fwknop

Files

Michael Rash 73bc473563 [client+server] verify GnuPG signatures by default

- [server] When GnuPG is used, the default now is to require that
incoming SPA packets are signed by a key listed in GPG_REMOTE_ID for each
access.conf stanza. In other words, the usage of GPG_REQUIRE_SIG
is no longer necessary in order to authenticate SPA packets via the
GnuPG signature. Verification of GnuPG signatures can be disabled with a
new access.conf variable GPG_DISABLE_SIG, but this is NOT a
recommended configuration.
- [client+server] Add --gpg-exe command line argument and GPG_EXE
config variable to ~/.fwknoprc and the access.conf file so that the path
to GnuPG can be changed from the default /usr/bin/gpg path.

2014-03-25 19:53:13 -04:00

conf

[client+server] verify GnuPG signatures by default

2014-03-25 19:53:13 -04:00

fko-wrapper

[test suite] exercise fko_base64_encode() and fko_base64_decode() in fko-wrapper

2014-03-18 20:37:47 -04:00

fuzzing

move fuzzing_spa_packets file to perl/FKO/t/ for fuzzing tests

2013-11-26 21:44:53 -05:00

test-coverage

updated untested function list for Linux systems

2013-02-12 22:18:16 -05:00

tests

[client+server] verify GnuPG signatures by default

2014-03-25 19:53:13 -04:00

fko-python.py

[test suite] minor python update to use a main() function

2013-10-22 21:38:47 -04:00

hardening-check

added stack protection detection for OpenBSD systems

2011-10-28 22:59:52 -04:00

local_spa.key

added local_spa.key file

2011-12-05 22:20:39 -05:00

README

added run-test-suite.sh LD_LIBRARY_PATH wrapper

2012-11-03 16:50:26 -04:00

run-test-suite.sh

[test suite] buf fix for DYLD_LIBRARY_PATH on Mac OS X systems

2014-02-02 20:29:14 -05:00

test-fwknop.pl

[client+server] verify GnuPG signatures by default

2014-03-25 19:53:13 -04:00

README

This directory contains the fwknop test suite.  After compiling the fwknop
sources in the parent directory of test/ the test suite can be executed.  One
of the most comprehensive ways of executing the test suite is as follows:

# ./run-test-suite.sh --enable-all

This mode enables IP resolution tests, so you will need Internet access in this
case.  If this is not possible or desirable, then another comprehensive testing
mode can be achieved with:

# ./run-test-suite.sh --enable-recompile --enable-perl-module-checks --enable-distcheck

Additional detail on the test suite (including --diff and --enable-valgrind
modes) may be found in the fwknop tutorial available here:

http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#3.5