1270 Commits

Author SHA1 Message Date
Michael Rash
e31459bb1e updated client and server man page material 2013-05-19 14:12:58 -04:00
Michael Rash
0cc5c3495e Merge branch 'master' of github.com:mrash/fwknop 2013-05-19 12:57:36 -04:00
Michael Rash
4e5b96054c Merge pull request #80 from fjoncourt/fix-gpl2.0
[FTBS] Fixed gpl2.0.texi
2013-05-19 09:57:07 -07:00
Franck Joncourt
3e16d6694c Fixed gpl2.0.texi to make it build.
The @appendixsubsec entries are substituted by @appendixsec entries.
2013-05-19 17:14:35 +02:00
Franck Joncourt
6c59c9ade8 Merge remote-tracking branch 'upstream/master' 2013-05-19 15:34:20 +02:00
Michael Rash
0a279ccbfc [client] minor --verbose display update to say source port is 'OS assigned' when not otherwise set 2013-05-18 22:49:38 -04:00
Michael Rash
96bbf7e61a [client] bug fix to separate out --named-config vs. --no-save-args command line args 2013-05-18 22:36:13 -04:00
Michael Rash
15b1382160 [test suite] slurp openssl HMAC from file into single string (it may be binary data) 2013-05-18 16:39:08 -04:00
Michael Rash
61459c65f5 added test suite HMAC != enc key conf files 2013-05-18 12:13:50 -04:00
Michael Rash
23a354fced [client+server] ensure HMAC key and encryption passphrase are not the same 2013-05-18 12:10:18 -04:00
Michael Rash
731ca0e038 [client] added warning in --verbose mode if -s is used instead of -a or -R 2013-05-18 10:51:49 -04:00
Michael Rash
c02ec41ca0 [test suite] minor bug fix to preserve the init file 2013-05-18 08:34:20 -04:00
Franck Joncourt
cee5807deb First draft to be able to use stdin as an input for submitting fwknop key.
mrash/fwknop#74
2013-05-18 10:54:44 +02:00
Michael Rash
ebe1aec542 continued man page updates in preparation for the 2.5 release 2013-05-17 23:05:58 -04:00
Michael Rash
7cb23c75cc [server] added check to ensure any existing fwknop jump rule is not duplicated at init 2013-05-17 22:34:26 -04:00
Michael Rash
cabcaf2174 [server] apply same logging policy for --fw-* modes as --foreground mode 2013-05-17 22:28:03 -04:00
Michael Rash
45244114f8 [client] --key-gen bug fix to print keys to stdout 2013-05-17 21:03:16 -04:00
Michael Rash
b6562d3bf3 Merge remote-tracking branch 'fjoncourt/master'
Closes issues #76 and #60.
2013-05-15 21:31:17 -04:00
Michael Rash
2c8469e95e [client] man page update for GPG key signing material 2013-05-15 21:17:39 -04:00
Michael Rash
a6f9f1d9ec [client] completed fwknop client man page rc variable documentation 2013-05-15 20:59:29 -04:00
Michael Rash
366255188a HMAC and PBKDF1 ChangeLog updates 2013-05-14 23:28:45 -04:00
Michael Rash
e1a7011bf3 [docs] fwknop client man page update for HMAC material 2013-05-14 23:22:03 -04:00
Franck Joncourt
95615c90e2 Merge remote-tracking branch 'upstream/master' 2013-05-14 22:15:19 +02:00
Franck Joncourt
bb90a8bf75 Fixed gcc warnings on openbsd. - mrash/fwknop#60 2013-05-14 22:08:44 +02:00
Michael Rash
e73d13e140 minor write_test_file() path bug fix 2013-05-13 23:11:33 -04:00
Michael Rash
4e5fb77dd0 Merge remote-tracking branch 'fjoncourt/master'
Merged update from Franck - closes issue #71.
2013-05-13 23:10:26 -04:00
Michael Rash
fb80575209 [server] minor memory leak bug fix during SPA digest calculation found by Coverity 2013-05-13 20:52:14 -04:00
Michael Rash
6a2bc3db27 [server] minor memory leak bug fix during access.conf parsing found by Coverity 2013-05-13 20:48:23 -04:00
Michael Rash
8e31f8feb0 [server] varargs cleanup bug fix found by Coverity 2013-05-13 20:42:07 -04:00
Michael Rash
d60870740d [server] fix pointer NULL check after strdup() - found by Coverity 2013-05-13 20:41:25 -04:00
Michael Rash
0c3da4bee4 [server] minor cosmetic (unnecessary NULL checks and one un-triggerable memory leak) found by Coverity 2013-05-13 20:40:29 -04:00
Michael Rash
cdd0a5f3f3 [server] minor memory leak bug fix during access.conf parsing found by Coverity 2013-05-13 20:38:39 -04:00
Franck Joncourt
9dbb62ae1e Merge remote-tracking branch 'upstream/master' 2013-05-13 16:30:27 +02:00
Michael Rash
48a3f7a179 added m4/gpgme.m4 file 2013-05-12 23:48:44 -04:00
Michael Rash
c83bc15c5e bumped VERSION file to fwknop-2.5-pre1 2013-05-12 22:42:13 -04:00
Michael Rash
1144284913 Merge branch 'master' into gpgme_autoconf_macro 2013-05-12 22:31:18 -04:00
Michael Rash
3246c3c6b0 [test suite] added hmac_get_key_access.conf file 2013-05-12 22:30:28 -04:00
Michael Rash
c6b2c0def4 Added gpgme autoconf m4 macro to fix an undefined AM_PATH_GPGME error
For systems that don't have libgpgme installed, the addition of the m4/gpgme.m4
file fixes the following error when running the autogen.sh script:

