Commit graph

  • 58e02d0b12 Fix leak when inserting p2p message in WHC fails Erik Boasson 2020-05-06 21:35:55 +02:00
  • 02ed74e6bd Fix conversion of user_data to security plugin Erik Boasson 2020-05-06 21:34:21 +02:00
  • bf25c6ec80 Properly pair entity_pin/mutex_lock Erik Boasson 2020-05-06 21:31:58 +02:00
  • 06a0ba26c9 Rework listener tests Erik Boasson 2020-04-29 20:10:14 +02:00
  • 23678edad5 Implement "from_sample" for built-in topics Erik Boasson 2020-04-30 09:30:14 +02:00
  • 6ee69374ec Standard byte order when creating built-in samples Erik Boasson 2020-04-30 09:20:04 +02:00
  • ebdb3fc5cf Refactor storing and unregistering writers in RHC Erik Boasson 2020-04-29 20:08:48 +02:00
  • 6800887a74 Always add invalid sample if empty or latest read Erik Boasson 2020-04-29 20:00:51 +02:00
  • 0be287b67b No auto-dispose in deadline test Erik Boasson 2020-04-29 19:50:52 +02:00
  • 347b6edf04 Default to doing expensive checks in rhc_torture Erik Boasson 2020-04-29 19:49:59 +02:00
  • 7f8f1d1a12 Auto-dispose when the instance goes to NO_WRITERS Erik Boasson 2020-04-29 17:59:22 +02:00
  • c29a81b339 Track deadline registration, consolidate updates Erik Boasson 2020-04-29 17:47:13 +02:00
  • ff591ae684 Null instance pointer after dropping instance Erik Boasson 2020-04-26 10:13:15 +02:00
  • 8b934a7ddd Remove a layer of wrapper functions in default RHC Erik Boasson 2020-04-20 11:10:54 +02:00
  • 0006e09566 Add a dds_readcdr analogous to dds_takecdr Erik Boasson 2020-04-19 17:38:25 +02:00
  • 9aef05542f Do not scan instances in dds_{read,take}_instance Erik Boasson 2020-04-19 17:36:01 +02:00
  • 5f829684ef Distinguish signed, float in type descriptor Erik Boasson 2020-04-18 17:32:56 +02:00
  • 761ffa6db2 Add EDL 1.0 license to package.xml Dan Rose 2020-05-14 20:54:32 -05:00
  • 2e6ea36fda Fix a race condition in delete_participant, that could occur on security permissions or identity expiry, which triggers a delete of the local participant Dennis Potman 2020-05-15 14:10:11 +02:00
  • a151c5f184 Processed review comments: added missing return topic_sec_attr in function is_topic_discovery_protected, moved returns-logging in access plugin to wrapper mode and removed specific test for this (as it will be tested in other access control tests now). Some cleanup in circular list usage in crypto and access control plugins Dennis Potman 2020-05-14 21:27:29 +02:00
  • 32bba389c8 Add test descriptions as code comment in security core tests Dennis Potman 2020-05-13 16:37:41 +02:00
  • 48e411bb76 Fix rd-wr synchronization in access control expiry_multiple test Dennis Potman 2020-05-13 11:17:15 +02:00
  • 24594f68fb Add access control test for testing that communication for an allowed topic keeps working when a writer for a denied topic is created Dennis Potman 2020-05-12 21:16:30 +02:00
  • edcbe1b22e Add a test that checks if all tokens and attributes are returned to the access control plugin Dennis Potman 2020-05-12 20:28:11 +02:00
  • cf75263d1d Add a test that validates that a plain message is not read by a remote reader in case payload/submsg/rtps encryption or signing is enabled Dennis Potman 2020-05-11 21:53:56 +02:00
  • 9ba54c70e7 Don't accept plain payload in case payload encryption or payload signing is enabled in the security settings. And fixed a typo in writer not allowed message Dennis Potman 2020-05-11 21:49:16 +02:00
  • 6185a5ab2a Add a test to validate that a non-secure participant can connect with a secure participant that allows unauthenticated participants. The non-secure pp should only be able to read data for a topic that is not secured Dennis Potman 2020-05-11 21:37:13 +02:00
  • 2fc2cdc225 Enable matching local non-secure participants with remote secure participants that allow unauthenticated participants Dennis Potman 2020-05-11 21:33:47 +02:00
  • 155f8c059d Add read-write protection tests Dennis Potman 2020-04-29 20:53:14 +02:00
  • 45adb6f0c7 Extend access-control tests with validate_local_permissions Dennis Potman 2020-04-28 21:25:57 +02:00
  • 0348bb2741 Security liveliness protection tests Dennis Potman 2020-04-28 14:45:20 +02:00
