Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Updated eurephia.spec to work with 0.9.6_beta and openvpn-2.1_rc21beta | David Sommerseth | 2009-11-18 | 1 | -4/+8 |
| | | | | OpenVPN version is now set through a macro. And did also a cosmetic change as well. | ||||
* | Merge commit 'origin/master'v0.9.6_beta | David Sommerseth | 2009-11-13 | 1 | -1/+1 |
|\ | |||||
| * | BUGFIX: eurephiadm session key was truncated | David Sommerseth | 2009-11-12 | 1 | -1/+1 |
| | | | | | | | | | | The session key was only 65 bytes, instead of 128 bytes due to wrong pointer calculation. | ||||
* | | Fixed wrong usage of lower(digest) in eDBregister_attempts() | David Sommerseth | 2009-11-13 | 1 | -8/+14 |
|/ | | | | | | | This is a follow up of commit de7a3d88c78cdf400fcee78f71946da8b12ec74f.That commit introduced an SQL error when eDBregister_attempts() was attempting to update certificate digest attempt records. Overhauled and fixed the complete eDBregister_attempts() function. | ||||
* | Certificate digests are always lower case. | David Sommerseth | 2009-11-12 | 8 | -25/+31 |
| | | | | | This makes sure that all interactions with the database will convert the digest strings to lower case. | ||||
* | Add support for ft_STRING_LOWER in the sqlite3 driver | David Sommerseth | 2009-11-12 | 1 | -7/+17 |
| | | | | Also fixed some wrong tab/space issues | ||||
* | Define certificate digests as ft_STRING_LOWER | David Sommerseth | 2009-11-12 | 2 | -63/+63 |
| | | | | This means this field will always be processed with lower case | ||||
* | Removed not needed variable | David Sommerseth | 2009-11-03 | 1 | -1/+1 |
| | |||||
* | sqlite: Did not retrieve all certificate information correctly | David Sommerseth | 2009-11-03 | 1 | -10/+10 |
| | | | | | On user accounts with several certificates associated, it did only list up one certificate several times. | ||||
* | Make use of eurephiaXML_ParseResultMsg() in usercerts command | David Sommerseth | 2009-10-19 | 1 | -9/+9 |
| | |||||
* | Make use of rpmbuild CFLAGS and build in verbose mode | David Sommerseth | 2009-10-14 | 1 | -2/+2 |
| | |||||
* | Include system wide CFLAGS when building | David Sommerseth | 2009-10-14 | 2 | -9/+7 |
| | |||||
* | Added missing docs to sub-packages in eurephia.spec | David Sommerseth | 2009-10-13 | 1 | -0/+5 |
| | |||||
* | Restrict log length of mac address | David Sommerseth | 2009-10-13 | 1 | -2/+2 |
| | |||||
* | Always process certificate depth as integer | David Sommerseth | 2009-10-13 | 3 | -10/+11 |
| | |||||
* | Added RPM spec file for building eurephia RPM packages | David Sommerseth | 2009-10-07 | 1 | -0/+120 |
| | |||||
* | Fixed memory leak in the firewall implementation and added mlock() usage | David Sommerseth | 2009-10-06 | 2 | -1/+25 |
| | | | | | | | | | | | The memory leak was caused by not freeing the shadow context the firewall child process uses for logging. In addition this child process had a connection to the database open as well, which was not needed. This connection is now disconnected immediately after the child process has started. Added also usage of mlock() to protect sensitive information from being swapped out to disk. | ||||
* | Don't log source filename and line number if DEBUG is not enabled | David Sommerseth | 2009-10-06 | 1 | -7/+11 |
| | |||||
* | Updated TODOv0.9.5_beta | David Sommerseth | 2009-10-05 | 1 | -9/+8 |
| | |||||
* | Removed duplicated documentation | David Sommerseth | 2009-10-05 | 1 | -3/+2 |
| | |||||
* | Added missing doxygen comments to environment.h | David Sommerseth | 2009-10-05 | 1 | -17/+182 |
| | |||||
* | Fixed compile warnings 32bit platforms | David Sommerseth | 2009-10-05 | 2 | -2/+4 |
| | |||||
* | Use macros to extract values via get_env() | David Sommerseth | 2009-10-05 | 4 | -42/+97 |
| | | | | | This has two purposes. To make the code more readable and to use the same maximum length of the data being retrieved from the environment table. | ||||
* | Only DEBUG log what get_env() will return | David Sommerseth | 2009-10-05 | 1 | -3/+3 |
| | |||||
* | Moved the get_env() function into its own file | David Sommerseth | 2009-10-04 | 4 | -59/+144 |
| | |||||
* | Updated CREDITS.txt | David Sommerseth | 2009-10-04 | 1 | -0/+3 |
| | |||||
* | Restrict input data length for plug-in arguments from openvpn | David Sommerseth | 2009-10-04 | 3 | -10/+13 |
| | | | | This only affects functions related to MAC address and certificate depth | ||||
* | Fixed a few misbehaviours in eurephiadm users command | David Sommerseth | 2009-10-02 | 2 | -5/+1 |
| | |||||
* | Tightening the building of the seeddata string even more | David Sommerseth | 2009-10-02 | 1 | -1/+1 |
| | | | | This is a follow up of commit 80b41e27b7361633bee17c64bbb95490dc94ab9f | ||||
