[Fwknop-discuss] fwknop-2.6.9-pre1

[Michael R. <mic...@gm...>]

Hello All,

fwknop-2.6.9-pre1 is available for testing:

https://github.com/mrash/fwknop/releases/tag/2.6.9-pre1

There likely won't be many changes beyond this for the official 2.6.9
release. Here is the ChangeLog:


    - (Jonathan Bennett) Added support for the SHA3 "Keccak" algorithm

      (specifically SHA3_256 and SHA3_512) for SPA HMAC and digest checking.

      Enabling SHA3 from the fwknop client command line is done with the
'-m'

      option for the embedded SPA digest, or with the --hmac-digest-type

      argument for the HMAC. On the server side, SHA3_256 or SHA3_512 can be

      required for incoming SPA packet HMAC'c via the HMAC_DIGEST_TYPE

      configuration variable in access.conf stanzas. The SHA3 implementation

      is from, Keyak and Ketje Teams, namely, Guido Bertoni, Joan Daemen,

      Michael Peeters, Gilles Van Assche and Ronny Van Keer - see:

      http://keyak.noekeon.org/

    - (Vlad Glagolev) Added support for deriving the source IP from the

      X-Forwarded-For HTTP header when SPA packets are sent over HTTP

      connections.

    - Bug fix in command open/close cycle feature to ensure that the first

      successful match on a valid incoming SPA packet finishes all
access.conf

      stanza processing. That is, no other stanzas should be looked at after

      the first match, and this is consistent with other SPA modes (such as

      basic access requests). This bug was reported by Jonathan Bennett.

    - (Jonathan Bennett) Various fixes and enhancements to the test suite to

      extend code coverage to new code, ensure valgrind bytes lost detection

      works for amount of memory less than 10 bytes, better timing strategy

      for fwknop client/server interactions, and more.