Commit graph

  • d28a4af924 Added example openrc init script Russ Magee 2018-11-13 23:59:34 -0800
  • d973c83e01 -Makefile: added install,uninstall targets -Bumped version to 0.7pre Russ Magee 2018-11-13 17:38:13 -0800
  • 1d1feee476 Update 'README.md' Russtopia 2018-11-13 12:57:52 -0800
  • 4bf94a7854 README.md: Tunnel example usage TODO updates Russ Magee 2018-11-13 13:54:07 -0800
  • 2cb254ef69 Basic -T tun opt parsing Russ Magee 2018-11-12 00:44:16 -0800
  • a9ebb102bd Stubbed tun option parsing Russ Magee 2018-11-11 23:26:22 -0800
  • d9453835bf Shorter servertun hangup msg Russ Magee 2018-11-11 23:03:32 -0800
  • b0f614f82e Tunnel keepalives from client implemented. If client dies/exits unexpectedly the server tunnel will disconnect from rport in a timely manner. Russ Magee 2018-11-11 22:46:39 -0800
  • 709f2ae3dd Got rid of superfluous weAreDialled var Russ Magee 2018-11-11 21:55:21 -0800
  • 0943797300 Minor cleanup prior to tackling os.Exit() in doShellMode() and server-side tun hangs Russ Magee 2018-11-11 21:05:25 -0800
  • 6f1fcbbf7a Corrected tun chan Ctl cmd comments Russ Magee 2018-11-11 20:25:34 -0800
  • 2a9e6af2ae Tunnels w/reconnect refinements: -200ms deadlink timeouts -Fixed TunConnRefused client hangup handling Russ Magee 2018-11-11 20:12:29 -0800
  • ba3cda95e8 Tunnels with reconnect working. TODO: interactive client exit must collapse all open tunnels prior to exit. Russ Magee 2018-11-11 18:56:08 -0800
  • fbef175012 Tunnels basically working. TODO: add TunKeepAlive packet & handshake w/server tun side Russ Magee 2018-11-11 12:34:54 -0800
  • b94f25e5ae Client lport disconn/reconn works, somewhat.. Russ Magee 2018-11-11 11:45:37 -0800
  • 3b35751e2e WIP tunnel states, re-dial when not required needs debugging. Russ Magee 2018-11-07 19:35:32 -0800
  • dd37922fb2 Server tun worker now in redial goroutine. TODO: Finish full two-way state change msging Russ Magee 2018-11-01 22:47:25 -0700
  • 1a153b31ee Merge branch 'tunnel-proto' of ssh://blitter.com/var/git/hkexsh into tunnel-proto Russ Magee 2018-11-01 22:15:03 -0700
  • 492c7290b0 Much improved tunnel state management: server-side mostly working, client-side re-Accept() -> svr re-Dial() still required Russ Magee 2018-11-01 22:14:01 -0700
  • d2322af34b Much improved tunnel state management: server-side mostly working, client-side re-listen -> svr re-Dial() still required Russ Magee 2018-11-01 22:14:01 -0700
  • a425afe9b6 Tunnels working again to basic level w/o re-connect or re-dial Russ Magee 2018-11-01 18:52:01 -0700
  • 081d88b9ad tunnel setup stubs moved into Conn Read()/Write() handling Russ Magee 2018-10-31 20:11:00 -0700
  • 8ee0aea0b4 (non-working) begin of total tunnel redesign Russ Magee 2018-10-31 09:15:28 -0700
  • fcbdb77c79 Cleaned up error handling in hkexnet.Conn.Read() a bit Russ Magee 2018-10-30 21:07:42 -0700
  • e75ed159f6 two-way tunnel traffic working. Hangup/re-dial on server side needs work Russ Magee 2018-10-28 21:46:29 -0700
  • 632f24354b Tunnel rough work-in-progress; data sent (wrong length) and CSOTunClose handling needs work, but it's a start... Russ Magee 2018-10-28 19:17:47 -0700
  • 1e6da733a2 Work on setup for tunnels Russ Magee 2018-10-27 01:51:40 -0700
  • 48b0c41f62 Prototyped TunEndpoint struct, data flow commentary Russ Magee 2018-10-26 20:31:57 -0700
  • 25d85f6759 Cleaned up hkexshd.go to use new logger as well Russ Magee 2018-10-26 18:20:32 -0700
  • 2f83d488d6 Pushed logging into sub-package to preserve windows client build Russ Magee 2018-10-26 16:05:01 -0700
  • 871f1e0dfa Moved CSE (extended err types) back up out of UNIX shell status space Russ Magee 2018-10-25 22:49:08 -0700
  • 752dbf6080 logging now uses syslog Russ Magee 2018-10-25 22:14:18 -0700
  • 90deb5b1ff Updated README.md for new CryptMTv1 cipher Russ Magee 2018-10-24 00:31:32 -0700
