Michael Rash
e31459bb1e
updated client and server man page material
2013-05-19 14:12:58 -04:00
Michael Rash
0cc5c3495e
Merge branch 'master' of github.com:mrash/fwknop
2013-05-19 12:57:36 -04:00
Michael Rash
4e5b96054c
Merge pull request #80 from fjoncourt/fix-gpl2.0
...
[FTBS] Fixed gpl2.0.texi
2013-05-19 09:57:07 -07:00
Franck Joncourt
3e16d6694c
Fixed gpl2.0.texi to make it build.
...
The @appendixsubsec entries are substituted by @appendixsec entries.
2013-05-19 17:14:35 +02:00
Franck Joncourt
6c59c9ade8
Merge remote-tracking branch 'upstream/master'
2013-05-19 15:34:20 +02:00
Michael Rash
0a279ccbfc
[client] minor --verbose display update to say source port is 'OS assigned' when not otherwise set
2013-05-18 22:49:38 -04:00
Michael Rash
96bbf7e61a
[client] bug fix to separate out --named-config vs. --no-save-args command line args
2013-05-18 22:36:13 -04:00
Michael Rash
15b1382160
[test suite] slurp openssl HMAC from file into single string (it may be binary data)
2013-05-18 16:39:08 -04:00
Michael Rash
61459c65f5
added test suite HMAC != enc key conf files
2013-05-18 12:13:50 -04:00
Michael Rash
23a354fced
[client+server] ensure HMAC key and encryption passphrase are not the same
2013-05-18 12:10:18 -04:00
Michael Rash
731ca0e038
[client] added warning in --verbose mode if -s is used instead of -a or -R
2013-05-18 10:51:49 -04:00
Michael Rash
c02ec41ca0
[test suite] minor bug fix to preserve the init file
2013-05-18 08:34:20 -04:00
Franck Joncourt
cee5807deb
First draft to be able to use stdin as an input for submitting fwknop key.
...
mrash/fwknop#74
2013-05-18 10:54:44 +02:00
Michael Rash
ebe1aec542
continued man page updates in preparation for the 2.5 release
2013-05-17 23:05:58 -04:00
Michael Rash
7cb23c75cc
[server] added check to ensure any existing fwknop jump rule is not duplicated at init
2013-05-17 22:34:26 -04:00
Michael Rash
cabcaf2174
[server] apply same logging policy for --fw-* modes as --foreground mode
2013-05-17 22:28:03 -04:00
Michael Rash
45244114f8
[client] --key-gen bug fix to print keys to stdout
2013-05-17 21:03:16 -04:00
Michael Rash
b6562d3bf3
Merge remote-tracking branch 'fjoncourt/master'
...
Closes issues #76 and #60 .
2013-05-15 21:31:17 -04:00
Michael Rash
2c8469e95e
[client] man page update for GPG key signing material
2013-05-15 21:17:39 -04:00
Michael Rash
a6f9f1d9ec
[client] completed fwknop client man page rc variable documentation
2013-05-15 20:59:29 -04:00
Michael Rash
366255188a
HMAC and PBKDF1 ChangeLog updates
2013-05-14 23:28:45 -04:00
Michael Rash
e1a7011bf3
[docs] fwknop client man page update for HMAC material
2013-05-14 23:22:03 -04:00
Franck Joncourt
95615c90e2
Merge remote-tracking branch 'upstream/master'
2013-05-14 22:15:19 +02:00
Franck Joncourt
bb90a8bf75
Fixed gcc warnings on openbsd. - mrash/fwknop#60
2013-05-14 22:08:44 +02:00
Michael Rash
e73d13e140
minor write_test_file() path bug fix
2013-05-13 23:11:33 -04:00
Michael Rash
4e5fb77dd0
Merge remote-tracking branch 'fjoncourt/master'
...
Merged update from Franck - closes issue #71 .
