Commit Graph

  • bdc3751a84 bump version to 2.6.6 Michael Rash 2015-04-20 08:47:51 -07:00
  • f18827b002 [test suite] make valgrind results requirements stronger for test passage Michael Rash 2015-04-20 08:45:09 -07:00
  • 94af6172bb [server] minor -h usage update Michael Rash 2015-04-20 08:41:28 -07:00
  • 85733ded3c [test suite] additional iptables exclusions for non-iptables systems Michael Rash 2015-04-19 20:34:01 -04:00
  • f757b4ebda extras: adjust 'localstatedir' value for the AppArmor profile Ilya Tumaykin 2015-04-20 14:32:37 +03:00
  • b2109f5630 [server] remove unncessary NULL check spotted by Coverity Michael Rash 2015-04-19 19:44:43 -07:00
  • f962edda00 [extras] update Coverity installation path Michael Rash 2015-04-19 19:37:06 -07:00
  • a606a9c565 [test suite] fw prefixes aren't used on non-Linux systems yet Michael Rash 2015-04-19 18:52:08 -07:00
  • 48acac160a [test suite] pick up pf and ipfw firewalls for prefix designation Michael Rash 2015-04-19 18:49:28 -07:00
  • db80c81f66 Merge pull request #152 from Coacher/master Michael Rash 2015-04-19 21:15:51 -04:00
  • e39d34750b [server] switch from abs() to labs() for time difference calculation Michael Rash 2015-04-19 17:48:18 -07:00
  • b21c04e9d6 Merge remote-tracking branch 'upstream/master' Ilya Tumaykin 2015-04-20 02:46:41 +03:00
  • e333cba945 server: remove extra '/run' subdir from paths Ilya Tumaykin 2015-04-20 02:43:10 +03:00
  • 93a3798cc1 [test suite] exclude server restart cycle from valgrind results parsing Michael Rash 2015-04-19 13:25:11 -07:00
  • cc765a23db [test suite] minor FORCE_NAT config tweak Michael Rash 2015-04-19 12:22:55 -07:00
  • b1100cb730 [server] NAT validation only applies to systems running iptables or firewalld Michael Rash 2015-04-19 07:16:30 -07:00
  • 68db4b77a5 [server] allow FORWARD_ALL to control whether FORCE_NAT is required Michael Rash 2015-04-19 07:11:10 -07:00
  • 0ecc2d2333 minor docs update Michael Rash 2015-04-19 07:10:26 -07:00
  • bb5aa928d9 [server] fix typos from corresponding firewalld changes Michael Rash 2015-04-18 12:33:11 -07:00
  • c9dedd3378 Merge branch 'master' of https://github.com/mrash/fwknop Michael Rash 2015-04-18 05:39:01 -07:00
  • 03959653ca [server] differentiate MASQUERADE from SNAT with a dedicated FWKNOP_MASQUERADE chain Michael Rash 2015-04-18 05:38:35 -07:00
  • f06c6e3b9c [test suite] allow default FORCE_NAT 0.0.0.0 0 to apply Michael Rash 2015-04-18 05:37:31 -07:00
  • 19f00c0dbe [test suite] add jump rule validation, include complete fwknopd chain listings Michael Rash 2015-04-18 05:33:00 -07:00
  • 55cbebe7bb ChangeLog and doc updates Michael Rash 2015-04-18 05:30:39 -07:00
  • baf3f706d8 Merge pull request #151 from mrdanbrooks/master Michael Rash 2015-04-16 21:45:59 -04:00
  • fba6473b1c android: allow definition of custom server udp port dan brooks 2015-04-15 16:52:34 -04:00
  • 1e9f7e94f0 [server] consolidate chain creation within mk_chain() Michael Rash 2015-04-12 16:05:01 -07:00
  • c0f3ed38a8 [server] further error status simplication for firewalld Michael Rash 2015-04-12 16:01:29 -07:00
  • cf8c4df50e [server] remove DISABLE_DNAT exception for SPA packets that request a NAT operation - this is reserved for FORCE_NAT scenarios Michael Rash 2015-04-12 15:57:44 -07:00
  • 912c625e9e [server] remove DISABLE_DNAT exception for SPA packets that request a NAT operation - this is reserved for FORCE_NAT scenarios Michael Rash 2015-04-12 15:55:20 -07:00
  • 654f455ba6 Revert "[server] use 'success' string for firewalld as returned firewall-cmd for command success" Michael Rash 2015-04-12 15:49:19 -07:00
  • ffeb60677d [test suite] update SNAT MASQ test to use force masq access file Michael Rash 2015-04-12 15:49:08 -07:00
  • 7dc41e68ef [test suite] add open_ports_force_masq_access.conf file Michael Rash 2015-04-12 15:48:14 -07:00
