Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-04-25 | handshake: simplify fastd_handshake_new_reply | Matthias Schiffer | |
This will hopefully lead to an async verify implementation... | |||
2014-04-20 | Make ctx global | Matthias Schiffer | |
2014-04-20 | Make conf global | Matthias Schiffer | |
2014-03-14 | Adjust copyright years | Matthias Schiffer | |
2014-01-26 | Remove unused REPLY_TYPES | Matthias Schiffer | |
2013-11-30 | Perform string-based lookup of method-related information only once | Matthias Schiffer | |
2013-10-31 | Change error subcode for unsupported method from method name to method list | Matthias Schiffer | |
When two peers don't support a common method, fastd should notice this in the list stage, so the method list subcode is correct. The method name subcode was a legacy of the 0.4 compatiblity code. | |||
2013-10-29 | handshake: get_method() code simplification | Matthias Schiffer | |
2013-10-29 | Drop compatiblity code for fastd 0.4 | Matthias Schiffer | |
2013-10-29 | Handle methods as strings | Matthias Schiffer | |
2013-10-29 | Allow using libsodium instead of NaCl | Matthias Schiffer | |
As libsodium has some strange include files (like a version.h), we try to use absolute include paths whenever possible in fastd now and rename our generated headers. | |||
2013-10-28 | Organize method and protocol source files into distinct source directories | Matthias Schiffer | |
2013-10-24 | Fix maybe-uninitialized warning | Matthias Schiffer | |
2013-10-20 | Don't print fastd version from handshake requests when secure handshakes are ↵ | Matthias Schiffer | |
set, instead print it on handshake finish | |||
2013-10-20 | Don't send chosen method name when it doesn't matter | Matthias Schiffer | |
2013-10-20 | Align handshake buffer | Matthias Schiffer | |
2013-10-20 | Always check for mode and protocol mismatches | Matthias Schiffer | |
This was accidentially disabled in the previous commit for initial handshake requests. | |||
2013-10-20 | Refactor handshake code, prevent downgrade attacks | Matthias Schiffer | |
2013-10-19 | Rename RECORD_HANDSHAKE_MAC to RECORD_TLV_MAC | Matthias Schiffer | |
2013-10-19 | Authenticate the TLV records only | Matthias Schiffer | |
2013-10-19 | Use the rsv2 field in the handshake header as an optional length field to ↵ | Matthias Schiffer | |
facilitate future extensions | |||
2013-10-19 | Get rid of packet.h | Matthias Schiffer | |
2013-10-19 | Add a HMAC to authenticate all handshake TLV | Matthias Schiffer | |
2013-10-16 | Initiate handshake when a packet can't be sent because the local address is ↵ | Matthias Schiffer | |
invalid | |||
2013-08-29 | Replace old task queue | Matthias Schiffer | |
The handshakes are now schedules in a doubly-linked list that is maintained as a part of the peer structure. | |||
2013-08-17 | Make handshake records const uint8_t* instead of void* | Matthias Schiffer | |
This enforces explicit casting and thus avoids alignment problems. | |||
2013-07-25 | Move _GNU_SOURCE define to types.h | Matthias Schiffer | |
2013-06-09 | Fix some whitespace errors | Matthias Schiffer | |
2013-04-20 | Greatly improve handling of hosts with multiple IP addresses | Matthias Schiffer | |
2013-02-23 | Use fastd_peer_t instead of fastd_peer_config_t in handshake code | Matthias Schiffer | |
Directly using the peers allows us to get rid of the inefficient get_peer() function and is necessary for adding support for unknown peers. | |||
2013-01-21 | Fix indentation in handshake packet alloc | Matthias Schiffer | |
2013-01-21 | Add error message for OOM on buffer alloc | Matthias Schiffer | |
2013-01-05 | Adjust copyright years | Matthias Schiffer | |
2013-01-04 | Move const specifiers in handshake record names to the correct place | Matthias Schiffer | |
2012-12-18 | Convert type names to _t convention | Matthias Schiffer | |
2012-11-01 | Dynamically create and destroy sockets without fixed binds | Matthias Schiffer | |
2012-10-29 | Add support for multiple binds | Matthias Schiffer | |
2012-07-02 | Remove unneeded include | Matthias Schiffer | |
2012-07-01 | Add missing _GNU_SOURCE definition | Matthias Schiffer | |
2012-07-01 | Add support for multiple crypto methods without reconfiguration | Matthias Schiffer | |
2012-07-01 | Fix invalid print on handshake failure with an unknown code. | Matthias Schiffer | |
2012-06-04 | Add version string to handshake | Matthias Schiffer | |
2012-04-19 | Don't regenerate session handshake keypair for every handshake so a global ↵ | Matthias Schiffer | |
state can be used; remove the concept of temporary peers These changes will fix the possibility of a TCP-SYN-Flood-like DoS attack, at the cost of another protocol change: as we can't count request IDs when we don't know have temporary peers, request IDs are removed completely. | |||
2012-04-14 | Reduce task queue usage | Matthias Schiffer | |
2012-04-14 | Fix reply for failed handshakes | Matthias Schiffer | |
2012-04-14 | Separate handshake from encryption method | Matthias Schiffer | |
2012-04-02 | Critical fix of a bug allowing DoS by sending invalid handshakesv0.1-rc4 | Matthias Schiffer | |
2012-04-02 | Warn on MTU mismatchv0.1-rc3 | Matthias Schiffer | |
2012-04-01 | Use 2 bytes to encode handshake field types and lengths; breaks compatiblity ↵ | Matthias Schiffer | |
with v0.1-rc2 and earlier | |||
2012-03-31 | Trigger handshake when unexpected data is received from a floating peer | Matthias Schiffer | |