------------------------------------------------------------------------
r1281 | mbr | 2008-10-01 07:55:41 -0400 (Wed, 01 Oct 2008) | 4 lines
Changed paths:
   M /fwknop/tags/fwknop-1.9.8/ChangeLog

- Made the updated UI from Sean Greven available on cipherdyne.org.  This
update fixes the timezone problem so that SPA packets generated by the
UI will be properly handled by an fwknopd server.

------------------------------------------------------------------------
r1280 | mbr | 2008-10-01 07:48:05 -0400 (Wed, 01 Oct 2008) | 1 line
Changed paths:
   A /fwknop/tags/fwknop-1.9.8 (from /fwknop/branches/fwknop-1.9.8:1279)

tagged fwknop-1.9.8 release
------------------------------------------------------------------------
r1279 | mbr | 2008-10-01 07:46:40 -0400 (Wed, 01 Oct 2008) | 1 line
Changed paths:
   A /fwknop/branches/fwknop-1.9.8/ChangeLog.svn

added ChangeLog.svn file to track -r 1278:1238 for 1.9.8 release
------------------------------------------------------------------------
r1278 | mbr | 2008-10-01 07:41:20 -0400 (Wed, 01 Oct 2008) | 1 line
Changed paths:
   A /fwknop/branches/fwknop-1.9.8 (from /fwknop/trunk:1277)

created fwknop-1.9.8 branch
------------------------------------------------------------------------
r1277 | mbr | 2008-09-30 22:37:05 -0400 (Tue, 30 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

version 1.9.8
------------------------------------------------------------------------
r1276 | mbr | 2008-09-30 22:23:52 -0400 (Tue, 30 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

1.9.8 updates
------------------------------------------------------------------------
r1275 | mbr | 2008-09-30 22:23:41 -0400 (Tue, 30 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS

updates for Francois
------------------------------------------------------------------------
r1274 | mbr | 2008-09-30 22:23:21 -0400 (Tue, 30 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/packaging/fwknop-nodeps.spec
   M /fwknop/trunk/packaging/fwknop.spec

bumped version to 1.9.8
------------------------------------------------------------------------
r1273 | mbr | 2008-09-30 08:04:52 -0400 (Tue, 30 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS

added Francois Marier, made additions for Franck
------------------------------------------------------------------------
r1271 | mbr | 2008-09-30 07:57:05 -0400 (Tue, 30 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.8-pre5
------------------------------------------------------------------------
r1270 | mbr | 2008-09-30 07:56:34 -0400 (Tue, 30 Sep 2008) | 3 lines
Changed paths:
   M /fwknop/trunk/fwknopd

Fixed check_commands() include/exclude search criteria by using the keys
operator against incoming hash refs (bug noticed by Franck Joncourt).

------------------------------------------------------------------------
r1269 | mbr | 2008-09-30 07:55:19 -0400 (Tue, 30 Sep 2008) | 11 lines
Changed paths:
   M /fwknop/trunk/fwknopd.8

|From: Franck Joncourt <franck.mail@dthconnex.com>
|Subject: [PATCH] fixes/fwknopd_manpage
|
|Hyphen used as minus sign found in fwknopd.8
|
|
|  This fixes the following lintian warning about fwknopd manpage:
|  http://lintian.debian.org/tags/hyphen-used-as-minus-sign.html
|
|Signed-off-by: Franck Joncourt <franck.mail@dthconnex.com>

------------------------------------------------------------------------
r1267 | mbr | 2008-09-29 23:37:27 -0400 (Mon, 29 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.8-pre4
------------------------------------------------------------------------
r1266 | mbr | 2008-09-29 23:36:50 -0400 (Mon, 29 Sep 2008) | 6 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop.8
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/fwknopd.8
   M /fwknop/trunk/test/fwknop_test.pl

- Bugfix to make sure that neither fwknop nor fwknopd reference any
options file in GnuPG mode, and this is now the default (which overrides
the now unnecessary --gpg-no-options arg).  There is a new option
--gpg-use-options to restore the usage of an options file by GnuPG (not
normally needed).

------------------------------------------------------------------------
r1265 | mbr | 2008-09-29 19:49:47 -0400 (Mon, 29 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

minor syntax bugfix
------------------------------------------------------------------------
r1264 | mbr | 2008-09-29 19:46:59 -0400 (Mon, 29 Sep 2008) | 7 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

- Updated fwknopd to enforce the DIGEST_TYPE variable more strictly by not
accepting SPA packets that do not include digest of the specified type.
The DIGEST_TYPE default is 'ALL', so normally fwknopd accepts any
supported digest.
- (Test suite) Added test for mis-matched DIGEST_TYPE vs. digest algorithm
used in SPA packets.

------------------------------------------------------------------------
r1262 | mbr | 2008-09-28 22:50:44 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.8-pre3
------------------------------------------------------------------------
r1261 | mbr | 2008-09-28 22:48:40 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

added exclusion for gpg command in check_commands()
------------------------------------------------------------------------
r1260 | mbr | 2008-09-28 22:02:10 -0400 (Sun, 28 Sep 2008) | 3 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   A /fwknop/trunk/test/conf/gpg2_access.conf
   A /fwknop/trunk/test/conf/gpg2_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

(Test suite) Added tests for GnuPG version 2 (a check is made to see if
it is installed before these tests are run).

