9fdec3acfc
More updater work... coming along.
13 years ago
6c63bfce69
File transfer work, add identities for validation of updates.
13 years ago
ae138566a9
Updater code, work in progress...
13 years ago
17778a36ba
Clean up secure random, add packet definitions for update distribution facility.
13 years ago
942cc0ca21
Certificate of membership works now... had to fix multicast propagation so COM is pushed with multicast, which makes tremendous sense in retrospect.
13 years ago
8c9b73f67b
Make Salsa20 variable-round, allowing for Salsa20/12 to be used for Packet encrypt and decrypt. Profiling analysis found that Salsa20 encrypt was accounting for a nontrivial percentage of CPU time, so it makes sense to cut this load fundamentally. There are no published attacks against Salsa20/12, and DJB believes 20 rounds to be overkill. This should be more than enough for our needs. Obviously incorporating ASM Salsa20 is among the next steps for performance.
13 years ago
ce14ba9004
Take the 0.6.0 opportunity to add flags to a few protocol verbs and do a bit more cleanup. Also fix it so certificates wont be accepted unless they are newer than existing ones.
13 years ago
7e7e28f5f7
Add support for pushing network config refresh hints from a MEMORY queue table. That ways it will be possible for network changes to take effect almost immediately across all active peers.
13 years ago
46f868bd4f
Lots of cleanup, more work on certificates, some security fixes.
13 years ago
4d594b24bc
Automagically push netconf certs -- Network support.
13 years ago
dcbc9c8ddd
Rename error code for no membership certificate.
13 years ago
4267e7da93
Remove a whole bunch of now-unnecessary cruft from Topology and PacketDecoder.
13 years ago
4ecb9369b5
Fix for multicast propagation -- supernodes must always keep propagating. Also fix mac-tap build on new version of Xcode CL tools. Must use old llvm-g++ instead of clang for i686 -mkernel.
13 years ago
0dca9964bf
Whew, it builds!
13 years ago
4e010da54b
Work in progress...
13 years ago
24bad9f3d1
More work in progress in new multicast propagation...
13 years ago
f3128a18fe
Work in progress...
13 years ago
5557a8192d
Work in progress...
13 years ago
770fbaf4b2
New multicast algorithm work in progress...
13 years ago
64c9c2e06b
New packet formats for MULTICAST_FRAME, and MULTICAST_GOT. Not implemented yet in decoder, so wont compile. Work in progress.
13 years ago
4c06fcfc9d
More include formatting cleanup.
13 years ago
ceb024ab03
Integrating new crypto, work still in progress...
13 years ago
f6ad138561
Bit more of adding version to OK(HELLO)
13 years ago
d87a1d6b99
Add version info to OK(HELLO) so both sides know their version info.
13 years ago
d6414c9ff7
Windows compiles! (w/Visual Studio 2012) That's about all it does, but it's a start.
13 years ago
bf5c07f79a
Scratch that... more work wiring up netconf. Got to handle OK.
13 years ago
80d8b7d0ae
Netconf wired up, ready to test.
13 years ago
3daea24d50
Little bit of protocol changes before implementation of new verbs.
13 years ago
e4c5ad9f43
More work on network membership certs, and it builds now. Still in heavy development.
13 years ago
439e602d5a
Fix a bunch of errors due to minor method signature changes, still a work in progress.
13 years ago
a53cfc9096
Network membership certificate work in progress... does not build yet.
13 years ago
7a17f6ca80
Add skeleton of certificate-based private network authentication. Also remove some old code.
13 years ago
b0a83093ce
Back out of RPC... blech. Have a better idea.
13 years ago
af8fcac0fc
RPC infrastructure work in progress.
13 years ago
668c428051
Basic RPC stuff in Packet and PacketDecoder for RPC service support.
13 years ago
b8e9a79d00
docs
13 years ago
ffad0b2780
Factoring out packet decoder from Switch to put that object on a little bit of a diet. Work in progress, wont build yet.
13 years ago
bcd079b70e
Adding signatures to multicast frames, work in progress, does not build yet
13 years ago
9e28bbfbb2
Factored out multicast propagation algorithm from Switch and Topology, also cleaned up and clarified it a bit.
13 years ago
ef3e319c64
Several things:
...
(1) Probable fix for issue #7 and major cleanup of EthernetTap code with consolidation for all unix-like systems and specialization for different flavors only when needed.
(2) Refactor of Buffer<> to make its members private, and Packet to use Buffer's methods exclusively to access them. This improves clarity and means we're no longer lying about Buffer's role in the code's security posture.
(3) Add -fstack-protect to Makefile to bounds check stack variables.
13 years ago
cfef114c31
Possible fix for issue #4 - segfault in ___removeIp helper function in EthernetTap on OSX -- I think the problem may have been that I was using set::erase(key) while also using an iterator, so now it uses erase(iterator). See if it happens again, cause I could not duplicate the issue. Possible minor difference in STL version.
13 years ago
150850b800
New git repository for release - version 0.2.0 tagged
13 years ago
Adam Ierymenko
Adam Ierymenko