2013-05-13 23:10:26 -04:00
Michael Rash
fb80575209
[server] minor memory leak bug fix during SPA digest calculation found by Coverity
2013-05-13 20:52:14 -04:00
Michael Rash
6a2bc3db27
[server] minor memory leak bug fix during access.conf parsing found by Coverity
2013-05-13 20:48:23 -04:00
Michael Rash
8e31f8feb0
[server] varargs cleanup bug fix found by Coverity
2013-05-13 20:42:07 -04:00
Michael Rash
d60870740d
[server] fix pointer NULL check after strdup() - found by Coverity
2013-05-13 20:41:25 -04:00
Michael Rash
0c3da4bee4
[server] minor cosmetic (unnecessary NULL checks and one un-triggerable memory leak) found by Coverity
2013-05-13 20:40:29 -04:00
Michael Rash
cdd0a5f3f3
[server] minor memory leak bug fix during access.conf parsing found by Coverity
2013-05-13 20:38:39 -04:00
Franck Joncourt
9dbb62ae1e
Merge remote-tracking branch 'upstream/master'
2013-05-13 16:30:27 +02:00
Michael Rash
48a3f7a179
added m4/gpgme.m4 file
2013-05-12 23:48:44 -04:00
Michael Rash
c83bc15c5e
bumped VERSION file to fwknop-2.5-pre1
2013-05-12 22:42:13 -04:00
Michael Rash
1144284913
Merge branch 'master' into gpgme_autoconf_macro
2013-05-12 22:31:18 -04:00
Michael Rash
3246c3c6b0
[test suite] added hmac_get_key_access.conf file
2013-05-12 22:30:28 -04:00
Michael Rash
c6b2c0def4
Added gpgme autoconf m4 macro to fix an undefined AM_PATH_GPGME error
...
For systems that don't have libgpgme installed, the addition of the m4/gpgme.m4
file fixes the following error when running the autogen.sh script:
configure.ac:313: error: possibly undefined macro: AC_DEFINE
If this token and others are legitimate, please use m4_pattern_allow.
See the Autoconf documentation.
configure.ac:326: error: possibly undefined macro: AM_PATH_GPGME
configure.ac:329: error: possibly undefined macro: AC_MSG_FAILURE
2013-05-12 22:25:16 -04:00
Michael Rash
09f073d393
Added blurb on Coverity to the ChangeLog
2013-05-12 21:04:25 -04:00
Michael Rash
838782f198
[test suite] added fko_destroy() calls to fko-wrapper
2013-05-12 20:57:19 -04:00
Michael Rash
1caf6035d9
[server] fixed potential double-free condition found by Coverity
...
Within the access loop always call fko_destroy() right up front whenever
ctx != NULL to ensure a clean slate each time through the loop regardless of
what state may have been reached the previous time through the loop.
2013-05-12 20:54:44 -04:00
Michael Rash
c555a35489
[client] set ctx=NULL after fko_destroy() calls
2013-05-12 20:54:04 -04:00
Michael Rash
d85c2e74ce
[libfko] set ctx=NULL after fko_destroy(), add NULL check for encrypted msg pointer in fko_new_with_data()
2013-05-12 20:53:22 -04:00
Michael Rash
7b3c854a02
[libfko] added context initialized check to fko_decrypt_spa_data()
2013-05-12 20:49:00 -04:00
Michael Rash
6d0f970b34
[libfko] bug fix to apply ctx initialization check before attempting to use ctx->message_type in fko_set_spa_client_timeout()
2013-05-12 15:02:31 -04:00
Michael Rash
38395b04c6
[test suite] add -x to run_valgrind.sh fko-wrapper script
2013-05-12 14:43:19 -04:00
Michael Rash
3302dd4220
[test suite] added -g to fko_wrapper Makefile for debugging symbols
2013-05-12 14:42:35 -04:00
Franck Joncourt
31d94d50b1
Added tests to validate the encryption mode for the client.
...
Renamed the CBC legacy VI encryption mode by legacy as mentionned in the man page.
2013-05-12 17:35:19 +02:00
Franck Joncourt
160c21d6b6
Rewrite enc_mode_inttostr() and enc_mode_strtoint().
...
Make sure both functions works the same way and refer to the same
encryption mode string.
Updated the fwknop usage message to display the encryption mode.
2013-05-12 16:52:52 +02:00
Michael Rash
a8410d8f2a
[test suite] allow valgrind coverage test to run after --test-limit
2013-05-11 13:28:55 -04:00