Michael Rash 22dde8eb35 SPA with HMAC SHA256 and SHA384 now works ...

This is a fairly significant commit that lays the groundwork for getting
selectable HMAC modes working for both the client and server.  One libfko API
change was required so that the hmac_type is passed into fko_new_with_data().
This allows the server to set the hmac_type via access.conf stanzas.  The
effort in this commit will be extended to allow HMAC MD5, SHA1, and SHA512
also function properly.

2013-03-10 14:26:05 -04:00

..

access.c

SPA with HMAC SHA256 and SHA384 now works

2013-03-10 14:26:05 -04:00

access.conf

…

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

Continued atoi() replacement with strtol() wrapper (issue #21)

2013-02-18 22:22:44 -05:00

cmd_opts.h

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

config_init.c

Continue atoi() replacement with strtol() wrapper, closes issue #21

2013-02-19 23:11:01 -05:00

config_init.h

Continue atoi() replacement with strtol() wrapper, closes issue #21

2013-02-19 23:11:01 -05:00

extcmd.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

extcmd.h

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fw_util_ipf.c

remove unused vars for pf/ipfw/ipf firewalls until NAT is supported for them

2013-03-01 22:11:22 -05:00

fw_util_ipf.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fw_util_ipfw.c

remove unused vars for pf/ipfw/ipf firewalls until NAT is supported for them

2013-03-01 22:11:22 -05:00

fw_util_ipfw.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

fw_util_iptables.c

Continue atoi() replacement with strtol() wrapper, closes issue #21

2013-02-19 23:11:01 -05:00

fw_util_iptables.h

* Avoid duplicate rules with the same timestamp.

2013-01-17 21:46:13 +01:00

fw_util_pf.c

remove unused vars for pf/ipfw/ipf firewalls until NAT is supported for them

2013-03-01 22:11:22 -05:00

fw_util_pf.h

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util.c

Minor restructuring to suppress compiler "defined but not used warnings"

2011-08-20 12:34:57 -04:00

fw_util.h

make libfko pointers constant where possible

2013-02-12 22:39:39 -05:00

fwknopd_common.h

interim commit for supporting multiple HMAC digest types (# 45)

2013-03-07 23:14:48 -05:00

fwknopd_errors.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fwknopd_errors.h

added DNAT mode tests, minor memory leak fix in NAT mode, added fwknopd check for ENABLE_IPT_FORWARDING variable before attempting NAT access

2011-11-22 22:13:27 -05:00

fwknopd.8.in

minor wording update netfilter -> iptables

2011-10-13 20:59:30 -04:00

fwknopd.c

Continue atoi() replacement with strtol() wrapper, closes issue #21

2013-02-19 23:11:01 -05:00

fwknopd.conf

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

Minor PID string length fix

2011-10-18 21:28:38 -04:00

incoming_spa.c

SPA with HMAC SHA256 and SHA384 now works

2013-03-10 14:26:05 -04:00

incoming_spa.h

Added access stanza expiration feature, multiple access stanza bug fix

2011-11-28 22:03:21 -05:00

log_msg.c

This commit fixes two memory leaks and adds a common exit function.

2011-11-10 22:33:32 -05:00

log_msg.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

Makefile.am

merged in the fixes_for_2.0.4 branch

2013-01-19 18:36:52 -05:00

pcap_capture.c

Continue atoi() replacement with strtol() wrapper, closes issue #21

2013-02-19 23:11:01 -05:00

pcap_capture.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

process_packet.c

Better IP spoofing support (udpraw and icmp)

2012-10-03 22:56:10 -04:00

process_packet.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

replay_cache.c

Minor memory leak bug fix in --rotate-digest-cache mode

2013-02-10 14:57:44 -05:00

replay_cache.h

Only cache replay digests for SPA packets that decrypt

2012-07-08 08:36:30 -04:00

sig_handler.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sig_handler.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

tcp_server.c

Added strtol_wrapper() libfko utility function for atoi() replacement (#21)

2013-02-18 19:32:53 -05:00

tcp_server.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

utils.c

merged in fwknop-2.0.4 changes

2013-01-18 17:25:16 -05:00

utils.h

First round if refactoring to clean up header dependencies.

2013-03-02 17:03:20 -05:00