To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
- Committer: Teddy Hogeborn
- Date: 2008-07-19 18:43:24 UTC
- Revision ID: teddy@fukt.bsnet.se-20080719184324-iwhoa5in75xa0u2u
* mandos-clients.conf ([foo]/dn, [foo]/password, [braxen_client]/dn,
[braxen_client]/password): Removed.
([foo]/fingerprint, [braxen_client]/fingerprint): New.
([foo]/checker): New.
([foo]/secfile): New.
([braxen_client]/secret): New.
* server.py: New "--debug" option to set debug flag. Removed "cert",
"key", "ca", "crl", and "cred" variables. Added default
value for "checker" config file setting. Do not pass
credentials to IPv6_TCPServer constructor.
(debug): New global debug flag. Used by most debugging output code.
(Client.__init__): Keyword argument "dn" replaced by "fingerprint",
"password" renamed to "secret", and "passfile"
renamed to "secfile". New keyword argument
"checker". All callers changed.
(Client.dn): Removed.
(Client.fingerprint): New.
(Client.password): Renamed to "secret"; all users changed.
(Client.passfile): Renamed to "secfile"; all users changed.
(Client.timeout, Client.interval): Changed to be properties; now
automatically updates the
"_timeout_milliseconds" and
"_interval_milliseconds" values.
(Client.timeout_milliseconds): Renamed to "_timeout_milliseconds".
(Client.interval_milliseconds): Renamed to "_interval_milliseconds".
(Client.check_command): New.
(Client.start_checker): Use the new "check_command" attribute.
(peer_certificate, fingerprint): New functions.
(tcp_handler.handle): Use ClientSession with empty credentials
object instead of ServerSession. Set gnutls
priority string. Do not verify peer. Use
fingerprint instead of DN when searching for
clients. Bug fix: Loop sending data so even large
secret data strings are sent.
(IPv6_TCPServer.credentials): Removed.
(if_nametoindex): Do not import ctypes since that is now imported
globally.
[braxen_client]/password): Removed.
([foo]/fingerprint, [braxen_client]/fingerprint): New.
([foo]/checker): New.
([foo]/secfile): New.
([braxen_client]/secret): New.
* server.py: New "--debug" option to set debug flag. Removed "cert",
"key", "ca", "crl", and "cred" variables. Added default
value for "checker" config file setting. Do not pass
credentials to IPv6_TCPServer constructor.
(debug): New global debug flag. Used by most debugging output code.
(Client.__init__): Keyword argument "dn" replaced by "fingerprint",
"password" renamed to "secret", and "passfile"
renamed to "secfile". New keyword argument
"checker". All callers changed.
(Client.dn): Removed.
(Client.fingerprint): New.
(Client.password): Renamed to "secret"; all users changed.
(Client.passfile): Renamed to "secfile"; all users changed.
(Client.timeout, Client.interval): Changed to be properties; now
automatically updates the
"_timeout_milliseconds" and
"_interval_milliseconds" values.
(Client.timeout_milliseconds): Renamed to "_timeout_milliseconds".
(Client.interval_milliseconds): Renamed to "_interval_milliseconds".
(Client.check_command): New.
(Client.start_checker): Use the new "check_command" attribute.
(peer_certificate, fingerprint): New functions.
(tcp_handler.handle): Use ClientSession with empty credentials
object instead of ServerSession. Set gnutls
priority string. Do not verify peer. Use
fingerprint instead of DN when searching for
clients. Bug fix: Loop sending data so even large
secret data strings are sent.
(IPv6_TCPServer.credentials): Removed.
(if_nametoindex): Do not import ctypes since that is now imported
globally.
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
ca.pem |
1 | 17 years ago | Björn Påhlsson | First working version with: IPv6, GnuTLS, X.509 ce | 2.4 KB |
|
|
|
cert.pem |
1 | 17 years ago | Björn Påhlsson | First working version with: IPv6, GnuTLS, X.509 ce | 2.4 KB |
|
|
|
client-cert.pem |
1 | 17 years ago | Björn Påhlsson | First working version with: IPv6, GnuTLS, X.509 ce | 2.4 KB |
|
|
|
client-key.pem |
1 | 17 years ago | Björn Påhlsson | First working version with: IPv6, GnuTLS, X.509 ce | 3.1 KB |
|
|
|
client.cpp |
9 | 17 years ago | Teddy Hogeborn | * client.cpp (main): Get t_old early since it is u | 5.2 KB |
|
|
|
crl.pem |
1 | 17 years ago | Björn Påhlsson | First working version with: IPv6, GnuTLS, X.509 ce | 1 KB |
|
|
|
key.pem |
1 | 17 years ago | Björn Påhlsson | First working version with: IPv6, GnuTLS, X.509 ce | 3.1 KB |
|
|
|
Makefile |
8 | 17 years ago | Teddy Hogeborn | * Makefile (client_debug): Bug fix; add quotes and | 263 bytes |
|
|
|
mandos-clients.conf |
12 | 16 years ago | Teddy Hogeborn | * mandos-clients.conf ([foo]/dn, [foo]/password, [ | 1.2 KB |
|
|
server.py |
12 | 16 years ago | Teddy Hogeborn | * mandos-clients.conf ([foo]/dn, [foo]/password, [ | 25.4 KB |
|
|
|
TODO |
12 | 16 years ago | Teddy Hogeborn | * mandos-clients.conf ([foo]/dn, [foo]/password, [ | 260 bytes |
|
|