2414 Commits

Author SHA1 Message Date
Michael Rash
cb6dcc3d0c Merge pull request #214 from oneru/cunit-in-test-suite
Cunit in test suite
2016-05-01 22:08:40 -04:00
Jonathan Bennett
da4e713ac3 Adds the c_unit tests to the perl test suite 2016-05-01 15:28:42 -05:00
Jonathan Bennett
a7905f56cb Modifies c_unit compilation to avoid static linking. 2016-05-01 15:16:56 -05:00
Michael Rash
163176be7c [test suite] increase client timeout args for '-f client timeout' test (@oneru) 2016-05-01 10:35:03 -04:00
Michael Rash
d462b025c3 [test suite] fix sudo tests (localhost -> ALL) from @oneru 2016-04-30 09:36:36 -04:00
Michael Rash
e7f039699c [test suite] fix 'FORCE_SNAT and 0.0.0.0' test (@oneru) 2016-04-30 09:33:29 -04:00
Michael Rash
f42aeb39dc [server] make sure exp buffer does not contain closing '*' chars (from @oneru) 2016-04-30 09:27:07 -04:00
Jonathan Bennett
a554f0d685 Disable ipv6 dns resolution in the client 2016-04-24 21:51:13 -05:00
Jonathan Bennett
c5043e0a3e When --fw-flush is specified, set enable_fw to true 2016-04-24 00:10:35 -05:00
Michael Rash
4374948ca6 Merge pull request #212 from oneru/master
Assorted test suite related fixes
2016-04-19 20:14:28 -04:00
Jonathan Bennett
94b33e0ba1 Increases a delay value in the test suite
The test suite was consistently showing the "exit upon down interface" as failing.
The 1 second delay was not enough time for my machine to completely close fwknopd, resulting in the false positive.
2016-04-19 14:48:03 -05:00
Jonathan Bennett
aa0d926376 Removes non-ascii characters from sha3.c
Opted to simply remove the umlat from the author's name, and spelled out the greek letters that were in the comments.
2016-04-19 14:14:51 -05:00
Michael Rash
9d92f65a03 [test suite] add test for X-Fowarded-For header 2016-04-16 07:40:24 -07:00
Michael Rash
84d4128812 [test suite] exclude test/fko-wrapper/* from code coverage stats (we want coverage for the client/server/lib code) 2016-04-15 17:37:16 -07:00
Michael Rash
0637b6fbee [perl] allow for SHA3 block length 2016-04-12 19:24:30 -07:00
Michael Rash
f648fca6a2 [test suite] apply loopback interface to invalid pcap filter test 2016-04-11 20:47:29 -04:00
Michael Rash
6449ce2eb3 Merge pull request #210 from oneru/master
Adds more Doxygen documentation in preparation for 2.6.9
2016-04-11 19:38:43 -04:00
Jonathan Bennett
23e4fd6a2b Adds more Doxygen documentation in preparation for 2.6.9 2016-04-11 11:28:40 -05:00
Michael Rash
713e127270 Merge pull request #209 from oneru/master
Corrects a problem where the NAT Access string was incorrectly set
2016-04-10 20:40:19 -04:00
Jonathan Bennett
e357b04ff5 Corrects a problem where the NAT Access string was incorrectly set in some cases 2016-04-10 17:06:38 -05:00
Michael Rash
6436235baf client man page update 2016-04-10 16:01:59 -04:00
Michael Rash
5e7871c9c6 Merge pull request #208 from oneru/master 2016-04-10 13:30:46 -04:00
Jonathan Bennett
d939deb811 Spelling corrections, found using the codespell tool. 2016-04-10 12:03:59 -05:00
Michael Rash
d5c2989061 [test suite] restrict -f server instance to loopback interface 2016-04-10 11:15:14 -04:00
Michael Rash
03911aecd3 Merge pull request #206 from oneru/master
Adds configuration option for X-Forwarded-For
2016-04-09 21:19:08 -04:00
Michael Rash
eb94f19d8f [client] add --no-home-dir and --no-rc-file, closes #203 2016-04-09 21:17:10 -04:00
Jonathan Bennett
09177554bf Adds configuration option for X-Forwarded-For 2016-04-09 11:03:16 -05:00
Michael Rash
44b040b470 Merge pull request #205 from oneru/master
Adds option to insert new FW rules to top of chain
2016-04-08 22:46:02 -04:00
Jonathan Bennett
9d0e12a313 Adds option to insert new FW rules to top of chain 2016-04-08 21:37:10 -05:00
Michael Rash
17dd9de06f Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-02-26 21:43:42 -05:00
Michael Rash
5c00c422ff Merge branch 'master' of ssh://moria/home/mbr/git/fwknop 2016-02-26 21:42:47 -05:00
Michael Rash
c5c58ee6a5 [server] bug fix for cmd open/close cycle to stop access.conf processing upon first successful match 2016-02-26 20:53:07 -05:00
Michael Rash
342983f94c Merge pull request #202 from oneru/patch-1
Check for non-null pointer value
2016-02-22 22:40:24 -05:00
Jonathan Bennett
8542655fd7 Check for non-null pointer value
If a base64 encoded key is provided twice, add_acc_b64_string() was using malloc to allocate a second key value without first freeing the previous value.  This patch adds null checks, and frees the previous memory usage if needed.
2016-02-22 21:26:23 -06:00
Michael Rash
deed691c4e Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-02-21 20:55:51 -05:00
Michael Rash
44d7f48505 Merge branch 'master' of ssh://moria/home/mbr/git/fwknop 2016-02-21 20:54:52 -05:00
Michael Rash
06e42a3cfa [test suite] first test for include_keys functionality 2016-02-21 11:50:41 -08:00
Michael Rash
55b42a0ebb Merge pull request #201 from zarkdav/master
Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin
2016-02-14 10:24:48 -05:00
Benjamin Ryzman
fac10925d1 Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin 2016-02-14 11:29:41 +01:00
Michael Rash
0980567c4a Merge pull request #199 from alteman/patch-1 2016-02-03 23:50:23 -05:00
alteman
4855202c98 Fix Ubuntu AppArmor regression
Error: 
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf 
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)

Syslog:

[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash
69070666a9 Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-01-30 12:43:58 -05:00
Michael Rash
381e772d22 minor typo fix 2016-01-30 12:43:41 -05:00
Michael Rash
6fc17e1eb4 Merge pull request #197 from oneru/master 2016-01-23 10:03:32 -05:00
Jonathan Bennett
785152a364 Modify server/access.c CUnit test to use the correct function.
add_port_list_ent() only supports one protocol/port entry at a time. The second entry was ignored.
2016-01-22 22:37:36 -06:00
Michael Rash
1fb4524e07 Merge pull request #195 from oneru/mingw_Build_dll 2016-01-18 21:28:56 -05:00
Michael Rash
f0b9b93b6a [libfko] comment out SHA3 hash functions that we're not using 2016-01-18 19:54:04 -05:00
Jonathan Bennett
8d901b10b0 Add yet another Mingw fix, Fixes dll build 2016-01-18 18:39:50 -06:00
Michael Rash
e3c6f87f04 [libfko] minor permissions update 2016-01-17 13:40:07 -08:00
Michael Rash
0a037d3554 [test suite] minor file existence check 2016-01-17 13:06:12 -08:00