Michael Rash
eb94f19d8f
[client] add --no-home-dir and --no-rc-file, closes #203
2016-04-09 21:17:10 -04:00
Michael Rash
44b040b470
Merge pull request #205 from oneru/master
...
Adds option to insert new FW rules to top of chain
2016-04-08 22:46:02 -04:00
Jonathan Bennett
9d0e12a313
Adds option to insert new FW rules to top of chain
2016-04-08 21:37:10 -05:00
Michael Rash
17dd9de06f
Merge branch 'master' of ssh://github.com/mrash/fwknop
2016-02-26 21:43:42 -05:00
Michael Rash
5c00c422ff
Merge branch 'master' of ssh://moria/home/mbr/git/fwknop
2016-02-26 21:42:47 -05:00
Michael Rash
c5c58ee6a5
[server] bug fix for cmd open/close cycle to stop access.conf processing upon first successful match
2016-02-26 20:53:07 -05:00
Michael Rash
342983f94c
Merge pull request #202 from oneru/patch-1
...
Check for non-null pointer value
2016-02-22 22:40:24 -05:00
Jonathan Bennett
8542655fd7
Check for non-null pointer value
...
If a base64 encoded key is provided twice, add_acc_b64_string() was using malloc to allocate a second key value without first freeing the previous value. This patch adds null checks, and frees the previous memory usage if needed.
2016-02-22 21:26:23 -06:00
Michael Rash
deed691c4e
Merge branch 'master' of ssh://github.com/mrash/fwknop
2016-02-21 20:55:51 -05:00
Michael Rash
44d7f48505
Merge branch 'master' of ssh://moria/home/mbr/git/fwknop
2016-02-21 20:54:52 -05:00
Michael Rash
06e42a3cfa
[test suite] first test for include_keys functionality
2016-02-21 11:50:41 -08:00
Michael Rash
55b42a0ebb
Merge pull request #201 from zarkdav/master
...
Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin
2016-02-14 10:24:48 -05:00
Benjamin Ryzman
fac10925d1
Fix client/Makefile.am to work with libtool 2.4.6 from Cygwin
2016-02-14 11:29:41 +01:00
Michael Rash
0980567c4a
Merge pull request #199 from alteman/patch-1
2016-02-03 23:50:23 -05:00
alteman
4855202c98
Fix Ubuntu AppArmor regression
...
Error:
$ sudo fwknopd -f -c /etc/fwknop/fwknopd.conf
Starting fwknopd
Added jump rule from chain: INPUT to chain: FWKNOP_INPUT
iptables 'comment' match is available
Sniffing interface: ppp0
[*] pcap_open_live() error: ppp0: You don't have permission to capture on that device (socket: Permission denied)
Syslog:
[...] kernel: [...] type=1400 audit([...]): apparmor="DENIED" operation="create" profile="/usr/sbin/fwknopd" pid=[...] comm="fwknopd" family="packet" sock_type="dgram" protocol=768
2016-02-04 00:55:39 +03:00
Michael Rash
69070666a9
Merge branch 'master' of ssh://github.com/mrash/fwknop
2016-01-30 12:43:58 -05:00
Michael Rash
381e772d22
minor typo fix
2016-01-30 12:43:41 -05:00
Michael Rash
6fc17e1eb4
Merge pull request #197 from oneru/master
2016-01-23 10:03:32 -05:00
Jonathan Bennett
785152a364
Modify server/access.c CUnit test to use the correct function.
...
add_port_list_ent() only supports one protocol/port entry at a time. The second entry was ignored.
