/mandos/trunk : changes

» Changes to mandos from revision 1314

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 1314 to 1218

expand all

Rev	Summary	Authors	Date
1311	mandos: Make configured network socket non-inheritable mandos: Make configured network socket non-inheritable If we are passed a pre-created created network socket as a file descriptor, we should make it non-inheritable to checkers and other subprocesses.	Teddy Hogeborn	5 days ago
1310	mandos: Avoid closing configured server network socket mandos: Avoid closing configured server network socket If we are passed a pre-created created network socket as a file descriptor, we must avoid later closing it (when stdin, stdout and stderr are dup2()ed over with /dev/null) by making sure that the network file descriptor is not 0, 1, or 2, by creating a new file descriptor if necessary. However, when we create a new file descriptor we must check that the new file descriptor is not 0, 1, or 2 either, and try again until we get a suitable file descriptor.	Teddy Hogeborn	5 days ago
1305	Only use D-Bus when necessary Only use D-Bus when necessary If both "use_dbus" and "zeroconf" are false, by either setting them to False in mandos.conf or by using the --no-dbus and --no-zeroconf options (and a port number or socket is specified), then we do not need to connect to D-Bus at all. From: Mike Klein <mike@kleinnet.com> Signed-off-by: Teddy Hogeborn <teddy@recompile.se>	Teddy Hogeborn	2 months ago
1302	Merge from release branch Merge from release branch	Teddy Hogeborn	2 months ago
1284	Be more tolerant when a client is misconfigured in clients.c... Be more tolerant when a client is misconfigured in clients.conf * mandos (Client/config_parser): If a client config section in clients.conf lacks both a fingerprint= and a key_id= setting, show an error and skip that client instead of crashing.	Teddy Hogeborn	2 months ago
1272	Merge from release branch Merge from release branch	Teddy Hogeborn	1 year ago
1268	Server: Bug fix: Stagger checker runs when creating clients Server: Bug fix: Stagger checker runs when creating clients * mandos (Client.enable()): Do not set self.expires here; move it to "init_checker". (Client.init_checker()): Take new "randomize_start" argument. If True, randomize delay before starting checker. Also, do not start checker right now, but instead extend expire time so that the scheduled checker always has time to run. (Checker.start_checker): Take new "start_was_randomized" argument. If True, reset scheduled checker runs to be 'interval' apart, instead of using the initial delay. (Bug fix) (main): On startup, pass argument randomize_start=True to client.init_checker() when initizlizing checkers for all enabled clients. Reported-by: Louis Charreau <Louis.Charreau@vadesecure.com> Suggested-by: Louis Charreau <Louis.Charreau@vadesecure.com> Fixes: 1200 ("Server: Stagger checker runs when creating clients")	Teddy Hogeborn	1 year ago
1261	Merge from release branch Merge from release branch	Teddy Hogeborn	2 years ago
1259	Update copyright year Update copyright year * debian/copyright: Update copyright year to 2022. * dracut-module/password-agent.c: - '' - * dracut-module/password-agent.xml: Revert copyright year to 2020. * intro.xml: - '' - * mandos: Update copyright year to 2022. * mandos-ctl: - '' - * plugin-helpers/mandos-client-iprouteadddel.c: - '' - * plugin-runner.c: - '' - * plugins.d/mandos-client.c: - '' - * plugins.d/password-prompt.c: - '' - * plugins.d/plymouth.c: - '' - * plugins.d/splashy.c: - '' - * plugins.d/usplash.c: - '' -	Teddy Hogeborn	2 years ago
1257	Fix testing code to handle abnormal exits Fix testing code to handle abnormal exits * mandos (Local variables/run-tests-in-test-buffer): Handle abnormal exit (i.e. exit caused by a signal) of process running tests. * mandos-ctl (Local variables/run-tests-in-test-buffer): - '' -	Teddy Hogeborn	2 years ago
1255	mandos-ctl: Update testing code mandos-ctl: Update testing code * mandos-ctl: Update testing code. (should_only_run_tests): Replaced with "parse_test_args". (parse_test_args): New.	Teddy Hogeborn	2 years ago
1254	mandos: Update logging code to more standard idioms mandos: Update logging code to more standard idioms * mandos-monitor: Get logger using basename instead of full command. Also, eliminate last uses of .format() when logging. (logger): Rename to "log".	Teddy Hogeborn	2 years ago
