@100 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 20:33:53 +00:00
Damien Stuart
caab726e7b Brought Error constants in sync with libfko.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@99 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 20:02:14 +00:00
Damien Stuart
2fee69dc33 Tweaks again for win32 build
git-svn-id: file:///home/mbr/svn/fwknop/trunk@98 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 17:27:12 +00:00
Damien Stuart
5811d1107b Yet another tweak for win32.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@97 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 17:13:36 +00:00
Damien Stuart
51c37ba159 Tweak for win32 platform
git-svn-id: file:///home/mbr/svn/fwknop/trunk@96 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 17:03:01 +00:00
Damien Stuart
7817e44264 Added sending via tcp (established) conneciton. removed --debug as an option. Some minor code reformatting and refactoring.
git-svn-id: file:///home/mbr/svn/fwknop/trunk@95 510a4753-2344-4c79-9c09-4d669213fbeb
2009-06-07 16:55:22 +00:00