2016-01-22 22:37:36 -06:00
Michael Rash
1fb4524e07
Merge pull request #195 from oneru/mingw_Build_dll
2016-01-18 21:28:56 -05:00
Michael Rash
f0b9b93b6a
[libfko] comment out SHA3 hash functions that we're not using
2016-01-18 19:54:04 -05:00
Jonathan Bennett
8d901b10b0
Add yet another Mingw fix, Fixes dll build
2016-01-18 18:39:50 -06:00
Michael Rash
e3c6f87f04
[libfko] minor permissions update
2016-01-17 13:40:07 -08:00
Michael Rash
0a037d3554
[test suite] minor file existence check
2016-01-17 13:06:12 -08:00
Damien Stuart
4fc9d05660
Tweaks for MINGW builds
2016-01-17 13:09:15 -05:00
Damien Stuart
e4fffdf44c
Changes to fix the native Windows build.
2016-01-17 10:45:51 -05:00
Michael Rash
e76a7a8233
Merge pull request #190 from oneru/include_keys
...
Include keys
2016-01-16 21:35:00 -05:00
Damien Stuart
97970dccb9
Added "AM_CONDITIONAL(MINGW, false)" before the host check section of configure.ac
2016-01-16 15:12:39 -05:00
Michael Rash
dbd5ae7486
Merge pull request #193 from oneru/mingw32-fixes
2016-01-15 18:05:34 -05:00
Jonathan Bennett
c0ad75704e
Fixes to allow for MINGW32 compilation
2016-01-15 09:42:57 -06:00
Michael Rash
8bb46f9664
[extras] add scan-build wrapper for the CLANG static analyzer
2016-01-12 21:42:42 -05:00
Michael Rash
2451050a4c
Merge pull request #192 from oneru/hmac-hardening
...
Hmac hardening
2016-01-12 08:07:53 -05:00
Jonathan Bennett
17badb2b1d
Change hmac functions to use calloc and check for null
2016-01-12 00:14:49 -06:00
Jonathan Bennett
1d10b0e4c2
Add base64 test to fko.h
2016-01-11 23:47:55 -06:00
Michael Rash
5e6530cc23
[test suite] bug fix in lcov coverage generation to pull in _base and _info into the final result
2016-01-11 22:22:02 -05:00
Michael Rash
1ace0ac547
[test suite] minor typo fix
2016-01-11 22:20:35 -05:00
Michael Rash
fb7574e6bf
Merge pull request #191 from oneru/cleanups
...
Merge simplified HMAC implementation.
2016-01-11 22:06:52 -05:00
Jonathan Bennett
abd895c522
Removes unused string from set_nat_access
2016-01-11 00:11:46 -06:00
Jonathan Bennett
108a669730
Update fko_wrapper to reflect SHA3 changing MAX_DIGEST_BLOCK_LEN
2016-01-11 00:04:09 -06:00
Jonathan Bennett
83961750b3
Add ifdef for mingw compilation
2016-01-10 22:48:07 -06:00
Jonathan Bennett
82faacfb8e
Add base64 CUnit tests
2016-01-03 23:24:54 -06:00
Michael Rash
29411dea8c
Merge branch 'master' of ssh://github.com/mrash/fwknop
2016-01-03 08:44:22 -05:00
Michael Rash
6247fe9e6a
Merge remote-tracking branch 'origin/dstuart_netfilter_queue'
2016-01-03 08:31:12 -05:00
Jonathan Bennett
578cf501be
Add Doxygen documentation to lib/hmac.c functions
2016-01-02 22:14:03 -06:00
Jonathan Bennett
af7d9e8544
Simplify hmac implementations
2016-01-02 21:59:26 -06:00
Jonathan Bennett
a3e0d1cc1b
clean up whitespace problems
2016-01-02 20:18:12 -06:00
Jonathan Bennett
32f35468f6
Add some documentation for the include directives
2016-01-02 17:28:50 -06:00
Jonathan Bennett
330663499f
Allows an access stanza to be ignored when a problem is caused in an include_keys stanza
2016-01-02 16:42:18 -06:00
Jonathan Bennett
09b7fc94da
Add %include_keys directive
2016-01-02 11:50:22 -06:00
Michael Rash
efe2b207f0
Merge pull request #189 from oneru/doxygen
...
Convert file headers to Doxygen format
2016-01-01 19:35:54 -05:00