summaryrefslogtreecommitdiffstats
path: root/database/sqlite
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed missing WHERE clause in SQL for extracting blacklisted IP addressesDavid Sommerseth2008-11-011-1/+1
|
* Fixed wrong registration of IP addresses in eDBget_blacklisted_ip(...)David Sommerseth2008-11-011-1/+1
|
* Added eDBget_blacklisted_ip(ctx) functions into db driversDavid Sommerseth2008-11-011-0/+22
|
* Created install rules via cmakeDavid Sommerseth2008-10-211-1/+6
|
* Reorganised the source codeDavid Sommerseth2008-10-151-6/+8
| | | | | | | | Moved all OpenVPN plug-in related things into ./plugins, including firewall Moved all shared code into ./common and moved the generic part of the database files into ./database Updated all CMakeLists.txt files and created a new one for the root directory
* Merge branch 'master' into cmakev0.9_betaDavid Sommerseth2008-10-081-13/+2
|\
| * Moved TLS authentication logging from database module to eurephia.cDavid Sommerseth2008-10-081-13/+2
| | | | | | | | Also differentiated log level from user certs (depth == 0) and other depths.
* | Merge branch 'master' into cmakeDavid Sommerseth2008-10-042-86/+86
|\|
| * Log review - last round for now. Recategorised a few errors and warnings.David Sommerseth2008-10-041-3/+3
| |
| * Log review - changed log levels for all DEBUG(...) callsDavid Sommerseth2008-10-042-23/+23
| |
| * Log review (part 1) - log categoriesDavid Sommerseth2008-10-031-61/+61
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Went through all parts of the code, and reorganised log categories. The following "rules" where used for categorisation: LOG_INFO - General info, should avoid log level higher than 5 LOG_DEBUG - Using DEBUG function only log level always > 10 LOG_WARNING - When something action fails, but not as severe that the process cannot continue. Log level never > 2 LOG_ERROR - API errors, but not severe, can continue LOG_FATAL - Action failed and we cannot continue in this function. Log level always < 2 LOG_PANIC - Action failed and eurephia-auth cannot continue to work any more (program restart needed). Log level always 0
* | Made cmake also create template databaseDavid Sommerseth2008-10-031-0/+10
| |
* | Improved cmake rulesDavid Sommerseth2008-10-031-6/+21
| | | | | | | | | | | | - Added checks for external libraries that we use - Linking now links in needed shared libraries - Added better check if OPENVPN_SRC_DIR is set
* | Adjusted to match new cmake regimeDavid Sommerseth2008-10-021-0/+3
| |
* | Added support for cmakeDavid Sommerseth2008-10-022-43/+14
|/
* BUGFIX: Changed SQLite database schema to allow mulitple identical sessionseedsDavid Sommerseth2008-09-261-1/+2
| | | | | | | | | This is to comply to the new behaviour after commit fc8a177bc86fc7e68b15045ba7a791e2504f4b5c. Now we might get several identical session seeds, but some of them might be connected to sessions getting destroyed, while one of them would be connected to an already active session. sessionkey is now the primary key.
* BUGFIX: Follow up on the commit fc8a177bc86fc7e68b15045ba7a791e2504f4b5cDavid Sommerseth2008-09-261-1/+4
| | | | | Make sure that eDBget_sessionkey_macaddr(...) only returns sessionkeys for sessions ready to be destroyed, ie. sessionstatus must be 3.
* BUGFIX: Made sure that eDBget_sessionkey_seed(...) only returns a sessionkey ↵David Sommerseth2008-09-261-1/+6
| | | | | | | | | | | | | | | | | | | | | | for sessions which is in open status (sessionstatus is 1 or 2). When a client does a disconnect for session_A, the status of the session is 3, as logged out but not yet deleted. In this status, the session is not deleted, nor is the record in openvpn_sessionkeys for that sessions's sessionseed. If the client then does a new reconnection (session_B) before the session is deleted, it will get the sessionkey for the session which was just logged out, session_A's sessionkey. When OpenVPN then calls the learn_address function to delete the session_A, that session will be closed. This results in that session_B will then do not match any open sessions at all, since session_A and session_B shared the sessionseed to a sessionkey. By changing the eDBget_sessionkey_seed(...) to check that the sessionstatus is 1 or 2 (open session statuses), it should generate a new sessionkey for the session_B, since no sessionkey would be returned for that sessionseed. The destruction of the session (done via eurephia_learn_address(...)) will still work, since this function uses the MAC address of the client and not the sessionseed.
* BUGFIX: changed argv[1] to argv[0] due to new parameter handling in eurephia.cDavid Sommerseth2008-09-241-3/+3
|
* Fixed some sqlite_free_result() issues - missing or incorrectly placedDavid Sommerseth2008-09-191-3/+3
|
* Improved code security. LOG_DEBUG statements are only compiled if DEBUG=1 ↵David Sommerseth2008-09-192-41/+36
| | | | | | | | | | | | | is sent to make. Since several parts of the code where LOG_DEBUG was used with eurephia_log(...) contains security sensitive information (like logging password retrieved with get_env(...)), all debug logging is now done via the DEBUG macro. This macro will not produce any security relevant eurephia_log(...) statements unless the source is compiled with -DENABLE_DEBUG. This is activated via make by adding DEBUG=1 before the make targets. When not enabled, the binaries will not do any debug logging at all.
* Renamed openvpn_lastlog.session_del to session_deletedDavid Sommerseth2008-09-192-2/+2
|
* Added (untested) logging of time_duration into openvpn_lastlog.session_durationDavid Sommerseth2008-09-192-19/+21
|
* Added (untested) logging of VPN MAC addresses into openvpn_macaddr_historyDavid Sommerseth2008-09-192-0/+19
|
* - Renamed eDBget_sessionkey(...) to eDBget_sessionkey_seed(...)David Sommerseth2008-09-151-32/+31
| | | | | - Added eDBget_sessionkey_macaddr(...) to retrieve sessionkey based on MAC address - Changed eDBdestroy_session(...) to use eurephiaSESSION instead of MAC address string
* First attempt to make efw_iptables do some real iptables workDavid Sommerseth2008-09-141-2/+2
|
* Changed to using sqlite3_vmprintf() function instead of vsnprintf()David Sommerseth2008-09-102-33/+34
|
* Changed from SHA1 hash to SHA512.David Sommerseth2008-08-212-4/+4
| | | | | | | | | | | Using code from the SourceForge.net project: sha https://sourceforge.net/projects/sha/ Written by Allan Saddi. Wrote today to the developer and asked for permission to include sha512.[ch] under the BSD licence in this GPLv2 project. If it is denied, I'll need to find another SHA512 implementation.
* Only updating opevpn_attempts on ATTEMPT_RESET when attempt count > 0David Sommerseth2008-08-171-10/+20
|
* Added GPLv2 licence, updated *.[ch] files to include license, with exception ↵David Sommerseth2008-08-083-1/+45
| | | | of memwatch and sha1
* Renamed database column from sesskey to sessionkeyDavid Sommerseth2008-08-072-17/+17
|
* New attemtp of replacing the eDBadd_session_value(...) function with ↵David Sommerseth2008-08-071-3/+5
| | | | eAdd_value(...)
* Imported eurephia into gitDavid Sommerseth2008-08-065-0/+1373