summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2012-06-24Release 0.4v0.4Matthias Schiffer
2012-06-19Don't re-resolve dynamic-floating peers on key refreshMatthias Schiffer
2012-06-15Version incrementv0.4-rc13Matthias Schiffer
2012-06-15Allow setting dynamic peers to flaotingMatthias Schiffer
2012-06-15Avoid using the same handshake key to establish more than one sessionMatthias Schiffer
This fix prevents a potential attack using intentional packet reordering to initialize more than one session with using the same handshake keys, leading to more that one session to be initialized with the same key data altogether, allowing to decrypt some packets in the worst case.
2012-06-07Limit handshake frequency where possibleMatthias Schiffer
2012-06-07Fix memory leakMatthias Schiffer
2012-06-06Limit resolve frequencyMatthias Schiffer
2012-06-06Improve some log levelsMatthias Schiffer
2012-06-05Increase reorder countMatthias Schiffer
2012-06-05Increment rc versionv0.4-rc12Matthias Schiffer
2012-06-05Fix possible duplicate session establishmentMatthias Schiffer
This is causing duplicate nonces in the worst case.
2012-06-05printf: add %p patternMatthias Schiffer
2012-06-05Add support for receiving reordered packetsMatthias Schiffer
2012-06-04Increment rc versionv0.4-rc11Matthias Schiffer
2012-06-04Make sure refresh handshakes aren't cleanedMatthias Schiffer
2012-06-04Fix key invalidation order on key refreshMatthias Schiffer
2012-06-04Add version string to handshakeMatthias Schiffer
2012-06-04Decreate keepalive intervalMatthias Schiffer
2012-06-04Add pidfile supportMatthias Schiffer
2012-06-04Improve handshake loggingMatthias Schiffer
2012-06-02Fix warning messageMatthias Schiffer
2012-06-01Fix a possible crash involving strange resolve returnsMatthias Schiffer
fastd has been seen crashing on some hosts under strange circumstances. As the bug seems to involve invalid address families, try to assure no unsupported address families are returned from resolver.
2012-05-24Increase rc versionv0.4-rc10Matthias Schiffer
2012-05-24Fix segfault on logging during configMatthias Schiffer
2012-05-18Uninline pr_logMatthias Schiffer
2012-05-18Increment rc versionv0.4-rc9Matthias Schiffer
2012-05-18Don't consider enable state on peer config change detectionMatthias Schiffer
2012-05-18New logging facilitiesMatthias Schiffer
2012-05-17Add daemon modeMatthias Schiffer
2012-05-17Close inherited file handlesv0.4-rc8Matthias Schiffer
2012-05-17Fix handling of unsuccessful resolveMatthias Schiffer
2012-05-04Free eth_addr list on exitMatthias Schiffer
2012-05-04Zero out resolve return to silence valgrind warningMatthias Schiffer
2012-05-03Use pipe to transmit resolved addresses to main threadv0.4-rc7Matthias Schiffer
2012-05-03Fix critical error introduced by copy-and-pasting, another possible NULL ↵Matthias Schiffer
dereference
2012-05-03Critical fix: ignore disabled peers when searching peer key to avoid NULL ↵v0.4-rc6Matthias Schiffer
dereference
2012-04-27Increment rcv0.4-rc5Matthias Schiffer
2012-04-27Automatically set interface MTUMatthias Schiffer
2012-04-25Send handshakes after resolve even when the connection is already ↵v0.4-rc4Matthias Schiffer
established for session refreshs to work
2012-04-23resolve: don't set AI_IDN, it will fail with uClibcv0.4-rc3Matthias Schiffer
2012-04-22Ignore handshakes for 15 seconds after session establishment to avoid ↵v0.4-rc2Matthias Schiffer
excessive and concurrent handshakes
2012-04-22Add --show-key and --machine-readable optionsMatthias Schiffer
2012-04-22Ignore peers with own keyMatthias Schiffer
2012-04-19Don't regenerate session handshake keypair for every handshake so a global ↵Matthias Schiffer
state can be used; remove the concept of temporary peers These changes will fix the possibility of a TCP-SYN-Flood-like DoS attack, at the cost of another protocol change: as we can't count request IDs when we don't know have temporary peers, request IDs are removed completely.
2012-04-18Simplity option code, improve help page formattingMatthias Schiffer
2012-04-17Add --help pageMatthias Schiffer
2012-04-17Revert using hostname as peer printf string as we'll always have a name when ↵Matthias Schiffer
a hostname is given
2012-04-16Make sure we don't get interupted by signals when we can't handle them properlyMatthias Schiffer
2012-04-16Cancel start if no peers are configuredMatthias Schiffer
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 21:48:49 +0100