fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2014-06-10	Clean up peer config loading	Matthias Schiffer
	Instead of changing the peer list and peer group in the main conf during (re-)loading, add a parser state which contains this information.
2014-05-31	Split main function	Matthias Schiffer
	init() is still a bit long, but much better than before.
2014-05-29	Document everything	Matthias Schiffer

2014-05-29	Simplify configuration of cipher and MAC implementations	Matthias Schiffer
	Let the cipher and MAC handlers just store the chosen implementations themselves instead of relying on the global configuration.
2014-05-25	Unify fastd_peer_group_t and fastd_peer_group_config_t into a single structure	Matthias Schiffer

2014-05-25	Make a few struct fields that are not supposed to be changed defines instead	Matthias Schiffer

2014-05-22	Move fastd_loglevel_t to log.h	Matthias Schiffer

2014-05-01	Remove support for log files	Matthias Schiffer
	syslog/journald do a much better job at organizing logs, with the additional advantage of proper log rotation. If someone really wants to have a log file for fastd, they can just redirect stderr.
2014-04-26	Make on-verify support optional	Matthias Schiffer

2014-04-26	Implement async verify	Matthias Schiffer

2014-04-24	config: remove support for deprecated float syntax	Matthias Schiffer

2014-04-21	Fix peer group tree traversal when reading peer dirs	Matthias Schiffer
	This broke when conf was made global.
2014-04-20	Make ctx global	Matthias Schiffer

2014-04-20	Make conf global	Matthias Schiffer

2014-04-19	Free on-connect handler on exit	Matthias Schiffer

2014-04-19	Optimize maintenance routine (and don't run it more often than necessary)	Matthias Schiffer

2014-04-11	Improve shell command config handling	Matthias Schiffer

2014-03-20	Enable secure handshakes by default	Matthias Schiffer

2014-03-14	Adjust copyright years	Matthias Schiffer

2014-03-10	Make --verify-config option more flexible	Matthias Schiffer

2014-01-26	Add support for link-local bind addresses	Matthias Schiffer

2014-01-26	Add support for setting packet marks	Matthias Schiffer

2013-12-16	config: don't check configuration before logging has been set up	Matthias Schiffer

2013-11-30	Make crypto implementation configurable (and update a few error messages)	Matthias Schiffer

2013-11-30	Clean up some parts of the configuration handling (and fix a few little bugs)	Matthias Schiffer

2013-11-30	Rename methods to methods providers and method contexts to methods to ↵	Matthias Schiffer
	reflect their function better
2013-11-30	Perform string-based lookup of method-related information only once	Matthias Schiffer

2013-11-29	Reorder check: avoid undefined behaviour due to negative or to long shifts	Matthias Schiffer

2013-11-20	Replace max_packet_size functions by a max_overhead field	Matthias Schiffer

2013-11-20	Slightly simplify method/cipher/MAC definitions	Matthias Schiffer

2013-11-15	config: move check for no configured method	Matthias Schiffer
	First check all error conditions before getting to the warnings (this is important for --generate-key). Also, downgrade the exit_bug to exit_error if method `null' is not supported.
2013-11-02	Move a few prototypes from fastd.h into a new config.h	Matthias Schiffer

2013-11-02	Convert ghash to the new crypto algorithm scheme	Matthias Schiffer

2013-11-02	Convert aes128-gcm into a generic gcm method	Matthias Schiffer

2013-11-02	Allow flexible specification of methods provided by an implementation	Matthias Schiffer

2013-11-02	Implement the first step towards a more flexible way to support crypto methods	Matthias Schiffer

2013-10-29	Rename fastd_parse_method_name to fastd_method_get_by_name	Matthias Schiffer

2013-10-29	Generate method list automagically	Matthias Schiffer

2013-10-29	config: iterate over configured methods only in configure_method_parameters()	Matthias Schiffer

2013-10-29	Handle methods as strings	Matthias Schiffer

2013-10-20	Warn when no encryption method is set	Matthias Schiffer

2013-10-16	Add `secure handshakes' option (without effect for now)	Matthias Schiffer
	Not setting the option produces a warning (so not having it set is deprecated now), so we can change the default from no to yes in a few release cycles.
2013-08-29	Simplify keepalive sending	Matthias Schiffer
	By using a global keepalive timer, the O(n) keepalive queue purge operation on every send operation is avoided.
2013-08-28	ec25519: ensure old sessions are invalidated quickly after a new one has ↵	Matthias Schiffer
	been established
2013-08-27	Introduce new log level debug2 for potentially very frequent messages	Matthias Schiffer

2013-08-20	OpenBSD doesn't support IPv4 on IPv6 sockets	Matthias Schiffer

2013-08-20	Fix lots of -Wextra warnings	Matthias Schiffer
	Everything clang and GCC warn about, except GCC's missing-field-initializers which are just stupid as they don't allow {} syntax to zero a field.
2013-08-17	Check closedir return value	Matthias Schiffer
	Just for the sake of completeness.
2013-08-17	Use readdir instead of readdir_r	Matthias Schiffer
	readdir_r can be unsafe for very long filenames.
2013-08-14	Implement new lexer that is not generated by flex to reduce code size	Matthias Schiffer