Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Added debug logging of free_nullsafe() calls as well | David Sommerseth | 2009-09-07 | 4 | -34/+34 | |
| | ||||||
* | Moved all malloc() operations over to a calloc wrapper, malloc_nullsafe() | David Sommerseth | 2009-09-07 | 4 | -17/+11 | |
| | | | | This also improves debugging as well, if debug logging is enabled and log level is >= 40. | |||||
* | More comments | David Sommerseth | 2009-09-06 | 3 | -22/+514 | |
| | ||||||
* | Removed header file which is no longer needed | David Sommerseth | 2009-09-05 | 8 | -8/+0 | |
| | ||||||
* | Added copyright info in CMake files | David Sommerseth | 2009-09-02 | 1 | -1/+20 | |
| | ||||||
* | Added missing #include statements | David Sommerseth | 2009-09-02 | 2 | -0/+2 | |
| | ||||||
* | Cleaned up and commented CMakeLists.txt for the SQLite3 driver | David Sommerseth | 2009-09-02 | 1 | -16/+25 | |
| | ||||||
* | Rearranged some files in the sqlite3 driver | David Sommerseth | 2009-09-02 | 5 | -15/+10 | |
| | ||||||
* | Updated copyright info in the SQLite3 SQL schema file | David Sommerseth | 2009-09-02 | 1 | -2/+17 | |
| | ||||||
* | Added more comments to the SQLite3 database schema | David Sommerseth | 2009-09-02 | 1 | -7/+38 | |
| | ||||||
* | Don't try to populate granted access nodes with data if no access is granted | David Sommerseth | 2009-09-01 | 1 | -13/+22 | |
| | ||||||
* | Only populate XML nodes if we have a value to populate it with | David Sommerseth | 2009-09-01 | 1 | -13/+14 | |
| | ||||||
* | Added --set-fwprofile mode to the eurephiadm usercerts command | David Sommerseth | 2009-09-01 | 1 | -6/+61 | |
| | | | | This mode updates the firewall access profile for at user-certs link | |||||
* | Unified eDBadminGetUserCertsList(...) and eDBadminUpdateUserCertLink(...) ↵ | David Sommerseth | 2009-09-01 | 3 | -43/+99 | |
| | | | | | | into one function Plus added better XML documentation for the new eDBadminUserCertsLink(...) function | |||||
* | SQLite3 - Added support for "affected rows" count on INSERT/UPDATE/DELETE ↵ | David Sommerseth | 2009-09-01 | 2 | -0/+12 | |
| | | | | queries | |||||
* | Moved usercerts related functions into its own file | David Sommerseth | 2009-08-29 | 3 | -130/+183 | |
| | ||||||
* | Improved some comments | David Sommerseth | 2009-08-29 | 2 | -10/+11 | |
| | ||||||
* | sqlite3 driver: Implemented eDBadminBlacklist(...) function for blacklist ↵ | David Sommerseth | 2009-05-09 | 6 | -0/+229 | |
| | | | | management | |||||
* | Fixed some errors in blacklist field mapping | David Sommerseth | 2009-05-09 | 1 | -1/+1 | |
| | ||||||
* | Corrected some minor details | David Sommerseth | 2009-05-09 | 1 | -4/+3 | |
| | ||||||
* | Completed the attempts command in eurephiadm | David Sommerseth | 2009-05-07 | 2 | -8/+48 | |
| | | | | Added functionality for resetting and deleting attempt records | |||||
* | Fixed wrong database field name mapping for SQLite3 | David Sommerseth | 2009-05-07 | 1 | -1/+1 | |
| | ||||||
* | Corrected the default filter setup and added the 'digest' field | David Sommerseth | 2009-05-06 | 1 | -6/+7 | |
| | ||||||
* | Renamed fieldmapping for 'attempts' to 'attemptslog' | David Sommerseth | 2009-05-06 | 4 | -10/+18 | |
| | | | | | | Also made the result XML from eDBadminAttemptsLog(...) more efficient by not adding the username/certificate/ipaddress group tags if the information is not present. | |||||
* | Rewritten CMake rules to build common/ as static library | David Sommerseth | 2009-04-11 | 1 | -11/+5 | |
| | | | | | | This static library is later on linked in. This is to avoid recompiling the same source files several times during a complete eurephia compilation. | |||||
* | sqlite3 driver: Implemented listing of openvpn_attempts table | David Sommerseth | 2009-04-09 | 6 | -6/+186 | |
| | ||||||
* | Added improved filtering support to SQLite3 driver | David Sommerseth | 2009-04-05 | 1 | -1/+17 | |
| | | | | Follow up of commit ff744b48fdc0665b620339d51424892def8d8071 | |||||
* | Added eDBfieldMapping field for filter types | David Sommerseth | 2009-04-05 | 3 | -114/+140 | |
| | | | | | | | | | | | | | | | | | | | This field will be used to determine what kind of filter logic to add when building SQL queries. The filter type is set in the fieldMapping field nodes as an attribute named 'filter'. Their values and the corresponding SQL conditions are: filter | SQL condition -----------------------+--------------- equals | = not-equals | != / NOT(...) less-than | < less-than-equals | <= greater-than | > greater-than-equals | >= -----------------------+--------------- The default value for each field is set in the eurephiadb_mapping.h | |||||
* | When deleting fwprofiles, delete also records from openvpn_usercerts | David Sommerseth | 2009-04-03 | 1 | -0/+30 | |
| | ||||||
* | Completed eDBadminFirewallProfiles(...) with add and delete in db driver | David Sommerseth | 2009-04-02 | 1 | -9/+60 | |
| | ||||||
* | Added eDBmappingFieldsPresent(...) which returns used fields in a fieldMap | David Sommerseth | 2009-04-02 | 2 | -0/+15 | |