------------------------------------------------------------------------
r1259 | mbr | 2008-09-28 21:34:55 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

minor addition to be sure to print all access keys in --debug mode (mostly useful for the test suite in order to see all access.conf directives)
------------------------------------------------------------------------
r1257 | mbr | 2008-09-28 20:22:00 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.8-pre2
------------------------------------------------------------------------
r1256 | mbr | 2008-09-28 20:21:23 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

added GPG_PATH var
------------------------------------------------------------------------
r1255 | mbr | 2008-09-28 20:17:46 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd.8

added GPG_NO_OPTIONS, GPG_NO_REQUIRE_PREFIX, and GPG_PATH access.conf vars
------------------------------------------------------------------------
r1254 | mbr | 2008-09-28 20:17:20 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

Added GPG_PATH variable to access.conf import routine to allow different paths for gpg to be specified on a per-SOURCE basis
------------------------------------------------------------------------
r1253 | mbr | 2008-09-28 18:02:20 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

minor update to validate command line args in a separate function, and added checks for --gpg-path
------------------------------------------------------------------------
r1252 | mbr | 2008-09-28 17:51:36 -0400 (Sun, 28 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

minor update to include debuging code in check_command()
------------------------------------------------------------------------
r1251 | mbr | 2008-09-28 16:28:42 -0400 (Sun, 28 Sep 2008) | 20 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/filter_62203_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   A /fwknop/trunk/test/conf/gpg_access_no_prefix.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_local_nat_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/pk_fwknop.conf
   M /fwknop/trunk/test/conf/rand_port_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

- Added GPG_NO_REQUIRE_PREFIX to access.conf to control whether the GnuPG
'hQ' prefix is added before base64 decoding and decrypting.  Normally
this is not needed, but if there appear to be communications issues
between the fwknop client and the fwknopd server then this option can be
useful to ensure that encrypted SPA data is sent through the GnuPG
decryption routine.  The 'hQ' prefix is a heuristic derived from the
file 'magic' database for describing data encrypted with GnuPG, and the
fwknop client normally strips this data from outgoing SPA packets
(unless the --Include-gpg-prefix option is used).
- Added '--gpg-prefix <bytes>' to the fwknop client so that the
predictable prefix for GnuPG encrypted data can be changed.  Normally
this prefix is 'hQ' (base64 encoded), or the raw bytes 0x8502.
- Added the ability to control the path used for the gpg binary on the
client side with a new argument '--gpg-path <path>', and on the server
side with gpgCmd in the fwknop.conf file.  The GnuPG::Interface module
normally just takes the first instance of gpg that is the current path,
but this new feature allows the path to the binary to be explicitly set.
- (Test suite) Added tests for GPG_NO_REQUIRE_PREFIX functionality and for
the expected GnuPG prefix.

------------------------------------------------------------------------
r1250 | mbr | 2008-09-27 10:23:52 -0400 (Sat, 27 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop.8

applied patch from Franck Joncourt to add the --Home-dir, --Max-packet-size, and --Show-last-cmd command line args
------------------------------------------------------------------------
r1249 | mbr | 2008-09-21 17:10:09 -0400 (Sun, 21 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/TODO

added - Payload offset to look for valid SPA data.
------------------------------------------------------------------------
r1248 | mbr | 2008-09-14 12:12:23 -0400 (Sun, 14 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

blurb for the new base64_byte_frequency.pl script
------------------------------------------------------------------------
r1247 | mbr | 2008-09-14 12:12:01 -0400 (Sun, 14 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/base64_byte_frequency.pl

added Id tag expansion
------------------------------------------------------------------------
r1246 | mbr | 2008-09-14 12:08:00 -0400 (Sun, 14 Sep 2008) | 1 line
Changed paths:
   A /fwknop/trunk/test/base64_byte_frequency.pl

added base64_byte_frequency.pl file to make it easy to visualize base64 encoded SPA packets
------------------------------------------------------------------------
r1244 | mbr | 2008-09-14 07:46:21 -0400 (Sun, 14 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.8-pre1
------------------------------------------------------------------------
r1243 | mbr | 2008-09-13 23:02:42 -0400 (Sat, 13 Sep 2008) | 5 lines
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   A /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

- Bugfix to make sure to apply BLACKLIST checks to IP addresses specified
with -a (or derived via -R) in addition to the source IP in the IP
header (which can be modified via --Spoof-src).  (Franck Joncourt
submitted a patch for this.)

------------------------------------------------------------------------
r1242 | mbr | 2008-09-13 09:18:44 -0400 (Sat, 13 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/knoptm

removed Net::IPv4Addr dependency for the fwknop client and knoptm daemon, and updated the ChangeLog for 1.9.8
------------------------------------------------------------------------
r1241 | mbr | 2008-09-13 09:06:08 -0400 (Sat, 13 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop.8

Added --Save-packet-append to allow large sets of SPA packets to be collected by calling fwknop in a loop from a shell
------------------------------------------------------------------------
r1240 | mbr | 2008-09-04 00:26:06 -0400 (Thu, 04 Sep 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/fwknop_funcs.c

added chmod() to ensure that .pid files have 0600 permissions
------------------------------------------------------------------------
r1239 | mbr | 2008-08-31 09:31:33 -0400 (Sun, 31 Aug 2008) | 5 lines
Changed paths:
   M /fwknop/trunk/fwknop.8

-Bugfix for missing "\" chars before dashes (noticed by Franck Joncourt):

http://lintian.debian.org/tags/hyphen-used-as-minus-sign.htm


------------------------------------------------------------------------
