Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-02-16 | Boring stuff: update dates in copyrights across all files. | Adam Ierymenko | |
2014-01-28 | Yank PROBE stuff since it's not used and was a premature addition to the ↵ | Adam Ierymenko | |
protocol. | |||
2014-01-17 | Windows build fixes. | Adam Ierymenko | |
2013-12-31 | Fix several things: | Adam Ierymenko | |
(1) The changes to path learning in the two previous releases were poorly thought out, and this version should remedy that by introducing PROBE. This is basically a kind of ECHO request and is used to authenticate endpoints that are not learned via a valid request/response pair. Thus we will still passively learn endpoints, but securely. (2) Turns out there was a security oversight in _doHELLO() that could have permitted... well... I'm not sure it was exploitable to do anything particularly interesting since a bad identity would be discarded anyway, but fix it just the same. | |||
2013-12-06 | Dead code removal, fix for cleanup GitHub issue #28 | Adam Ierymenko | |
2013-12-04 | Pull in-band file transfer stuff. Toyed around with that idea, but it seems ↵ | Adam Ierymenko | |
that updates for some platforms are big enough and there are enough reliability concerns that just using TCP/HTTP is safer and easier. | |||
2013-11-05 | More updater work... coming along. | Adam Ierymenko | |
2013-11-04 | File transfer work, add identities for validation of updates. | Adam Ierymenko | |
2013-11-01 | Updater code, work in progress... | Adam Ierymenko | |
2013-10-27 | Clean up secure random, add packet definitions for update distribution facility. | Adam Ierymenko | |
2013-10-25 | Certificate of membership works now... had to fix multicast propagation so ↵ | Adam Ierymenko | |
COM is pushed with multicast, which makes tremendous sense in retrospect. | |||
2013-10-18 | Make Salsa20 variable-round, allowing for Salsa20/12 to be used for Packet ↵ | Adam Ierymenko | |
encrypt and decrypt. Profiling analysis found that Salsa20 encrypt was accounting for a nontrivial percentage of CPU time, so it makes sense to cut this load fundamentally. There are no published attacks against Salsa20/12, and DJB believes 20 rounds to be overkill. This should be more than enough for our needs. Obviously incorporating ASM Salsa20 is among the next steps for performance. | |||
2013-10-17 | Take the 0.6.0 opportunity to add flags to a few protocol verbs and do a bit ↵ | Adam Ierymenko | |
more cleanup. Also fix it so certificates wont be accepted unless they are newer than existing ones. | |||
2013-10-17 | Add support for pushing network config refresh hints from a MEMORY queue ↵ | Adam Ierymenko | |
table. That ways it will be possible for network changes to take effect almost immediately across all active peers. | |||
2013-10-16 | Lots of cleanup, more work on certificates, some security fixes. | Adam Ierymenko | |
2013-10-07 | Automagically push netconf certs -- Network support. | Adam Ierymenko | |
2013-10-07 | Rename error code for no membership certificate. | Adam Ierymenko | |
2013-10-05 | Remove a whole bunch of now-unnecessary cruft from Topology and PacketDecoder. | Adam Ierymenko | |
2013-09-30 | Fix for multicast propagation -- supernodes must always keep propagating. ↵ | Adam Ierymenko | |
Also fix mac-tap build on new version of Xcode CL tools. Must use old llvm-g++ instead of clang for i686 -mkernel. | |||
2013-09-27 | Whew, it builds! | Adam Ierymenko | |
2013-09-26 | Work in progress... | Adam Ierymenko | |
2013-09-25 | More work in progress in new multicast propagation... | Adam Ierymenko | |
2013-09-25 | Work in progress... | Adam Ierymenko | |
2013-09-24 | Work in progress... | Adam Ierymenko | |
2013-09-21 | New multicast algorithm work in progress... | Adam Ierymenko | |
2013-09-20 | New packet formats for MULTICAST_FRAME, and MULTICAST_GOT. Not implemented ↵ | Adam Ierymenko | |
yet in decoder, so wont compile. Work in progress. | |||
2013-09-17 | More include formatting cleanup. | Adam Ierymenko | |
2013-09-16 | Integrating new crypto, work still in progress... | Adam Ierymenko | |
2013-09-13 | Bit more of adding version to OK(HELLO) | Adam Ierymenko | |
2013-09-13 | Add version info to OK(HELLO) so both sides know their version info. | Adam Ierymenko | |
2013-08-12 | Windows compiles! (w/Visual Studio 2012) That's about all it does, but it's ↵ | Adam Ierymenko | |
a start. | |||
2013-08-03 | Scratch that... more work wiring up netconf. Got to handle OK. | Adam Ierymenko | |
2013-08-02 | Netconf wired up, ready to test. | Adam Ierymenko | |
2013-07-31 | Little bit of protocol changes before implementation of new verbs. | Adam Ierymenko | |
2013-07-29 | More work on network membership certs, and it builds now. Still in heavy ↵ | Adam Ierymenko | |
development. | |||
2013-07-29 | Fix a bunch of errors due to minor method signature changes, still a work in ↵ | Adam Ierymenko | |
progress. | |||
2013-07-29 | Network membership certificate work in progress... does not build yet. | Adam Ierymenko | |
2013-07-27 | Add skeleton of certificate-based private network authentication. Also ↵ | Adam Ierymenko | |
remove some old code. | |||
2013-07-27 | Back out of RPC... blech. Have a better idea. | Adam Ierymenko | |
2013-07-25 | RPC infrastructure work in progress. | Adam Ierymenko | |
2013-07-23 | Basic RPC stuff in Packet and PacketDecoder for RPC service support. | Adam Ierymenko | |
2013-07-20 | docs | Adam Ierymenko | |
2013-07-11 | Factoring out packet decoder from Switch to put that object on a little bit ↵ | Adam Ierymenko | |
of a diet. Work in progress, wont build yet. | |||
2013-07-10 | Adding signatures to multicast frames, work in progress, does not build yet | Adam Ierymenko | |
2013-07-10 | Factored out multicast propagation algorithm from Switch and Topology, also ↵ | Adam Ierymenko | |
cleaned up and clarified it a bit. | |||
2013-07-09 | Several things: | Adam Ierymenko | |
(1) Probable fix for issue #7 and major cleanup of EthernetTap code with consolidation for all unix-like systems and specialization for different flavors only when needed. (2) Refactor of Buffer<> to make its members private, and Packet to use Buffer's methods exclusively to access them. This improves clarity and means we're no longer lying about Buffer's role in the code's security posture. (3) Add -fstack-protect to Makefile to bounds check stack variables. | |||
2013-07-06 | Possible fix for issue #4 - segfault in ___removeIp helper function in ↵ | Adam Ierymenko | |
EthernetTap on OSX -- I think the problem may have been that I was using set::erase(key) while also using an iterator, so now it uses erase(iterator). See if it happens again, cause I could not duplicate the issue. Possible minor difference in STL version. | |||
2013-07-04 | New git repository for release - version 0.2.0 tagged | Adam Ierymenko | |