eurephia v0.9.5_beta Highlights from the changelog since eurephia 0.9.4_beta: ----------------------------------------------------------------------------- * BUGFIX: eurephiadm usercerts did not accept --accessprofile|-a argument when egistering a new usercert link. * BUGFIX: eurephiadm fwprofiles --list showed minimum usage of 1 even though nobody was using a firewall access profile and the correct usage count should be 0. * BUGFIX: eurephiadm users --add did not accept -D as short argument for --digest. * BUGFIX: eurephia_init did not add all available privilege levels when creating the administrator account. * BUGFIX: Added missing help screen for eurephiadm usercerts --list mode. * BUGFIX: eurephiadm attempts listing will now use the 'registered' date if 'last_attempt' is empty. * BUGFIX: Corrected failing delete mode in eurephiadm blacklist command. * BUGFIX: Corrected wrong argument description for eurephiadm attempts and blacklist commands. * BUGFIX: Removed invalid information from adminaccess help screen. * BUGFIX: SQLite3 driver did not remove configure parameters from memory when deleting them from DB. * BUGFIX: The eurephia low-level part of the sqlite3 driver leaked memory in error situations. * BUGFIX: Fixed console input in eurephia_init which had too small input buffers in some of the "wizard" questions. * BUGFIX: Avoid crash in xmlFindNode() function when input node is NULL. * FEATURE: Added --set-fwprofile mode to the eurephiadm usercerts command This mode updates the firewall access profile for at user-certs link. * FEATURE: Added --gcov option in ./configure, to enable gcov coverage. * FEATURE: Improved debugging info on malloc_nullsafe() and free_nullsafe() calls. * FEATURE: Added logging to syslog. * FEATURE: File logging now provides even more detailed information about where the logging happened. * Added -fno-delete-null-pointer-checks to avoid compiler to do wrong assumptions when compiling eurephia. * Added some more compiler optimisations. * eurephia_init: Changed the short argument for --hash-threshold-max to -M. * Simplified the database driver API: - Unified eDBadminGetUserCertsList(...) and eDBadminUpdateUserCertLink(...) to eDBadminUserCertsLink(...). - Unified eDBadminConfigSet() and eDBadminConfigDelete() to eDBadminConfiguration() and changed the API to use XML. - Unified eDBadminGetAdminAccess() and eDBadminEditAdminAccess() to eDBadminAccessLevel(). - Unified eDBadminGetCertificateInfo(), eDBadminAddCertificate() and eDBadminDeleteCertificate() into eDBadminCertificate(). - Unified eDBadminAddUser(), eDBadminUpdateUser(), eDBadminDeleteUser(), eDBadminGetUserList() and eDBadminGetUserInfo() functions to eDBadminUserAccount(). - All of these unified APIs do now make use of XML. * Improved result handling from XML functions, a suitable result or error message is now transported in most cases to the front-end application. * Moved all malloc() calls over to malloc_nullsafe() which uses calloc(). This also removes the need of calling memset() after malloc(). * Improved SQLite3 query method making it safe when parallel queries are being executed. * Improved data extraction of data coming from the OpenVPN plug-in API, to avoid buffer and integer overflows. * Fixed compilation warning on 32bit architecture. * SOURCE: Cleaned up CMake files, made it possible to build openvpn plug-in without libxml2. * SOURCE: Cleaned up the code, removed dead code, reorganised the SQLite3 driver. * DOCS: Added a doxygen configuration. Commented as much as possible of the source code. -----------------------------------------------------------------------------