  • 4cb535fcc9 Added support for cryptMTv1 Russ Magee 2018-10-24 00:15:33 -0700
  • 97791544ab Bump version Russ Magee 2018-10-21 20:32:57 -0700
  • a6950408f2 Merge branch 'kex-spurious-failures' Russ Magee 2018-10-19 13:52:14 -0700
  • 3991fc5065 Added keymat expansion for smallest KEX modes Russ Magee 2018-10-19 13:51:57 -0700
  • fc4b1bf7bb Added clause 11a. to cover crypto regs Russ Magee 2018-10-19 11:56:09 -0700
  • d13e340895 Added clause 11a. to cover crypto regs Russ Magee 2018-10-19 11:50:17 -0700
  • 798661a0cf kex-spurious-failures branch: -Modified KyberDialSetup()/KyberAcceptSetup() to use []byte for reading/writing ciphertext to avoid errors caused by leading zero bytes (big.Int can't explicitly represent these) Russ Magee 2018-10-18 20:44:23 -0700
  • 6aed5ab54f Merge branch 'master' of ssh://blitter.com/var/git/hkexsh Russ Magee 2018-10-16 00:35:59 -0700
  • 9cf55ed4ca Adopt the Code of Merit (http://code-of-merit.org/) Russ Magee 2018-10-16 00:29:12 -0700
  • 65953d0d99 Silence GitHub's reminder to add a code of conduct. Russ Magee 2018-10-16 00:29:12 -0700
  • a060ae39b1 HMAC portion made into symbolic const Russ Magee 2018-10-14 00:20:30 -0700
  • 5d9a110d57 Added more (explicit) sizes for all KEX algs Russ Magee 2018-10-12 16:16:49 -0700
  • 361fa2a7c3 Added hkexnet to LICENSE file Russ Magee 2018-10-10 22:37:25 -0700
  • 703c8851b3 Moved HerraduraKEx-specific LICENSE files into component subdir Added overall hkexsh LICENSE file to toplevel Russ Magee 2018-10-10 22:35:49 -0700
  • 1d265c923e Updated README.md Russ Magee 2018-10-10 22:08:57 -0700
  • fad35aa4fa Merge branch 'add-kex-kyber768' Russ Magee 2018-10-10 21:42:18 -0700
  • 231ede1734 KYBER768 KEM works. :O Russ Magee 2018-10-10 21:12:38 -0700
  • de8f9552c3 Update TODO - ~/.hkexsh_id Russ Magee 2018-10-08 23:42:09 -0700
  • 4c286ae6c1 Set up to handle Kyber768 KEM Russ Magee 2018-10-08 21:31:11 -0700
  • 767ae7bd07 Updates to README.md Russ Magee 2018-10-03 22:44:27 -0700
  • cb7a79063e Added validation user actually exists on system Russ Magee 2018-10-03 22:31:35 -0700
  • 420e0319ca Merge branch 'master' of ssh://blitter.com/var/git/hkexsh Russ Magee 2018-10-02 21:24:10 -0700
  • 103070d00a Made padding size random [max/2, max); use of improved goutmp host lookup Russ Magee 2018-10-02 11:03:10 -0700
  • 6788fd1adf Made padding size random (max/2, max]; use of improved goutmp host lookup Russ Magee 2018-10-02 11:03:10 -0700
  • 1485e8392e Removed moving avg chaff in favour of random-padding Russ Magee 2018-10-01 20:35:50 -0700
  • 06ee94da03 Added HMAC_SHA512 Russ Magee 2018-09-30 00:19:25 -0700
  • cd9f7914e0 Dial() and Accept() again conform to net.Dial(), net.Accept() return signature Russ Magee 2018-09-29 12:15:53 -0700
  • e57d97d3e6 Changed many funcs to take *hkexnet.Conn to allow tracking of packets sent, total bytes sent and experimental moving avg chaff Russ Magee 2018-09-26 22:57:36 -0700
  • b810fa7f4a tightened up some const types Russ Magee 2018-09-17 23:07:04 -0700
  • 8b0b833d6e Split hkexsh and hkexnet consts into separate files Russ Magee 2018-09-17 17:27:13 -0700
  • 869dbf6e10 Bumped version Russ Magee 2018-09-16 23:54:25 -0700
  • 1da6f37ec5 Merge branch 'master' of ssh://blitter.com/var/git/hkexsh Russ Magee 2018-09-16 22:22:40 -0700
  • 84e29bdf51 Fixes to authtoken/password indication at login Russ Magee 2018-09-16 17:56:17 -0700
  • 2864940a8e Fixes to authtoken/password indication at login Russ Magee 2018-09-16 17:56:17 -0700
  • d25b883873 Fixed bug in fallback from authtoken (-g) to password login Russ Magee 2018-09-16 17:30:02 -0700
  • 19697d5164 Remote exit status now reflected in client->server copies Russ Magee 2018-09-16 17:14:50 -0700
  • e02764bf4b .hkexsh_id file supports multiple authtokens (multi remote hosts, aliases for same remote host) Russ Magee 2018-09-14 11:58:10 -0700
