| 2013-07-25 |
Ian Jackson | site: support multiple transforms
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site, transform: per-transform-instance max_start_pad
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site, netlink: abolish max_end_pad and min_end_pad
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: dynamically create and destroy transform instances
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: Check transform errors; factor out transform...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: interpret first 4 bytes of extrainfo as capabilities
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: use unaligned.h's functions, not pointer cast...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: Extra info in name fields for MSG1, clearer processing
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: fix site name checking leaving room for expansion
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | NOTES: Remove unimplemented protocol negotiation
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | NOTES: Remove paragraph about slow-to-prepare messages
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | NOTES: Improve documentation of NAKs.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: Send NAKs for undecryptable data packets (msg0)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | udp, util: Break out send_nak function
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | udp.c: Do not send NAKs in response to NAKs
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | magic: Introduce LABEL_NAK
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Provide Serpent-EAX transform
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Pass a direction flag to the transform
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Allow DH to set the key size
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: split out transform-common.h
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | EAX: provide an implementation of EAX
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | crypto: Copy an AES (Rijndael) implementation into...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | crypto: Copy a SHA512 implementation into tree
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent: Ad-hoc debugging facility
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent: Provide little-endian version too, but ours...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent, transform: rework GET_32BIT_MSB_FIRST, PUT_...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent: const-correct
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Do not look at any bytes of PKCS#5 padding...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | memcmp: Introduce and use consttime_memeq
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | util, buffers: Preparatory improvements
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | unaligned.h: rationalise; provide buf_append_uint8...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Mark Wooding | rsa.c: Check public key length.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Mark Wooding | rsa.c: Replace the magic length 1024 with a (larger...
|
commit | commitdiff | tree |
| 2013-07-25 |
Mark Wooding | rsa.c: Factor out constructing the EMSA-PKCS1 message...
|
commit | commitdiff | tree |
| 2013-07-25 |
Mark Wooding | rsa.c: Fix incorrect commentary.
|
commit | commitdiff | tree |
| 2013-07-03 |
Simon Tatham | slip: tolerate SLIP decoding errors.
|
commit | commitdiff | tree |
| 2013-07-03 |
Simon Tatham | tun: add hard routes even if they are currently down.
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | build system: debian packaging improvements
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | changelog: describe version 0.3.0
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: When if our MSG5s (or peer's MSG6s) get lost...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Keep old keys, and allow them to be used by peer
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Generalise deletion and timeout of keys
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Move current_transform, _key_timeout and remote_sessio...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: No longer track key validity ourselves
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | transform: add ->valid() function
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Deal with losing our MSG6 - retransmit MSG6 when...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Deal with losing peer's MSG6 - go to RUN on MSG0...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site, transform: Do not initiate rekey when packets...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Remove pointless check from decrypt_msg0
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Break out separate function for decrypting msg0
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | netlink: abolish check_config and output_config
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | netlink: report why a packet is bad
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: transport peers: fix incorrect stride when debug...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | messages: add some missing newlines
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | log: Print truncated messages
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | log: Eliminate potential out-of-control recursion
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | Makefile: honour EXTRA_CFLAGS, etc.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | SECURITY: actually reject messages with improper lengths
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | userv-ipif: Always request routes from userv, regardless...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Matthew Vernon | build system: Update build-dependency information
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Do not permit "include" in simple...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: In -u mode, output file "dereferences...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Do newline-trimming in pline()
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Actually include addresses in sites...
Author: Ian Jackson <ijackson@chiark.greenend.org.uk>
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: If definition found in wrong place...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: New -P <prefix> option
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Allow sites with no address
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Fix userv invocation after pfilepath
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-17 |
Ian Jackson | netlink: Fix up link down behaviour
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-16 |
Ian Jackson | userv-ipif: Always request routes from userv, regardless...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-16 |
Ian Jackson | make-secnet-sites: new "include" keyword
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-15 |
Ian Jackson | make-secnet-sites: refactor to break out new function...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-11 |
Ian Jackson | build system: More release checklist updates
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-11 |
Ian Jackson | Update VERSION
|
commit | commitdiff | tree |
| 2011-12-11 |
Ian Jackson | build system: Fix Ian's email address in debian/changelog
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-11 |
Ian Jackson | authbind: get endianness right (again)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-10 |
Ian Jackson | Update VERSION
|
commit | commitdiff | tree |
| 2011-12-10 |
Ian Jackson | build system: Further improvements to release checklist
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-10 |
Ian Jackson | build system: Include signing of tarballs in release...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-10 |
Ian Jackson | build system: New "make dist" uses git; add release...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-10 |
Richard Kettlewell | md5: correct size arg to memset().
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Mobile sites: Update test example
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Multiple udp ports: Add to test
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Multiple udp ports for the same site (multiple "comm"s)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Mobile sites: Support in make-secnet-sites
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Mobile sites: Use different default tuning parameters
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Mobile sites: Require specification of whether we think...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Mobile sites: Maintain multiple addresses for some...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Protocol change: Initiate key setup on incoming packets...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | comm, udp: Provide an addr_to_string method
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Site tuning defaults: Improve documentation; internal...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | comm, site: pass a new "struct comm_addr" rather than...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | site: When shutting down, if debug enabled, do dump...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | site: Remove some spurious "break"s
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Keepalives: Document that they're unimplemented; remove...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | cleanup: Style improvement to python literals in make...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | cleanup: provide helpful FILLZERO macro (for certain...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | secnet.h: provide helpful STRING macro (for preprocessor...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-08-17 |
Ian Jackson | Test example: improve logging, choice of ports
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-07-13 |
Ian Jackson | Security: Reduce impact of bogus key setup packet DoS
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| next |
~mdw / secnet / search