  • 86cdc90f4a [test suite] add open_ports_force_masq_access.conf file Michael Rash 2015-04-12 15:47:41 -07:00
  • 5164378b17 [build] add --enable-32bit-mode for ASAN+AFL fuzzing Michael Rash 2015-04-09 22:23:17 -04:00
  • 513fb239df Merge branch 'master' of ssh://github.com/mrash/fwknop Michael Rash 2015-04-09 21:21:45 -04:00
  • 87a4acb636 [test suite] added detection for crashes triggered with AddressSanitizer (requires --enable-asan-support) Michael Rash 2015-04-09 18:04:31 -07:00
  • 1986c9aaf9 [test suite] added AFL results for client-rc fuzzing Michael Rash 2015-04-09 20:01:59 -04:00
  • 2d0b623a9a [test suite] more FORCE_NAT tests Michael Rash 2015-04-08 18:50:26 -07:00
  • ca41ce6e75 [test suite] restore FORCE_SNAT test passing result Michael Rash 2015-04-08 18:40:44 -07:00
  • 547dbb66b3 [server] minor return value handling update for create_chain() and add_jump_rule() Michael Rash 2015-04-08 18:30:03 -07:00
  • 1e33119b04 [server] use 'success' string for firewalld as returned firewall-cmd for command success Michael Rash 2015-04-08 18:29:03 -07:00
  • 429881703f [test suite] minor uninitialized var bug fix Michael Rash 2015-04-08 18:24:26 -07:00
  • ab2d9c0aec [test suite] minor path bug fix Michael Rash 2015-04-07 16:35:07 -07:00
  • 0fa42ae117 [server] allow DISABLE_DNAT to not require FORCE_NAT Michael Rash 2015-04-07 16:34:49 -07:00
  • 7a21494f39 added --enable-asan-support for Google's Address Sanitizer compiler flags Michael Rash 2015-04-07 16:32:44 -07:00
  • 21dc1e8968 Merge branch 'master' of ssh://minastirith/Users/mbr/git/fwknop Michael Rash 2015-04-07 08:24:21 -04:00
  • 3d8b524019 [test suite] FORCE_SNAT requires FORCE_NAT test Michael Rash 2015-04-07 08:23:55 -04:00
  • 8010690039 [server] add missing #define's for firewalld Michael Rash 2015-04-06 11:47:07 -07:00
  • ef6c0549a5 [test suite] added --prefer-iptables to exclude firewalld Michael Rash 2015-04-06 01:33:18 -07:00
  • c25f34e7a2 [server] update firewalld for FORWARD_ALL NAT operations Michael Rash 2015-04-06 01:24:55 -07:00
  • 37c9f38565 [test suite] FORCE_SNAT requires FORCE_NAT test Michael Rash 2015-04-06 21:20:31 -04:00
  • 8e6db3a5da [server] extend FORWARD_ALL to apply to NAT operations Michael Rash 2015-04-06 20:04:33 -04:00
  • ca467b9030 [test suite] added AFL results for spa-pkts and server-digest-cache fuzzing runs Michael Rash 2015-03-31 19:58:18 -04:00
  • c4ffd4b00a [extras] minor ramdisk creation bug fix Michael Rash 2015-03-30 21:38:31 -04:00
  • a18b3e9027 [server] minor code coverage update for firewalld systems Michael Rash 2015-03-29 18:15:11 -07:00
  • 244d2692f2 [test suite] added server-access plot data Michael Rash 2015-03-29 08:04:55 -04:00
  • cb089c550d [test suite] added server-access AFL results run Michael Rash 2015-03-29 08:00:03 -04:00
  • 60d982a103 [test suite] added GPG 4096-bit key combination tests Michael Rash 2015-03-28 07:54:30 -04:00
  • 1dc4a47357 [libfko] minor update to make process_sigs() static Michael Rash 2015-03-26 22:04:20 -04:00
  • 9de2a61d04 add subkey gpg access.conf file Michael Rash 2015-03-26 22:01:52 -04:00
  • 0f86406afb [test suite] added gpg subkey signing test Michael Rash 2015-03-26 22:01:02 -04:00
  • edd57f48de add test/conf/gpg_large_signing_key_access.conf Michael Rash 2015-03-24 22:45:07 -04:00
  • 91a4e82f23 [test suite] added 4096-bit signing key test Michael Rash 2015-03-24 22:38:41 -04:00
  • 59d0ef0b17 [test suite] minor file rename Michael Rash 2015-03-24 22:03:21 -04:00
  • 1594194e73 [test suite] added new gpg keyrings for large key tests (4096 bits) Michael Rash 2015-03-24 22:01:55 -04:00
  • 17382953e8 [test suite] minor usage update Michael Rash 2015-03-24 21:44:38 -04:00
  • ce0bb64830 [test suite] restructured AFL results directory to results/version/commit/ Michael Rash 2015-03-23 18:07:13 -07:00
  • 08bc2aa603 [test suite] rely exclusively on tarball for gpg keyrings Michael Rash 2015-03-23 17:55:59 -07:00
