fwknop

access.c

Added the GPG signature checking code. Added GPG_REQUIRE_SIG and GPG_IGNORE_SIG_VERIFY_ERROR parameters to access.conf. Implement the checking of GPG signature IDs against the GPG_REOMOTE_ID list.

2010-06-29 02:40:59 +00:00

access.conf

Added the GPG signature checking code. Added GPG_REQUIRE_SIG and GPG_IGNORE_SIG_VERIFY_ERROR parameters to access.conf. Implement the checking of GPG signature IDs against the GPG_REOMOTE_ID list.

2010-06-29 02:40:59 +00:00

access.h

Added the GPG signature checking code. Added GPG_REQUIRE_SIG and GPG_IGNORE_SIG_VERIFY_ERROR parameters to access.conf. Implement the checking of GPG signature IDs against the GPG_REOMOTE_ID list.

2010-06-29 02:40:59 +00:00

config_init.c

Start of cleanup for beta release candidate. Removed locale-related code (for now) as it was breaking some things like logging. removed some unimplemented and/or unused parameters and config directives (as well as thier respective documentation references. Added a --rotate-digest-cache command-line arg to force a rename of the digest cache file and start a new one.

2010-06-24 02:31:36 +00:00

config_init.h

Start of cleanup for beta release candidate. Removed locale-related code (for now) as it was breaking some things like logging. removed some unimplemented and/or unused parameters and config directives (as well as thier respective documentation references. Added a --rotate-digest-cache command-line arg to force a rename of the digest cache file and start a new one.

2010-06-24 02:31:36 +00:00

extcmd.c

Added support for COMMAND_MSG requests. Also added CMD_EXEC_USER to access.conf to allow for fwknopd to setuid to the specified user before running the command. Other minor tweaks.

2010-06-29 01:00:11 +00:00

extcmd.h

Added support for COMMAND_MSG requests. Also added CMD_EXEC_USER to access.conf to allow for fwknopd to setuid to the specified user before running the command. Other minor tweaks.

2010-06-29 01:00:11 +00:00

fw_util.c

Added support for COMMAND_MSG requests. Also added CMD_EXEC_USER to access.conf to allow for fwknopd to setuid to the specified user before running the command. Other minor tweaks.

2010-06-29 01:00:11 +00:00

fw_util.h

Tweaked firewall rule creation code. Added SNAT/MASQUERADE support. Fixed rule processing code so an INPUT rule was not created for NAT request. Still needs more review and testing.

2010-06-16 03:12:00 +00:00

fwknopd_common.h

Updates to TCP server to close the lock file handle, use a non-blocking socket, and detect when the parent fwknop dies so it can exit as well.

2010-07-01 03:12:32 +00:00

fwknopd.8

Added the GPG signature checking code. Added GPG_REQUIRE_SIG and GPG_IGNORE_SIG_VERIFY_ERROR parameters to access.conf. Implement the checking of GPG signature IDs against the GPG_REOMOTE_ID list.

2010-06-29 02:40:59 +00:00

fwknopd.c

Updates to TCP server to close the lock file handle, use a non-blocking socket, and detect when the parent fwknop dies so it can exit as well.

2010-07-01 03:12:32 +00:00

fwknopd.conf

Added support for COMMAND_MSG requests. Also added CMD_EXEC_USER to access.conf to allow for fwknopd to setuid to the specified user before running the command. Other minor tweaks.

2010-06-29 01:00:11 +00:00

fwknopd.h

added Id tag expansion

2010-01-03 04:52:25 +00:00

incoming_spa.c

Added the GPG signature checking code. Added GPG_REQUIRE_SIG and GPG_IGNORE_SIG_VERIFY_ERROR parameters to access.conf. Implement the checking of GPG signature IDs against the GPG_REOMOTE_ID list.

2010-06-29 02:40:59 +00:00

incoming_spa.h

Added support for parsing and processing SPA requests over HTTP. Beefed up verbose logging a bit. Added some more sanity checks on the validity of incoming SPA data before attempting to decode.

2010-06-20 15:22:41 +00:00

log_msg.c

added Id tag expansion

2010-01-03 04:52:25 +00:00

log_msg.h

added Id tag expansion

2010-01-03 04:52:25 +00:00

Makefile.am

Tweak to client usage message output. Added TCP server funcionality to the server (call it a first cut).

2010-06-20 23:15:52 +00:00

pcap_capture.c

Start of cleanup for beta release candidate. Removed locale-related code (for now) as it was breaking some things like logging. removed some unimplemented and/or unused parameters and config directives (as well as thier respective documentation references. Added a --rotate-digest-cache command-line arg to force a rename of the digest cache file and start a new one.

2010-06-24 02:31:36 +00:00

pcap_capture.h

added Id tag expansion

2010-01-03 04:52:25 +00:00

process_packet.c

Added support for parsing and processing SPA requests over HTTP. Beefed up verbose logging a bit. Added some more sanity checks on the validity of incoming SPA data before attempting to decode.

2010-06-20 15:22:41 +00:00

process_packet.h

added Id tag expansion

2010-01-03 04:52:25 +00:00

replay_dbm.c

Start of cleanup for beta release candidate. Removed locale-related code (for now) as it was breaking some things like logging. removed some unimplemented and/or unused parameters and config directives (as well as thier respective documentation references. Added a --rotate-digest-cache command-line arg to force a rename of the digest cache file and start a new one.

2010-06-24 02:31:36 +00:00

replay_dbm.h

added Id tag expansion

2010-01-03 04:52:25 +00:00

sig_handler.c

Start of cleanup for beta release candidate. Removed locale-related code (for now) as it was breaking some things like logging. removed some unimplemented and/or unused parameters and config directives (as well as thier respective documentation references. Added a --rotate-digest-cache command-line arg to force a rename of the digest cache file and start a new one.

2010-06-24 02:31:36 +00:00

sig_handler.h

More tweaks. Added SIGCHLD handler and code to try to restart the TCP server if it dies for whatever reason.

2010-06-21 03:24:27 +00:00

tcp_server.c

Updates to TCP server to close the lock file handle, use a non-blocking socket, and detect when the parent fwknop dies so it can exit as well.

2010-07-01 03:12:32 +00:00

tcp_server.h

Tweak to client usage message output. Added TCP server funcionality to the server (call it a first cut).

2010-06-20 23:15:52 +00:00

utils.c

Added support for parsing and processing SPA requests over HTTP. Beefed up verbose logging a bit. Added some more sanity checks on the validity of incoming SPA data before attempting to decode.

2010-06-20 15:22:41 +00:00

utils.h

Added support for parsing and processing SPA requests over HTTP. Beefed up verbose logging a bit. Added some more sanity checks on the validity of incoming SPA data before attempting to decode.

2010-06-20 15:22:41 +00:00