Commit graph

567 commits

Author SHA1 Message Date
Guus Sliepen
428482d86f Added proxy-arp support. No more ifconfig -arp needed. Works like a charm
under FreeBSD now :).
2001-06-04 11:14:35 +00:00
Guus Sliepen
0a3c8cefd4 Fix subnet_lookup() for overlapping subnets. Needs rethinking. 2001-06-01 08:02:09 +00:00
Guus Sliepen
7db1b999c8 Make sure Solaris is happy too. 2001-05-28 08:56:57 +00:00
Guus Sliepen
65247c063b Small fixes to allow correct compilation under FreeBSD (tested with 4.3) 2001-05-28 08:21:43 +00:00
Ivo Timmermans
4e959ee405 Don't distribute autogen.sh in a release 2001-05-26 09:35:28 +00:00
Ivo Timmermans
514f8f579d Changed version number to 1.0-cvs 2001-05-26 09:35:00 +00:00
Ivo Timmermans
20c2b62b18 New make target: `make release' 2001-05-26 09:34:11 +00:00
Guus Sliepen
8d307c2fbf Fix sample configuration to show keys in PEM format and correct tapdevice. 2001-05-25 18:57:37 +00:00
Guus Sliepen
e12d41f39d Documents are merged. Now we only need to check the ports and the TCPonly
and IndirectData options.
2001-05-25 13:24:34 +00:00
Guus Sliepen
f0c64a3dac Merged PROTOCOL, NETWORK and SECURITY2 with the texinfo manual. 2001-05-25 12:45:37 +00:00
Guus Sliepen
fcf869cd42 TCPonly now works (in a relatively clean way too). 2001-05-25 11:54:28 +00:00
Guus Sliepen
a5e2ae6b2b With recent kernels the tun device file is located in /dev/net. 2001-05-25 10:08:11 +00:00
Guus Sliepen
6e09c2a99c Small corrections to the manuals. 2001-05-25 10:06:13 +00:00
Guus Sliepen
4dee76522e Small fixes:
- Fix compiler warnings (one was a real (but harmless) bug)
- Don't send PING packets if there is UDP traffic
- Correctly terminate strings containing salt for PING/PONG packets
2001-05-25 08:36:11 +00:00
Guus Sliepen
bfc5d6014e Only send key_changed if it was previously requested. 2001-05-24 21:52:26 +00:00
Guus Sliepen
1a248fd5bd All features for 1.0 are implemented now, we just have to check the
FreeBSD and Solaris ports and merge some docs.
2001-05-24 21:32:30 +00:00
Guus Sliepen
58893f0875 Since this is incompatible with some earlier versions, PROT_CURRENT is
increased.
2001-05-24 21:30:36 +00:00
Guus Sliepen
d1b597758e Add randomness to PING/PONG packets to prevent crypto attacks on quiet
tunnels.
2001-05-24 21:29:09 +00:00
Guus Sliepen
4493b0650b Changed URL from kernelnotes.org to linuxdoc.org. 2001-05-24 20:40:13 +00:00
Guus Sliepen
3360c6270b More revisions to the documentation:
- Removed cruft
- Reordered some sections to make it more logical for the beginner
- Added small examples and hints about configuration files
2001-05-24 20:24:12 +00:00
Guus Sliepen
6f7f8659a2 - Make sure correct information is supplied for both old kernels (with
ethertap) and for new kernels (with TUN/TAP driver).
- Revised example configuration and made it conform to latest (CVS) version of
  tinc.
2001-05-19 15:50:51 +00:00
Guus Sliepen
e4f3d93ec6 - s/ip_t/ipv4_t/g
- Add "salt" to the beginning of UDP packets. Replaces length field which
  is not useful anyway.