  • 231d820052 Add security encoding-mismatch test Dennis Potman 2020-04-28 13:24:10 +02:00
  • 9f261423e3 Add tests for discovery protection Dennis Potman 2020-04-24 19:43:55 +02:00
  • fd27604a26 Add crypto token exchange test Dennis Potman 2020-04-22 16:59:29 +02:00
  • 82af49172d
    Merge pull request #511 from eboasson/security eboasson 2020-05-12 19:00:52 +02:00
  • 9df768b0f3 Fix PR comments Prasanna Bhat 2020-05-12 00:44:17 +05:30
  • 8776c3213b Add README.md, which describes the usage of docker scripts Prasanna Bhat 2020-04-12 22:52:07 +05:30
  • 8fc3f4bc71 Add build scripts & docker scripts Prasanna Bhat 2020-04-12 11:23:22 +05:30
  • 364f1ce39c Bump version number to 0.7.0 Erik Boasson 2020-05-11 15:06:40 +02:00
  • 2da100a3c7 Merge remote-tracking branch 'upstream/master' into security Erik Boasson 2020-05-11 15:05:46 +02:00
  • e1899df62d Fix incorrect type of include_optional_fields config parameter Marcel Jordense 2020-05-08 17:09:01 +02:00
  • 860f261dc6 Correct generation of the crypto key Marcel Jordense 2020-05-01 14:13:05 +02:00
  • 720c8f8fbf Correct security (de)serialization of QosProperty contained in c.data field of handshake token Marcel Jordense 2020-05-01 10:58:07 +02:00
  • 623a5c02bd Correct handshake tokens verification w.r.t. optional fields Marcel Jordense 2020-05-01 10:57:38 +02:00
  • 96248d1e6d Bump version number in preparation for 0.6.0 Erik Boasson 2020-05-06 09:56:58 +02:00
  • 3c1b14e6cb Fix paths in documentation generation Erik Boasson 2020-05-06 09:57:56 +02:00
  • f8ed1f4adf Minor README updates Erik Boasson 2020-05-06 09:55:09 +02:00
  • 45a5030683
    Add instructions for Android (#506) Jeroen Koekkoek 2020-05-06 12:53:56 +02:00
  • 209edf0efb Fix config typos in source and regenerate Erik Boasson 2020-04-28 18:18:50 +02:00
  • 1890322d4e Fix some typos in files: README.md docs/dev/{modules,logging,debugging}.md docs/manual/{config,options,GettingStartedGuide/helloworld_indepth}.rst src/idlc/src/org/eclipse/cyclonedds/compilers/IdlcCmdOptions.java Oliver Kellogg 2020-04-27 19:05:42 +02:00
  • 4ac06895f0 Fix format strings for handle_not_allowed calls and add format attribute check Dennis Potman 2020-04-22 15:21:46 +02:00
  • 2aa0195d53 Log category for not-allowed message depends on topic discovery protection state Dennis Potman 2020-04-22 14:17:42 +02:00
  • b86e8ce0d3 Refactoring logic in q_omg_security_check_remote_reader_permissions Dennis Potman 2020-04-21 21:43:27 +02:00
  • 7e6039763b Replace pp null check by assert in dds_create_writer and dds_create_reader, and rewrite logic in q_omg_security_check_remote_writer_permissions Dennis Potman 2020-04-21 09:37:09 +02:00
  • e8c349f96d Fix condition for setting identity subject in remote rights Dennis Potman 2020-04-17 09:02:09 +02:00
  • 19bc6f33cc Access control tests Dennis Potman 2020-04-14 20:25:20 +02:00
  • 004932817e align buffer chunks to sizeof(void*) instead of hard coding 8 bytes Michael Dodson 2020-04-18 14:15:12 +01:00
  • 080514d45a Remove redundant check for endpoint GUID in SEDP Erik Boasson 2020-04-18 12:17:24 +02:00
  • d22032c946 Restore SEDP tracing format Erik Boasson 2020-04-18 12:17:10 +02:00
  • e8dfbabd0c Add locking when intializing remote key material Dennis Potman 2020-04-07 21:25:12 +02:00
  • c89f858b73 Fix memory leak that can occur when decoding rtps message with origin authentication being used Dennis Potman 2020-04-15 20:36:05 +02:00
  • 680c2ebf8c Call delete_proxy_participant_by_guid with implicit flag set when revoking permission or identity Dennis Potman 2020-04-15 19:37:22 +02:00
  • dae562c602 Improve delays/timing in permissions_expiry_multiple test Dennis Potman 2020-04-01 18:47:34 +02:00
  • bfb48e6e58 Address issues from review: replaced proxypp_pp_unrelate by deleting the (proxy)participant and added a code comment with the rationale for this approach Dennis Potman 2020-04-01 17:05:02 +02:00
  • 5e721c99e5 Change test timing and time-outs in access-control and authentication expiry tests and add timestamps to test logging to get more stable test results on Travis and enable analysing timeing issues. Dennis Potman 2020-03-30 14:23:18 +02:00
