fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2017-05-19	Remove unnecessary OpenSSL initialization and cleanup	Matthias Schiffer
	Some of these functions have been deprecated in OpenSSL 1.1; in any case, the calls aren't necessary.
2016-09-15	Use raise(...) instead of kill(getpid(), ...)	Matthias Schiffer

2016-02-22	Add "drop privileges force" option which allows to drop CAP_NET_ADMIN even ↵	Matthias Schiffer
	when fastd thinks it might still need it
2016-02-22	Improve capability handling, retain required capabilities	Matthias Schiffer

2016-02-22	Update copyright years	Matthias Schiffer

2016-02-22	socket: improve and simplify error handling	Matthias Schiffer
	Rather exit on errors we're unlikely to recover from than retrying indefinitely.
2016-02-21	Print UID and GID as unsigned in log message	Matthias Schiffer

2016-02-21	Replace setuid/setgid with setresuid/setresgid (or setreuid/setregid)	Matthias Schiffer
	The semantics of setuid in SUID processes are not entirely clear on all Unix-like systems. Better use setresuid to drop privileges where available.
2015-12-21	Don't block fatal signals	Matthias Schiffer

2015-12-21	Terminate with the received signal	Matthias Schiffer

2015-11-10	Implement generic task queue to handle handshakes and maintenance	Matthias Schiffer

2015-11-09	Check return value of sodium_init()	Matthias Schiffer
	Fixes a warning with -Wunused-result.
2015-11-09	Use a global ioctl socket	Matthias Schiffer
	Based-on-patch-by: Julian Kornberger <jk+github@digineo.de>
2015-10-20	Improve include_directories to prevent conflicts between system and fastd ↵	Matthias Schiffer
	headers In in-tree builds, fastd's poll.h was conflicting with the system one on non-Linux systems.
2015-10-18	config: make on_up/down/establish/disestablish commands configurable per ↵	Matthias Schiffer
	peer group
2015-03-23	Move ifname logic from peer to iface	Matthias Schiffer

2015-03-23	Improve sync/async execution of up/down scripts	Matthias Schiffer

2015-03-23	peer: set peer name in on-up environment for peer-specific interfaces	Matthias Schiffer

2015-03-23	Some Android fixes for issues introduced by multi-interface support	Matthias Schiffer
	Not really tested, I'll do that when the multiif support is finished.
2015-03-23	iface: add ifname argument	Matthias Schiffer

2015-03-23	Don't reset peers twice on start in TUN mode	Matthias Schiffer

2015-03-23	iface: make fastd_iface_open() gracefully (at least on Linux, for now)	Matthias Schiffer

2015-03-23	Use peer-specific interface in TUN mode	Matthias Schiffer

2015-03-23	Configure static peers before capabilities are dropped	Matthias Schiffer

2015-03-22	Rename tuntap to iface to match struct name	Matthias Schiffer

2015-03-22	First work towards multi-interface support	Matthias Schiffer

2015-03-22	Refactor poll API	Matthias Schiffer

2015-01-20	Implement new hash table to keep track of unknown peers handshakes have been ↵	Matthias Schiffer
	sent to This should significantly reduce the number of handshakes sent after restarting fastd with many active connections.
2015-01-14	Refactor handling of platforms without user/group settings (Android)	Matthias Schiffer

2015-01-14	Update copyright years	Matthias Schiffer

2015-01-14	Add Android 4.1+ support. See doc/README-Android.md for build HOWTO.	Rick Lei
	* Update CMake files to work with android-cmake * Use unix domain socket for communicating with Android GUI * May also run standalone but requires rooted Android device
2015-01-14	Reset all connections on SIGUSR2	Matthias Schiffer

2014-09-15	status: add uptime and established times	Matthias Schiffer

2014-09-06	Fix async command waitpid error handling (again...)	Matthias Schiffer

2014-09-05	Add status socket to get the current status as JSON	Matthias Schiffer

2014-09-04	Support dynamic binds with extra options (interface binds, specific ↵	Matthias Schiffer
	addresses...)
2014-09-01	Remove old state dump feature	Matthias Schiffer
	It will be replaced by a nicer version.
2014-08-24	Coding style: always add a space between a pointer's type and the *	Matthias Schiffer

2014-08-24	Use simple int64_t timestamps in ms instead of timespecs	Matthias Schiffer

2014-08-24	Fix waitpid EINTR error on SIGCHLD	Matthias Schiffer
	waitpid may fail with EINTR for SIGCHLD even when all signals are blocked.
2014-08-24	Merge peer config into peer structure	Matthias Schiffer
	With this refactoring, the structure fastd_peer_config_t is merged into fastd_peer_t, and fastd_remote_config_t into fastd_remote_t. This also means we now create peers directly when reading their configurations, which significantly simplifies the whole reload process, and prepares for some future optimizations like a key hash table. Note: This commit is too big, but I couldn't come up with a nice way to split it into smaller pieces...
2014-08-22	Remove VECTOR_ALLOC	Matthias Schiffer
	It is done automatically now if the VECTOR is zeroed before.
2014-08-19	Create peer structures for disabled peers as well	Matthias Schiffer
	We have a 1:1 association between peers and peer configs now.
2014-08-18	Unify enabled and dynamic flags into a config_state flag	Matthias Schiffer

2014-08-18	Rename WITH_VERIFY CMake option to WITH_DYNAMIC_PEERS	Matthias Schiffer

2014-08-18	peer: add a flag `dynamic' instead of checking the config field for NULL	Matthias Schiffer

2014-08-18	Rename "temporary peers" to "dynamic peers"	Matthias Schiffer

2014-08-09	Move fastd_config_t.peers to fastd_context_t.peer_configs	Matthias Schiffer

2014-08-02	Encapsulate semaphore handling	Matthias Schiffer

2014-08-02	Introduce and use alloc helpers	Matthias Schiffer
	These new helpers will terminate fastd on allocation failures and add some additional convenience (allow strdup with NULL; typesafe new(type) macros).