fastd

fastd/fastd

Fork 0

mirror of https://github.com/neocturne/fastd.git synced 2025-05-15 12:45:09 +02:00

Commit graph

0001460efa Suppress error message when no .git directory is found Matthias Schiffer 2013-03-04 20:36:09 +01:00
367d37aaf2 Fix git-describe version command Matthias Schiffer 2013-03-04 20:31:00 +01:00
08a60265a2 Load peer dirs in the last step of the configuration Matthias Schiffer 2013-03-04 17:16:23 +01:00
195be08c47 Make 'peer limit 0' allow no connections Matthias Schiffer 2013-03-03 18:41:36 +01:00
ff78f87f9b Fix typo in --log-level help text Matthias Schiffer 2013-03-03 08:34:56 +01:00
be28b733d8 Remove the word "version" from usage text Matthias Schiffer 2013-03-03 05:48:15 +01:00
4af0c6c0bc Don't crash on empty UDP packets Matthias Schiffer 2013-03-02 14:32:54 +01:00
84413b1fe3 Print error message on aborts due to buffer push/pull errors Matthias Schiffer 2013-03-02 14:25:06 +01:00
65af863089 Re-verify unknown peers on each handshake Matthias Schiffer 2013-03-01 07:04:09 +01:00
68bb9f3996 Identify peers be key in log output when no name is available Matthias Schiffer 2013-03-01 06:42:05 +01:00
e5415f2b02 Allow temporary peers when no other floating or dynamic peers are configured Matthias Schiffer 2013-02-27 21:23:19 +01:00
69452cb695 Don't include linux/if_alg.h when it is not needed Matthias Schiffer 2013-02-27 18:22:04 +01:00
ddb4831f06 Don't set the peer address for temporary peers before the session is actually established Matthias Schiffer 2013-02-27 04:42:50 +01:00
3fb7af313f Refactor fastd_peer_claim_address Matthias Schiffer 2013-02-27 04:23:50 +01:00
0b2285d570 Don't reset "seen" timestamp on peer reset Matthias Schiffer 2013-02-26 23:07:41 +01:00
4ab4858d54 Experimental support for accepting connections from unknown peers Matthias Schiffer 2013-02-26 01:02:35 +01:00
87b9b80a55 Fix shell command exit status message, for real. Matthias Schiffer 2013-02-25 21:54:00 +01:00
2041c0c21c Fix shell exit status warning condition Matthias Schiffer 2013-02-25 21:47:51 +01:00
f19b8c4d82 Rewrite 'git describe' version support to update the version whenever needed Matthias Schiffer 2013-02-25 07:01:28 +01:00
da76188360 Add public keys to shell environment Matthias Schiffer 2013-02-25 05:26:45 +01:00
0b6cc8b646 Set some more environment variables for shell commands Matthias Schiffer 2013-02-25 05:01:45 +01:00
698ede3ce4 Get rid of some duplicate code for calling shell commands Matthias Schiffer 2013-02-25 04:48:11 +01:00
b3ba14d473 Differentiate between reasons for ignoring a handshake Matthias Schiffer 2013-02-23 21:23:44 +01:00
54c6ff1c41 Subtract splay time to key refresh interval Matthias Schiffer 2013-02-23 20:16:13 +01:00
48a3812435 Fail initialization when a default socket can't be bound Matthias Schiffer 2013-02-23 20:08:51 +01:00
9a0cba318b Print port for "any" address in bind log messages Matthias Schiffer 2013-02-23 20:00:03 +01:00
eeb1d34f36 Implement simple peer dump triggered by SIGUSR1 Matthias Schiffer 2013-02-23 19:48:55 +01:00
14e1db6c57 Use git version with --dirty Matthias Schiffer 2013-02-23 19:30:57 +01:00
67b5d50701 Use 'git describe' output as version string when available Matthias Schiffer 2013-02-23 18:46:23 +01:00
2c0f4a5abb Use fastd_peer_t instead of fastd_peer_config_t in handshake code Matthias Schiffer 2013-02-23 14:28:33 +01:00
a9ca525870 Remove some .gitignore entries Matthias Schiffer 2013-01-24 20:48:30 +01:00
