1 secnet (0.6.1~) unstable; urgency=medium
7 secnet (0.6.0) unstable; urgency=medium
10 * mobile sites: Do not ever expire peer addresses. In practice
11 this fixes transitions between IPv6-only and IPv4-only networks.
12 * make-secnet-sites: Tainted: Fix a lot of bad return values
13 (which would result in assertions rather than nice error messages).
14 * Fix hash algo confusion in mixed sha1/md5 configurations (see below).
17 * site: Always advertise all capabilities, even in MSG1. This is
18 incompatible with secnets earlier than 0.3.0 (September 2013), which
19 are all quite badly broken and should have been upgraded long ago.
20 * Drop support for using the same loaded rsa key with multiple different
21 hash algorithms (which was broken in 0.5.0). Right now we support
22 only `sha1' and `md5' so everyone should be using `sha1'.
23 Installations which specified `md5' anywhere may need config changes.
25 Major new featureset (use of which is not adviseable yet):
26 * New facilities for negotiating about the signing keys to use for
27 authentication during key setup, and selecting and using the
28 appropriate keys. (``key-cache'/`privcache' and `peer-keys').
29 Using these new facilities for keyrollover now is in principle
30 possible but rather complex. Further machinery is planned;
31 for now, retain your existing config which should keep working.
33 - secnet: new `privcache' closure;
34 - secnet: `key-cache' and `peer-keys' keys on site closures;
35 - secnet: new file format for peer public keysets;
36 - secnet: new `make-public' config operator;
37 - make-secnet-sites `pub', `pkg', `serial', etc. keywords;
38 - make-secnet-sites --filter, --pubkeys-*, --output-version.
40 More minor (logging) improvements:
41 * Make stderr line buffered and log to it by default.
42 * Do not log differently with --nodetach.
43 * New `prefix' option to `logfile' closure.
44 * Tidy and simplify some messages.
47 * Many substantial internal refactorings in secnet.
48 * Many substantial internal refactorings in make-secnet-sites.
49 * make-secnet-sites option parsing totally replaced.
50 * Imported subtrees for base91-c and base91-python.
51 * New portablity code, etc.: osdep.[ch], fmemopen reimplementation.
52 * Explicitly define oddly-rotated dh padding arrangement (write_mpbin).
54 Build system and packaging:
55 * Do not fail to build from git when HEAD refers to a packed ref.
56 * Update to subdirmk 0.3.
57 * Many makefile fixes (esp. to clean and cdeps).
58 * configure.ac: Drop or suppress some very obsolete checks.
59 * autogen.sh: Write a comment about need for autoheader.
60 * dir-locals: Provide python-indent-offset too.
63 * stest: Use stderr, not tty, for logging.
64 * stest/udp-preload.c: Fix error handling of sun_prep.
65 * stest: Fix breakage if nproc is not installed.
67 Test suite improvements:
68 * New tests, including tests for new features.
69 * Existing tests (especially stest) generally made more thorough.
70 * New comprehensive-test and pretest-to-tested convenience scripts.
71 * Arrangements for testing with (user-provided) old secnet.
72 * parallel-test.*: scripts to help with parallelised bisection.
73 * stest: Print a lot more output about what we are doing.
74 * stest: Better support for cwd with longish pathname.
75 * stest: More flexibility, env var hooks, etc.
77 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sun, 16 Feb 2020 12:48:13 +0000
79 secnet (0.5.1) unstable; urgency=medium
81 POTENTIALLY INCOMPATIBLE CHANGE. Some security implications.
83 * make-secnet-sites: Prefix names when writing secnet sites.conf file.
85 make-secnet-sites must copy names (vpn, location and site names) from
86 the input sites file (which is not wholly trusted) to the secnet
87 config file. Prior to this release, naming a location or site the
88 same as a secnet predefined name could generate a broken sites.conf
89 which secnet would reject. (With the existing featureset,
90 malfunctions other than rejection, eg privilege escalation, are not
93 make-secnet-sites now adds a prefix to these names when writing
94 sites.conf. This will not affect configurations which use the
95 make-secnet-sites-provided `all-sites' key, as is usual. Other
96 configurations will break unless the references in the static part of
97 the config are adjusted.
