2576 Commits

Author SHA1 Message Date
Benjamin Ryzman
fac10925d1 Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin 2016-02-14 11:29:41 +01:00
Michael Rash
0980567c4a Merge pull request #199 from alteman/patch-1 2016-02-03 23:50:23 -05:00
alteman
4855202c98 Fix Ubuntu AppArmor regression
Error: 
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf 
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)

Syslog:

[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash
69070666a9 Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-01-30 12:43:58 -05:00
Michael Rash
381e772d22 minor typo fix 2016-01-30 12:43:41 -05:00
Michael Rash
6fc17e1eb4 Merge pull request #197 from oneru/master 2016-01-23 10:03:32 -05:00
Jonathan Bennett
785152a364 Modify server/access.c CUnit test to use the correct function.
add_port_list_ent() only supports one protocol/port entry at a time. The second entry was ignored.
2016-01-22 22:37:36 -06:00
Michael Rash
1fb4524e07 Merge pull request #195 from oneru/mingw_Build_dll 2016-01-18 21:28:56 -05:00
Michael Rash
f0b9b93b6a [libfko] comment out SHA3 hash functions that we're not using 2016-01-18 19:54:04 -05:00
Jonathan Bennett
8d901b10b0 Add yet another Mingw fix, Fixes dll build 2016-01-18 18:39:50 -06:00
Michael Rash
e3c6f87f04 [libfko] minor permissions update 2016-01-17 13:40:07 -08:00
Michael Rash
0a037d3554 [test suite] minor file existence check 2016-01-17 13:06:12 -08:00
Damien Stuart
4fc9d05660 Tweaks for MINGW builds 2016-01-17 13:09:15 -05:00
Damien Stuart
e4fffdf44c Changes to fix the native Windows build. 2016-01-17 10:45:51 -05:00
Michael Rash
e76a7a8233 Merge pull request #190 from oneru/include_keys
Include keys
2016-01-16 21:35:00 -05:00
Damien Stuart
97970dccb9 Added "AM_CONDITIONAL(MINGW, false)" before the host check section of configure.ac 2016-01-16 15:12:39 -05:00
Michael Rash
dbd5ae7486 Merge pull request #193 from oneru/mingw32-fixes 2016-01-15 18:05:34 -05:00
Jonathan Bennett
c0ad75704e Fixes to allow for MINGW32 compilation 2016-01-15 09:42:57 -06:00
Michael Rash
8bb46f9664 [extras] add scan-build wrapper for the CLANG static analyzer 2016-01-12 21:42:42 -05:00
Michael Rash
2451050a4c Merge pull request #192 from oneru/hmac-hardening
Hmac hardening
2016-01-12 08:07:53 -05:00
Jonathan Bennett
17badb2b1d Change hmac functions to use calloc and check for null 2016-01-12 00:14:49 -06:00
Jonathan Bennett
1d10b0e4c2 Add base64 test to fko.h 2016-01-11 23:47:55 -06:00
Michael Rash
5e6530cc23 [test suite] bug fix in lcov coverage generation to pull in _base and _info into the final result 2016-01-11 22:22:02 -05:00
Michael Rash
1ace0ac547 [test suite] minor typo fix 2016-01-11 22:20:35 -05:00
Michael Rash
fb7574e6bf Merge pull request #191 from oneru/cleanups
Merge simplified HMAC implementation.
2016-01-11 22:06:52 -05:00
Jonathan Bennett
abd895c522 Removes unused string from set_nat_access 2016-01-11 00:11:46 -06:00
Jonathan Bennett
108a669730 Update fko_wrapper to reflect SHA3 changing MAX_DIGEST_BLOCK_LEN 2016-01-11 00:04:09 -06:00
Jonathan Bennett
83961750b3 Add ifdef for mingw compilation 2016-01-10 22:48:07 -06:00
Jonathan Bennett
82faacfb8e Add base64 CUnit tests 2016-01-03 23:24:54 -06:00
Michael Rash
29411dea8c Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-01-03 08:44:22 -05:00
Michael Rash
6247fe9e6a Merge remote-tracking branch 'origin/dstuart_netfilter_queue' 2016-01-03 08:31:12 -05:00
Jonathan Bennett
578cf501be Add Doxygen documentation to lib/hmac.c functions 2016-01-02 22:14:03 -06:00
Jonathan Bennett
af7d9e8544 Simplify hmac implementations 2016-01-02 21:59:26 -06:00
Jonathan Bennett
a3e0d1cc1b clean up whitespace problems 2016-01-02 20:18:12 -06:00
Jonathan Bennett
32f35468f6 Add some documentation for the include directives 2016-01-02 17:28:50 -06:00
Jonathan Bennett
330663499f Allows an access stanza to be ignored when a problem is caused in an include_keys stanza 2016-01-02 16:42:18 -06:00
Jonathan Bennett
09b7fc94da Add %include_keys directive 2016-01-02 11:50:22 -06:00
Michael Rash
efe2b207f0 Merge pull request #189 from oneru/doxygen
Convert file headers to Doxygen format
2016-01-01 19:35:54 -05:00
Michael Rash
40cef83794 Merge pull request #188 from oneru/nat_dns
Nat dns
2016-01-01 19:35:45 -05:00
Jonathan Bennett
9bb70fa17a Add Doxygen headers for common files 2016-01-01 03:02:17 +00:00
Jonathan Bennett
9475b625a0 Add Doxygen headers to client files 2016-01-01 02:13:21 +00:00
Jonathan Bennett
3378ba2423 Add Doxygen headers for server files 2016-01-01 02:09:59 +00:00
Jonathan Bennett
ae5451dccc Doxygen headers for libfko files 2016-01-01 02:04:24 +00:00
Jonathan Bennett
dda7fa39c1 Disable client side nat_dns 2015-12-31 19:24:45 +00:00
Jonathan Bennett
669e448db5 Add ENABLE_NAT_DNS config option 2015-12-31 18:05:55 +00:00
Jonathan Bennett
748803aef7 Add length checks for nat_access messages 2015-12-31 04:40:41 +00:00
Jonathan Bennett
bc55f0f21f Add count_characters and a CUnit test series for it. 2015-12-31 04:14:58 +00:00
Jonathan Bennett
56be13b3f6 Add dns resolution for nat access 2015-12-31 04:13:46 +00:00
Michael Rash
81419d8f00 Merge pull request #183 from oneru/for-2.6.9
For 2.6.9
2015-12-30 22:42:40 -05:00
Jonathan Bennett
2edbc04bc7 properly handle longer HMAC keys for hmac_sha384 and hmac_sha512 2015-12-30 20:32:52 +00:00