a883af1652 Don't reset peer address on repeated resolves Matthias Schiffer 2013-01-24 13:30:44 +01:00
d1b4837082 resolver: write whole hostname instead of a pointer to the resolver pipe Matthias Schiffer 2013-01-24 13:21:48 +01:00
bb15efd020 Remove unneded calls to method functions in head and tail space calculation Matthias Schiffer 2013-01-21 19:27:00 +01:00
a84ce92843 Fix indentation in handshake packet alloc Matthias Schiffer 2013-01-21 19:09:09 +01:00
998300562e Add error message for OOM on buffer alloc Matthias Schiffer 2013-01-21 19:07:56 +01:00
96c3ad683d Move version number to build system Matthias Schiffer 2013-01-15 20:16:37 +01:00
1c75236ea2 Post-release version bump Matthias Schiffer 2013-01-12 08:14:40 +01:00
c0e3083431 fastd 7 v7 Matthias Schiffer 2013-01-10 17:20:57 +01:00
7fb8be25e3 Be less verbose about acquiring capabilities Matthias Schiffer 2013-01-10 17:18:08 +01:00
c5721fd15c Improve checking of received handshake keys Matthias Schiffer 2013-01-09 10:59:45 +01:00
2e11c07f23 Update to libuecc v3, check EC points for validity Matthias Schiffer 2013-01-09 10:37:22 +01:00
80645ad347 Adjust copyright years Matthias Schiffer 2013-01-05 21:34:19 +01:00
b296e814ae Add some debug output to uid/gid switching Matthias Schiffer 2013-01-04 16:30:14 +01:00
9b21400404 Set supplementary groups Matthias Schiffer 2013-01-04 16:25:31 +01:00
6aa3b1b12a Move const specifiers in handshake record names to the correct place Matthias Schiffer 2013-01-04 16:02:53 +01:00
8d2ccbd7e5 And another unused include... Matthias Schiffer 2012-12-26 20:39:50 +01:00
9cf7b53dd6 Remove unused include Matthias Schiffer 2012-12-26 20:05:48 +01:00
ae28e7c8b1 Remove capability locking feature Matthias Schiffer 2012-12-25 17:22:29 +01:00
78440eab81 Add user switching and capability support Matthias Schiffer 2012-12-24 23:52:18 +01:00
eaac494273 Add WITH_CAPABILITIES CMake flag and check for libcap Matthias Schiffer 2012-12-24 17:14:40 +01:00
cd8ab035e6 Add example systemd unit Matthias Schiffer 2012-12-23 22:35:31 +01:00
4d8a5e4160 Set FD_CLOEXEC on all file descriptors, use non-blocking IO for sockets and TUN Matthias Schiffer 2012-12-23 22:18:25 +01:00
3883abb85a Fix up all usage of deprecated libuecc API Matthias Schiffer 2012-12-23 21:23:33 +01:00
3c19fd226e Use new pkg-config support of libuecc Matthias Schiffer 2012-12-23 21:11:51 +01:00
577a9c0ed6 Install fastd binary to PREFIX/bin Matthias Schiffer 2012-12-18 21:03:39 +01:00
224ea7b081 Convert type names to _t convention Matthias Schiffer 2012-12-18 21:00:44 +01:00
766a0c145d Always convert v4-mapped IPv6 addresses to IPv4 addresses Matthias Schiffer 2012-12-13 18:02:39 +01:00
505eb46494 Add helper function to simplify v4-mapped addresses Matthias Schiffer 2012-12-13 17:51:00 +01:00
da4d1d1586 Reduce v4-mapped IPv6 addresses to IPv4 addresses Matthias Schiffer 2012-12-13 14:13:51 +01:00
b3b4397734 Only try to set MTU when it isn't correct Matthias Schiffer 2012-12-08 23:52:28 +01:00
6b6099a630 Maximum interface name length is IFNAMSIZ-1, not IFNAMSIZ Matthias Schiffer 2012-12-08 23:35:39 +01:00
268aefb54c Free socket before handshake if no address is set to avoid crash Matthias Schiffer 2012-12-08 17:51:22 +01:00
9a155e4c51 Revert "Fix crash occuring under certain circumstances on resolve failure" Matthias Schiffer 2012-12-08 17:46:34 +01:00
