Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Don't log source filename and line number if DEBUG is not enabled | David Sommerseth | 2009-10-06 | 1 | -7/+11 |
| | |||||
* | Fixed compile warnings 32bit platforms | David Sommerseth | 2009-10-05 | 1 | -1/+1 |
| | |||||
* | Removed not needed memset()'s | David Sommerseth | 2009-10-02 | 1 | -2/+0 |
| | |||||
* | Fixed some memory issues and a memory leak in passwd.c | David Sommerseth | 2009-10-02 | 1 | -2/+5 |
| | |||||
* | Fixed wrong define string for include filename | David Sommerseth | 2009-09-30 | 1 | -2/+2 |
| | |||||
* | Merge branch 'syslog' | David Sommerseth | 2009-09-28 | 5 | -54/+391 |
|\ | |||||
| * | Added extra parameter to eurephia_log_init() to set log ident for syslog | David Sommerseth | 2009-09-24 | 2 | -3/+4 |
| | | |||||
| * | Added missing doxygen comments after the last eurephia_log() improvements | David Sommerseth | 2009-09-24 | 2 | -1/+14 |
| | | | | | | | | Ref. commit: f2a4f0412bc1f7b9069ecbcce8f5599f46f757e0 | ||||
| * | Improved file logging, providing source file and line number info | David Sommerseth | 2009-09-24 | 3 | -10/+24 |
| | | | | | | | | | | Also changed malloc_nullsafe() and free_nullsafe() to report directly which file:line which called the malloc/free function. | ||||
| * | Added missing header file and corrected doxygen errors | David Sommerseth | 2009-09-24 | 2 | -1/+96 |
| | | |||||
| * | Rewritten the eurephia_log() to support syslog logging as well | David Sommerseth | 2009-09-24 | 3 | -46/+260 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also simplified the initialisation of the logging module. By calling the eurephia_log_init(eurephiaCTX *, char *dest, int loglevel) function, a log context will be setup inside the eurephiaCTX. To close the log file, eurephia_log_close(eurephiaCTX *) must be called. The destination string to eurephia_log_init() can be: - stdout: Log everything to stdout - stderr: Log everything to stderr - none: Do no logging at all - syslog:<facility> Log via syslog. <facility> can be: user, local[0-7], daemon or authpriv. - Filename All logging goes to the given filename. If the filename string is not recognised by any of the reserved words above, it will be handled as a filename. | ||||
* | | Code clean up. Moved xmlReplaceChars() to eurephia_xml.c | David Sommerseth | 2009-09-27 | 2 | -0/+23 |
| | | |||||
* | | Make eurephiaXML_ParserResultMsg() return NULL if input XML document pointer ↵ | David Sommerseth | 2009-09-27 | 1 | -1/+4 |
| | | | | | | | | is NULL | ||||
* | | Added misc. compiler optimisations | David Sommerseth | 2009-09-26 | 2 | -8/+14 |
| | | |||||
* | | Moved from bzero() to memset() | David Sommerseth | 2009-09-26 | 1 | -1/+1 |
| | | |||||
* | | Don't assert() if the input XML doc to eurephiaXML_IsResult() is NULL. | David Sommerseth | 2009-09-26 | 1 | -1/+4 |
| | | |||||
* | | Added extra check on node pointer, to avoid possible SEGV | David Sommerseth | 2009-09-26 | 1 | -1/+1 |
| | | |||||
* | | Added eurephiaXML_IsResultMsg() to check if an XML doc is a ResultMsg document | David Sommerseth | 2009-09-25 | 2 | -0/+17 |
| | | |||||
* | | Moved the useful append_str() macro from sqlite.c to eurephia_nullsafe.h | David Sommerseth | 2009-09-25 | 1 | -0/+11 |
|/ | |||||
* | Fixed and cleaned up Doxygen comments | David Sommerseth | 2009-09-22 | 1 | -2/+14 |
| | |||||
* | Rewrote eurephiaXML_ResultMsg() to also support adding an xmlNode* with more ↵ | David Sommerseth | 2009-09-21 | 2 | -10/+75 |
| | | | | | | | | info The eurephia result XML document is also changed, and all parsing of the result must be rewritten. To simplify this parsing, a new function is introduced, eurephiaXML_ParseResultMsg(). | ||||
* | BUGFIX: saltlen was set to 0 when a buffer for a new salt was generated | David Sommerseth | 2009-09-15 | 1 | -12/+12 |
| | | | | | | This error caused eurephia_pwd_crypt() to fail, especially when salt length was requested to be longer. The solution was to retrieve the salt length before allocating memory for it. | ||||
* | Fixed some new Doxygen warnings which came after enabling static functions ↵ | David Sommerseth | 2009-09-14 | 2 | -6/+3 |
| | | | | and vars | ||||
* | Added eRemove_value() function, to remove a key/value pair from an ↵ | David Sommerseth | 2009-09-14 | 2 | -3/+48 |
| | | | | eurephiaVALUES chain | ||||
* | Added a simple xmlNode iterator for future usage | David Sommerseth | 2009-09-14 | 1 | -0/+8 |
| | |||||
* | Corrected some doxygen issues after rearranging the sqlite3 db driver code | David Sommerseth | 2009-09-13 | 1 | -1/+1 |
| | |||||
* | Some simple comments to the SHA512 implementation | David Sommerseth | 2009-09-11 | 2 | -8/+50 |
| | |||||
* | Workaround to avoid confusing Doxygen on some extra declarations | David Sommerseth | 2009-09-11 | 1 | -2/+3 |
| | |||||