99 Previous behaviour can be restored with the --no-conf-key-prefix
100 option. (Planned future enhancements to secnet are likely to make use
101 of that option, with untrusted input, dangerously insecure.)
103 other changes to make-secnet-sites:
104 * Fix argument parsing. Fixes a regression affecting -P in 0.5.0,
105 and also fixes new facilities introduced in 0.5.0.
106 * Sort the properties on output (and adjust the test case expected
107 outputs). Tests now pass on (at least) Python 2.7.13, 3.5.3, 3.7.5.
108 * Delete some unused code.
111 * Change one idiom to avoid a warning from GCC9. No functional change.
113 build system - MAJOR CHANGES:
114 * Fix out-of-tree builds. (Broken in 0.5.0)
115 * Replace recursive make with use of the new subdirmk system.
116 This represents a fairly comprehensive overhaul of the makefiles.
117 Several bugs (esp. involving dependencies between files in different
118 directories) are fixed.
119 * Drop `make check' from `make all'. (Otherwise there is no way
120 to ask for `all' without `check'.)
121 * Suppress two unhelpful new compiler warnings from GCC9.
122 * Release checklist update.
125 * Credit Mark Wooding properly in CREDITS.
126 * Include DEVELOPER-CERTIFICATE.
129 * Locations now have different names to sites.
130 * Somewhat better debugging output from mtest.
131 * Do not run msgcode-test except with `make fullcheck'.
132 * Other minor bugfixes and improvments.
133 * stest: Suppress unhelpful -Wno-unused-result (needed for stretch).
135 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Fri, 22 Nov 2019 23:13:14 +0000
137 secnet (0.5.0) unstable; urgency=medium
139 make-secnet-sites SECURITY FIX:
140 * Do not blindly trust inputs; instead, check the syntax for sanity.
141 Previous releases can be induced to run arbitrary code as the user
142 invoking secnet (which might be root), if a secnet sites.conf is used
143 that was generated from an untrustworthy sites file.
144 * The userv invocation mode of make-secnet-sites seems to have been safe
145 in itself, but it previously allowed hazardous data to be propagated
146 into the master sites file. This is now prevented too.
148 make-secnet-sites overhaul work:
149 * make-secnet-sites is now in the common subset of Python2 and Python3.
150 The #! is python3 now, but it works with Python2.7 too.
151 It will probably *not* work with old versions of Python2.
152 * We no longer depend on the obsolete `ipaddr' library. We use
153 `ipaddress' now. And this is onlo a Recommends in the .deb.
154 * Ad-hoc argument parser been replaced with `argparse'.
155 There should be no change to existing working invocations.
156 * Bad address syntax error does not wrongly mention IPv6 scopes.
157 * Minor refactoring to support forthcoming work. [Mark Wooding]
159 other bugfixes, improvements and changes to secnet itself:
160 * Better logging of why we are sending NAK messages.
161 * Correctly use the verified copy of the peer remote capabilities
162 from MSG3. (Bug is not a vulnerability.) [Mark Wooding]
163 * Significant internal rearrangements and refactorings, to support
164 forthcoming key management work. [Mark Wooding and Ian Jackson]
167 * Completely overhaul release checklist; drop dist target.
168 * Remove dependency on `libfl.a'. [Mark Wooding]
169 * polypath.c: Fix missing include of <limits.h>. [Mark Wooding]
170 * Add a Wireshark dissector `secnet-wireshark.lua'. It is not
171 installed anywhere right now. [Mark Wooding]
174 * Improve documentation of capability negotiation in NOTES, secnet(8)
175 and magic.h. [Mark Wooding]
177 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 24 Oct 2019 19:11:54 +0100
179 secnet (0.4.5) unstable; urgency=medium
181 * INSTALL: Mention that rsa key generation might need ssh-keygen1.
