DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity
1,832 Commits 15 Branches 0 Tags
aaa44656bcfcb705d80768a7b9aa0d45a0e55e21
Commit Graph
584 Commits
Author SHA1 Message Date
Michael Rash aaa44656bc [server] add support for American Fuzzy Lop (ALF) fuzzing 2014-11-13 20:55:04 -05:00
Michael Rash 1a76d5586f [test suite] extend server receive criteria 2014-11-09 21:36:36 -05:00
Michael Rash ba337108af [test suite] implement multi-cycle test sequences 2014-11-08 21:44:49 -05:00
Michael Rash 46fd32a6f1 [test suite] minor bug fix to add --no-firewd-check-support option for one test 2014-11-06 20:22:05 -05:00
Michael Rash 4ca718f8da [test suite] allow valgrind/crash search/profile coverage tests to run after --test-limit 2014-11-06 20:21:05 -05:00
Michael Rash 705c507414 [test suite] check for TCP/UDP server string in do_fwknopd_cmd() 2014-11-03 19:57:50 -05:00
Michael Rash fdc6e0db20 [test suite] bug fix to specify LD_LIBRARY_PATH for configure --enable-udp-server recompile test 2014-11-02 15:30:56 -05:00
Michael Rash 7a98eed759 [test suite] add spa_fuzzing.py and a few minor helper files for FreeBSD/OpenBSD 2014-11-01 20:44:35 -04:00
Michael Rash 4880243902 [test suite] added invalid_firewd_input_chain_* files 2014-10-28 21:56:19 -04:00
Michael Rash b5fe62bfc7 [test suite] command exec too many args tests 2014-10-26 16:58:13 -04:00
Michael Rash d2abbd8720 [test suite] more code coverage tests 2014-10-25 22:29:49 -04:00
Michael Rash 17608dd01d [test suite] additional code coverage 2014-10-25 08:42:30 -04:00
Michael Rash 58d47cb385 [test suite] additional code coverage for a few areas 2014-10-24 20:39:40 -04:00
Michael Rash 3040251695 [test suite] default to recompiling fwknop in code coverage profiling mode 2014-10-23 20:03:34 -04:00
Michael Rash cbb3b0d413 [test suite] add branch coverage stats in code coverage mode 2014-10-23 19:55:30 -04:00
Michael Rash a2ce50e9e5 [python module] default to HMAC SHA256 when an HMAC key is used but no HMAC mode was specified 2014-10-23 08:45:21 -04:00
Michael Rash d7be3f43ac [test suite] firewall prefix typo bug fix 2014-10-23 08:40:21 -04:00
Michael Rash 22161af075 [test suite] add ipt_local_nat_fwknopd.conf 2014-10-23 08:39:42 -04:00
Michael Rash b8f1cf6c6c make sure test suite conf files are included in Makefile.am 2014-10-21 22:49:03 -04:00
Michael Rash 56a6b7dee5 give firewalld its own namespace (can track firewalld changes independently of iptables) 2014-10-21 22:43:21 -04:00
Michael Rash 6945e23bc9 [test suite] UDP server command execution tests, run configure arg recompile tests after gcov profiling stuff 2014-10-20 22:23:46 -04:00
Michael Rash 15f73c7f9e [test suite] added configure args test with UDP server test for fwknopd not linking against libpcap 2014-10-19 22:58:35 -04:00
Michael Rash 0af8faa0b3 Merge branch 'udp_listener' into execvpe 2014-10-13 20:25:14 -04:00
Michael Rash 00b229b834 [test suite] detect firewalld vs. iptables for server rewrite conf tests 2014-10-13 19:54:30 -04:00
Michael Rash d9fb29318e [test suite] add --exit-parse-config to fwknopd basic tests where possible 2014-10-12 21:29:44 -04:00
Michael Rash e54b15ceaf [test suite] fix up Rijndael cmd exec test 2014-10-10 08:16:31 -04:00
Michael Rash 2b5088eb76 [test suite] added use terminal test, fix up Rijndael CMD tests 2014-10-09 16:03:05 -04:00
Michael Rash ed9e1ac236 added setgid() call for command execution along with CMD_EXEC_GROUP access.conf var 2014-10-07 16:18:14 -04:00
