8b4b55fa44Added stubs and some handling for signals. SIGHUP induces the re-reading the configs and restarting the capture loop. SIGTERM and SIGINT simply trigger a graceful exit. Trimmed some more of the configuration options.
Damien Stuart
2009-10-11 17:42:45 +00:00
e399f39c39Updated sniffer to be able to handle the linux "any" interface.
Damien Stuart
2009-09-28 00:33:09 +00:00
5a72c4fca7Updates and enhancements to logging functions. Now log_msg writes only to stderr when running in foreground. Default log facility is LOG_DAEMON. Config file options of ENABLE_PACP_PROMISC, HOSTNAME, SYSLOG_IDENTITY, and SYSLOG_FACILITY are processed.
Damien Stuart
2009-09-27 15:09:41 +00:00
8a94aa9412Updated pid/lock file handling. Implemetned -K option.
Damien Stuart
2009-09-24 03:13:33 +00:00
61c243f827Added some more (stubbed-in) server code and functions. Minor doc tweak.
Damien Stuart
2009-09-14 00:38:31 +00:00
8a06e36338Removed the wipe_pw routine as it could result in segfaults when a static key is used.
Damien Stuart
2009-09-14 00:37:13 +00:00
2bf25e62a7Added perl/legacy distribution (fwknop-1.9.12). Renamed this distribution from fwknop-c to simply fwknop. Made the version 2.0.0-alpha.
Damien Stuart
2009-09-11 00:43:24 +00:00
a07decf1d9Added some more stuff to deal with byte order identification on Solaris 10 x86 systems.
Damien Stuart
2009-09-09 01:38:03 +00:00
4fef98682bMore tweaks to config file processing, including simple variable expansion.
Damien Stuart
2009-09-06 02:38:30 +00:00
911361deffMinor manpage tweak
Damien Stuart
2009-09-05 23:41:15 +00:00
0c87e7395fAdded override config handling and updated the config_init routines to parse everything in the correct order (i.e. config file, override configs, then command-line).
Damien Stuart
2009-09-05 17:32:15 +00:00
998fe8da0aAdded more server command-line and config file processing code. Updated autoconf config for new checks and files.
Damien Stuart
2009-09-05 02:54:42 +00:00
791eb4055bAdded check for libpcap. More stubbing in on the server code side.
Damien Stuart
2009-09-04 21:14:44 +00:00
f0fa45cec2Added fwknop.man.asciidoc to docs and fwknop.8 man page to client (derived from fwknop.man.asciidoc).
Damien Stuart
2009-09-03 03:25:35 +00:00
10c0aabe38Fixed another minor typo in the doc
Damien Stuart
2009-08-12 02:11:14 +00:00
768606906eupdated SPA over HTTP packets to always begin the a slash right after the GET string, updated to print SPA packets over HTTP to stderr in test/verbose mode
Michael Rash
2009-08-11 03:11:57 +00:00
1781e9e758Updated ip,port format and value check.
Damien Stuart
2009-08-11 02:04:51 +00:00
eaa179a6c1Changed http_resolve_host code to make it work with or without trailing whitespace in returned content. Updated the IP address format and value checking code. Switched back to whatsmyip.com as default IP resolver.
Damien Stuart
2009-08-11 01:40:47 +00:00
08aa1ef2e8Updates to accommodate the Windows build.
Damien Stuart
2009-08-09 17:14:08 +00:00
78fb936a55Some minor refactoring of the TIME_OFFSET handling. Other minor code formatting tweaks.
Damien Stuart
2009-08-09 16:33:02 +00:00
1da9ea0f6bMade the configure help message show --disable-xxx as the options for whether or not to build the server or client.
Damien Stuart
2009-08-09 16:19:50 +00:00
5b3f6f07daForgot to add the server dir.
Damien Stuart
2009-08-09 15:45:45 +00:00
53b7fae8bbMajor rearrangement. Renamed directories: "fko" to "lib", "src" to "client". Added "common" and "server" directories. Setup autoconf to allow disabling the server and/or client builds.
Damien Stuart
2009-08-09 15:43:16 +00:00
078661e355Fixed typo (actually a cut-and-paste remnant) in the doc.
Damien Stuart
2009-08-02 21:27:46 +00:00
8d789eff4dUpdate the VS project file for the new SHA digest files and functions.
