fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2015-01-06	handshake: get rid of stpcpy	Matthias Schiffer
	stpcpy was added in POSIX.1-2008 and is not present on some systems like Android.
2014-10-22	Use big endian for handshake field values by default	Matthias Schiffer
	At the moment the only multi-byte field is the MTU; it is kept in little endian to provide backwards compatiblity. Future fields will be big endian.
2014-09-20	Some handshake fixes for future protocol extensions	Matthias Schiffer
	Extensions for arbitrary-length integers.
2014-09-04	Nicer handshake error messages instead of "unacceptable value"	Matthias Schiffer

2014-08-24	Coding style: always add a space between a pointer's type and the *	Matthias Schiffer

2014-08-02	Introduce and use alloc helpers	Matthias Schiffer
	These new helpers will terminate fastd on allocation failures and add some additional convenience (allow strdup with NULL; typesafe new(type) macros).
2014-05-28	Still more documentation	Matthias Schiffer

2014-04-25	handshake: simplify fastd_handshake_new_reply	Matthias Schiffer
	This will hopefully lead to an async verify implementation...
2014-04-20	Make ctx global	Matthias Schiffer

2014-04-20	Make conf global	Matthias Schiffer

2014-03-14	Adjust copyright years	Matthias Schiffer

2014-01-26	Remove unused REPLY_TYPES	Matthias Schiffer

2013-11-30	Perform string-based lookup of method-related information only once	Matthias Schiffer

2013-10-31	Change error subcode for unsupported method from method name to method list	Matthias Schiffer
	When two peers don't support a common method, fastd should notice this in the list stage, so the method list subcode is correct. The method name subcode was a legacy of the 0.4 compatiblity code.
2013-10-29	handshake: get_method() code simplification	Matthias Schiffer

2013-10-29	Drop compatiblity code for fastd 0.4	Matthias Schiffer

2013-10-29	Handle methods as strings	Matthias Schiffer

2013-10-29	Allow using libsodium instead of NaCl	Matthias Schiffer
	As libsodium has some strange include files (like a version.h), we try to use absolute include paths whenever possible in fastd now and rename our generated headers.
2013-10-28	Organize method and protocol source files into distinct source directories	Matthias Schiffer

2013-10-24	Fix maybe-uninitialized warning	Matthias Schiffer

2013-10-20	Don't print fastd version from handshake requests when secure handshakes are ↵	Matthias Schiffer
	set, instead print it on handshake finish
2013-10-20	Don't send chosen method name when it doesn't matter	Matthias Schiffer

2013-10-20	Align handshake buffer	Matthias Schiffer

2013-10-20	Always check for mode and protocol mismatches	Matthias Schiffer
	This was accidentially disabled in the previous commit for initial handshake requests.
2013-10-20	Refactor handshake code, prevent downgrade attacks	Matthias Schiffer

2013-10-19	Rename RECORD_HANDSHAKE_MAC to RECORD_TLV_MAC	Matthias Schiffer

2013-10-19	Authenticate the TLV records only	Matthias Schiffer

2013-10-19	Use the rsv2 field in the handshake header as an optional length field to ↵	Matthias Schiffer
	facilitate future extensions
2013-10-19	Get rid of packet.h	Matthias Schiffer

2013-10-19	Add a HMAC to authenticate all handshake TLV	Matthias Schiffer

2013-10-16	Initiate handshake when a packet can't be sent because the local address is ↵	Matthias Schiffer
	invalid
2013-08-29	Replace old task queue	Matthias Schiffer
	The handshakes are now schedules in a doubly-linked list that is maintained as a part of the peer structure.
2013-08-17	Make handshake records const uint8_t* instead of void*	Matthias Schiffer
	This enforces explicit casting and thus avoids alignment problems.
2013-07-25	Move _GNU_SOURCE define to types.h	Matthias Schiffer

2013-06-09	Fix some whitespace errors	Matthias Schiffer

2013-04-20	Greatly improve handling of hosts with multiple IP addresses	Matthias Schiffer

2013-02-23	Use fastd_peer_t instead of fastd_peer_config_t in handshake code	Matthias Schiffer
	Directly using the peers allows us to get rid of the inefficient get_peer() function and is necessary for adding support for unknown peers.
2013-01-21	Fix indentation in handshake packet alloc	Matthias Schiffer

2013-01-21	Add error message for OOM on buffer alloc	Matthias Schiffer

2013-01-05	Adjust copyright years	Matthias Schiffer

2013-01-04	Move const specifiers in handshake record names to the correct place	Matthias Schiffer

2012-12-18	Convert type names to _t convention	Matthias Schiffer

2012-11-01	Dynamically create and destroy sockets without fixed binds	Matthias Schiffer

2012-10-29	Add support for multiple binds	Matthias Schiffer

2012-07-02	Remove unneeded include	Matthias Schiffer

2012-07-01	Add missing _GNU_SOURCE definition	Matthias Schiffer

2012-07-01	Add support for multiple crypto methods without reconfiguration	Matthias Schiffer

2012-07-01	Fix invalid print on handshake failure with an unknown code.	Matthias Schiffer

2012-06-04	Add version string to handshake	Matthias Schiffer

2012-04-19	Don't regenerate session handshake keypair for every handshake so a global ↵	Matthias Schiffer
	state can be used; remove the concept of temporary peers These changes will fix the possibility of a TCP-SYN-Flood-like DoS attack, at the cost of another protocol change: as we can't count request IDs when we don't know have temporary peers, request IDs are removed completely.