  • e3056402fc Implement on_revoke_identity_cb Dennis Potman 2020-03-30 09:32:21 +02:00
  • 736d0a027a Add access control tests for permissions expiry and move some reused test functions to common utils file. Dennis Potman 2020-03-26 13:42:11 +01:00
  • d53cdce8fe Access Control on_revoke_permissions implementation in DDSI Dennis Potman 2020-03-26 18:48:54 +01:00
  • e6500b6528 Add domaingv pointer to security plugins, as a preparation for supporting the permissions_expiry callback (which needs the gv to enumerate participants. Dennis Potman 2020-03-26 13:40:28 +01:00
  • a6a9d1f7c1 Security core tests: new tests and refactoring Dennis Potman 2020-03-11 13:17:39 +01:00
  • b513eaac00 add freebsd support Michael Dodson 2020-04-15 14:40:57 +01:00
  • 534eac2a11 Remove temporarily stored crypto handles and tokens after entities are matched Marcel Jordense 2020-04-03 13:42:16 +02:00
  • b46bd7ffff Document previously undocumented changes from 0.5.1 Dan Rose 2020-04-07 18:08:05 -05:00
  • 40549783d9 Add changelog file from content in github releases Dan Rose 2020-04-07 18:01:59 -05:00
  • 829e33ac82 Remove unused field from struct ddsi_handshake Dennis Potman 2020-04-07 13:05:06 +02:00
  • 1e484a3c6f Introduced a new state in handshake fsm that combines validate_remote_entity and begin_handshake_reply into a single step, which is used in case a auth_request message is received during the initial delay when starting the handshake process Dennis Potman 2020-04-06 22:38:36 +02:00
  • 3a838f6912 Replace sleep in func_validate_remote_identity by an FSM wait-state before state_validate_remote_identity Dennis Potman 2020-04-06 14:46:27 +02:00
  • b2b9630c38 Prevent time-out in handshake Dennis Potman 2020-04-05 20:54:24 +02:00
  • 1fd4ab290f Do not build security tests if BUILD_IDLC=NO Erik Boasson 2020-04-08 22:12:34 +02:00
  • e88552123c Peers may have a secure announcer without using security Erik Boasson 2020-04-08 11:42:53 +02:00
  • 52edbe94e9 plist handling of invalid input and keyhashes Erik Boasson 2020-04-08 11:35:49 +02:00
  • 45c0f432a9 Add dds_get_guid to get the GUID of a local entity Erik Boasson 2020-04-09 13:49:10 +02:00
  • b2cf6921da Define dds_guid_t as dds_builtintopic_guid_t Erik Boasson 2020-04-09 13:48:01 +02:00
  • eb7e5e3a87 Disallow junk after optional terminator in string/binprop compare Erik Boasson 2020-04-07 10:27:39 +02:00
  • 9c09eca2e9 Do not assume string in algo binary property Erik Boasson 2020-04-01 13:02:03 +02:00
  • cb1d06b442 Freeing the writer security attributes should be done by the gc Marcel Jordense 2020-04-07 11:01:53 +02:00
  • b6640d86b0 Correct length of encrypted submessage body Marcel Jordense 2020-04-06 17:33:52 +02:00
  • f792b3ceed Store security info of the proxy endpoints in the common part Marcel Jordense 2020-04-06 17:01:38 +02:00
  • 9239547d34 Add a test for cross-topic use of instance handles Erik Boasson 2020-04-01 10:50:55 +02:00
  • 17da91409a
    Fix and simplify building docs and schemas (#441) Dan Rose 2020-04-02 10:25:16 -05:00
  • 99df0956e7 Crypto endpoint relation compare routines cleanup Erik Boasson 2020-03-31 16:27:21 +02:00
  • 9207ad0cf3 Remove directories from IDLC install list Dan Rose 2020-03-30 11:39:39 -05:00
  • 00710a4e5d
    Merge pull request #458 from eboasson/sec-plus-master eboasson 2020-03-30 12:44:06 +02:00
  • 5b1f288d6c Merge remote-tracking branch 'upstream/master' into sec-plus-master Erik Boasson 2020-03-30 12:09:03 +02:00
  • 4f3cbf7a1c Clean up representation of discovery messages Erik Boasson 2020-03-23 11:59:43 +01:00
  • b18fd395d3
    Do not rewrite secure messages in retransmit queue (#456) eboasson 2020-03-30 10:32:58 +02:00
  • c8d8d2f8e6 Stop threads doing handshake processing earlier Erik Boasson 2020-03-26 20:21:56 +01:00
  • fa0c6777d4 Remove setting volatile secure writer to incorrect state Marcel Jordense 2020-03-27 14:51:13 +01:00
  • 9175f44273 Send crypto tokens after handshake is completely finished Marcel Jordense 2020-03-26 18:51:01 +01:00
  • a77fe10a04 Add index on receiver specific key to improve verification of origin authentication signing Marcel Jordense 2020-03-24 19:15:36 +01:00