summaryrefslogtreecommitdiffstats
path: root/common
Commit message (Collapse)AuthorAgeFilesLines
...
* Workaround to avoid confusing Doxygen on some extra declarationsDavid Sommerseth2009-09-111-2/+3
|
* Fixed comments to malloc_nullsafe() and free_nullsafe()David Sommerseth2009-09-072-7/+20
|
* Added debug logging of free_nullsafe() calls as wellDavid Sommerseth2009-09-076-13/+24
|
* Moved all malloc() operations over to a calloc wrapper, malloc_nullsafe()David Sommerseth2009-09-076-14/+95
| | | | This also improves debugging as well, if debug logging is enabled and log level is >= 40.
* Removed header file which is no longer neededDavid Sommerseth2009-09-051-43/+0
|
* More comments in common/David Sommerseth2009-09-0419-83/+354
|
* Doxygen comments to eurephia_context.hDavid Sommerseth2009-09-041-20/+28
|
* Added more comments to the common filesDavid Sommerseth2009-09-029-15/+349
|
* Added copyright info in CMake filesDavid Sommerseth2009-09-021-0/+19
|
* Cleaned up main CMakeLists.txt fileDavid Sommerseth2009-09-021-2/+11
|
* Added missing #include statementsDavid Sommerseth2009-09-021-0/+1
|
* Improved comments for common/CMakeLists.txtDavid Sommerseth2009-09-021-0/+9
|
* Rewritten CMake rules to build common/ as static libraryDavid Sommerseth2009-04-111-0/+19
| | | | | | This static library is later on linked in. This is to avoid recompiling the same source files several times during a complete eurephia compilation.
* Rewritten common/passwd.c and utils/benchmark.cDavid Sommerseth2009-04-101-42/+1
| | | | Make them work without the need of defining BENCHMARK during compilation
* Make eurephiaXML_getRoot(...) return root element when no nodeset is givenDavid Sommerseth2009-04-021-1/+1
|
* Added simple function for returning results and errors as XMLDavid Sommerseth2009-04-022-0/+44
|
* Fixed some possible issues with the XML implementation, regarding UTF-8David Sommerseth2009-03-291-2/+17
| | | | | | Do proper conversion from char * to xmlChar *. Need to figure out a better way how to return xmlChar * to char * when returning strings which may contain UTF-8.
* Fixed a "hang" when wrong password was usedDavid Sommerseth2009-03-281-10/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to the current implementation of SHA512 salts, it could be experienced as if the application hung on wrong passwords. This is because the rounds count for the passwords are scrambled, with values based on the given password. When a wrong password is given, this will also result in getting a wrong salt length and hash rounds for the following hash calculation. Due to this, the extracted rounds value from the salt string could return some really high number of rounds on wrong passwords (possibly the max value if integer). And this is why the "hang" is experienced. To avoid this, a check is added to make sure the rounds is not unreasonably much higher than the configured max rounds values. If the descrambled rounds number from the salt exceeds max rounds * 1.5, the password (most probaly) is wrong. In this case we do a sleep() to slow down bruteforce attacks and return NULL. The drawback is if the maxrounds later on is changed to a value which hits this scenario: passwordsalt_rounds > maxrounds_cfg * 1.5 In this case these old passwords will be invalidated by that configuration change. This is considered to be a feature and not a bug. The reason for mulitiplying by 1.5, is to allow a little room for a degrading the max rounds setting. By adjusting the max rounds up again, these passwords will be valid again. Added also a sleep() when wrong username is attempted.
* Made the licence explicit GPLv2 onlyDavid Sommerseth2009-03-2622-22/+22
|
* Cleaned up the code a little bitDavid Sommerseth2009-03-2622-26/+46
| | | | | Made sure we only include needed include files and checked that the copyright headers are equal and correct
* Avoid segfault if xmlDoc or XML root element is NULL in eurephiaXML_getRoot(...)David Sommerseth2009-03-221-2/+1
|
* Added benchmarking to suggest minimum and maximum rounds for hashesDavid Sommerseth2009-03-221-0/+41
|
* Renamed passwdhash(...) function to eurephia_quick_hash(...)David Sommerseth2009-03-212-36/+31
| | | | | | | | | | This to make it clearer that passwdhash(...) is not good for password hashing, but suitable when you need a quick hashing algorithm. The eurephia_quick_hash(...) are now used for password caching hashing, and is still suitable here since the salt used for the passwords are in memory only and never written to disk, as they are supposed to be temporary hashes.
* Added new password hashing function with proper SHA512 hashingDavid Sommerseth2009-03-212-0/+401
| | | | | | | | | | | | | | | | | | | | | This new function, eurephia_pwd_crypt(...) implements a modified SHA512 hashing algorithm based on the SHA512 crypt implementation proposed by Ulrich Drepper for glibc. The original implementation adds support for variable hashing rounds. The eurephia version implements dynamic hashing rounds, controlled by minimum and maximum rounds set in the configuration. If not set, it will minimum use 5000 rounds and maximum 7500 rounds. The amount of rounds is supposed to be random. In addition to this, the salt information is now encoded into a hex value. In this value the salt length and the hash rounds are defined. This hex value is then encoded (quasi crypt) based on a modulus of the sum of the characters in the password + the password length. So if you give the wrong password, you will also get the wrong salt length and the wrong number of hashing rounds used. The default salt length is also increased to 32 bytes (256 bit)
* Made the destination buffer for random data more type independent (void *)David Sommerseth2009-03-032-2/+2
|
* Added macro for defaultIntvalue() for pure integer valuesDavid Sommerseth2009-03-031-1/+1
|
* Moved eDBsessionGetRandString(...) to a more global and independent ↵David Sommerseth2009-01-104-30/+79
| | | | eurephia_randstring(...) function
* Introduced password caching on authenticated sessionsDavid Sommerseth2009-01-032-0/+6
| | | | | | | | | | | | | | | | | | | | | | This is to prepare eurephia-auth plugin to use other and more CPU intensive hashing algorithms for passwords. In addition, open sessions will now not be rejected/closed due to wrong password if the user changes the password with an open session running. The patch adds a new server_salt attribute in the eurephiaCTX structure. This is used as a temporary salt and is created of random data when OpenVPN is started. When a user is being authenticated (eurephia.c/eurephia_userauth) a authentication session (not the same as a 'normal' session) is opened and checked for a cached password. If it does not exist or match, normal password check will be done against the user database. If a cached password is found and matches, it is considered to be authenticated. The cached password uses the SHA512 algorithm, together with the eurephiaCTX->server_salt.
