fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2013-10-31	Change error subcode for unsupported method from method name to method list	Matthias Schiffer
	When two peers don't support a common method, fastd should notice this in the list stage, so the method list subcode is correct. The method name subcode was a legacy of the 0.4 compatiblity code.
2013-10-29	handshake: get_method() code simplification	Matthias Schiffer

2013-10-29	Drop compatiblity code for fastd 0.4	Matthias Schiffer

2013-10-29	Handle methods as strings	Matthias Schiffer

2013-10-29	Allow using libsodium instead of NaCl	Matthias Schiffer
	As libsodium has some strange include files (like a version.h), we try to use absolute include paths whenever possible in fastd now and rename our generated headers.
2013-10-28	Organize method and protocol source files into distinct source directories	Matthias Schiffer

2013-10-24	Fix maybe-uninitialized warning	Matthias Schiffer

2013-10-20	Don't print fastd version from handshake requests when secure handshakes are ↵	Matthias Schiffer
	set, instead print it on handshake finish
2013-10-20	Don't send chosen method name when it doesn't matter	Matthias Schiffer

2013-10-20	Align handshake buffer	Matthias Schiffer

2013-10-20	Always check for mode and protocol mismatches	Matthias Schiffer
	This was accidentially disabled in the previous commit for initial handshake requests.
2013-10-20	Refactor handshake code, prevent downgrade attacks	Matthias Schiffer

2013-10-19	Rename RECORD_HANDSHAKE_MAC to RECORD_TLV_MAC	Matthias Schiffer

2013-10-19	Authenticate the TLV records only	Matthias Schiffer

2013-10-19	Use the rsv2 field in the handshake header as an optional length field to ↵	Matthias Schiffer
	facilitate future extensions
2013-10-19	Get rid of packet.h	Matthias Schiffer

2013-10-19	Add a HMAC to authenticate all handshake TLV	Matthias Schiffer

2013-10-16	Initiate handshake when a packet can't be sent because the local address is ↵	Matthias Schiffer
	invalid
2013-08-29	Replace old task queue	Matthias Schiffer
	The handshakes are now schedules in a doubly-linked list that is maintained as a part of the peer structure.
2013-08-17	Make handshake records const uint8_t* instead of void*	Matthias Schiffer
	This enforces explicit casting and thus avoids alignment problems.
2013-07-25	Move _GNU_SOURCE define to types.h	Matthias Schiffer

2013-06-09	Fix some whitespace errors	Matthias Schiffer

2013-04-20	Greatly improve handling of hosts with multiple IP addresses	Matthias Schiffer

2013-02-23	Use fastd_peer_t instead of fastd_peer_config_t in handshake code	Matthias Schiffer
	Directly using the peers allows us to get rid of the inefficient get_peer() function and is necessary for adding support for unknown peers.
2013-01-21	Fix indentation in handshake packet alloc	Matthias Schiffer

2013-01-21	Add error message for OOM on buffer alloc	Matthias Schiffer

2013-01-05	Adjust copyright years	Matthias Schiffer

2013-01-04	Move const specifiers in handshake record names to the correct place	Matthias Schiffer

2012-12-18	Convert type names to _t convention	Matthias Schiffer

2012-11-01	Dynamically create and destroy sockets without fixed binds	Matthias Schiffer

2012-10-29	Add support for multiple binds	Matthias Schiffer

2012-07-02	Remove unneeded include	Matthias Schiffer

2012-07-01	Add missing _GNU_SOURCE definition	Matthias Schiffer

2012-07-01	Add support for multiple crypto methods without reconfiguration	Matthias Schiffer

2012-07-01	Fix invalid print on handshake failure with an unknown code.	Matthias Schiffer

2012-06-04	Add version string to handshake	Matthias Schiffer

2012-04-19	Don't regenerate session handshake keypair for every handshake so a global ↵	Matthias Schiffer
	state can be used; remove the concept of temporary peers These changes will fix the possibility of a TCP-SYN-Flood-like DoS attack, at the cost of another protocol change: as we can't count request IDs when we don't know have temporary peers, request IDs are removed completely.
2012-04-14	Reduce task queue usage	Matthias Schiffer

2012-04-14	Fix reply for failed handshakes	Matthias Schiffer

2012-04-14	Separate handshake from encryption method	Matthias Schiffer

2012-04-02	Critical fix of a bug allowing DoS by sending invalid handshakesv0.1-rc4	Matthias Schiffer

2012-04-02	Warn on MTU mismatchv0.1-rc3	Matthias Schiffer

2012-04-01	Use 2 bytes to encode handshake field types and lengths; breaks compatiblity ↵	Matthias Schiffer
	with v0.1-rc2 and earlier
2012-03-31	Trigger handshake when unexpected data is received from a floating peer	Matthias Schiffer

2012-03-30	Make ecfxp protocol work with new handshake	Matthias Schiffer

2012-03-30	Rework handshake... again. ecfxp protocol broken, will be fixed with next ↵	Matthias Schiffer
	commit.
2012-03-28	Add license headers to Flex and Bison files; also remove Quicktun note as we ↵	Matthias Schiffer
	don't actually use any of is code
2012-03-28	Make crypto handshake with floating peers work	Matthias Schiffer

2012-03-27	New handshake format; don't respond to data packets from unknown peers with ↵	Matthias Schiffer
	handshakes, but request a re-handshake
2012-03-26	fastd_handshake_handle: Use data pointer instead of base	Matthias Schiffer