| | ||||||
* | Security enhancement: Added check in eDBadmin* functions that the context is ↵ | David Sommerseth | 2009-04-01 | 2 | -0/+102 | |
| | | | | correct | |||||
* | Cleaned up some compiler warnings in edb-sqlite | David Sommerseth | 2009-03-30 | 3 | -0/+20 | |
| | ||||||
* | Restructured ./configure and improved the path setup | David Sommerseth | 2009-03-30 | 1 | -1/+1 | |
| | | | | Also added install rules to XSLT files | |||||
* | Added missing xmlReplaceChars(...) on common_name and organisation | David Sommerseth | 2009-03-29 | 1 | -4/+20 | |
| | ||||||
* | Changed eDBadminGetFirewallProfiles(...) to eDBadminFirewallProfiles(...) | David Sommerseth | 2009-03-29 | 3 | -25/+63 | |
| | | | | | Will try a new approach to use the same entry point for all actions connected to the firewall profiles configuration. | |||||
* | Fixed some possible issues with the XML implementation, regarding UTF-8 | David Sommerseth | 2009-03-29 | 1 | -5/+20 | |
| | | | | | | Do proper conversion from char * to xmlChar *. Need to figure out a better way how to return xmlChar * to char * when returning strings which may contain UTF-8. | |||||
* | Added eDBadminGetFirewallProfiles(...) function in DB driver | David Sommerseth | 2009-03-28 | 4 | -0/+141 | |
| | ||||||
* | Added fieldMapping for the firewall access table (openvpn_accesses) | David Sommerseth | 2009-03-28 | 3 | -0/+40 | |
| | ||||||
* | Fixed a "hang" when wrong password was used | David Sommerseth | 2009-03-28 | 2 | -4/+8 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to the current implementation of SHA512 salts, it could be experienced as if the application hung on wrong passwords. This is because the rounds count for the passwords are scrambled, with values based on the given password. When a wrong password is given, this will also result in getting a wrong salt length and hash rounds for the following hash calculation. Due to this, the extracted rounds value from the salt string could return some really high number of rounds on wrong passwords (possibly the max value if integer). And this is why the "hang" is experienced. To avoid this, a check is added to make sure the rounds is not unreasonably much higher than the configured max rounds values. If the descrambled rounds number from the salt exceeds max rounds * 1.5, the password (most probaly) is wrong. In this case we do a sleep() to slow down bruteforce attacks and return NULL. The drawback is if the maxrounds later on is changed to a value which hits this scenario: passwordsalt_rounds > maxrounds_cfg * 1.5 In this case these old passwords will be invalidated by that configuration change. This is considered to be a feature and not a bug. The reason for mulitiplying by 1.5, is to allow a little room for a degrading the max rounds setting. By adjusting the max rounds up again, these passwords will be valid again. Added also a sleep() when wrong username is attempted. | |||||
* | BUGFIX: Fixed missing string replace in certificate functions | David Sommerseth | 2009-03-27 | 1 | -2/+18 | |
| | | | | | | | | When calling eDBadminGetCertificateInfo(...) or eDBadminDeleteCertificate(...) with a search XML document using common_name or organisation and these fields contained spaces, no certificates would be deleted. This is because space is replaced with underscore in the database. | |||||
* | Made the licence explicit GPLv2 only | David Sommerseth | 2009-03-26 | 13 | -13/+14 | |
| | ||||||
* | Cleaned up the code a little bit | David Sommerseth | 2009-03-26 | 11 | -30/+26 | |
| | | | | | Made sure we only include needed include files and checked that the copyright headers are equal and correct | |||||
* | Corrected sorting of result in eDBadminGetAdminAccess(...) | David Sommerseth | 2009-03-24 | 1 | -1/+1 | |
| | ||||||
* | Implemented the eDBadminGetLastLog(...) function in the SQLite3 driver | David Sommerseth | 2009-03-24 | 3 | -4/+102 | |
| | ||||||
* | Added more fields to the global field mapping table | David Sommerseth | 2009-03-24 | 1 | -30/+37 | |
| | | | | | Had to also extend the FIELD_* assignments to allow two new fields to be mapped | |||||
* | Extended the database driver with eDBadminGetAdminAccess(...) | David Sommerseth | 2009-03-24 | 3 | -0/+64 | |
| | | | | | | This function will return an XML document with data extracted from the eurephia_adminaccess table. Search criterias are defined by the search XML doc given as input. | |||||
* | Added support for editing the eurephia_adminaccess table | David Sommerseth | 2009-03-22 | 6 | -6/+98 | |
| | | | | Implemented eDBadminEditAdminAccess(...) function in db driver | |||||
* | Rewrote database driver (SQLite) to use eurephia_pwd_crypt(...) | David Sommerseth | 2009-03-22 | 3 | -23/+44 | |
| | | | | Follow up from commit 062a3c92343a5fa371f8637f8bca88aacca14cc4 | |||||
* | Added missing source in edb-sqlite driver after reorg with randstr.c | David Sommerseth | 2009-03-21 | 1 | -0/+1 | |
| |