Commit graph

926 commits

Author SHA1 Message Date
da31c063de Nicer log message on failed link-local binds 2014-01-26 09:36:50 +01:00
534ae7240b Add support for link-local bind addresses 2014-01-26 09:23:00 +01:00
b78d55b69e Allow scoped IPv6 addresses for remotes using the usual notation 2014-01-26 08:55:35 +01:00
e975ea01bb Apply the unknown peer handshake timeout to all peers 2014-01-26 06:03:32 +01:00
26cf96bea0 Switch to the new timeout helpers where possible 2014-01-26 06:00:04 +01:00
76d955efa5 Get rid of long_ago variable, use timeout helpers 2014-01-26 05:17:34 +01:00
9fe7f35ce8 Add timeout helpers 2014-01-26 04:48:35 +01:00
53d331406d Add support for setting packet marks 2014-01-26 03:37:36 +01:00
cc498848b3 lex: add support for octal and hexadecimal integer literals 2014-01-26 02:21:57 +01:00
17019f0db3 lex: use array_size for keywords 2014-01-26 02:05:19 +01:00
23d90c62f2 Add minimum handshake interval for unknown addresses (handles up to 8 addresses for now) 2014-01-26 01:52:00 +01:00
8430688acb ec25519-fhmqvc/handshake: use min_handshake_interval instead of hardcoding backoff timeout 2014-01-26 01:26:03 +01:00
02d87af372 Add debug2 log level to usage output 2014-01-26 00:57:31 +01:00
b10ab0ff2a Remove unused REPLY_TYPES 2014-01-26 00:54:59 +01:00
f983154677 Mark assembler files as not needing executable stack 2014-01-25 07:12:48 +01:00
29560ff76a fastd v11 2013-12-27 00:23:57 +01:00
7a46ebd00d Only fail due to missing pclmul support if the pclmulqdq GHASH implementation is actually enabled 2013-12-26 05:48:09 +01:00
6709236699 Check if the compiler supports -mpclmul 2013-12-26 05:45:13 +01:00
50639c9c2e resolve: avoid using alloca as OpenBSD doesn't find it with -std=c99 2013-12-26 02:12:45 +01:00
7755b22419 Change fastd_cpuid back to use inline assembly to support non-Linux systems again 2013-12-26 00:47:12 +01:00
a1733e2334 main: reorder a few initialization calls to initialize as little as possible before we are sure we must 2013-12-25 05:38:06 +01:00
39cad1bbbe Fix invalid memory accesses after failed resolves 2013-12-24 02:24:30 +01:00
960b06de85 Fix segfault on session refresh for peers without remotes 2013-12-24 02:16:33 +01:00
6bcbf234b1 Remove a pointless assert 2013-12-23 22:53:10 +01:00
41cf6b6ef4 After a peer was ignored because of a peer limit, always re-resolve the first remote 2013-12-23 22:35:17 +01:00
ca79dc4bdd Always reset to the first address of the first remote 2013-12-23 20:52:10 +01:00
f7cdd48892 config: don't check configuration before logging has been set up 2013-12-16 21:51:04 +01:00
794958aa78 resolve: consider all addresses returned for a hostname 2013-12-16 20:33:53 +01:00
ee300afb79 Revert "resolve: save a timestamp in the resolve return to ensure we don't confuse remotes before and after reconfiguration"
This reverts commit 4475652054.
2013-12-16 19:53:16 +01:00
4475652054 resolve: save a timestamp in the resolve return to ensure we don't confuse remotes before and after reconfiguration 2013-12-16 19:27:07 +01:00
c91f3ac6ac Implement proper double-fork with --daemon 2013-12-16 18:47:21 +01:00
7f7041b1ff Never write to syslog/log files during key generation 2013-12-16 16:48:58 +01:00
8e9c9bc6ec Remove blowfish-ctr cipher, it's much slower than Salsa20 and probably less secure 2013-12-14 18:25:52 +01:00
cd1ed6a4c5 Add support for <cipher>+<cipher>+gmac methods 2013-12-05 14:08:56 +01:00
3d6e771dd2 Merge generic-gcm method into generic-gmac 2013-12-05 13:52:52 +01:00
822c9e935a Change xor and xor_a back to work on pointers
For some reason, this makes GCC generate much better code on MIPS with -Os
2013-12-04 19:15:56 +01:00
35748654f3 Add fast SSE2 implementations "xmm" for Salsa20 and Salsa20/12
Public Domain implementations by D. J. Bernstein, see
http://cr.yp.to/snuffle.html
2013-12-01 07:40:27 +01:00
8e6154d53b xsalsa20-poly1305: swap nonce byte order to make it backwards compatible 2013-12-01 04:03:19 +01:00
5ea41672d7 Change common packet header: flags comes first, nonce is big endian 2013-12-01 03:49:55 +01:00
e8d93e2c7a Remove a few `aligned' attributes that don't make sense 2013-12-01 03:18:27 +01:00
57d5ec7368 xsalsa20-poly1305: partly convert to the new method helpers 2013-11-30 08:34:21 +01:00
60d7347aa6 generic-gcm: drop compat support 2013-11-30 08:13:07 +01:00
c00e275e5b composed-gmac: convert to the new common method helpers 2013-11-30 07:53:23 +01:00
eb891d772d generic-gmac: convert to the new common method helpers 2013-11-30 07:46:01 +01:00
bba8249f4a generic-gcm: convert to the new common method helpers 2013-11-30 07:38:08 +01:00
53be4c96b3 cipher-test: use the new common header helpers 2013-11-30 07:28:56 +01:00
9dacff2507 generic-poly1305: add helper functions to handle the common header 2013-11-30 07:17:29 +01:00
4e42aeadec generic-poly1305: use the new buffer helpers 2013-11-30 06:41:05 +01:00
20e9e0920d Move buffer-related functions to a new header and add some more utility functions 2013-11-30 06:33:17 +01:00
f4b53bd063 Move logging defines to a new header 2013-11-30 06:20:54 +01:00