Michael Rash
9b2cd9e2e5
[client] allow -D to be used in --save-rc-stanza mode if -n is not given
...
This change simplifies the fwknop client usage by allowing the -D argument to
be used as the stanza name if -n is not also specified in --save-rc-stanza
mode.
2013-05-31 23:01:47 -04:00
Michael Rash
32a6d05cdb
added HMAC digests section to libfko info doc
2013-05-31 22:47:06 -04:00
Michael Rash
9cbb80d434
update man page in client/server directories to the latest
2013-05-31 21:36:49 -04:00
Michael Rash
b4171fe90c
[test suite] minor update to reduce logging noise in valgrind comparison test
2013-05-30 22:50:29 -04:00
Michael Rash
b5c8146823
minor configure.ac typo fix for --help output
2013-05-30 22:42:13 -04:00
Michael Rash
1e77535068
minor documentation updates
2013-05-30 22:26:09 -04:00
Michael Rash
0504627c2e
[client] don't print keys to stdout in --save-rc-stanza --key-gen mode
...
This is a minor commit to not print keys to stdout when both --save-rc-stanza
and --key-gen are set on the command line.
2013-05-30 22:03:11 -04:00
Michael Rash
0001b37f44
Merge remote-tracking branch 'fjoncourt/save_rc_stanza'
...
This set of fixes from Franck allows for much better --save-rc-stanza
functionality - new SPA keys can automatically be saved to the fwknoprc
file when --key-gen and --save-rc-stanza are given, keys aren't overwritten
upon updating the arguments for an existing stanza, and more.
Conflicts:
client/config_init.c
2013-05-29 18:53:08 -04:00
Franck Joncourt
6d9f840ab7
The -R command line switch is now handled in fwknoprc as RESOLVE_IP_HTTP variable.
2013-05-29 14:06:57 +02:00
Franck Joncourt
cf6cb01f67
Fixed ask_overwrite(). Generated keys are now stored in fwknoprc.
...
* ask_overwrite() : when the user inputs more than one char when prompted,
a second call to the function does not take the second char anymore.
We parse all of the chars until we reach an LF char and discard all of them
except the first one.
The overwrite is requested only when the user sets 'y', if there is anything
else we asssume 'N'.
* When -k is used on the command line along with the --save-rc-stanza, the
generated keys are also written in the stanza in fwknoprc.
2013-05-29 12:19:56 +02:00
Franck Joncourt
82caa9a6a9
The variables are now stored in a hash (variable name and position) rather than
...
an array containing only their name. It is now possible to sort them without
worrying about their position in the enumeration.
Improve variable naming for a better understanding (var_ndx becomes var_pos).
2013-05-28 17:14:36 +02:00
Franck Joncourt
dedc4bc8aa
Interim commit to handle bitmask with more than 32 positions.
2013-05-27 18:18:47 +02:00
Franck Joncourt
cc07d10d73
Set command line argument bitmask as a 64-bits value to be able to handle more arguments.
...
Interim commit to add the VERBOSE variable to be stored in the fwknoprc file when
-v is used with --save-rc-stanza. The VERBOSE variable is also read by fwknop
and the verbosity level is set accordingly.
2013-05-25 21:56:01 +02:00
Michael Rash
478f86669c
minor Makefile.am update to set permissions on access.conf.inst and fwknopd.conf.inst files
2013-05-23 14:48:40 -04:00
Michael Rash
67f96dc3d4
[client] minor fix to set -R mode with a resolve URL is also set
...
The command line arg validation function also checks this.
2013-05-23 14:46:17 -04:00
Michael Rash
b9bd984768
[test suite] bug fix on FreeBSD to just run the server for the active/expire sets not equal test
2013-05-23 14:44:29 -04:00
Michael Rash
9a21bc11ba
[server] update access.conf comments to conform to no trailing semicolon or colon within the variable name
2013-05-22 21:21:59 -04:00
Michael Rash
3bc28305c3
minor client man page wording update
2013-05-22 21:20:42 -04:00
Michael Rash
47d235f4fe
[test suite] minor formatting update to access.conf files to mimic fwknoprc vars (no colon or trailing semicolon)
2013-05-21 22:12:03 -04:00
Michael Rash
cfbbac2654
man page updates - access.conf section now includes variable guidance
2013-05-21 22:10:13 -04:00
Michael Rash
52462e7dba
Use {0} initializer for all stack allocated char arrays
...
Lots of places in the code were already using {0} to initialize stack char
arrays, but memset() was being used as well. This commit removes all
unnecessary memset() calls against char arrays that are already initialized
via {0} (which sets all members to zero for such arrays).