182 * mobile: Fix negotiation bug with mixed old/new secnets and
183 simultaneous key setup attempts by each end. [Mark Wooding]
184 * Makefile.in: Support installation from a `VPATH' build. [Mark Wooding]
185 * Portability fixes for clang. [Mark Wooding]
187 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sat, 21 Sep 2019 12:04:31 +0100
189 secnet (0.4.4) unstable; urgency=medium
192 * make-secnet-sites: Don't allow setting new VPN-level properties
193 when restricted. This could allow denial of service by
194 users with delegated authorisation. [Mark Wooding]
196 Bugfixes for poor network environments:
197 * polypath: cope properly with asymmetric routing, by correcting
198 the handling of late duplicated packets etc. Protocol is now
199 incompatible with secnet prior to 0.3.0 when either end is mobile.
200 * Randomise key setup retry time.
203 * rsa and cbcmac: Fix configuration error messages. [Mark Wooding]
204 * Handle IPv4 addresses properly (ie, not foolishly byte-swapped),
205 when IPv6 is not available. [Mark Wooding]
206 * Better logging (and less foolish debug), especially about whether
207 key is set up, and about crossed key setup attempts.
208 * Internal refactoring and fixes. [Ian Jackson and Mark Wooding]
210 Build system and portability:
211 * configure: rerun autogen.sh with autoconf 2.69-10
212 * Avoid memset(0,0,0) wrt st->sharedsecret. (Fixes compiler warning;
213 in theory might cause miscompilation.) [Mark Wooding]
216 * README.make-secnet-sites: new documentation file. [Mark Wooding]
217 * NOTES: Describe current allocation of capability bits. [Mark Wooding]
218 * NOTES: tiny fix tot protocol description.
219 * secnet(8): Delete wrong information about dh groups. [Mark Wooding]
222 * Fix erroneous GPL3+ licence notices "version d or later" (!)
223 * .dir-locals.el: Settings for Python code. [Mark Wooding]
225 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sun, 08 Sep 2019 22:53:14 +0100
227 secnet (0.4.3) unstable; urgency=low
229 Security improvement:
230 * Use `mpz_powm_sec' for modexps.
233 * Implement comm-info and dedicated-interface-addr feature, for
235 * Implement `keepalive' site option, to try to keep link always up.
238 * #include <limits.h> (fixes the build on jessie).
239 * Tolerate building from a git checkout, but with git not installed.
240 (This can happen in chroots.)
241 * Turn off -Wsign-compare for bison output.
242 * Makefile.in: Fix `check-ipaddrset' rule to get reference from
243 $(srcdir). (Makes out-of-tree builds work properly.)
244 * Release checklist fixes.
245 * Burn version numbers 0.4.1 and 0.4.2 due to errors in release prep.
248 * When printing messages about dropping IPv6, do not print anything
249 about ihl. (Check the IP version field first!)
250 * When turning on debug, turn on verbose too.
252 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sat, 25 Nov 2017 13:36:41 +0000
254 secnet (0.4.0) unstable; urgency=low
256 Debugging improvements:
257 * Packet-level debugging from site notes errors from transmit.
258 * Report when transport peers updated as a result of transmit.
260 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sat, 28 Feb 2015 15:03:00 +0000
262 secnet (0.4.0~beta2) unstable; urgency=low
265 * Ignore IPv6 Unique Local unicast addresses.
266 * Skip "tentative" IPv6 local addresses.
267 * Improve logging and debug output.
270 * Build where size_t is not compatible with int.
272 Build system and packaging fixes:
273 * Makefile: support DESTDIR.
274 * debian/rules: set DESTDIR (not prefix).
275 * debian/rules: Support dpkg-buildflags.
276 * Install ipaddrset.py and secnet.8 with correct permissions.
277 * Fix check for <linux/if_tun.h> and git rid of our copy.
278 * Use -lresolv only if inet_aton is not found otherwise.