  • d9b34fa631 GenAuthToken() now uses client-supplied ConnHost Russ Magee 2018-09-14 01:13:14 -0700
  • 1efc1337df -TODO items; scrub authCookie after use Russ Magee 2018-09-14 00:40:20 -0700
  • c9eb6bcb38 Added -a authtoken feature for scripted use Russ Magee 2018-09-13 23:51:49 -0700
  • 350f3f375e -hkexauth now always tries bcrypt even for nonexistent users (user enum timing attack resist) Russ Magee 2018-09-11 22:36:20 -0700
  • 140523dabb -Refactored HerraduraKEx negotiation into subroutine (anticipation of future multi-KEx support) Russ Magee 2018-09-11 00:04:38 -0700
  • bee0bececf -Bumped version to 0.2pre to reflect protocol break w/0.1pre -Added design principle note (no downgrade attack-enabling protocol features) Russ Magee 2018-09-10 20:28:41 -0700
  • dcb42d43f1 -BREAKING CHANGE: pre-KEx byte sent for KEx alg (default and only for now: KEX_HERRADURA) Russ Magee 2018-09-10 20:22:09 -0700
  • 5f1d57f987 Fixed hkexauth fields expected Russ Magee 2018-09-08 22:01:33 -0700
  • 8bca54ed7b -hkexpasswd: now can add new users -Removed unused disallowedCmdList (field 4) from CSV Russ Magee 2018-09-07 20:56:42 -0700
  • 075ca7521c Client now passes xterm-256color in Session Russ Magee 2018-09-07 20:37:47 -0700
  • 9e803ffc19 -Moved recCmd out of hkexsh and hkexshd into hkexsession.go (now abstract Session type) Russ Magee 2018-09-07 15:35:33 -0700
  • bff56a2c61 -Added -z option back to tarpipes -Moved remaining chatty fmt.Prints to log.Print Russ Magee 2018-09-06 16:37:17 -0700
  • b33e9de139 -Moved taunting of failed logins to client-side -Added byte auth pass/fail stage prior to shell/copy session start Russ Magee 2018-09-06 16:23:57 -0700
  • 9ff35a69fe -Converted exit status to uint32 (0-255: UNIX exit codes), above for OOB (out-of-band) status -Failed auth for shell logins now returns extended code CSEBadAuth to client Russ Magee 2018-09-06 13:50:56 -0700
  • 8a24fb113f client prints nonzero remote end exit status; comment cleanup Russ Magee 2018-09-06 11:40:13 -0700
  • db1b494d00 Fixed shell (interative & non-) exit status after cp status fixes Russ Magee 2018-09-06 00:16:44 -0700
  • a6979298fd Steps toward getting remote cp(tar) status back to client Russ Magee 2018-09-05 21:58:55 -0700
  • 963d1c8eb2 Some comment/dead test code cleanup Russ Magee 2018-09-05 20:36:32 -0700
  • b419b2e002 File copy remote close signal to ensure completed tar pipe data Russ Magee 2018-09-04 22:24:16 -0700
  • 0586f306c0 Removed debug time.Sleep Russ Magee 2018-09-02 21:50:25 -0700
  • 7295492aa3 hkexcp: fixed copy chunked payload logic (now 2*32-1 MAX_PAYLOAD_LEN w/chunking) Russ Magee 2018-09-02 19:58:13 -0700
  • c842d36319 README.md - added EXPERIMENTAL warning to hkexcp section Russ Magee 2018-09-01 10:44:13 -0700
  • 52ea229118 Fixed errors in copy scatter/gather logic. Added block-chunking to hc.Write() to allow writes of larger data blocks TODO: copies of files > hc.Read() block size fails w/incomplete tarfile (last partial block likely incorrectly written or client exits before data is flushed?) Russ Magee 2018-09-01 10:20:33 -0700
  • 022db4956c Update README.md: warning for -d displaying passwords to console/log Russ Magee 2018-08-31 15:01:16 -0700
  • 45d270b03e Merge branch 'hkexcp-proto' Russ Magee 2018-08-31 11:47:39 -0700
  • c1a23b68ae Merge branch 'master' of ssh://tripe.blitter.com/var/git/hkexsh Russ Magee 2018-08-31 11:47:27 -0700
  • a4b7707888 Update 'README.md' - hkexcp (file/dir copy) instructions Russtopia 2018-08-31 11:40:57 -0700
  • c3572d7c0c Fixed abs/relative path for client dest copies Russ Magee 2018-08-30 20:16:55 -0700
  • 143990da34 Scatter/gather for client->server copy now functional Russ Magee 2018-08-30 20:06:42 -0700
  • 6389ad49d5 Improved flag.Usage() for cp/sh and removed more recursiveCopy flag remnants Russ Magee 2018-08-26 00:12:42 -0700