Damien Stuart
2009-08-02 18:34:29 +00:00
f011889da0Forgot to add the files for the updated SHA digests (oops).
Damien Stuart
2009-08-02 18:30:58 +00:00
7f45031cefAdded SHA384 and SHA512 digests. Tweaks for getting rid of windows warnings. Use recv instead of read on socket. Bumped version to 0.63 (libfko) and 0.23 (FKO perl module).
Damien Stuart
2009-08-02 18:28:34 +00:00
3029e01238added the --resolve-ip-http and --user-agent command line args so the fwknop-c client can resolve the external network via http://www.cipherdyne.org/cgi/myip.cgi
Michael Rash
2009-07-27 05:33:21 +00:00
9bc2b1539ebugfix to order HTTP request headers properly, updated the user agent for SPA over HTTP to use the options->http_user_agent variable (can be set from the command line)
Michael Rash
2009-07-27 05:27:54 +00:00
868aa6ee37Added the --source-ip argument to build SPA packets with 0.0.0.0 (the fwknopd server can wrap access controls around this)
Michael Rash
2009-07-26 17:28:22 +00:00
a57baa20d0minor doc updates
Michael Rash
2009-07-26 15:08:46 +00:00
17ca88ad4cchanged the minimum destination SPA port from 1024 to 10,000
Michael Rash
2009-07-23 04:35:04 +00:00
f5849dc68c* Added the --show-last and --no-save command line options to show the command line used for the previous fwknop invocation, and to have the fwknop client not save its command line arguments. * Bug fix to force libfko to recalculate the random data embedded in the the SPA packet after a random port is acquired via --rand-port or --nat-rand-port. This is a precaution so that an attacker cannot guess some of the internal SPA data based on the destination port number.
Michael Rash
2009-07-23 04:17:04 +00:00
70db22064e* Got forward and local NAT modes working with the --nat-access, --nat-local, --nat-port, and --nat-randport options. All NAT modes are now passing the fwknop test suite. * Added the --server-command option to build an SPA packet with a command for the server to execute. * Added the --fw-timeout option for client side timeouts to be specified. * Added the --time-offset-plus and --time-offset-minus options to allow the user to influence the timestamp associated with an SPA packet. * Added the --rand-port option so that the SPA packet destination port can be randomized.
Michael Rash
2009-07-21 05:18:28 +00:00
3a77e0fefaFixed some formatting errors in the POD.
Damien Stuart
2009-07-19 20:48:19 +00:00
561ba4f7e4Tweaks to cover WIN32 build. Added print of error if tcp connect() fails.
Damien Stuart
2009-07-17 01:52:03 +00:00
6f79b6fb04- Added the ability to send SPA packets over valid HTTP requests with the fwknop-c client. - Added support for transmitting SPA packets over IPv6 via TCP and UDP sockets, and also via HTTP. - Added GnuPG 'hQ' base64 encoded prefix handling (this prefix is stripped out of encrypted SPA packet data). - Added hostname resolution support to the fwknop-c client if the SPA server is specified as a hostname instead of an IP address. - Minor bug fix to allow a GnuPG password to be specified via the --get-key functionality.
Michael Rash
2009-07-16 06:40:51 +00:00
31ef94024cadded B64_GPG_PREFIX 'hQ' string for GnuPG prefix handling (similar to the 'Salted__' handling for Rijndael SPA packet encryption
Michael Rash
2009-07-16 00:28:04 +00:00
111d24c89binitial stab at libfko server daemon TODO's
Michael Rash
2009-07-03 03:34:21 +00:00
e0e08f0cf2bug fix suggested by Damien to allow the recompute of the SPA digest to properly happen when calling spa_digest() with a true value
Michael Rash
2009-06-29 00:52:12 +00:00
5ba9f1ecf9Fixed spa access message validation routine to allow for multiple comma-separated requests in one message.
Damien Stuart
2009-06-28 18:19:24 +00:00
0bec8bd141Tweaks to the win32 build (Visual Studio project configs).
Damien Stuart
2009-06-16 00:18:59 +00:00
6e167c65dfAdded handling of Backspace and Ctrl-U in the Win32 handling of get_passswd.
