fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2013-02-27	Don't include linux/if_alg.h when it is not needed	Matthias Schiffer

2013-02-27	Don't set the peer address for temporary peers before the session is ↵	Matthias Schiffer
	actually established Doing so could lead to duplicate address entries in different peers, causing very strange behaviour. Add additional parameters for the local and the peer address to fastd_shell_exec() to allow the on-verify script to use this information nevertheless.
2013-02-27	Refactor fastd_peer_claim_address	Matthias Schiffer

2013-02-26	Don't reset "seen" timestamp on peer reset	Matthias Schiffer

2013-02-26	Experimental support for accepting connections from unknown peers	Matthias Schiffer

2013-02-25	Fix shell command exit status message, for real.	Matthias Schiffer

2013-02-25	Fix shell exit status warning condition	Matthias Schiffer

2013-02-25	Rewrite 'git describe' version support to update the version whenever needed	Matthias Schiffer

2013-02-25	Add public keys to shell environment	Matthias Schiffer

2013-02-25	Set some more environment variables for shell commands	Matthias Schiffer

2013-02-25	Get rid of some duplicate code for calling shell commands	Matthias Schiffer

2013-02-23	Differentiate between reasons for ignoring a handshake	Matthias Schiffer

2013-02-23	Subtract splay time to key refresh interval	Matthias Schiffer
	A random splay time of up to 5 minutes will ensure that simultaneous handshakes with many peers are desynchronized as fast as possible.
2013-02-23	Fail initialization when a default socket can't be bound	Matthias Schiffer

2013-02-23	Print port for "any" address in bind log messages	Matthias Schiffer

2013-02-23	Implement simple peer dump triggered by SIGUSR1	Matthias Schiffer

2013-02-23	Use git version with --dirty	Matthias Schiffer

2013-02-23	Use 'git describe' output as version string when available	Matthias Schiffer

2013-02-23	Use fastd_peer_t instead of fastd_peer_config_t in handshake code	Matthias Schiffer
	Directly using the peers allows us to get rid of the inefficient get_peer() function and is necessary for adding support for unknown peers.
2013-01-24	Remove some .gitignore entries	Matthias Schiffer
	As these are specific to my build environment, these better go to .git/info/exclude
2013-01-24	Don't reset peer address on repeated resolves	Matthias Schiffer
	This can lead to handshakes being ignored for an indefinite time.
2013-01-24	resolver: write whole hostname instead of a pointer to the resolver pipe	Matthias Schiffer
	Shouldn't make a difference, but feels cleaner now, and silences a clang-analyzer warning.
2013-01-21	Remove unneded calls to method functions in head and tail space calculation	Matthias Schiffer

2013-01-21	Fix indentation in handshake packet alloc	Matthias Schiffer

2013-01-21	Add error message for OOM on buffer alloc	Matthias Schiffer

2013-01-15	Move version number to build system	Matthias Schiffer

2013-01-12	Post-release version bump	Matthias Schiffer

2013-01-10	fastd 7v7	Matthias Schiffer

2013-01-10	Be less verbose about acquiring capabilities	Matthias Schiffer

2013-01-09	Improve checking of received handshake keys	Matthias Schiffer

2013-01-09	Update to libuecc v3, check EC points for validity	Matthias Schiffer

2013-01-05	Adjust copyright years	Matthias Schiffer

2013-01-04	Add some debug output to uid/gid switching	Matthias Schiffer

2013-01-04	Set supplementary groups	Matthias Schiffer

2013-01-04	Move const specifiers in handshake record names to the correct place	Matthias Schiffer

2012-12-26	And another unused include...	Matthias Schiffer

2012-12-26	Remove unused include	Matthias Schiffer

2012-12-25	Remove capability locking feature	Matthias Schiffer
	This isn't our job, so there is no reason to support this.
2012-12-24	Add user switching and capability support	Matthias Schiffer

2012-12-24	Add WITH_CAPABILITIES CMake flag and check for libcap	Matthias Schiffer

2012-12-23	Add example systemd unit	Matthias Schiffer

2012-12-23	Set FD_CLOEXEC on all file descriptors, use non-blocking IO for sockets and TUN	Matthias Schiffer

2012-12-23	Fix up all usage of deprecated libuecc API	Matthias Schiffer

2012-12-23	Use new pkg-config support of libuecc	Matthias Schiffer

2012-12-18	Install fastd binary to PREFIX/bin	Matthias Schiffer

2012-12-18	Convert type names to _t convention	Matthias Schiffer

2012-12-13	Always convert v4-mapped IPv6 addresses to IPv4 addresses	Matthias Schiffer

2012-12-13	Add helper function to simplify v4-mapped addresses	Matthias Schiffer

2012-12-13	Reduce v4-mapped IPv6 addresses to IPv4 addresses	Matthias Schiffer
	We need this for "any" binds to work correctly again.
2012-12-08	Only try to set MTU when it isn't correct	Matthias Schiffer
	This allows fastd to run completely without root privileges when the TUN/TAP device is pre-created