configure.ac:313: error: possibly undefined macro: AC_DEFINE
      If this token and others are legitimate, please use m4_pattern_allow.
      See the Autoconf documentation.
configure.ac:326: error: possibly undefined macro: AM_PATH_GPGME
configure.ac:329: error: possibly undefined macro: AC_MSG_FAILURE
2013-05-12 22:25:16 -04:00
Michael Rash
09f073d393 Added blurb on Coverity to the ChangeLog 2013-05-12 21:04:25 -04:00
Michael Rash
838782f198 [test suite] added fko_destroy() calls to fko-wrapper 2013-05-12 20:57:19 -04:00
Michael Rash
1caf6035d9 [server] fixed potential double-free condition found by Coverity
Within the access loop always call fko_destroy() right up front whenever
ctx != NULL to ensure a clean slate each time through the loop regardless of
what state may have been reached the previous time through the loop.
2013-05-12 20:54:44 -04:00
Michael Rash
c555a35489 [client] set ctx=NULL after fko_destroy() calls 2013-05-12 20:54:04 -04:00
Michael Rash
d85c2e74ce [libfko] set ctx=NULL after fko_destroy(), add NULL check for encrypted msg pointer in fko_new_with_data() 2013-05-12 20:53:22 -04:00
Michael Rash
7b3c854a02 [libfko] added context initialized check to fko_decrypt_spa_data() 2013-05-12 20:49:00 -04:00
Michael Rash
6d0f970b34 [libfko] bug fix to apply ctx initialization check before attempting to use ctx->message_type in fko_set_spa_client_timeout() 2013-05-12 15:02:31 -04:00
Michael Rash
38395b04c6 [test suite] add -x to run_valgrind.sh fko-wrapper script 2013-05-12 14:43:19 -04:00
Michael Rash
3302dd4220 [test suite] added -g to fko_wrapper Makefile for debugging symbols 2013-05-12 14:42:35 -04:00
Franck Joncourt
31d94d50b1 Added tests to validate the encryption mode for the client.
Renamed the CBC legacy VI encryption mode by legacy as mentionned in the man page.
2013-05-12 17:35:19 +02:00
Franck Joncourt
160c21d6b6 Rewrite enc_mode_inttostr() and enc_mode_strtoint().
Make sure both functions works the same way and refer to the same
encryption mode string.

Updated the fwknop usage message to display the encryption mode.
2013-05-12 16:52:52 +02:00
Michael Rash
a8410d8f2a [test suite] allow valgrind coverage test to run after --test-limit 2013-05-11 13:28:55 -04:00