6330d8abe0 Fix crash occuring under certain circumstances on resolve failure Matthias Schiffer 2012-12-08 12:54:41 +01:00
64754a379d Increment version for new development Matthias Schiffer 2012-12-08 12:54:10 +01:00
656175881b fastd 6 v6 Matthias Schiffer 2012-11-10 18:06:14 +01:00
6ef24092b5 Keep track of configured peer count correctly on dynamic reloads Matthias Schiffer 2012-11-10 15:20:39 +01:00
13c71785b5 Don't allow global config statements in peer groups Matthias Schiffer 2012-11-10 14:55:41 +01:00
68b33305cc Give the default peer group a name Matthias Schiffer 2012-11-10 14:47:28 +01:00
c0e60d4823 Truncate PID file Matthias Schiffer 2012-11-08 08:47:19 +01:00
93ee0d9cb3 fastd 6-rc1 v6-rc1 Matthias Schiffer 2012-11-06 20:46:38 +01:00
2bf6746fb7 Get rid of some annoyances with peer limits Matthias Schiffer 2012-11-05 23:46:27 +01:00
f7244b9309 Don't inline send_handshake Matthias Schiffer 2012-11-05 23:37:01 +01:00
65e60edefc Only delay initial handshakes for groups with constraints Matthias Schiffer 2012-11-05 22:48:34 +01:00
773e84403f Add randomized initial handshake delays Matthias Schiffer 2012-11-05 22:35:29 +01:00
8f60a96b84 Implement peer limit constraints Matthias Schiffer 2012-11-05 22:24:42 +01:00
f631c10660 Implement peer groups Matthias Schiffer 2012-11-05 18:26:55 +01:00
0c2f5da165 Fix some more bugs in fastd_peer_claim_address Matthias Schiffer 2012-11-05 10:11:17 +01:00
51aa24d4a2 Reset dynamic peer if there is an established session and resolve fails Matthias Schiffer 2012-11-04 17:06:35 +01:00
2791d3bc99 Improve handling of associated sockets in key matching Matthias Schiffer 2012-11-02 09:27:58 +01:00
2f81a97f5c Directly use peer when receiving on associated sockets Matthias Schiffer 2012-11-02 09:02:35 +01:00
74b73a980b Keep track of corresonding peers in associated sockets Matthias Schiffer 2012-11-02 08:56:54 +01:00
cb98cbc593 Dynamically create and destroy sockets without fixed binds Matthias Schiffer 2012-11-01 15:11:40 +01:00
86df5dbefe Move unistd.h include to fastd.h Matthias Schiffer 2012-11-01 15:11:25 +01:00
42e44a0b5c Handle socket errors Matthias Schiffer 2012-11-01 12:14:32 +01:00
80cbd0c9bd Refactor bind address configuration Matthias Schiffer 2012-11-01 11:04:39 +01:00
921485a5bc Allow setting IPv[46] default bind addresses Matthias Schiffer 2012-10-29 23:06:24 +01:00
2f021fd3e1 Allow setting bind interface Matthias Schiffer 2012-10-29 22:48:06 +01:00
2c6a4b5c11 Fix bind error messages Matthias Schiffer 2012-10-29 22:45:08 +01:00
078b835209 Add support for multiple binds Matthias Schiffer 2012-10-29 22:21:47 +01:00
f5462bd63a config: Simplify default_config() Matthias Schiffer 2012-10-29 11:04:38 +01:00
6626f28fc9 fastd v0.5 v0.5 Matthias Schiffer 2012-09-21 15:53:56 +02:00
2acd81bd7a Nicely encapsulate different crypto algorithm implementations Matthias Schiffer 2012-09-21 15:07:11 +02:00
65912e3e6f Imcrement rc version v0.5-rc4 Matthias Schiffer 2012-09-16 07:42:49 +02:00
2506e2c63e Handle posix_memalign return value Matthias Schiffer 2012-09-16 07:40:05 +02:00
e01b70358e Increment rc version v0.5-rc3 Matthias Schiffer 2012-09-16 07:28:28 +02:00
ce1b13c5ea Make implementations used for AES128-CTR and GHASH configurable. Matthias Schiffer 2012-09-16 05:28:45 +02:00
7305c53351 Fix alignment for NaCl's core2 assembler implementation of AES128-CTR Matthias Schiffer 2012-09-16 05:22:38 +02:00
094ecaf3b7 Ignore SIGPIPE Matthias Schiffer 2012-09-16 00:27:07 +02:00