279 * Use -lnsl only if inet_ntoa is not found otherwise.
280 * debian/rules: Provide build-arch and build-indep targets.
281 * debian/rules: Do not run build for *-indep (!)
282 * Makefile.in: Putative dual (backport and not) release build process doc.
285 * Update to GPLv3. Add missing copyright notices and credits.
286 * Get rid of old FSF street address; use URL instead.
287 * Remove obsolete LICENCE.txt (which was for snprintf reimplementation).
288 * Remove obsolete references to Cendio (for old ipaddr.py).
290 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sun, 28 Dec 2014 17:14:10 +0000
292 secnet (0.4.0~beta1) unstable; urgency=low
295 * Support transport over IPv6. (We do not yet carry IPv6 in the private
296 network.) IPv6 support depends on IPv6-capable adns (adns 1.5.x).
297 * New polypath comm, which can duplicate packets so as to send them via
298 multiple routes over the public network, for increased
299 reliability/performance (but increased cost). Currently Linux-only
300 but should be fairly easy to port.
301 * Support multiple public addresses for peers.
302 * Discard previously-received packets (by default).
304 Logging improvements:
305 * Report (each first) transmission and reception success and failure.
306 * Log reason for DNS reolution failure.
307 * Log unexpected kinds of death from userv.
308 * Log authbind exit status as errno value (if appropriate).
310 Configuration adjustments:
311 * Adjust default number of mobile peer addresses to store when a peer
312 public address is also configured.
313 * Make specifying peer public port optional. This avoids making special
314 arrangements to bind to a port for in mobile sites with no public
318 * Hackypar children will die if they get a terminating signal.
319 * Fix signal dispositions inherited by secnet's child processes.
320 * Fix off-by-one error which prevented setting transport-peers-max to 5.
322 Test, build and internal improvements:
323 * Use conventional IP address handling library ipaddr.py.
324 * Provide a fuzzer for the slip decoder.
325 * Build system improvements.
326 * Many source code cleanups.
328 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sun, 26 Oct 2014 15:28:31 +0000
330 secnet (0.3.4) unstable; urgency=low
333 * The previous security fix to buffer handling was entirely wrong. This
334 one is better. Thanks to Simon Tatham for the report and the patch.
336 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Mon, 22 Sep 2014 16:16:11 +0100
338 secnet (0.3.3) unstable; urgency=high
341 * Pass correct size argument to recvfrom. This is a serious security
342 problem which may be exploitable from outside the VPN.
343 * Fix a memory leak in some error logging.
346 * Two other latent bugs in buffer length handling found and fixed.
347 * Non-critical stylistic improvements to buffer length handling, to make
348 the code clearer and to assist audit.
350 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Fri, 19 Sep 2014 23:50:45 +0100
352 secnet (0.3.3~beta1) unstable; urgency=low
354 Installation compatibility fix:
355 * In make-secnet-sites, always use our own ipaddr.py even if the
356 incompatible modern ipaddr.py is installed (eg via python-ipaddr.deb).
357 (Future versions of secnet are going to need that Python module to be
360 For links involving mobile sites:
361 * Use source of NAK packets as hint for peer transport address.
362 * When initiating rekey, make use of data transport peer addresses.
365 * Provide clean target in test-example/Makefile.
367 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Fri, 19 Sep 2014 00:11:44 +0100
369 secnet (0.3.2) unstable; urgency=low
371 * Release of 0.3.2. No code changes since 0.3.1~beta1.
373 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 26 Jun 2014 20:27:58 +0100
375 secnet (0.3.2~beta1) unstable; urgency=low
377 For links involving mobile sites:
378 * SECURITY: Properly update peer address array when it is full.
379 * Do name-resolution on peer-initiated key setup too, when we are mobile
380 (and other name-resolution improvements).
382 Other minor improvements:
383 * Log peer addresses on key exchange timeout.
384 * When printing version (eg during startup), use value from git-describe
385 and thus include git commit id where applicable.
386 * Updates to release checklist in Makefile.in.