* Prepared passwdhash function to allow salting and be prepared for other ↵David Sommerseth2009-01-022-27/+37
| | | | hashing algorithms
* Moved the certfile parsing out from certificate.c into parse_certificate_files.cDavid Sommerseth2008-12-212-0/+3
| | | | | Changed certinfo.[ch] to add cert.digest as well, and using this modified struct to handle the parse result after parsing the certfile.
* Corrected wrong declaration of xmlExtractContent(...) and xmlGetNodeContent(...)David Sommerseth2008-12-202-8/+12
|
* Removed all other eurephia admin structs which can be replaced by XMLDavid Sommerseth2008-12-181-36/+0
|
* Removed everything which was connected to the eurephiaUSERINFO struct.David Sommerseth2008-12-183-313/+0
|
* Added common eurephiaXML functions for creating and reading eurephia XML ↵David Sommerseth2008-12-172-0/+59
| | | | documents
* Needed to change from #define macro to function to avoid compiler warningDavid Sommerseth2008-12-151-1/+3
| | | | | | When xmlExtractContent() was used together with the defaultValue() macro, a compiler warning appeared. Changed the xmlExtractContent() macro to a inline function, hopefully the overhead will be minimal with this change.
* Added simple functions for extracting char * from XML nodesDavid Sommerseth2008-12-152-0/+86
|
* Modified flags againDavid Sommerseth2008-12-121-5/+7
| | | | | | Added RSETLASTUSED (last_accessed is set to NULL) and RSETLOGINCNT (lastlog table has been modified). NEVERUSED flag will only be set if last_accessed is NULL and login count == 0.
* Added ACCFLAG_ERRATTEMPT for flagging if the attempt counter > 0David Sommerseth2008-12-111-0/+1
|
* Added logincount and setting user account flagsDavid Sommerseth2008-12-111-0/+1
|
* Added another flag to eurephiaUSERINFODavid Sommerseth2008-12-112-0/+8
| | | | | | | | The added account_flags are flags used to quickly identify the account status. Made also suret that all flags are not set when a new eurephiaUSERINFO struct is initialised
* Added functions for processing eurephiaACCESSINFO/eurephiaACCESSLISTDavid Sommerseth2008-12-113-0/+102
| | | | | | | | | | Implemented saving VPN access profile to the eurephiaCERTINFO struct and filling the eurephiaACCESSINFO with the proper information needed in the eDBadminGetUserInfo(...) function. The special thing about eurephiaACCESSINFO, is that it will not register duplicate records. And when the eurephiaCERTINFO is free'd, the eurephiaACCESSLIST will automatically be free'd as well.
* Added eurephiaCERTINFO and eurephiaCERTLIST structs functionsDavid Sommerseth2008-12-093-18/+101
| | | | | | New functions to simplify using these structs in the code. Extended eurephiaUSERINFO to also have a eurephiaCERTLIST pointer, which can be used to store all associated certificates to this user.
* Added setnull_flag in the eurephiaUSERINFO structDavid Sommerseth2008-12-081-0/+1
| | | | | | | This can make it possible to get a value getting set to NULL if this flag contains the FIELD_* value of the field being set to NULL. If more fields wants to be reset, these field values can be bitwise ORed together into the setnull_flag.
* Moved over from earlier commit to use unified db translationDavid Sommerseth2008-12-063-167/+1
| | | | | | | In other words, rewrote commit 6d4373e026b3f12c5685e45e35f9f060379ed0f3. Moved over all functions from that commit which could take advantage of the new API for unified table/field translation.
* Added free function eurephiaUSERLIST structs. Added possible valgrind issue.David Sommerseth2008-12-062-1/+13
|
* BUGFIX: Fixed free() which valgrind complained about.David Sommerseth2008-12-061-1/+1
| | | | | | Changed it from free_nullsafe() to free(), since we already check if session is null before we reach this free line. valgrind did not complain afterwards.
* BUGFIX: Made some functions more nullsafe and fixed wrong function ↵David Sommerseth2008-12-062-6/+10
| | | | declaration in .h
* Added admin function to give a list of usersDavid Sommerseth2008-12-061-1/+37
|
* Moved the typedef struct eFieldMap from *common.h to *struct.hDavid Sommerseth2008-12-062-8/+17
|
* Added eurephia_admin_common.[ch]David Sommerseth2008-12-062-0/+214
| | | | | | | Will contain common functions for the administration API. At the moment only a generic function which converts unified field names to proper database field names is implemented. This functions is made especially for sorting keys (ORDER BY <fields>)
generated by cgit (git 2.34.1) at 2025-09-25 20:47:26 +0000