DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity
1,832 Commits 15 Branches 0 Tags
aaa44656bcfcb705d80768a7b9aa0d45a0e55e21
Commit Graph

584 Commits

Author SHA1 Message Date
Michael Rash
aaa44656bc [server] add support for American Fuzzy Lop (ALF) fuzzing 2014-11-13 20:55:04 -05:00
Michael Rash
1a76d5586f [test suite] extend server receive criteria 2014-11-09 21:36:36 -05:00
Michael Rash
ba337108af [test suite] implement multi-cycle test sequences 2014-11-08 21:44:49 -05:00
Michael Rash
46fd32a6f1 [test suite] minor bug fix to add --no-firewd-check-support option for one test 2014-11-06 20:22:05 -05:00
Michael Rash
4ca718f8da [test suite] allow valgrind/crash search/profile coverage tests to run after --test-limit 2014-11-06 20:21:05 -05:00
Michael Rash
705c507414 [test suite] check for TCP/UDP server string in do_fwknopd_cmd() 2014-11-03 19:57:50 -05:00
Michael Rash
fdc6e0db20 [test suite] bug fix to specify LD_LIBRARY_PATH for configure --enable-udp-server recompile test 2014-11-02 15:30:56 -05:00
Michael Rash
7a98eed759 [test suite] add spa_fuzzing.py and a few minor helper files for FreeBSD/OpenBSD 2014-11-01 20:44:35 -04:00
Michael Rash
4880243902 [test suite] added invalid_firewd_input_chain_* files 2014-10-28 21:56:19 -04:00
Michael Rash
b5fe62bfc7 [test suite] command exec too many args tests 2014-10-26 16:58:13 -04:00
Michael Rash
d2abbd8720 [test suite] more code coverage tests 2014-10-25 22:29:49 -04:00
Michael Rash
17608dd01d [test suite] additional code coverage 2014-10-25 08:42:30 -04:00
Michael Rash
58d47cb385 [test suite] additional code coverage for a few areas 2014-10-24 20:39:40 -04:00
Michael Rash
3040251695 [test suite] default to recompiling fwknop in code coverage profiling mode 2014-10-23 20:03:34 -04:00
Michael Rash
cbb3b0d413 [test suite] add branch coverage stats in code coverage mode 2014-10-23 19:55:30 -04:00
Michael Rash
a2ce50e9e5 [python module] default to HMAC SHA256 when an HMAC key is used but no HMAC mode was specified 2014-10-23 08:45:21 -04:00
Michael Rash
d7be3f43ac [test suite] firewall prefix typo bug fix 2014-10-23 08:40:21 -04:00
Michael Rash
22161af075 [test suite] add ipt_local_nat_fwknopd.conf 2014-10-23 08:39:42 -04:00
Michael Rash
b8f1cf6c6c make sure test suite conf files are included in Makefile.am 2014-10-21 22:49:03 -04:00
Michael Rash
56a6b7dee5 give firewalld its own namespace (can track firewalld changes independently of iptables) 2014-10-21 22:43:21 -04:00
Michael Rash
6945e23bc9 [test suite] UDP server command execution tests, run configure arg recompile tests after gcov profiling stuff 2014-10-20 22:23:46 -04:00
Michael Rash
15f73c7f9e [test suite] added configure args test with UDP server test for fwknopd not linking against libpcap 2014-10-19 22:58:35 -04:00
Michael Rash
0af8faa0b3 Merge branch 'udp_listener' into execvpe 2014-10-13 20:25:14 -04:00
Michael Rash
00b229b834 [test suite] detect firewalld vs. iptables for server rewrite conf tests 2014-10-13 19:54:30 -04:00
Michael Rash
d9fb29318e [test suite] add --exit-parse-config to fwknopd basic tests where possible 2014-10-12 21:29:44 -04:00
Michael Rash
e54b15ceaf [test suite] fix up Rijndael cmd exec test 2014-10-10 08:16:31 -04:00
Michael Rash
2b5088eb76 [test suite] added use terminal test, fix up Rijndael CMD tests 2014-10-09 16:03:05 -04:00
Michael Rash
ed9e1ac236 added setgid() call for command execution along with CMD_EXEC_GROUP access.conf var 2014-10-07 16:18:14 -04:00
Michael Rash
e6d162215f [test suite] added command execution setuid() 'nobody' test 2014-10-06 22:04:20 -04:00
Michael Rash
fedc691e21 [test suite] added generate_core.sh script and --enable-cores-pattern arg for the test suite 2014-10-06 21:10:02 -04:00
Michael Rash
bf3319e0ba [test suite] minor addition of spaces for --last tests 2014-10-03 14:42:01 -04:00
Michael Rash
85ff6b25e1 updated --last-cmd tests to write the previous args first 2014-09-30 21:12:43 -04:00
Michael Rash
e2c2ad141e TCP/UDP server port validation tests 2014-09-28 22:06:06 -04:00
Michael Rash
ad3b230917 minor client cmd line bug fix for UDP server HMAC test 2014-09-28 21:21:25 -04:00
Michael Rash
360905ec56 implement --packet-limit for UDP server mode 2014-09-28 21:19:19 -04:00
Michael Rash
a5dd273189 replay attack detection test for UDP server mode 2014-09-28 20:48:57 -04:00
Michael Rash
aa2492bba2 Added UDP server HMAC cycle tests 2014-09-28 16:51:38 -04:00
Michael Rash
dc9e8da702 started on UDP server tests for Rijndael mode 2014-09-28 14:54:40 -04:00
Michael Rash
50434c5c4c Use the fwknop User-Agent for wget SSL external IP resolutions 
Bug fix to ensure that a User-Agent string can be specified when the
fwknop client uses wget via SSL to resolve the external IP address. This
closes issue #134 on github reported by Barry Allard. The fwknop now
uses the wget '-U' option to specify the User-Agent string with a
default of "Fwknop/<version>". In addition, a new command line argument
"--use-wget-user-agent" to allow the default wget User-Agent string to
apply instead.
 2014-09-27 23:23:12 -04:00
Michael Rash
e04f3fef21 added Ethernet FCS header test with pcap contributed by Bill Stubs 2014-08-21 21:07:52 -04:00
stubbsw
2c0606f2b8 pcap of spa with Ethernet FCS 
Captured with:
tcpdump -i eth0 -l -nn -s 0 -w fcs_spa.pcap udp port 62201

