fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2014-01-26	Switch to the new timeout helpers where possible	Matthias Schiffer

2014-01-26	Get rid of long_ago variable, use timeout helpers	Matthias Schiffer

2013-12-23	Always reset to the first address of the first remote	Matthias Schiffer

2013-12-16	resolve: consider all addresses returned for a hostname	Matthias Schiffer

2013-11-29	Compile with -std=c99 and restructure some code to ensure there is no ↵	Matthias Schiffer
	invalid aliasing (hopefully)
2013-10-31	Don't delay initial handshakes when no peer limit is set	Matthias Schiffer

2013-08-29	Don't initialize monotone timestamps with zero	Matthias Schiffer
	The monotone timestamp is near zero on linux systems, confusing fastd.
2013-08-29	Replace old task queue	Matthias Schiffer
	The handshakes are now schedules in a doubly-linked list that is maintained as a part of the peer structure.
2013-08-28	ec25519: ensure that there is always a handshake enqueued after sending a ↵	Matthias Schiffer
	handshake finish This ensures that the handshake is repeated in case the finish packet is lost.
2013-08-20	Use v4-mapped addresses for IPv4 peers on IPv6 sockets	Matthias Schiffer
	This is needed at least on FreeBSD
2013-08-20	Fix lots of -Wextra warnings	Matthias Schiffer
	Everything clang and GCC warn about, except GCC's missing-field-initializers which are just stupid as they don't allow {} syntax to zero a field.
2013-08-07	Add sys/wait.h includes where necessary on FreeBSD	Matthias Schiffer

2013-07-25	Move _GNU_SOURCE define to types.h	Matthias Schiffer

2013-07-25	Improve handling of similar remote resolves	Matthias Schiffer

2013-07-24	Fix remote record memory leak	Matthias Schiffer

2013-07-24	Fix fastd_peer_claim_address for peers with different addresses	Matthias Schiffer

2013-07-24	Allow specifying multiple remote entries for a single peer	Matthias Schiffer

2013-07-24	Don't let resolves delay handshakes	Matthias Schiffer

2013-07-23	Prepare for improved peer state handling	Matthias Schiffer

2013-07-19	Generalize float attribute, deprecate old float syntax	Matthias Schiffer

2013-07-17	Use calloc to allocate peer configs	Matthias Schiffer

2013-04-24	Initialize local address on peer creation	Matthias Schiffer

2013-04-20	Greatly improve handling of hosts with multiple IP addresses	Matthias Schiffer

2013-04-17	Fix handling of the local address in shell commands	Matthias Schiffer
	Without this fix, using on-establish/disestablish/verify would cause a strange zero port when a bind with a random port was used, and a segmentation fault with dynamic binds.
2013-03-08	Disable peer configs by default, enable on peer creation	Matthias Schiffer
	This allows to remove some duplicate code, and will simplify the detection and handling of duplicate keys.
2013-03-03	Make 'peer limit 0' allow no connections	Matthias Schiffer

2013-02-27	Don't set the peer address for temporary peers before the session is ↵	Matthias Schiffer
	actually established Doing so could lead to duplicate address entries in different peers, causing very strange behaviour. Add additional parameters for the local and the peer address to fastd_shell_exec() to allow the on-verify script to use this information nevertheless.
2013-02-27	Refactor fastd_peer_claim_address	Matthias Schiffer

2013-02-26	Don't reset "seen" timestamp on peer reset	Matthias Schiffer

2013-02-26	Experimental support for accepting connections from unknown peers	Matthias Schiffer

2013-02-25	Get rid of some duplicate code for calling shell commands	Matthias Schiffer

2013-01-05	Adjust copyright years	Matthias Schiffer

2012-12-18	Convert type names to _t convention	Matthias Schiffer

2012-12-13	Add helper function to simplify v4-mapped addresses	Matthias Schiffer

2012-12-08	Free socket before handshake if no address is set to avoid crash	Matthias Schiffer

2012-12-08	Revert "Fix crash occuring under certain circumstances on resolve failure"	Matthias Schiffer
	This reverts commit 6330d8abe044c26ca8d0c0246f9d075c53779782.
2012-12-08	Fix crash occuring under certain circumstances on resolve failure	Matthias Schiffer
	When a dynamic peer is in handshake state and a previous resolve has returned an address, the peer must be reset on a resolve failure even when there is no established session to avoid aborting on the next handshake.
2012-11-10	Keep track of configured peer count correctly on dynamic reloads	Matthias Schiffer

2012-11-05	Only delay initial handshakes for groups with constraints	Matthias Schiffer

2012-11-05	Add randomized initial handshake delays	Matthias Schiffer
	This delay should barely be noticable, and it will make fastd connect to a random choice of peers when a peer limit is set
2012-11-05	Implement peer limit constraints	Matthias Schiffer

2012-11-05	Implement peer groups	Matthias Schiffer

2012-11-05	Fix some more bugs in fastd_peer_claim_address	Matthias Schiffer

2012-11-04	Reset dynamic peer if there is an established session and resolve fails	Matthias Schiffer
	Fixes an assertion fail when address resolution fails during session refresh.
2012-11-02	Keep track of corresonding peers in associated sockets	Matthias Schiffer

2012-11-01	Dynamically create and destroy sockets without fixed binds	Matthias Schiffer

2012-11-01	Move unistd.h include to fastd.h	Matthias Schiffer

2012-10-29	Add support for multiple binds	Matthias Schiffer

2012-06-15	Allow setting dynamic peers to flaoting	Matthias Schiffer

2012-06-15	Avoid using the same handshake key to establish more than one session	Matthias Schiffer
	This fix prevents a potential attack using intentional packet reordering to initialize more than one session with using the same handshake keys, leading to more that one session to be initialized with the same key data altogether, allowing to decrypt some packets in the worst case.