/mandos/trunk : changes

» Changes from revision 15.1.4

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 15.1.4

expand all

Rev	Summary	Authors	Date
15.1.4	merge merge	Björn Påhlsson	16 years ago
15.1.3	Added getopt_long support for mandosclient and passprompt Added getopt_long support for mandosclient and passprompt Added support for --interface for mandosclient Added support for --prefix for passprompt	Björn Påhlsson	16 years ago
15.1.2	Added debug options from passprompt as --debug and --debug=p... Added debug options from passprompt as --debug and --debug=passprompt	Björn Påhlsson	16 years ago
15.1.1	Added debugg support in form off --debug and --debug=mandosc... Added debugg support in form off --debug and --debug=mandosclient	Björn Påhlsson	16 years ago
15	* mandos-clients.conf ([foo]): Uncommented. * mandos-clients.conf ([foo]): Uncommented. ([foo]/secret): New. ([foo]/secfile): Commented out. ([foo]/checker): Changed to "fping -q -- %%(fqdn)s". ([foo]/timeout): New. * server.py: New modeline for Python and Emacs. Set a logging format. (Client.__init__): Bug fix: Choose either the value from the options object or pass the argument through string_to_delta for both "timeout" and "interval". (Client.checker_callback): Bug fix: Do not log spurious "Checker for <foo> failed" messages. (Client.start_checker): Moved "Starting checker" log message down to just before actually starting the subprocess. Do not redirect the subprocesses' stdout to a pipe. (peer_certificate, fingerprint): Added docstrings. (entry_group_state_changed): Call "killme()" instead of "main_loop.quit()". (daemon, killme): New functions. (exitstatus, main_loop_started): New global variables. (__main__): Removed the "--cert", "--key", "--ca", and "--crl" options. Removed the sleep command from the default checker. Add a console logger in debug mode. Call "killme()" instead of "main_loop.quit()" when there are no more clients. Call "daemon()" if not in debug mode. Register "cleanup()" to run at exit. Ignore some signals. Catch DBusException to detect another running server and exit cleanly. Exit with "exitstatus". (cleanup): New function.	Teddy Hogeborn	16 years ago
14	Fixed a overbufferflow bug, thanks to a forgotten \0 Fixed a overbufferflow bug, thanks to a forgotten \0	Björn Påhlsson	16 years ago
13	Added following support: Added following support: Pluginbased client handler rewritten Mandos client Avahi instead of udp server discovery openpgp encrypted key support Passprompt stand alone application for direct console input Added logging for Mandos server	Björn Påhlsson	16 years ago
12	* mandos-clients.conf ([foo]/dn, [foo]/password, [braxen_cli... * mandos-clients.conf ([foo]/dn, [foo]/password, [braxen_client]/dn, [braxen_client]/password): Removed. ([foo]/fingerprint, [braxen_client]/fingerprint): New. ([foo]/checker): New. ([foo]/secfile): New. ([braxen_client]/secret): New. * server.py: New "--debug" option to set debug flag. Removed "cert", "key", "ca", "crl", and "cred" variables. Added default value for "checker" config file setting. Do not pass credentials to IPv6_TCPServer constructor. (debug): New global debug flag. Used by most debugging output code. (Client.__init__): Keyword argument "dn" replaced by "fingerprint", "password" renamed to "secret", and "passfile" renamed to "secfile". New keyword argument "checker". All callers changed. (Client.dn): Removed. (Client.fingerprint): New. (Client.password): Renamed to "secret"; all users changed. (Client.passfile): Renamed to "secfile"; all users changed. (Client.timeout, Client.interval): Changed to be properties; now automatically updates the "_timeout_milliseconds" and "_interval_milliseconds" values. (Client.timeout_milliseconds): Renamed to "_timeout_milliseconds". (Client.interval_milliseconds): Renamed to "_interval_milliseconds". (Client.check_command): New. (Client.start_checker): Use the new "check_command" attribute. (peer_certificate, fingerprint): New functions. (tcp_handler.handle): Use ClientSession with empty credentials object instead of ServerSession. Set gnutls priority string. Do not verify peer. Use fingerprint instead of DN when searching for clients. Bug fix: Loop sending data so even large secret data strings are sent. (IPv6_TCPServer.credentials): Removed. (if_nametoindex): Do not import ctypes since that is now imported globally.	Teddy Hogeborn	16 years ago
11	* server.py: Rewritten to use Zeroconf (mDNS/DNS-SD) in plac... * server.py: Rewritten to use Zeroconf (mDNS/DNS-SD) in place of the old broadcast-UDP-to-port-49001 method.	Teddy Hogeborn	16 years ago
10	* server.py: Bug fix: Do "from __future__ import division". * server.py: Bug fix: Do "from __future__ import division". (Client.__init__): Bug fix: parse interval string from config file. (Client.check_action): Take no arguments. Print some debugging output. Reset "checker" to None. (Client.start_checker): Sleep 10 seconds before pinging to alleviate debugging. (Client.next_stop): Bug fix: check if "last_seen" and/or "checker" is None. (Client.still_valid): Bug fix: check if "last_seen" is None. (Client.handle): When finding the right password to send, use a list comprehension and an index lookup instead of a generator expression to a dict. (IPv6_TCPServer.request_queue_size): Removed. (in6addr_any): Moved inside "main". (main): Changed "clients" to be a Set instead of a list. Bug fix: Exit when/if all clients are removed. Call "select" with all client checkers and a suitable timeout. Add some debugging output. Start new checkers when needed and delete clients which have timed out.	Teddy Hogeborn	16 years ago
9	* client.cpp (main): Get t_old early since it is used on err... * client.cpp (main): Get t_old early since it is used on error exits. * server.py (Client.checker): New attribute. (Client.check_action, Client.start_checker, Client.stop_checker, Client.fileno, Client.next_stop, Client.still_valid, Client.it_is_time_to_check): New methods. (Client.handle_request): Alias to "check_action". (main): Stop all started checkers on exit. Exit cleanly on keyboard interrupt.	Teddy Hogeborn	16 years ago
8	* Makefile (client_debug): Bug fix; add quotes and / to CERT... * Makefile (client_debug): Bug fix; add quotes and / to CERT_ROOT. * server.py (cred): Removed; no need for a global variable.	Teddy Hogeborn	16 years ago
7	* Makefile (client_debug): New. * Makefile (client_debug): New. * client.cpp (CERT_ROOT): New. (Tested)	Teddy Hogeborn	16 years ago
6	Merged from Björn. Merged from Björn.	Teddy Hogeborn	16 years ago
5	* server.py (server_metaclass): New. * server.py (server_metaclass): New. (IPv6_UDPServer, IPv6_TCPServer): Use "server_metaclass" instead of "server_bind" and "init_with_options". Removed "address_family" and "allow_reuse_address", since they are now added in "server_metaclass". (server_bind, init_with_options): Removed. (main): Pass "options" to Client constructor. (Client.__init__): Take an "options" parameter and use it.	Teddy Hogeborn	16 years ago
4	* server.py (Client.created, Client.next_check): New. * server.py (Client.created, Client.next_check): New. (string_to_delta): New. (main): New options "--check" and "--interval". Use string_to_delta to parse arguments to "--timeout" and "--interval".	Teddy Hogeborn	17 years ago
3	Python based server Python based server Added client configfile	Björn Påhlsson	17 years ago
2	Working client and server and password system Working client and server and password system	Björn Påhlsson	17 years ago
1	First working version with: IPv6, GnuTLS, X.509 certificates... First working version with: IPv6, GnuTLS, X.509 certificates, DN retrieval.	Björn Påhlsson	17 years ago