* | Fixed possible integer overflow issue | David Sommerseth | 2009-10-02 | 1 | -7/+7 |
| | | | | | | | | | | | | | | | The eDBopen_session_seed() function was prune to an integer overflow issue, if the input data (some which comes from clients) exeeds the size_t max value which calloc() uses (via malloc_nullsafe()). The totlen variable was in addition defined as int and the totlen value was multiplied by 2. The fix was to use the maximum values used when calling get_env(). These values the maximum can then be added together to retrieve the maximum length of the seeddata string. This should also make the execution go slightly quicker as strlen_nullsafe() is no longer called for each of the input variables. In addition, there are no reasons to multiply the totlen value by two as it did. Credit goes to Larry Highsmith for noticing this potential problem. | ||||
* | Removed not needed memset()'s | David Sommerseth | 2009-10-02 | 1 | -2/+0 |
| | |||||
* | Modified get_env() function to limit number of bytes to extract | David Sommerseth | 2009-10-02 | 3 | -60/+152 |
| | | | | | This is to enhance the security and to avoid possible buffer overflows based on input received from the client | ||||
* | Fixed some memory issues and a memory leak in passwd.c | David Sommerseth | 2009-10-02 | 1 | -2/+5 |
| | |||||
* | Fixed wrong define string for include filename | David Sommerseth | 2009-09-30 | 1 | -2/+2 |
| | |||||
* | Merge branch 'syslog' | David Sommerseth | 2009-09-28 | 12 | -141/+423 |
|\ | |||||
| * | Added extra parameter to eurephia_log_init() to set log ident for syslog | David Sommerseth | 2009-09-24 | 7 | -11/+15 |
| | | |||||
| * | Added missing doxygen comments after the last eurephia_log() improvements | David Sommerseth | 2009-09-24 | 2 | -1/+14 |
| | | | | | | | | Ref. commit: f2a4f0412bc1f7b9069ecbcce8f5599f46f757e0 | ||||
| * | Improved file logging, providing source file and line number info | David Sommerseth | 2009-09-24 | 3 | -10/+24 |
| | | | | | | | | | | Also changed malloc_nullsafe() and free_nullsafe() to report directly which file:line which called the malloc/free function. | ||||
| * | Added missing header file and corrected doxygen errors | David Sommerseth | 2009-09-24 | 2 | -1/+96 |
| | | |||||
| * | Rewritten the eurephia_log() to support syslog logging as well | David Sommerseth | 2009-09-24 | 9 | -131/+287 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also simplified the initialisation of the logging module. By calling the eurephia_log_init(eurephiaCTX *, char *dest, int loglevel) function, a log context will be setup inside the eurephiaCTX. To close the log file, eurephia_log_close(eurephiaCTX *) must be called. The destination string to eurephia_log_init() can be: - stdout: Log everything to stdout - stderr: Log everything to stderr - none: Do no logging at all - syslog:<facility> Log via syslog. <facility> can be: user, local[0-7], daemon or authpriv. - Filename All logging goes to the given filename. If the filename string is not recognised by any of the reserved words above, it will be handled as a filename. | ||||
* | | Corrected some new Doxygen issues | David Sommerseth | 2009-09-28 | 2 | -3/+4 |
| | | |||||
* | | Reworked and unified admin authentication and registration functions to ↵ | David Sommerseth | 2009-09-28 | 4 | -134/+362 |
| | | | | | | | | | | | | | | | | eDBadminAuthenticate() eDBadminAuth(), eDBadminValidateSession(), eDBadminRegisterLogin() and eDBadminLogout() are now unfied into one admin function, eDBadminAuthenticate(). This function receives all input as eurephia XML documents. | ||||
* | | Moved the remainings of administration.c into administration/authentication.c | David Sommerseth | 2009-09-27 | 2 | -2/+2 |
| | | |||||
* | | Code clean up. Moved xmlReplaceChars() to eurephia_xml.c | David Sommerseth | 2009-09-27 | 8 | -31/+23 |
| | | |||||
* | | Moved user creation info from log level 0 to log level 1 | David Sommerseth | 2009-09-27 | 1 | -1/+1 |
| | | | | | | | | | | This is to avoid the console programs to report to stderr if log file is not setup. Console applications use stderr in these situations. | ||||
* | | Fixed some memory leaks in eurephia_init, especially in error situations | David Sommerseth | 2009-09-27 | 1 | -12/+30 |
| | | |||||
* | | Reworked eurephia_init to use the new eDBadminUserAccount() API | David Sommerseth | 2009-09-27 | 1 | -14/+66 |
| | | |||||
* | | Fixed missing check in eDBadminValidateSession() against interface type | David Sommerseth | 2009-09-27 | 1 | -2/+3 |
| | | |||||
* | | Cosmetic cleanup | David Sommerseth | 2009-09-27 | 1 | -8/+4 |
| | | |||||
* | | Rewrote eurephiadm users --delete mode to work with the new ↵ | David Sommerseth | 2009-09-27 | 1 | -18/+21 |
| | | | | | | | | eDBadminUserAccount() API |