Damien Stuart
2009-06-14 16:38:17 +00:00
33e353b2fcAdded the digest types constants to the types and individual export tags.
Damien Stuart
2009-06-14 14:22:03 +00:00
44bca33574minor wording update to match fwknop help to config_init.h for --server-proto option
Michael Rash
2009-06-10 04:42:49 +00:00
0dae9badbaAdded a TODO file
Damien Stuart
2009-06-08 22:55:40 +00:00
04690e2f07Forgot to bump the perl module minor version number.
Damien Stuart
2009-06-07 20:46:14 +00:00
488ca566e1Minor updates to non-code-related files. Changed some copyrights to 2009.
Damien Stuart
2009-06-07 20:33:53 +00:00
caab726e7bBrought Error constants in sync with libfko.
Damien Stuart
2009-06-07 20:02:14 +00:00
2fee69dc33Tweaks again for win32 build
Damien Stuart
2009-06-07 17:27:12 +00:00
5811d1107bYet another tweak for win32.
Damien Stuart
2009-06-07 17:13:36 +00:00
51c37ba159Tweak for win32 platform
Damien Stuart
2009-06-07 17:03:01 +00:00
7817e44264Added sending via tcp (established) conneciton. removed --debug as an option. Some minor code reformatting and refactoring.
Damien Stuart
2009-06-07 16:55:22 +00:00
7206fa03a6minor link update for the cipherdyne.org website
Michael Rash
2009-05-29 01:41:35 +00:00
c509b53dd4Implemented sending spa data via TCP or ICMP via SOCK_RAW (unix only so far).
Damien Stuart
2009-05-26 15:03:00 +00:00
9c9d46cc09Fixed bad variable name after moving the winsock startup code to a the send_spa_packet function.
Damien Stuart
2009-05-25 18:55:13 +00:00
79a15c2f6dRemoved old test code from fwknop client. Other tweaks and enhancements.
Damien Stuart
2009-05-25 18:47:02 +00:00
8c5f6ee069Added getopt_long and getlogin capability to the Windows build.
Damien Stuart
2009-05-25 14:32:51 +00:00
cf65f6ef5dUpdated Makefile.am to add win32 directory to the dist.
Damien Stuart
2009-05-24 17:00:08 +00:00
4192eb8876Updates and revisions to accommodate a Windows build.
Damien Stuart
2009-05-24 16:46:33 +00:00
ee78a35cfdMade the dist name "fwknop-c" so as not to confuse it with the current "fwknop".
Damien Stuart
2009-05-19 00:48:28 +00:00
d711843e84Changed fko version to 1.9.12. Made signing GPG-encrypted messages optional.
Damien Stuart
2009-05-17 15:44:07 +00:00
2fff0a0a20Added the Perl module files to Makefile.am so they will be included in the dist.
Damien Stuart
2009-05-12 01:39:18 +00:00
a32100f964Updated documentation to reflect API changes and GPG signature functions.
Damien Stuart
2009-05-03 18:10:23 +00:00
2865912c0aTweaks to updated API. Added GPG signature checking and processing functions. Updated Perl module and perldoc for new API and functions.
Damien Stuart
2009-05-03 15:47:45 +00:00
6e147ad3e7Interim check-in of API changes, libfko and fwknop binary now support the updated API. Docs and Perl module are pending.
Damien Stuart
2009-05-02 03:02:08 +00:00
58c1a85711Added perl module code to the repository.
Damien Stuart
2009-04-18 13:47:09 +00:00
7e2d52e38fFixed double-free when destroy was called after a failed gpg encryption/decryption.
Damien Stuart
2009-04-18 13:36:21 +00:00
339db83129added --save-packet-append so that SPA packet data can be appended to a file
Michael Rash
2009-04-13 03:34:11 +00:00
f3e4694a0cadded the --save-packet argument so that SPA packet data can be saved to the local filesystem by the fwknop-c client
Michael Rash
2009-04-13 03:13:10 +00:00
d19e2777f7Fixed segfault issue when spa_data_final was called before spa_message was set.
Damien Stuart
2009-03-30 00:56:05 +00:00
675e24be4cFixed typo in doc
Damien Stuart
2009-03-25 02:08:13 +00:00
6e90c5efc6Added gpg-home-dir support to libfko and the fwknop program. Added the fko_set_spa_data() function. Documentation updates and other tweaks to support these changes.