* | Fixed comments to malloc_nullsafe() and free_nullsafe() | David Sommerseth | 2009-09-07 | 2 | -7/+20 |
| | |||||
* | Added debug logging of free_nullsafe() calls as well | David Sommerseth | 2009-09-07 | 6 | -13/+24 |
| | |||||
* | Moved all malloc() operations over to a calloc wrapper, malloc_nullsafe() | David Sommerseth | 2009-09-07 | 6 | -14/+95 |
| | | | | This also improves debugging as well, if debug logging is enabled and log level is >= 40. | ||||
* | Removed header file which is no longer needed | David Sommerseth | 2009-09-05 | 1 | -43/+0 |
| | |||||
* | More comments in common/ | David Sommerseth | 2009-09-04 | 19 | -83/+354 |
| | |||||
* | Doxygen comments to eurephia_context.h | David Sommerseth | 2009-09-04 | 1 | -20/+28 |
| | |||||
* | Added more comments to the common files | David Sommerseth | 2009-09-02 | 9 | -15/+349 |
| | |||||
* | Added copyright info in CMake files | David Sommerseth | 2009-09-02 | 1 | -0/+19 |
| | |||||
* | Cleaned up main CMakeLists.txt file | David Sommerseth | 2009-09-02 | 1 | -2/+11 |
| | |||||
* | Added missing #include statements | David Sommerseth | 2009-09-02 | 1 | -0/+1 |
| | |||||
* | Improved comments for common/CMakeLists.txt | David Sommerseth | 2009-09-02 | 1 | -0/+9 |
| | |||||
* | Rewritten CMake rules to build common/ as static library | David Sommerseth | 2009-04-11 | 1 | -0/+19 |
| | | | | | | This static library is later on linked in. This is to avoid recompiling the same source files several times during a complete eurephia compilation. | ||||
* | Rewritten common/passwd.c and utils/benchmark.c | David Sommerseth | 2009-04-10 | 1 | -42/+1 |
| | | | | Make them work without the need of defining BENCHMARK during compilation | ||||
* | Make eurephiaXML_getRoot(...) return root element when no nodeset is given | David Sommerseth | 2009-04-02 | 1 | -1/+1 |
| | |||||
* | Added simple function for returning results and errors as XML | David Sommerseth | 2009-04-02 | 2 | -0/+44 |
| | |||||
* | Fixed some possible issues with the XML implementation, regarding UTF-8 | David Sommerseth | 2009-03-29 | 1 | -2/+17 |
| | | | | | | Do proper conversion from char * to xmlChar *. Need to figure out a better way how to return xmlChar * to char * when returning strings which may contain UTF-8. | ||||
* | Fixed a "hang" when wrong password was used | David Sommerseth | 2009-03-28 | 1 | -10/+36 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to the current implementation of SHA512 salts, it could be experienced as if the application hung on wrong passwords. This is because the rounds count for the passwords are scrambled, with values based on the given password. When a wrong password is given, this will also result in getting a wrong salt length and hash rounds for the following hash calculation. Due to this, the extracted rounds value from the salt string could return some really high number of rounds on wrong passwords (possibly the max value if integer). And this is why the "hang" is experienced. To avoid this, a check is added to make sure the rounds is not unreasonably much higher than the configured max rounds values. If the descrambled rounds number from the salt exceeds max rounds * 1.5, the password (most probaly) is wrong. In this case we do a sleep() to slow down bruteforce attacks and return NULL. The drawback is if the maxrounds later on is changed to a value which hits this scenario: passwordsalt_rounds > maxrounds_cfg * 1.5 In this case these old passwords will be invalidated by that configuration change. This is considered to be a feature and not a bug. The reason for mulitiplying by 1.5, is to allow a little room for a degrading the max rounds setting. By adjusting the max rounds up again, these passwords will be valid again. Added also a sleep() when wrong username is attempted. | ||||
* | Made the licence explicit GPLv2 only | David Sommerseth | 2009-03-26 | 22 | -22/+22 |
| | |||||
* | Cleaned up the code a little bit | David Sommerseth | 2009-03-26 | 22 | -26/+46 |
| | | | | | Made sure we only include needed include files and checked that the copyright headers are equal and correct | ||||
* | Avoid segfault if xmlDoc or XML root element is NULL in eurephiaXML_getRoot(...) | David Sommerseth | 2009-03-22 | 1 | -2/+1 |
| | |||||
* | Added benchmarking to suggest minimum and maximum rounds for hashes | David Sommerseth | 2009-03-22 | 1 | -0/+41 |
| | |||||
* | Renamed passwdhash(...) function to eurephia_quick_hash(...) | David Sommerseth | 2009-03-21 | 2 | -36/+31 |
| | | | | | | | | | | This to make it clearer that passwdhash(...) is not good for password hashing, but suitable when you need a quick hashing algorithm. The eurephia_quick_hash(...) are now used for password caching hashing, and is still suitable here since the salt used for the passwords are in memory only and never written to disk, as they are supposed to be temporary hashes. |