1247	Server: Fix minor style issue Server: Fix minor style issue * mandos: Consistently use double quotes instead of single quotes.	Teddy Hogeborn	2 years ago
1243	Some cleanup of GnuTLS interface Some cleanup of GnuTLS interface Rename opaque internal GnuTLS structures named _int to also start with underscore (_), as is the custom in Python programs. Decode byte strings from UTF-8 where needed. (Fixing, among other things, all "DEBUG: GnuTLS" lines having a "b'" prefix in Python 3.) Simplify calling C functions by: 1. Using the "_as_parameter_" attribute to store the ctypes object. 2. Creating and using helper classes to automatically create pointers or cast typed pointers to pointers to void. 3. Providing the "from_param()" method on relevant classes. Remove "restype" attribute on C functions where "errcheck" attribute is already set. mandos (gnutls.session_int): Rename to start with "_". (gnutls.openpgp_crt_int): - '' - (gnutls.Error.__init__): Decode byte string from gnutls.strerror(). (gnutls.PointerTo): New helper class. (gnutls.CastToVoidPointer): - '' - (gnutls.With_from_param): - '' - (gnutls.Credentials): Inherit from "With_from_param" and store the ctypes object in the "_as_parameter_" attribute instead of "_c_object". (gnutls._error_code): Use "gnutls.E_SUCCESS" instead of the unadorned numerical constant "0". (gnutls._retry_on_error): - '' - (gnutls.priority_set_direct.argtypes): Use "ClientSession" instead of "session_t", and change all callers to match. (gnutls.init.argtypes): Use "PointerTo(ClientSession)" instead of "ctypes.POINTER(session_t)", and change all callers to match. (gnutls.set_default_priority.argtypes): Use "ClientSession" instead of "session_t", and change all callers to match. (gnutls.record_send.argtypes): - '' - (gnutls.certificate_allocate_credentials.argtypes): Use "PointerTo(Credentials)" instead of "ctypes.POINTER(certificate_credentials_t)", and change all callers to match. (gnutls.certificate_free_credentials.argtypes): Use "Credentials" instead of "certificate_credentials_t", and change all callers to match. (gnutls.handshake_set_private_extensions.argtypes): Use "ClientSession" instead of "session_t", and change all callers to match. (gnutls.credentials_set.argtypes): Use "CastToVoidPointer(Credentials)" instead of "ctypes.c_void_p", and change all callers to match. (gnutls.certificate_type_get.argtypes): Use "ClientSession" instead of "session_t", and change all callers to match. (gnutls.certificate_get_peers.argtypes): - '' - (gnutls.deinit.argtypes): - '' - (gnutls.handshake.argtypes): - '' - (gnutls.handshake.restype): Change from "_error_code" to "ctypes.c_int". (gnutls.transport_set_ptr.argtypes): Use "ClientSession" instead of "session_t", and change all callers to match. (gnutls.bye.argtypes): - '' - (gnutls.bye.restype): Change from "_error_code" to "ctypes.c_int". (gnutls.certificate_type_get2.argtypes): Use "ClientSession" instead of "session_t", and change all callers to match. (ClientHandler.handle): Decode "key_id" bytes to string before logging it in the debug log. (main.debug_gnutls): Decode GnuTLS log message from bytes to string before logging it in the debug log.	Teddy Hogeborn	3 years ago
1242	Fix theoretical GnuTLS bug Fix theoretical GnuTLS bug Fix "NameError: global name '_error_code' is not defined" error if GNUTLS_E_INTERRUPTED or GNUTLS_E_AGAIN was ever returned from gnutls_record_send(). * mandos (gnutls._retry_on_error): Import "_error_code" from outer class scope to local function scope via a keyword argument.	Teddy Hogeborn	3 years ago
1236	Merge from release branch Merge from release branch	Teddy Hogeborn	3 years ago
1228	Merge from release branch Merge from release branch	Teddy Hogeborn	3 years ago
1220	mandos: Shorten or break long lines mandos: Shorten or break long lines * mandos: Shorten or break long lines.	teddy at recompile	4 years ago
1219	Merge from release branch Merge from release branch	teddy at recompile	4 years ago
1218	Update copyright year Update copyright year * DBUS-API: Update copyright year to 2020 * debian/copyright: - '' - * dracut-module/ask-password-mandos.service: - '' - * dracut-module/password-agent.c: - '' - * mandos: - '' - * mandos-ctl: - '' - * plugin-runner.c: - '' - * plugins.d/mandos-client.c: - '' - * plugins.d/plymouth.c: - '' - * mandos-to-cryptroot-unlock: Update copyright year to 2019.	teddy at recompile	4 years ago

Older »