Commit Graph

912 Commits

Author SHA1 Message Date
Davide De Rosa b1a79d6451 Shut down on server-initiated HARD_RESET
Session is stale and not recoverable (lame duck).
2018-10-24 12:31:37 +02:00
Davide De Rosa 0b79ce4194 Handle server-initiated SOFT_RESET 2018-10-24 12:22:47 +02:00
Davide De Rosa 3f3a712bac Merge branch 'refactor-shutdown-code' 2018-10-24 12:22:27 +02:00
Davide De Rosa d829247e6e Simplify socket shutdown code
Drop weird (old?) linkFailures check.
2018-10-24 09:42:18 +02:00
Davide De Rosa 91349fd780 Take shouldChangeProtocol out of GenericSocket
Behavior is not exactly similar in UDP and TCP.
2018-10-24 09:42:03 +02:00
Davide De Rosa 8b59fe6f4c Use RawRepresentable where adequate 2018-10-24 09:19:50 +02:00
Davide De Rosa e3a5302e06 Check NULL EKU and simplify OID comparison 2018-10-24 00:43:01 +02:00
Davide De Rosa 3a95568d0b Remove unused code 2018-10-24 00:36:18 +02:00
Davide De Rosa f7bb3a3262 Update README and CHANGELOG 2018-10-23 23:49:57 +02:00
Davide De Rosa 440a7f7da8 Verify server cert EKU
Fixes #27
2018-10-23 23:46:37 +02:00
Davide De Rosa d354a672d5 Merge branch 'complete-error-mapping' 2018-10-23 23:46:30 +02:00
Davide De Rosa c32185b524 Review/complete mapping to ProviderError
Errors from TunnelKitNative were not mapped. Also, move TLS CA
verification error to TLSBox domain.
2018-10-23 23:44:25 +02:00
Davide De Rosa f5d9720b01 Halt TLS on internal failure 2018-10-23 23:44:25 +02:00
Davide De Rosa f725779e0e Convert ct pulling to try/catch 2018-10-23 22:47:04 +02:00
Davide De Rosa bbaa60c3bd Bump version and update CHANGELOG 2018-10-22 15:47:36 +02:00
Davide De Rosa d6526301b6
Merge pull request #40 from keeshux/report-tunnel-error-to-host-app
Report tunnel error to host app
2018-10-22 15:47:22 +02:00
Davide De Rosa 1ad4a62593 Report error status to shared defaults
Retain after disposal, unless manually stopped.
2018-10-22 01:04:36 +02:00
Davide De Rosa 7ffb997904 Add defaults key for last error 2018-10-22 01:04:36 +02:00
Davide De Rosa 4bf7f1a1fc Bridge SessionError to public ProviderError 2018-10-22 01:04:36 +02:00
Davide De Rosa 6200a0bc1c Split configuration and session errors 2018-10-22 01:04:36 +02:00
Davide De Rosa f93634bd7a Respect link MTU in TCP
Mitigates #39
2018-10-22 00:56:08 +02:00
Davide De Rosa 26fc12c2ef Add missing fclose() after fopen()
Slip-up from #32
2018-10-21 00:22:36 +02:00
Davide De Rosa e39057bf55 Set release date 2018-10-20 11:15:36 +02:00
Davide De Rosa 5fa254cc38
Merge pull request #36 from keeshux/parse-static-key-from-file
Parse OpenVPN static key from file
2018-10-19 23:57:02 +02:00
Davide De Rosa 683604b383 Update/fix CHANGELOG 2018-10-19 17:40:36 +02:00
Davide De Rosa 29ec39f151 Bump minor version 2018-10-19 17:25:11 +02:00
Davide De Rosa fbd3f977d5 Parse static key from file 2018-10-19 17:22:26 +02:00
Davide De Rosa fcd25608af
Merge pull request #35 from keeshux/tls-crypt
Implement tls-crypt
2018-10-19 17:22:03 +02:00
Davide De Rosa a71d093734 Update README and CHANGELOG 2018-10-19 17:08:56 +02:00
Davide De Rosa 28d9f3ee68 Add crypt strategy 2018-10-19 17:06:29 +02:00
Davide De Rosa 55e0aa5c5a Implement and test crypt serializer 2018-10-19 17:06:26 +02:00
Davide De Rosa 3ec4a7d292 Implement AES-CTR encryption 2018-10-19 16:56:20 +02:00
Davide De Rosa a430beb35f Improve Swift bridging of CryptoFlags 2018-10-19 16:56:20 +02:00
Davide De Rosa 22ab63b4a9
Merge pull request #34 from keeshux/tls-auth
Implement tls-auth
2018-10-19 16:26:04 +02:00
Davide De Rosa 31babe56f0 Fix tests formerly broken by flags.iv 2018-10-19 16:21:13 +02:00
Davide De Rosa cb9735181c Update README and CHANGELOG 2018-10-19 16:20:56 +02:00
Davide De Rosa 8ccc4c08a5 Add auth strategy 2018-10-19 16:20:56 +02:00
Davide De Rosa 0fce5abdde Implement auth serializer 2018-10-19 16:20:56 +02:00
Davide De Rosa a974646558 Add macros for replay packet id 2018-10-19 16:12:07 +02:00
Davide De Rosa 8a25cd8747 Merge branch 'prepare-tls-wrapping' 2018-10-19 16:11:50 +02:00
Davide De Rosa 66735ec118 Prepare API to enable TLS wrapping
Extensible TLSWrap parameter.
2018-10-19 16:11:35 +02:00
Davide De Rosa 51720c1fbc Split ControlPacket header/content serialization
rawSerializeTo: does not include opcode|session_id.
2018-10-19 16:11:35 +02:00
Davide De Rosa 372fa194a5 Parse indexed keys from StaticKey 2018-10-19 16:11:35 +02:00
Davide De Rosa 5c8c361fce Add StaticKey class for static OpenVPN keys 2018-10-19 16:11:35 +02:00
Davide De Rosa aae3765db0
Merge pull request #33 from keeshux/handle-mixed-data-v1-v2
Handle mixed DATA_V1/V2
2018-10-19 16:10:32 +02:00
Davide De Rosa ca192e46e6 Update CHANGELOG 2018-10-19 15:56:15 +02:00
Davide De Rosa a85c4ea6da Rename packetId flag to more proper IV 2018-10-19 15:55:16 +02:00
Davide De Rosa bff9352c6e Handle encryption/peer-id in a stateless manner
Fixes #30
2018-10-19 15:54:55 +02:00
Davide De Rosa 70b50a7a2e Parse data opcode when decrypting
Assume it could be DATA_V1/V2 regardless of peer-id.
2018-10-19 11:33:12 +02:00
Davide De Rosa 7c259bf40b Add badges/widgets to README 2018-10-19 02:47:47 +02:00