fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2013-11-02	Implement the first step towards a more flexible way to support crypto methods	Matthias Schiffer

2013-10-29	Allow using libsodium instead of NaCl	Matthias Schiffer
	As libsodium has some strange include files (like a version.h), we try to use absolute include paths whenever possible in fastd now and rename our generated headers.
2013-10-28	Organize method and protocol source files into distinct source directories	Matthias Schiffer

2013-09-06	Change directory to / when privileges are dropped or the user is changed	Matthias Schiffer

2013-09-03	Add packet/byte statistics	Matthias Schiffer

2013-08-29	Don't initialize monotone timestamps with zero	Matthias Schiffer
	The monotone timestamp is near zero on linux systems, confusing fastd.
2013-08-29	Replace old task queue	Matthias Schiffer
	The handshakes are now schedules in a doubly-linked list that is maintained as a part of the peer structure.
2013-08-29	Simplify keepalive sending	Matthias Schiffer
	By using a global keepalive timer, the O(n) keepalive queue purge operation on every send operation is avoided.
2013-08-28	ec25519: ensure that there is always a handshake enqueued after sending a ↵	Matthias Schiffer
	handshake finish This ensures that the handshake is repeated in case the finish packet is lost.
2013-08-27	Introduce new log level debug2 for potentially very frequent messages	Matthias Schiffer

2013-08-20	Fix lots of -Wextra warnings	Matthias Schiffer
	Everything clang and GCC warn about, except GCC's missing-field-initializers which are just stupid as they don't allow {} syntax to zero a field.
2013-08-12	Add pre-up and post-down handlers	Matthias Schiffer

2013-08-12	Install signal handlers later so key generation can be interrupted	Matthias Schiffer

2013-08-07	Use multi-af tun mode on FreeBSD to make IPv6 work on tun	Matthias Schiffer

2013-08-07	Move tun/tap initialization to a dedicated source file	Matthias Schiffer

2013-08-07	Include net/if_tun.h instead of linux/if_tun.h on non-Linux systems	Matthias Schiffer

2013-07-29	Fix assertion fail on key renewal handshakes with peers without remotes	Matthias Schiffer

2013-07-25	Move more code out of fastd.c	Matthias Schiffer

2013-07-25	Move send functions out of fastd.c	Matthias Schiffer

2013-07-25	Move socket handling out of fastd.c	Matthias Schiffer

2013-07-25	Move _GNU_SOURCE define to types.h	Matthias Schiffer

2013-07-25	Improve handling of similar remote resolves	Matthias Schiffer

2013-07-25	Set IP_MTU_DISCOVER on sockets	Matthias Schiffer

2013-07-24	Include IP address in "sending handshake" debug messages	Matthias Schiffer

2013-07-24	Allow specifying multiple remote entries for a single peer	Matthias Schiffer

2013-07-24	Remove handing for packets received on wrong sockets (this shouldn't happen)	Matthias Schiffer

2013-07-24	Don't let resolves delay handshakes	Matthias Schiffer

2013-07-24	Don't initialize peers before dropping privileges	Matthias Schiffer

2013-07-23	Use schedule_handshake in handle_resolv_returns	Matthias Schiffer

2013-07-23	Don't trigger a resolve when a packet from an unknown peer is received	Matthias Schiffer

2013-07-12	Supply the correct sockaddr size for bind	Matthias Schiffer

2013-05-20	Optimize send_all() to allow zero-copy TUN mode	Matthias Schiffer

2013-05-20	Add send_all() function to reduce duplicate code	Matthias Schiffer

2013-05-19	Simplify TUN/TAP receive handling	Matthias Schiffer

2013-05-19	Simplify send funktion	Matthias Schiffer

2013-05-19	Cast void* to char* before pointer arithmetic	Matthias Schiffer

2013-05-19	Simplify handling of received packets	Matthias Schiffer

2013-05-19	Add a missing return in handle_socket_receive_known()	Matthias Schiffer

2013-05-19	Simplify socket receive path	Matthias Schiffer

2013-04-22	Miscellaneous fixes in ethernet address handling	Matthias Schiffer
	Check the length of ethernet frames, and the fastd_eth_addr_t structure must be packed.
2013-04-20	Greatly improve handling of hosts with multiple IP addresses	Matthias Schiffer

2013-04-17	Fix handling of the local address in shell commands	Matthias Schiffer
	Without this fix, using on-establish/disestablish/verify would cause a strange zero port when a bind with a random port was used, and a segmentation fault with dynamic binds.
2013-03-08	Handle duplicate keys	Matthias Schiffer
	When two peers are configured with the same key, disable both. When a temporary peer's key is configured, delete the temporary key.
2013-03-08	Allow disabling previously enabled peers	Matthias Schiffer

2013-03-08	Disable peer configs by default, enable on peer creation	Matthias Schiffer
	This allows to remove some duplicate code, and will simplify the detection and handling of duplicate keys.
2013-03-04	Load peer dirs in the last step of the configuration	Matthias Schiffer
	Loading the peer dirs directly led to peers being discovered in a different order after reconfigure.
2013-03-02	Don't crash on empty UDP packets	Matthias Schiffer

2013-03-02	Print error message on aborts due to buffer push/pull errors	Matthias Schiffer

2013-02-27	Allow temporary peers when no other floating or dynamic peers are configured	Matthias Schiffer

2013-02-27	Don't set the peer address for temporary peers before the session is ↵	Matthias Schiffer
	actually established Doing so could lead to duplicate address entries in different peers, causing very strange behaviour. Add additional parameters for the local and the peer address to fastd_shell_exec() to allow the on-verify script to use this information nevertheless.