Generated remotely with:
LD_LIBRARY_PATH=./lib/.libs ./client/.libs/fwknop -A tcp/22 -a 127.0.0.2
-D 192.168.18.11 --no-save-args --verbose --verbose --rc-file
./test/conf/fwknoprc_default_hmac_base64_key
 2014-08-21 07:04:55 -04:00
Michael Rash
fa154259d5 [test suite] added FreeBSD-10.0 and OpenBSD-5.5 compatibility tests 2014-07-28 15:52:57 -04:00
Michael Rash
655abf6f0b [test suite] WGET_CMD and RESOLVE_HTTP_ONLY fwknoprc test coverage 2014-07-28 09:46:08 -04:00
Michael Rash
7f830e0239 revert gpg trustdb.gpg update from test suite 2014-07-28 09:37:50 -04:00
Michael Rash
b06447384e [client] have autoconf resolve the absolute path to wget for SSL IP resolution 2014-07-27 22:03:58 -04:00
Michael Rash
4fcd5b317a [server] fix shift operation bug in SOURCE subnet processing spotted by Coverity 2014-07-26 23:43:48 -04:00
Michael Rash
59718f1a36 [client] Updated IP resolution mode -R to use SSL 
External IP resolution via '-R' (or '--resolve-ip-http') is now done via SSL by
default. The IP resolution URL is now 'https://www.cipherdyne.org/cgi-gin/myip',
and a warning is generated in '-R' mode whenever a non-HTTPS URL is specified
(it is safer just to use the default). The fwknop client leverages 'wget' for
this operation since that is cleaner than having fwknop link against an SSL
library.
 2014-07-25 17:42:06 -04:00
Michael Rash
73490209f7 [test suite] add access.conf file path to a few basic tests 2014-07-22 17:36:31 -04:00
Michael Rash
3df08e3c0e [test suite] handle PF on FreeBSD 2014-07-22 17:35:59 -04:00
Michael Rash
eed3418996 [test suite] update wrapper Makefile gcc -> cc 2014-07-22 17:35:19 -04:00