Michael Rash e6d162215f [test suite] added command execution setuid() 'nobody' test 2014-10-06 22:04:20 -04:00
Michael Rash fedc691e21 [test suite] added generate_core.sh script and --enable-cores-pattern arg for the test suite 2014-10-06 21:10:02 -04:00
Michael Rash bf3319e0ba [test suite] minor addition of spaces for --last tests 2014-10-03 14:42:01 -04:00
Michael Rash 85ff6b25e1 updated --last-cmd tests to write the previous args first 2014-09-30 21:12:43 -04:00
Michael Rash e2c2ad141e TCP/UDP server port validation tests 2014-09-28 22:06:06 -04:00
Michael Rash ad3b230917 minor client cmd line bug fix for UDP server HMAC test 2014-09-28 21:21:25 -04:00
Michael Rash 360905ec56 implement --packet-limit for UDP server mode 2014-09-28 21:19:19 -04:00
Michael Rash a5dd273189 replay attack detection test for UDP server mode 2014-09-28 20:48:57 -04:00
Michael Rash aa2492bba2 Added UDP server HMAC cycle tests 2014-09-28 16:51:38 -04:00
Michael Rash dc9e8da702 started on UDP server tests for Rijndael mode 2014-09-28 14:54:40 -04:00
Michael Rash 50434c5c4c Use the fwknop User-Agent for wget SSL external IP resolutions 
Bug fix to ensure that a User-Agent string can be specified when the
fwknop client uses wget via SSL to resolve the external IP address. This
closes issue #134 on github reported by Barry Allard. The fwknop now
uses the wget '-U' option to specify the User-Agent string with a
default of "Fwknop/<version>". In addition, a new command line argument
"--use-wget-user-agent" to allow the default wget User-Agent string to
apply instead.
 2014-09-27 23:23:12 -04:00
Michael Rash e04f3fef21 added Ethernet FCS header test with pcap contributed by Bill Stubs 2014-08-21 21:07:52 -04:00
stubbsw 2c0606f2b8 pcap of spa with Ethernet FCS 
Captured with:
tcpdump -i eth0 -l -nn -s 0 -w fcs_spa.pcap udp port 62201

Generated remotely with:
LD_LIBRARY_PATH=./lib/.libs ./client/.libs/fwknop -A tcp/22 -a 127.0.0.2
-D 192.168.18.11 --no-save-args --verbose --verbose --rc-file
./test/conf/fwknoprc_default_hmac_base64_key
 2014-08-21 07:04:55 -04:00
Michael Rash fa154259d5 [test suite] added FreeBSD-10.0 and OpenBSD-5.5 compatibility tests 2014-07-28 15:52:57 -04:00
Michael Rash 655abf6f0b [test suite] WGET_CMD and RESOLVE_HTTP_ONLY fwknoprc test coverage 2014-07-28 09:46:08 -04:00
Michael Rash 7f830e0239 revert gpg trustdb.gpg update from test suite 2014-07-28 09:37:50 -04:00
Michael Rash b06447384e [client] have autoconf resolve the absolute path to wget for SSL IP resolution 2014-07-27 22:03:58 -04:00
Michael Rash 4fcd5b317a [server] fix shift operation bug in SOURCE subnet processing spotted by Coverity 2014-07-26 23:43:48 -04:00
Michael Rash 59718f1a36 [client] Updated IP resolution mode -R to use SSL 
External IP resolution via '-R' (or '--resolve-ip-http') is now done via SSL by
default. The IP resolution URL is now 'https://www.cipherdyne.org/cgi-gin/myip',
and a warning is generated in '-R' mode whenever a non-HTTPS URL is specified
(it is safer just to use the default). The fwknop client leverages 'wget' for
this operation since that is cleaner than having fwknop link against an SSL
library.
 2014-07-25 17:42:06 -04:00
Michael Rash 73490209f7 [test suite] add access.conf file path to a few basic tests 2014-07-22 17:36:31 -04:00
Michael Rash 3df08e3c0e [test suite] handle PF on FreeBSD 2014-07-22 17:35:59 -04:00
Michael Rash eed3418996 [test suite] update wrapper Makefile gcc -> cc 2014-07-22 17:35:19 -04:00