/mandos/trunk : changes

» Changes from revision 1186

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 777 to 758

expand all

Rev	Summary	Authors	Date
777	Bug fix for GnuTLS 3: be compatible with old 2048-bit DSA ke... Bug fix for GnuTLS 3: be compatible with old 2048-bit DSA keys. The mandos-keygen program in Mandos version 1.6.0 and older generated 2048-bit DSA keys, and when GnuTLS uses these it has trouble connecting using the Mandos default priority string. This was previously fixed in Mandos 1.6.2, but the bug reappeared when using GnuTLS 3, so the default priority string has to change again; this time also the Mandos client has to change its default, so now the server and the client should use the same default priority string: SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256 * mandos (main/server_defaults): Changed default priority string. * mandos-options.xml (/section/para[id="priority_compat"]): Removed. (/section/para[id="priority"]): Changed default priority string. * mandos.conf ([DEFAULT]/priority): - '' - * mandos.conf.xml (OPTIONS/priority): Refer to the id "priority" instead of "priority_compat". * mandos.xml (OPTIONS/--priority): - '' - * plugins.d/mandos-client.c (main): Changed default priority string.	Teddy Hogeborn	9 years ago
776	mandos-client: Bug fix: don't crash if --dh-params was not u... mandos-client: Bug fix: don't crash if --dh-params was not used. * plugins.d/mandos-client.c (main): Bug fix: Check if dh_params_file is NULL before using it in the workaround for Debian bug #633582.	Teddy Hogeborn	9 years ago
775	plugin-runner: Minor fix: close helperdir before exiting in ... plugin-runner: Minor fix: close helperdir before exiting in fork. * plugin-runner.c: Minor fix: close helperdir before exiting in fork if helper program could not be opened.	Teddy Hogeborn	9 years ago
774	Don't use TEMP_FAILURE_RETRY around close(). Don't use TEMP_FAILURE_RETRY around close(). * plugin-runner.c: Don't use TEMP_FAILURE_RETRY around close(). * plugins.d/mandos-client.c: - '' - * plugins.d/usplash.c: - '' -	Teddy Hogeborn	9 years ago
773	mandos-client: Don't use memset(). mandos-client: Don't use memset(). * plugins.d/mandos-client.c (start_mandos_communication): Use compound literal struct assignment instead of memset().	Teddy Hogeborn	9 years ago
772	Assume the C11 language (ISO 9899:2011), when compiling C co... Assume the C11 language (ISO 9899:2011), when compiling C code. * Makefile (LANGUAGE): Changed to "-std=gnu11".	Teddy Hogeborn	9 years ago
771	Don't use absolute paths to commands in Debian configuration... Don't use absolute paths to commands in Debian configurations scripts. * debian/mandos-client.postinst: Don't use absolute paths to commands. * debian/mandos-client.postrm: - '' -	Teddy Hogeborn	9 years ago
770	* debian/mandos.prerm: Don't run init script, use only invok... * debian/mandos.prerm: Don't run init script, use only invoke-rc.d.	Teddy Hogeborn	9 years ago
769	Handle local Zeroconf service name collisions on startup, to... Handle local Zeroconf service name collisions on startup, too. * mandos (AvahiService.server_state_changed): Catch name collision error when adding server.	Teddy Hogeborn	9 years ago
768	debian/mandos-client.README.Debian: Document the dhparams.pe... debian/mandos-client.README.Debian: Document the dhparams.pem file.	Teddy Hogeborn	9 years ago
767	plugins.d/mandos-client.c (main): See why it failed to bring... plugins.d/mandos-client.c (main): See why it failed to bring up interface.	Teddy Hogeborn	9 years ago
766	Rename the "client-dhparams.pem" file to simply "dhparams.pe... Rename the "client-dhparams.pem" file to simply "dhparams.pem". * debian/mandos-client.postinst: Rename the "client-dhparams.pem" file to "dhparams.pem". * initramfs-tools-hook: - '' - * plugins.d/mandos-client.c (main): - '' -	Teddy Hogeborn	9 years ago
765	Install client Diffie-Hellman parameters into initramfs. Install client Diffie-Hellman parameters into initramfs. * debian/control (Package: mandos-client/Recommends): Added "gnutls-bin \| openssl" (to generate DH parameters). * debian/mandos-client.postinst (create_dh_params): New function called on package configure. * plugins.d/mandos-client.c (main): Bug fix: Work around Debian bug #633582 also for the "client-dhparams.pem" file.	Teddy Hogeborn	9 years ago
764	initramfs-tools-hook: Use Diffie-Hellman parameters file if ... initramfs-tools-hook: Use Diffie-Hellman parameters file if available.	Teddy Hogeborn	9 years ago
763	mandos-client: Add --dh-params FILE option. mandos-client: Add --dh-params FILE option. * plugins.d/mandos-client.c: Added --dh-params FILE option. (init_gnutls_global): New "dhparamsfilename" argument. All callers changed. Read and use Diffie-Hellman parameters from it. Bug fix: check for error when opening seckeyfile for the second time. (init_gnutls_session): Remove unnecessary call to gnutls_dh_set_prime_bits(); (main): New variable "dh_params_file". (main/argp_options): Added "--dh-params" option. (main/parse_opt): - '' - * plugins.d/mandos-client.xml (SYNOPSIS): Add --dh-params option. (OPTIONS): Document --dh-params option and document that the --dh-bits options is potentially overridden by the --dh-params option.	Teddy Hogeborn	9 years ago
762	mandos-client: Add --dh-params FILE option. mandos-client: Add --dh-params FILE option. * plugins.d/mandos-client.c: Added --dh-params FILE option. (init_gnutls_global): New "dhparamsfilename" argument. All callers changed. Read and use Diffie-Hellman parameters from it. Bug fix: check for error when opening seckeyfile for the second time. (init_gnutls_session): Remove unnecessary call to gnutls_dh_set_prime_bits(); (main): New variable "dh_params_file". (main/argp_options): Added "--dh-params" option. (main/parse_opt): - '' - * plugins.d/mandos-client.xml (SYNOPSIS): Add --dh-params option. (OPTIONS): Document --dh-params option and document that the --dh-bits options is potentially overridden by the --dh-params option.	Teddy Hogeborn	9 years ago
761	mandos.service: Use Type=dbus (implicitly). mandos.service: Use Type=dbus (implicitly). mandos.service ([Service]/Type): Removed. ([Service]/BusName): Uncommented; set to "se.recompile.Mandos".	Teddy Hogeborn	9 years ago
760	debian/control (Build-Depends): Bug fix: Added "libnl-route-... debian/control (Build-Depends): Bug fix: Added "libnl-route-3-dev".	Teddy Hogeborn	9 years ago
759	Merge change to add local route when network is "unreachable... Merge change to add local route when network is "unreachable".	Teddy Hogeborn	9 years ago
758	plugin-runner.xml (EXAMPLE): Use the /usr/lib/<arch> directo... plugin-runner.xml (EXAMPLE): Use the /usr/lib/<arch> directory. Also explain used options in order.	Teddy Hogeborn	9 years ago