Michael Rash 43b770320a [server] Require sig ID's or fingerprints when sigs are validated ...

When validating access.conf stanzas make sure that one of
GPG_REMOTE_ID or GPG_FINGERPRINT_ID is specified whenever GnuPG
signatures are to be verified for incoming SPA packets. Signature
verification is the default, and can only be disabled with
GPG_DISABLE_SIG but this is NOT recommended.

2014-06-30 11:52:42 -04:00

..

access.c

[server] Require sig ID's or fingerprints when sigs are validated

2014-06-30 11:52:42 -04:00

access.conf

[server] update access.conf comments to conform to no trailing semicolon or colon within the variable name

2013-05-22 21:21:59 -04:00

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

[server] Validate GPG sigs with libfko fko_gpg_signature_id_match() function

2014-04-09 23:56:03 -04:00

cmd_opts.h

add --fault-injection-tag support to the client/server/libfko

2014-06-05 23:05:49 -04:00

config_init.c

[server] minor fwknopd --help output update

2014-06-09 20:40:44 -04:00

config_init.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

extcmd.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

extcmd.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_ipf.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_ipf.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_ipfw.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_ipfw.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_iptables.c

[test suite] add several fault injection tests

2014-06-12 00:02:18 -04:00

fw_util_iptables.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_pf.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util_pf.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fw_util.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

fwknopd_common.h

[server] add access.conf variable GPG_FINGERPRINT_ID

2014-06-30 11:11:09 -04:00

fwknopd_errors.c

[server] add --dump-serv-err-codes for test coverage

2014-05-02 22:59:05 -04:00

fwknopd_errors.h

[server] add --exit-parse-config option, man page updates (minor formatting change)

2014-05-04 09:17:27 -04:00

fwknopd.8.in

add --fault-injection-tag support to the client/server/libfko

2014-06-05 23:05:49 -04:00

fwknopd.c

[server] Call clean_exit() from daemon parent process

2014-06-30 10:09:39 -04:00

fwknopd.conf

[client+server] verify GnuPG signatures by default

2014-03-25 19:53:13 -04:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

incoming_spa.c

[server] add access.conf variable GPG_FINGERPRINT_ID

2014-06-30 11:11:09 -04:00

incoming_spa.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

log_msg.c

replace malloc() with calloc() calls

2014-03-15 22:02:57 -04:00

log_msg.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

Makefile.am

merged in the fixes_for_2.0.4 branch

2013-01-19 18:36:52 -05:00

pcap_capture.c

[server] skip firewall rules check in --test mode

2014-06-12 00:01:12 -04:00

pcap_capture.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

process_packet.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

process_packet.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

replay_cache.c

replace malloc() with calloc() calls

2014-03-15 22:02:57 -04:00

replay_cache.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

sig_handler.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

sig_handler.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

tcp_server.c

[server] add test coverage for tcp server when FUZZING_INTERFACES is defined

2014-05-02 22:29:03 -04:00

tcp_server.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

utils.c

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00

utils.h

fix header non-ascii chars, and introduce test suite support for detecting this in source files

2014-03-14 09:14:35 -04:00