  • 90fb4c9aca minor comment addition Michael Rash 2015-03-22 22:26:29 -04:00
  • 5aacd6ae21 added convenience script to create a ramdisk for AFL fuzzing runs Michael Rash 2015-03-22 22:18:04 -04:00
  • ea7f22f842 fix line separators Michael Rash 2015-03-22 22:12:37 -04:00
  • f87e18635c update Makefile.am for latest AFL scripts and test cases Michael Rash 2015-03-22 22:06:19 -04:00
  • 2414393c94 added the extras/patches/ directory (initial patch to link against pthreads for libfiu support) Michael Rash 2015-03-22 22:02:12 -04:00
  • 211f1fb5a2 [test suite] update afl-compile-code-coverage.sh to not use afl-gcc Michael Rash 2015-03-22 22:00:21 -04:00
  • d058493d3b [test suite] handle versions of lcov that don't have the --rc option Michael Rash 2015-03-22 17:41:26 -07:00
  • c7be9baf9c [test suite] better lcov coverage report handling with --initial and --zerocounters Michael Rash 2015-03-22 14:46:07 -07:00
  • 56e2e5ca2f [test suite] restore digest length calculation for AFL fuzzing, fixes #148 Michael Rash 2015-03-19 23:45:22 -04:00
  • 67fefd67ae [test suite] added README for afl-cmin helper scripts Michael Rash 2015-03-19 23:39:16 -04:00
  • c4048573c6 [test suite] removed SPA packet from afl-cmin corpus Michael Rash 2015-03-19 23:37:04 -04:00
  • 8ad434aed5 [test suite] the large afl-cmin directories are not used by default Michael Rash 2015-03-19 23:02:40 -04:00
  • ab5c000a32 [test suite] added afl-cmin scripts, and the main test suite configs are referenced Michael Rash 2015-03-19 22:55:50 -04:00
  • 104aeca978 [test suite] switch SPA packets test to use afl-cmin test cases Michael Rash 2015-03-19 22:48:11 -04:00
  • 89d7241a51 [test suite] include all digest lengths for SPA input packets (afl-cmin usage will be next) Michael Rash 2015-03-19 22:37:01 -04:00
  • 3febc74c22 [test suite] extend digest lengths for SPA input packets Michael Rash 2015-03-19 22:34:45 -04:00
  • 95ae8dd1fe minor ChangeLog update Michael Rash 2015-03-19 22:20:26 -04:00
  • 40c695097e added spa-pkts-2.6.5.59edf64 AFL test results file Michael Rash 2015-03-19 22:05:10 -04:00
  • 59edf64d9c [server] consolidate fw creation, add FORWARD_ALL functionality Michael Rash 2015-03-07 20:09:31 -08:00
  • cfd1cbf2bf [server] minor macro usage update for 127.0.0.2 Michael Rash 2015-03-07 19:45:50 -08:00
  • 745a442f18 [test suite] add AFL_HARDEN=1 to AFL compilation scripts Michael Rash 2015-03-07 19:36:23 -08:00
  • 26aceb9db6 [test suite] add more rigorous multi-port tests with per-rule regex search criteria Michael Rash 2015-03-07 19:12:39 -08:00
  • 41571a6453 Merge branch 'master' into dstuart_refactor_autoconf Damien Stuart 2015-02-18 23:00:25 -05:00
  • 322ae85388 Fixed a bug in configure.ac that did not allow specifying alternate firewall exe if firewall-cmd was found by configure. Damien Stuart 2015-02-18 22:44:53 -05:00
  • bf251034e3 [server] bug fix to exclude pcap.h only in --enable-udp-server mode Michael Rash 2015-02-18 19:37:37 -05:00
  • 1ce800446d [server] Bug fix to not include pcap.h in --enable-udp-server mode Michael Rash 2015-02-17 23:21:05 -08:00
  • 5c8fc63b89 Missed tweak on the Makefile.am file in lib. Damien Stuart 2015-02-17 14:58:08 -05:00
  • e4fae829bc Refactor of Makefile.am files to fix issues caused by referencing source files in other directories - which broke make dist and make distclean targets. Damien Stuart 2015-02-17 14:37:20 -05:00
  • 987455b902 Remove commented out entries from the client and server Makefile.am. Damien Stuart 2015-02-14 12:40:58 -05:00
  • b152d15970 Refactored how the cunit tests are processed so "make dist" does not fail and builds with c-unit-tests enabled work on systems with firewalld (added fw_util_firewalld.c for server tests). Damien Stuart 2015-02-14 12:29:30 -05:00
  • e8cfeaf772 Merge pull request #142 from fjoncourt/c_unit_testing Michael Rash 2015-01-17 09:11:29 -05:00