 Caleb James DeLisle
|
d89233cdba
[CRYPTO] Hardening of CryptoAuth by dropping messages which can be verified as invalid
|
vor 11 Jahren |
|
Caleb James DeLisle
|
6e7b032a16
Fixed a serious security issue introduced by 3d67b01ed4520436213818b1a50d1f7271a07b91
|
vor 11 Jahren |
|
Caleb James DeLisle
|
653f7a0d3a
put DROP in all log lines which indicate a packet has been dropped and don't return an AUTHENTICATION error if a handshake packet comes during an established session.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
bfa40b86e4
[CRYPTO] If both Alice and Bob send Hello packets to one another and they croos on the wire,
|
vor 11 Jahren |
|
Caleb James DeLisle
|
3d67b01ed4
[CRYPTO] Fixed CryptoAuth bug causing dropped packets if Alice sends one or more "established session"
|
vor 11 Jahren |
|
Caleb James DeLisle
|
4ab9b3d577
[CRYPTO] added a name for each CryptoAuth wrapper to improve logging, also randomized initial handle for SessionManager to prevent CryptoAuth sessions from being mixed up in the SessionManager
|
vor 11 Jahren |
|
Caleb James DeLisle
|
e88e33b648
More work on the new build
|
vor 11 Jahren |
|
Caleb James DeLisle
|
fffb92caa8
more work done on the build
|
vor 11 Jahren |
|
Caleb James DeLisle
|
ddb1881936
Work on the jsbuild and eliminated multiple dependency loops
|
vor 11 Jahren |
|
Caleb James DeLisle
|
d7f5b302ac
More work on Windows port and made Message.h functions take an exception handler to throw in case of buffer overflow.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
f11ce2fe92
Added SessionManager_sessionStats()
|
vor 11 Jahren |
 hartzler
|
5510b767de
use String_clone
|
vor 11 Jahren |
|
hartzler
|
1efe067f86
change getUsers to return List*
|
vor 11 Jahren |
|
hartzler
|
44f16f3ee6
add admin list function to show user strings
|
vor 11 Jahren |
|
Caleb James DeLisle
|
b054b7c029
Merge branch 'passwords-have-users' of git://github.com/hartzler/cjdns
|
vor 11 Jahren |
|
hartzler
|
2c72e3f619
use String_equals and check for dup users
|
vor 11 Jahren |
|
Caleb James DeLisle
|
e3a7bb94cf
Fixed an assert failure caused by sessions setting up in an obscure way.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
2dcbe732ad
Rewrite of Ducttape.c to make it less fucked \:D/
|
vor 11 Jahren |
|
Caleb James DeLisle
|
e62fed13ec
Stage 1 of trying to correctly handle packets buffered during connectToMe cycle.
|
vor 11 Jahren |
 Matt Hartzler
|
0bf9722c84
add user notion to passwords
|
vor 11 Jahren |
|
Caleb James DeLisle
|
d811b2bf65
Properly handle empty packets and disallow them during handshake.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
ef98e30eef
improve logging and documentation comments
|
vor 11 Jahren |
 Caleb James DeLisle
|
4d575c86e9
Use less memory by freeing buffered messages sooner.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
31c8d10350
introduced new protocol version to fix bug 204
|
vor 11 Jahren |
|
Caleb James DeLisle
|
4fea39ba34
More refactoring
|
vor 11 Jahren |
|
Caleb James DeLisle
|
6427d40e6d
Decrease the number of external headers pulled in and refactor allocator and reader/writer.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
bd2acea07f
Fixed completely broken layer3 communications
|
vor 11 Jahren |
|
Caleb James DeLisle
|
0aa3cf1d85
Don't try a failed non-handshake as a handshake.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
1823f2eaf0
Make CryptoAuth count a session as valid before calling up the chain.
|
vor 11 Jahren |
|
Caleb James DeLisle
|
2d272c2fc4
compiler is so picky about missing )
|
vor 11 Jahren |
