2388 Commits

Author SHA1 Message Date
Michael Rash
eb94f19d8f [client] add --no-home-dir and --no-rc-file, closes #203 2016-04-09 21:17:10 -04:00
Michael Rash
44b040b470 Merge pull request #205 from oneru/master
Adds option to insert new FW rules to top of chain
2016-04-08 22:46:02 -04:00
Jonathan Bennett
9d0e12a313 Adds option to insert new FW rules to top of chain 2016-04-08 21:37:10 -05:00
Michael Rash
17dd9de06f Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-02-26 21:43:42 -05:00
Michael Rash
5c00c422ff Merge branch 'master' of ssh://moria/home/mbr/git/fwknop 2016-02-26 21:42:47 -05:00
Michael Rash
c5c58ee6a5 [server] bug fix for cmd open/close cycle to stop access.conf processing upon first successful match 2016-02-26 20:53:07 -05:00
Michael Rash
342983f94c Merge pull request #202 from oneru/patch-1
Check for non-null pointer value
2016-02-22 22:40:24 -05:00
Jonathan Bennett
8542655fd7 Check for non-null pointer value
If a base64 encoded key is provided twice, add_acc_b64_string() was using malloc to allocate a second key value without first freeing the previous value.  This patch adds null checks, and frees the previous memory usage if needed.
2016-02-22 21:26:23 -06:00
Michael Rash
deed691c4e Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-02-21 20:55:51 -05:00
Michael Rash
44d7f48505 Merge branch 'master' of ssh://moria/home/mbr/git/fwknop 2016-02-21 20:54:52 -05:00
Michael Rash
06e42a3cfa [test suite] first test for include_keys functionality 2016-02-21 11:50:41 -08:00
Michael Rash
55b42a0ebb Merge pull request #201 from zarkdav/master
Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin
2016-02-14 10:24:48 -05:00
Benjamin Ryzman
fac10925d1 Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin 2016-02-14 11:29:41 +01:00
Michael Rash
0980567c4a Merge pull request #199 from alteman/patch-1 2016-02-03 23:50:23 -05:00
alteman
4855202c98 Fix Ubuntu AppArmor regression
Error: 
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf 
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)

Syslog:

[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash
69070666a9 Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-01-30 12:43:58 -05:00
Michael Rash
381e772d22 minor typo fix 2016-01-30 12:43:41 -05:00
Michael Rash
6fc17e1eb4 Merge pull request #197 from oneru/master 2016-01-23 10:03:32 -05:00
Jonathan Bennett
785152a364 Modify server/access.c CUnit test to use the correct function.
add_port_list_ent() only supports one protocol/port entry at a time. The second entry was ignored.
2016-01-22 22:37:36 -06:00
Michael Rash
1fb4524e07 Merge pull request #195 from oneru/mingw_Build_dll 2016-01-18 21:28:56 -05:00
Michael Rash
f0b9b93b6a [libfko] comment out SHA3 hash functions that we're not using 2016-01-18 19:54:04 -05:00
Jonathan Bennett
8d901b10b0 Add yet another Mingw fix, Fixes dll build 2016-01-18 18:39:50 -06:00
Michael Rash
e3c6f87f04 [libfko] minor permissions update 2016-01-17 13:40:07 -08:00
Michael Rash
0a037d3554 [test suite] minor file existence check 2016-01-17 13:06:12 -08:00
Damien Stuart
4fc9d05660 Tweaks for MINGW builds 2016-01-17 13:09:15 -05:00
Damien Stuart
e4fffdf44c Changes to fix the native Windows build. 2016-01-17 10:45:51 -05:00
Michael Rash
e76a7a8233 Merge pull request #190 from oneru/include_keys
Include keys
2016-01-16 21:35:00 -05:00
Damien Stuart
97970dccb9 Added "AM_CONDITIONAL(MINGW, false)" before the host check section of configure.ac 2016-01-16 15:12:39 -05:00
Michael Rash
dbd5ae7486 Merge pull request #193 from oneru/mingw32-fixes 2016-01-15 18:05:34 -05:00
Jonathan Bennett
c0ad75704e Fixes to allow for MINGW32 compilation 2016-01-15 09:42:57 -06:00
Michael Rash
8bb46f9664 [extras] add scan-build wrapper for the CLANG static analyzer 2016-01-12 21:42:42 -05:00
Michael Rash
2451050a4c Merge pull request #192 from oneru/hmac-hardening
Hmac hardening
2016-01-12 08:07:53 -05:00
Jonathan Bennett
17badb2b1d Change hmac functions to use calloc and check for null 2016-01-12 00:14:49 -06:00
Jonathan Bennett
1d10b0e4c2 Add base64 test to fko.h 2016-01-11 23:47:55 -06:00
Michael Rash
5e6530cc23 [test suite] bug fix in lcov coverage generation to pull in _base and _info into the final result 2016-01-11 22:22:02 -05:00
Michael Rash
1ace0ac547 [test suite] minor typo fix 2016-01-11 22:20:35 -05:00
Michael Rash
fb7574e6bf Merge pull request #191 from oneru/cleanups
Merge simplified HMAC implementation.
2016-01-11 22:06:52 -05:00
Jonathan Bennett
abd895c522 Removes unused string from set_nat_access 2016-01-11 00:11:46 -06:00
Jonathan Bennett
108a669730 Update fko_wrapper to reflect SHA3 changing MAX_DIGEST_BLOCK_LEN 2016-01-11 00:04:09 -06:00
Jonathan Bennett
83961750b3 Add ifdef for mingw compilation 2016-01-10 22:48:07 -06:00
Jonathan Bennett
82faacfb8e Add base64 CUnit tests 2016-01-03 23:24:54 -06:00
Michael Rash
29411dea8c Merge branch 'master' of ssh://github.com/mrash/fwknop 2016-01-03 08:44:22 -05:00
Michael Rash
6247fe9e6a Merge remote-tracking branch 'origin/dstuart_netfilter_queue' 2016-01-03 08:31:12 -05:00
Jonathan Bennett
578cf501be Add Doxygen documentation to lib/hmac.c functions 2016-01-02 22:14:03 -06:00
Jonathan Bennett
af7d9e8544 Simplify hmac implementations 2016-01-02 21:59:26 -06:00
Jonathan Bennett
a3e0d1cc1b clean up whitespace problems 2016-01-02 20:18:12 -06:00
Jonathan Bennett
32f35468f6 Add some documentation for the include directives 2016-01-02 17:28:50 -06:00
Jonathan Bennett
330663499f Allows an access stanza to be ignored when a problem is caused in an include_keys stanza 2016-01-02 16:42:18 -06:00
Jonathan Bennett
09b7fc94da Add %include_keys directive 2016-01-02 11:50:22 -06:00
Michael Rash
efe2b207f0 Merge pull request #189 from oneru/doxygen
Convert file headers to Doxygen format
2016-01-01 19:35:54 -05:00