2013-05-21 22:00:15 -04:00
Michael Rash
2e2e7fcc0e
Merge remote-tracking branch 'fjoncourt/save_rc_stanza'
...
Closes issues #81 and #82 thanks to Franck.
2013-05-20 21:57:42 -04:00
Franck Joncourt
98e631451f
Fixed stanza name in log message. We display the stanza we were looking for, not the current one.
2013-05-20 21:58:18 +02:00
Franck Joncourt
209b189f20
Merge remote-tracking branch 'upstream/master' into save_rc_stanza
2013-05-20 11:08:33 +02:00
Michael Rash
fad0ef8690
[test suite] added 'equal keys' files
2013-05-19 16:15:19 -04:00
Franck Joncourt
5e3d9b6e0b
Do not assume two rc sections are separated by an empty line. ( mrash/fwknop#81 )
2013-05-19 22:00:51 +02:00
Michael Rash
dc2ff2119c
[client] finished documenting client command line options via the man page
2013-05-19 15:50:16 -04:00
Michael Rash
72ab0bf5d5
[test suite] added client -f firewall timeout tests
2013-05-19 15:29:20 -04:00
Michael Rash
16f96a3e53
[server] port list memory leak bug fix for OpenBSD/pf and FreeBSD/ipfw firewall interface code found by Coverity
2013-05-19 14:36:32 -04:00
Michael Rash
e31459bb1e
updated client and server man page material
2013-05-19 14:12:58 -04:00
Michael Rash
0cc5c3495e
Merge branch 'master' of github.com:mrash/fwknop
2013-05-19 12:57:36 -04:00
Michael Rash
4e5b96054c
Merge pull request #80 from fjoncourt/fix-gpl2.0
...
[FTBS] Fixed gpl2.0.texi
2013-05-19 09:57:07 -07:00
Franck Joncourt
3e16d6694c
Fixed gpl2.0.texi to make it build.
...
The @appendixsubsec entries are substituted by @appendixsec entries.
2013-05-19 17:14:35 +02:00
Michael Rash
0a279ccbfc
[client] minor --verbose display update to say source port is 'OS assigned' when not otherwise set
2013-05-18 22:49:38 -04:00
Michael Rash
96bbf7e61a
[client] bug fix to separate out --named-config vs. --no-save-args command line args
2013-05-18 22:36:13 -04:00
Michael Rash
15b1382160
[test suite] slurp openssl HMAC from file into single string (it may be binary data)
2013-05-18 16:39:08 -04:00
Michael Rash
61459c65f5
added test suite HMAC != enc key conf files
2013-05-18 12:13:50 -04:00
Michael Rash
23a354fced
[client+server] ensure HMAC key and encryption passphrase are not the same
2013-05-18 12:10:18 -04:00
Michael Rash
731ca0e038
[client] added warning in --verbose mode if -s is used instead of -a or -R
2013-05-18 10:51:49 -04:00
Michael Rash
c02ec41ca0
[test suite] minor bug fix to preserve the init file
2013-05-18 08:34:20 -04:00
Michael Rash
ebe1aec542
continued man page updates in preparation for the 2.5 release
2013-05-17 23:05:58 -04:00
Michael Rash
7cb23c75cc
[server] added check to ensure any existing fwknop jump rule is not duplicated at init
2013-05-17 22:34:26 -04:00
Michael Rash
cabcaf2174
[server] apply same logging policy for --fw-* modes as --foreground mode
2013-05-17 22:28:03 -04:00
Michael Rash
45244114f8
[client] --key-gen bug fix to print keys to stdout
2013-05-17 21:03:16 -04:00
Michael Rash
b6562d3bf3
Merge remote-tracking branch 'fjoncourt/master'
...
Closes issues #76 and #60 .
2013-05-15 21:31:17 -04:00
Michael Rash
2c8469e95e
[client] man page update for GPG key signing material
2013-05-15 21:17:39 -04:00
Michael Rash
a6f9f1d9ec
[client] completed fwknop client man page rc variable documentation
2013-05-15 20:59:29 -04:00
Michael Rash
366255188a
HMAC and PBKDF1 ChangeLog updates
2013-05-14 23:28:45 -04:00
Michael Rash
e1a7011bf3
[docs] fwknop client man page update for HMAC material
2013-05-14 23:22:03 -04:00
Franck Joncourt
95615c90e2
Merge remote-tracking branch 'upstream/master'
2013-05-14 22:15:19 +02:00
Michael Rash
Franck Joncourt
Michael Rash