2507 Commits

Author SHA1 Message Date
Jonathan Bennett
a554f0d685 Disable ipv6 dns resolution in the client 2016-04-24 21:51:13 -05:00
Jonathan Bennett
c5043e0a3e When --fw-flush is specified, set enable_fw to true 2016-04-24 00:10:35 -05:00
Michael Rash
4374948ca6 Merge pull request #212 from oneru/master
Assorted test suite related fixes
2016-04-19 20:14:28 -04:00
Jonathan Bennett
94b33e0ba1 Increases a delay value in the test suite
The test suite was consistently showing the "exit upon down interface" as failing.
The 1 second delay was not enough time for my machine to completely close fwknopd, resulting in the false positive.
2016-04-19 14:48:03 -05:00
Jonathan Bennett
aa0d926376 Removes non-ascii characters from sha3.c
Opted to simply remove the umlat from the author's name, and spelled out the greek letters that were in the comments.
2016-04-19 14:14:51 -05:00
Michael Rash
9d92f65a03 [test suite] add test for X-Fowarded-For header 2016-04-16 07:40:24 -07:00
Michael Rash
84d4128812 [test suite] exclude test/fko-wrapper/* from code coverage stats (we want coverage for the client/server/lib code) 2016-04-15 17:37:16 -07:00
Michael Rash
0637b6fbee [perl] allow for SHA3 block length 2016-04-12 19:24:30 -07:00
Michael Rash
f648fca6a2 [test suite] apply loopback interface to invalid pcap filter test 2016-04-11 20:47:29 -04:00
Michael Rash
6449ce2eb3 Merge pull request #210 from oneru/master
Adds more Doxygen documentation in preparation for 2.6.9
2016-04-11 19:38:43 -04:00
Jonathan Bennett
23e4fd6a2b Adds more Doxygen documentation in preparation for 2.6.9 2016-04-11 11:28:40 -05:00
Michael Rash
713e127270 Merge pull request #209 from oneru/master
Corrects a problem where the NAT Access string was incorrectly set
2016-04-10 20:40:19 -04:00
Jonathan Bennett
e357b04ff5 Corrects a problem where the NAT Access string was incorrectly set in some cases 2016-04-10 17:06:38 -05:00
Michael Rash
6436235baf client man page update 2016-04-10 16:01:59 -04:00
Michael Rash
5e7871c9c6 Merge pull request #208 from oneru/master 2016-04-10 13:30:46 -04:00
Jonathan Bennett
d939deb811 Spelling corrections, found using the codespell tool. 2016-04-10 12:03:59 -05:00
Michael Rash
d5c2989061 [test suite] restrict -f server instance to loopback interface 2016-04-10 11:15:14 -04:00
Michael Rash
03911aecd3 Merge pull request #206 from oneru/master
Adds configuration option for X-Forwarded-For
2016-04-09 21:19:08 -04:00
Michael Rash
eb94f19d8f [client] add --no-home-dir and --no-rc-file, closes #203 2016-04-09 21:17:10 -04:00
Jonathan Bennett
09177554bf Adds configuration option for X-Forwarded-For 2016-04-09 11:03:16 -05:00
Michael Rash
44b040b470 Merge pull request #205 from oneru/master
Adds option to insert new FW rules to top of chain
2016-04-08 22:46:02 -04:00
Jonathan Bennett
9d0e12a313 Adds option to insert new FW rules to top of chain 2016-04-08 21:37:10 -05:00
Michael Rash
17dd9de06f Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-02-26 21:43:42 -05:00
Michael Rash
5c00c422ff Merge branch 'master' of ssh://moria/home/mbr/git/fwknop 2016-02-26 21:42:47 -05:00
Michael Rash
c5c58ee6a5 [server] bug fix for cmd open/close cycle to stop access.conf processing upon first successful match 2016-02-26 20:53:07 -05:00
Michael Rash
342983f94c Merge pull request #202 from oneru/patch-1
Check for non-null pointer value
2016-02-22 22:40:24 -05:00
Jonathan Bennett
8542655fd7 Check for non-null pointer value
If a base64 encoded key is provided twice, add_acc_b64_string() was using malloc to allocate a second key value without first freeing the previous value.  This patch adds null checks, and frees the previous memory usage if needed.
2016-02-22 21:26:23 -06:00
Michael Rash
deed691c4e Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-02-21 20:55:51 -05:00
Michael Rash
44d7f48505 Merge branch 'master' of ssh://moria/home/mbr/git/fwknop 2016-02-21 20:54:52 -05:00
Michael Rash
06e42a3cfa [test suite] first test for include_keys functionality 2016-02-21 11:50:41 -08:00
Michael Rash
55b42a0ebb Merge pull request #201 from zarkdav/master
Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin
2016-02-14 10:24:48 -05:00
Benjamin Ryzman
fac10925d1 Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin 2016-02-14 11:29:41 +01:00
Michael Rash
0980567c4a Merge pull request #199 from alteman/patch-1 2016-02-03 23:50:23 -05:00
alteman
4855202c98 Fix Ubuntu AppArmor regression
Error: 
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf 
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)

Syslog:

[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash
69070666a9 Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-01-30 12:43:58 -05:00
Michael Rash
381e772d22 minor typo fix 2016-01-30 12:43:41 -05:00
Michael Rash
6fc17e1eb4 Merge pull request #197 from oneru/master 2016-01-23 10:03:32 -05:00
Jonathan Bennett
785152a364 Modify server/access.c CUnit test to use the correct function.
add_port_list_ent() only supports one protocol/port entry at a time. The second entry was ignored.
2016-01-22 22:37:36 -06:00
Michael Rash
1fb4524e07 Merge pull request #195 from oneru/mingw_Build_dll 2016-01-18 21:28:56 -05:00
Michael Rash
f0b9b93b6a [libfko] comment out SHA3 hash functions that we're not using 2016-01-18 19:54:04 -05:00
Jonathan Bennett
8d901b10b0 Add yet another Mingw fix, Fixes dll build 2016-01-18 18:39:50 -06:00
Michael Rash
e3c6f87f04 [libfko] minor permissions update 2016-01-17 13:40:07 -08:00
Michael Rash
0a037d3554 [test suite] minor file existence check 2016-01-17 13:06:12 -08:00
Damien Stuart
4fc9d05660 Tweaks for MINGW builds 2016-01-17 13:09:15 -05:00
Damien Stuart
e4fffdf44c Changes to fix the native Windows build. 2016-01-17 10:45:51 -05:00
Michael Rash
e76a7a8233 Merge pull request #190 from oneru/include_keys
Include keys
2016-01-16 21:35:00 -05:00
Damien Stuart
97970dccb9 Added "AM_CONDITIONAL(MINGW, false)" before the host check section of configure.ac 2016-01-16 15:12:39 -05:00
Michael Rash
dbd5ae7486 Merge pull request #193 from oneru/mingw32-fixes 2016-01-15 18:05:34 -05:00
Jonathan Bennett
c0ad75704e Fixes to allow for MINGW32 compilation 2016-01-15 09:42:57 -06:00
Michael Rash
8bb46f9664 [extras] add scan-build wrapper for the CLANG static analyzer 2016-01-12 21:42:42 -05:00