summaryrefslogtreecommitdiff
path: root/sys/src/cmd/auth/keyfs.c
AgeCommit message (Collapse)Author
2020-08-01pre-lib9p servers: fix incorrect Tversion handlingkvik
version(5) says: If the server does not understand the client's version string, it should respond with an Rversion message (not Rerror) with the version string the 7 characters ``unknown''. Pre-lib9p file servers -- all except cwfs(4) -- do return Rerror. lib9p(2) follows the above spec, although ignoring the next part concerning comparison after period-stripping. It assumes an Fcall.version starting with "9P" is correctly formed and returns the only supported version of the protocol, which seems alright. This patch brings pre-lib9p servers in accordance with the spec.
2020-05-02make bind(2) error handling consistentcinap_lenrek
The mount() and bind() syscalls return -1 on error, and the mountid sequence number on success. The manpage states that the mountid sequence number is a positive integer, but the kernels implementation currently uses a unsigned 32-bit integer and does not guarantee that the mountid will not become negative. Most code just cares about the error, so test for the -1 error value only.
2017-02-23auth/keyfs: support -r flag to mount read-onlyaiju
2017-01-26auth/keyfs: use ulong for timecinap_lenrek
2016-12-26keyfs: print error message when reading /adm/keys failscinap_lenrek
2016-07-31auth: various cleanups, use common readcons() from libauthsrv, zero keys ↵cinap_lenrek
after use
2016-07-24make error handling in 9p service loops consistentcinap_lenrek
when we get eof, stop the loop immidiately and do not rely on the read to eventually return an error. when convM2S() fails to decode the message, error out and stop the loop. there is no point in continuing.
2016-01-06auth: release dp9ik implementation and reentrant factotumcinap_lenrek
2015-08-21cmd/auth: remove private /dev/random reading routines, use genrandom()cinap_lenrek
2015-08-21keyfs: fix typo (thanks jpm)cinap_lenrek
2015-08-21introduce AES key into nvram and keyfscinap_lenrek
2015-08-19libauthsrv: generalize ticket service, not hardcoding ticket format and DES ↵cinap_lenrek
encryption this is in preparation for replacing DES ticket encryption with something better. but first need to make the code stop making assumptions. the wire encoding of the Ticket might be variable length with TICKETLEN just giving an upper bound. the details will be handled by libauthsrv _asgetticket() and _asgetresp() funciotns. the Authenticator and Passwordreq structures are encrypted with the random ticket key. The encryption schmeme will depend on the Ticket format used, so we pass the Ticket* structure instead of the DES key. introduce Authkey structure that will hold all the required cryptographic keys instead of passing DES key.
2013-01-309p message size too smallcinap_lenrek
various fileservers do not check if the message size is too small (they subtract IOHDRSZ later from it to calculate iounit) which can overflow.
2011-03-30Import sources from 2011-03-30 iso image - libTaru Karttunen
2011-03-30Import sources from 2011-03-30 iso imageTaru Karttunen