2001-05-07 19:08:46 +00:00
Guus Sliepen
a26081467c Correctly cycle through ConnectTo variables. 2001-05-04 18:45:02 +00:00
Guus Sliepen
80b4a851a6 Depend on new ssl package and install alias for universal TUN/TAP module. 2001-04-13 10:30:04 +00:00
Guus Sliepen
156ec67652 Check indirectdata option before forwarding certain requests. 2001-03-13 21:33:31 +00:00
Guus Sliepen
c426e981ee Ignore alarm signals if we do not need to respond to them. 2001-03-13 21:32:24 +00:00
Guus Sliepen
b413257e10 Fixed bug in setup_signals() that would make tinc die when unexpected
signals were caught.
2001-03-13 09:55:14 +00:00
Guus Sliepen
f1a082823c Fixed a race condition triggered by receive_meta() and the new
authentication scheme.
2001-03-12 23:58:19 +00:00
Guus Sliepen
f4887b981f Added a description of what is going on in net.c and route.c, and how
packets flow through tinc.
2001-03-04 14:00:24 +00:00
Guus Sliepen
9d5c9bf6ba Updated translation. 2001-03-04 13:59:53 +00:00
Guus Sliepen
34f9e6cf2d - route.c is now used to determine destination
- flags are removed, since they were not used at all. Use options instead.
- indirectdata works now, tcponly almost...
- made functions that don't return useful information void
2001-03-04 13:59:32 +00:00
Guus Sliepen
d2a54597e0 Added explaination of our key exchange using RSA encryption. 2001-03-02 11:25:56 +00:00
Guus Sliepen
125c497881 Various small fixes. 2001-03-01 21:32:04 +00:00
Guus Sliepen
099cc867c1 Removed compiler warning. 2001-02-27 16:50:29 +00:00
Guus Sliepen
4fa12eb85d Removed lots of compiler warnings. 2001-02-27 16:37:31 +00:00
Guus Sliepen
173d606514 - Fixed Interface option (untested)
- Removed error handling for non-critical socket options
- Added TCP_NODELAY and IPTOS_LOWDELAY options for meta sockets.
2001-02-27 16:17:04 +00:00
Ivo Timmermans
fb4ba9b265 Authentication done 2001-02-27 16:15:14 +00:00
Guus Sliepen
24fa685859 Don't forget to reconnect if outgoing connection fails during
authentication.
2001-02-27 15:33:39 +00:00
Guus Sliepen
34b7a876c3 - Make sure METAKEY is smaller than the modulus of the RSA key
- Get symmetric key from the least significant bytes of the RSA message
2001-02-26 11:37:20 +00:00
Guus Sliepen
4b0ad4d97a Added process.c to the translated files. 2001-02-25 20:17:46 +00:00
Guus Sliepen
82455be966 Implemented new authentication scheme from doc/SECURITY2. 2001-02-25 19:09:45 +00:00
Guus Sliepen
54881faf6f Encrypt network packets in CBC mode instead of CFB mode.
(This breaks compatibility with all previous versions!)
2001-02-25 16:34:19 +00:00
Guus Sliepen
9de5787574 Copy packets before putting them in the queue. 2001-02-25 16:04:00 +00:00
Guus Sliepen
38adc479a4 Free node->data and node, not node->data twice. 2001-02-25 15:34:50 +00:00
Guus Sliepen
e250d64300 Add missing \n. 2001-02-25 14:51:42 +00:00
Guus Sliepen
153fc35e57 Corrected check for errors after read() calls. 2001-02-25 11:09:29 +00:00
Wessel Dankers
0b0c2a372f Important bugfix in avl_insert_before() and avl_insert_after() 2001-02-20 21:53:18 +00:00
Ivo Timmermans
11f8465dd9 tinc_TUNTAP now substitutes the values outside the AC_CACHE_CHECK
block.  configure should now correctly set HAVE_TUNTAP.
2001-02-18 02:13:26 +00:00
Guus Sliepen
bb08704980 Added description of the proposed new authentication scheme. 2001-02-13 09:54:29 +00:00
Ivo Timmermans
cebb6efeb0 More files to ignore in CVS 2001-02-11 11:55:28 +00:00