Damien Stuart
2009-03-17 02:05:25 +00:00
b82f0e99ddTweaked byte order determination for Solaris systems.
Damien Stuart
2009-03-15 14:37:35 +00:00
7f0e7a9a35Updated autoconf files and code to support Solaris (ver 10 x86 at least). This includes better type checking and resolving some conflicting names under Solaris.
Damien Stuart
2009-03-15 14:00:42 +00:00
e1b5b7eed1removed unnecessary initialization of string vars to 0x0 because the earlier memset() takes care of this
Michael Rash
2009-03-07 14:36:26 +00:00
450795da71Minor bug fix to process gpg command line arguments properly when handling the command line.
Michael Rash
2009-02-28 21:53:30 +00:00
3fd6f4dd7eupdated Copyright to Damien
Michael Rash
2009-02-28 21:16:39 +00:00
c3f483a091Better error checking/message for decription. Fixed typo in docs.
Damien Stuart
2009-02-22 22:18:38 +00:00
41127cd7edAdded better autoconf handling of gpgpme. Fixes so libfko will compile under FreeBSD (7.0 release anyway).
Damien Stuart
2009-02-22 19:15:24 +00:00
62487d72fdupdated to concatenate the allow IP and access string for fko_set_spa_message()
Michael Rash
2009-02-14 04:28:46 +00:00
41df11b217minor bug fix to anticipate closing newline in a password read from a file via --get-key
Michael Rash
2009-02-14 04:27:57 +00:00
96df3a2dc2Added the following options:
Michael Rash
2009-02-13 07:49:54 +00:00
51abd640c0-Added the --get-key option to allow SPA passwords to be read from a file. This feature will be useful for an automated test suite that drives the fwknop C client against an SPA server implementation.
Michael Rash
2009-02-13 06:17:22 +00:00
bcafc22d48added Id tag expansion
Michael Rash
2009-02-12 05:05:40 +00:00
4b08fba26aFixed typo in Makefile.am
Damien Stuart
2009-02-11 20:15:19 +00:00
3342349b48Fixed minor typo
Damien Stuart
2009-02-11 02:47:09 +00:00
4ef8a25596Update libfko docs for the gpgme-related error codes and function.
Damien Stuart
2009-02-11 01:00:08 +00:00
be3bb0762fAdded getpasswd routine for getting a password from the user. A few updates to the lib to accomodate clearing the password after we are done with it. Update the fwknop program to reflect/use some of the new functionality.
Damien Stuart
2009-02-10 01:54:07 +00:00
06257a9222Split out the source files. Added processing for a couple more command-line options.
Damien Stuart
2009-02-09 02:33:38 +00:00
2396d8fee6Replaced deprecated gpgme_key_release calls with gpgme_key_unref. Fixed more potential memory leaks.
Damien Stuart
2009-02-01 23:02:20 +00:00
0c7c255882Add more compiler conditionals for GPGME support to fix error during compiles on systems without gpgme.
Damien Stuart
2009-02-01 15:36:55 +00:00
43c309b10cminor update to not force --Destination in --Version mode
Michael Rash
2009-02-01 14:44:31 +00:00
6b878ea65a- Added code to send SPA packet data over a UDP socket. - Added minor validation step to enforce --Destination usage if not running in --Test mode (will extend this validation to include other option).
Michael Rash
2009-02-01 14:30:45 +00:00
12e7a8d700Some minor cleanup and tweaks to gpgme code.
Damien Stuart
2009-02-01 13:54:06 +00:00
7008774e52Slightly improved and cleaner GPG error handling (there is still plenty of room for improvement).
Damien Stuart
2009-02-01 03:50:51 +00:00
1f443da41b- Added command line argument processing for:
Michael Rash
2009-02-01 03:31:00 +00:00
3ee06b36d3Added more gpgme-related errors and error checking. Other minor tweaks.
Damien Stuart
2009-01-29 03:49:55 +00:00
2d34c27f5aFixed flag on gpgme_keylist_next that was forcing only private keys for recipient. Fixed typo in docs.
Damien Stuart
2009-01-28 03:38:42 +00:00
Damien Stuart
Michael Rash