| 2014-04-24 |
Ian Jackson | netlink: fix IP length check (SECURITY)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Only complain about initial frags for us
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | fragmentation: Fragment packets as required
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | util.h: Provide MIN and MAX macros
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Provide MDEBUG macro
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Break out netlink_host_deliver
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Abolish client param to netlink_icmp_simple
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | fragmentation: Rename "frag_off" field to "frag"
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Make ip_csum and ip_fast_csum const-correct
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Be more conservative about ICMP errors
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Set "unused" in ICMP header (SECURITY)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | fragmentation: Fix fragmentation field check
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | slip: Drop packets >mtu (SECURITY)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | test-example: USE mtu of 1400 not 500 (!)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | test-example: Provide test which uses unshare(8)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Remove a newline from p-t-p startup message
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Avoid crash with clientless netlink
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2014-04-24 |
Ian Jackson | netlink: Break out netlink_client_deliver
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-09-01 |
Ian Jackson | Fix formatting error in secnet.8 manpage.
|
commit | commitdiff | tree |
| 2013-09-01 |
Ian Jackson | more release checklist changes
|
commit | commitdiff | tree |
| 2013-09-01 |
Ian Jackson | Updates to release checklist in Makefile.in.
|
commit | commitdiff | tree |
| 2013-09-01 |
Ian Jackson | Release of 0.3.0. No code changes since 0.3.0~beta3.
|
commit | commitdiff | tree |
| 2013-08-05 |
Ian Jackson | changelog, Makefile: finalise 0.3.0~beta3
|
commit | commitdiff | tree |
| 2013-08-05 |
Ian Jackson | changelog: 0.3.0~beta3~~iwj1
|
commit | commitdiff | tree |
| 2013-08-05 |
Ian Jackson | site: Initialise st->scratch with SETUP_BUFFER_LEN...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-08-01 |
Ian Jackson | changelog: Mention netlink short packet discard.
|
commit | commitdiff | tree |
| 2013-08-01 |
Ian Jackson | netlink: Safely discard short packets
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | changelog: Describe 0.3.0~beta2
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: New PROD message
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | slip: Buffer management (max_start_pad) fixes
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | udp.c: call buffer_init
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | max_start_pad: calculate globally, not via client graph
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | Use FORMAT everywhere, and fix up the errors it finds
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: support multiple transforms
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site, transform: per-transform-instance max_start_pad
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site, netlink: abolish max_end_pad and min_end_pad
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: dynamically create and destroy transform instances
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: Check transform errors; factor out transform...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: interpret first 4 bytes of extrainfo as capabilities
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: use unaligned.h's functions, not pointer cast...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: Extra info in name fields for MSG1, clearer processing
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: fix site name checking leaving room for expansion
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | NOTES: Remove unimplemented protocol negotiation
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | NOTES: Remove paragraph about slow-to-prepare messages
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | NOTES: Improve documentation of NAKs.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | site: Send NAKs for undecryptable data packets (msg0)
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | udp, util: Break out send_nak function
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | udp.c: Do not send NAKs in response to NAKs
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | magic: Introduce LABEL_NAK
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Provide Serpent-EAX transform
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Pass a direction flag to the transform
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Allow DH to set the key size
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: split out transform-common.h
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | EAX: provide an implementation of EAX
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | crypto: Copy an AES (Rijndael) implementation into...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | crypto: Copy a SHA512 implementation into tree
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent: Ad-hoc debugging facility
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent: Provide little-endian version too, but ours...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent, transform: rework GET_32BIT_MSB_FIRST, PUT_...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | serpent: const-correct
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | transform: Do not look at any bytes of PKCS#5 padding...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | memcmp: Introduce and use consttime_memeq
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | util, buffers: Preparatory improvements
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2013-07-25 |
Ian Jackson | unaligned.h: rationalise; provide buf_append_uint8...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | build system: debian packaging improvements
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | changelog: describe version 0.3.0
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: When if our MSG5s (or peer's MSG6s) get lost...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Keep old keys, and allow them to be used by peer
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Generalise deletion and timeout of keys
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Move current_transform, _key_timeout and remote_sessio...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: No longer track key validity ourselves
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | transform: add ->valid() function
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Deal with losing our MSG6 - retransmit MSG6 when...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Deal with losing peer's MSG6 - go to RUN on MSG0...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site, transform: Do not initiate rekey when packets...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Remove pointless check from decrypt_msg0
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: Break out separate function for decrypting msg0
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | netlink: abolish check_config and output_config
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | netlink: report why a packet is bad
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | site: transport peers: fix incorrect stride when debug...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | messages: add some missing newlines
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | log: Print truncated messages
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | log: Eliminate potential out-of-control recursion
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | Makefile: honour EXTRA_CFLAGS, etc.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | SECURITY: actually reject messages with improper lengths
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | userv-ipif: Always request routes from userv, regardless...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Do not permit "include" in simple...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: In -u mode, output file "dereferences...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Do newline-trimming in pline()
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Actually include addresses in sites...
Author: Ian Jackson <ijackson@chiark.greenend.org.uk>
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: If definition found in wrong place...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: New -P <prefix> option
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Allow sites with no address
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2012-07-12 |
Ian Jackson | make-secnet-sites: Fix userv invocation after pfilepath
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-17 |
Ian Jackson | netlink: Fix up link down behaviour
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-16 |
Ian Jackson | userv-ipif: Always request routes from userv, regardless...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-16 |
Ian Jackson | make-secnet-sites: new "include" keyword
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-15 |
Ian Jackson | make-secnet-sites: refactor to break out new function...
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-11 |
Ian Jackson | build system: More release checklist updates
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
|
commit | commitdiff | tree |
| 2011-12-11 |
Ian Jackson | Update VERSION
|
commit | commitdiff | tree |
| next |
~mdw / secnet / search