387 * Use C99 _Bool for bool_t.
389 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Fri, 06 Jun 2014 01:17:54 +0100
391 secnet (0.3.1) unstable; urgency=low
393 * Release of 0.3.1. No code changes since 0.3.1~beta3.
395 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 15 May 2014 01:08:30 +0100
397 secnet (0.3.1~beta3) unstable; urgency=low
399 * Build fixes for non-i386 architectures and gcc 4.8.2.
401 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 08 May 2014 19:53:43 +0100
403 secnet (0.3.1~beta2) unstable; urgency=low
405 Fix relating to new fragmentation / ICMP functionality:
406 * Generate ICMP packets correctly in point-to-point configurations.
408 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sat, 03 May 2014 18:58:09 +0100
410 secnet (0.3.1~beta1) unstable; urgency=low
412 Security fixes (vulnerabilities are to inside attackers only):
413 * SECURITY: Fixes to MTU and fragmentation handling.
414 * SECURITY: Correctly set "unused" ICMP header field.
415 * SECURITY: Fix IP length check not to crash on very short packets.
418 * Make the inter-site MTU configurable, and negotiate it with the peer.
421 * Fix netlink SEGV on clientless netlinks (i.e. configuration error).
422 * Fix formatting error in p-t-p startup message.
423 * Do not send ICMP errors in response to unknown incoming ICMP.
424 * Fix formatting error in secnet.8 manpage.
425 * Internal code rearrangements and improvements.
427 Packaging improvements:
428 * Updates to release checklist in Makefile.in.
429 * Additions to the test-example suite.
431 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 01 May 2014 19:02:56 +0100
433 secnet (0.3.0) unstable; urgency=low
435 * Release of 0.3.0. No code changes since 0.3.0~beta3.
436 * Update release checklist.
438 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sun, 01 Sep 2013 20:27:48 +0100
440 secnet (0.3.0~beta3) unstable; urgency=low
442 * New upstream version.
443 - Stability bugfix: properly initialise site's scratch buffer.
445 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Mon, 05 Aug 2013 11:54:09 +0100
447 secnet (0.3.0~beta2) unstable; urgency=low
449 * New upstream version.
450 - SECURITY FIX: RSA public modulus and exponent buffer overflow.
451 - SECURITY FIX: Use constant-time memcmp for message authentication.
452 - SECURITY FIX: Provide a new transform, eax-serpent, to replace cbcmac.
453 - SECURITY FIX: No longer send NAKs for NAKs, avoiding NAK storm.
454 - SECURITY FIX: Fix site name checking when site name A is prefix of B.
455 - SECURITY FIX: Safely reject too-short IP packets.
456 - Better robustness for mobile sites (proper user of NAKs, new PROD msg).
457 - Better robustness against SLIP decoding errors.
458 - Fix bugs which caused routes to sometimes not be advertised.
459 - Protocol capability negotiation mechanism.
460 - Improvements and fixes to protocol and usage documentation.
461 - Other bugfixes and code tidying up.
463 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 25 Jul 2013 18:26:01 +0100
465 secnet (0.3.0~beta1) unstable; urgency=low
467 * New upstream version.
468 - SECURITY FIX: avoid crashes (or buffer overrun) on short packets.
469 - Bugfixes relating to packet loss during key exchange.
470 - Bugfixes relating to link up/down status.
471 - Bugfixes relating to logging.
472 - make-secnet-sites made more sophisticated to support two vpns on chiark.
473 - Documentation improvements.
474 - Build system improvements.
475 * Debian packaging improvements:
477 - Maintainer / uploaders.
478 - init script requires $remove_fs since we're in /usr.
480 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Thu, 12 Jul 2012 20:18:16 +0100
482 secnet (0.2.1-1) unstable; urgency=low
484 * New upstream version. (authbind endianness fix)
486 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sun, 11 Dec 2011 13:14:57 +0000
488 secnet (0.2.0-1) unstable; urgency=low
490 * New upstream version.
492 -- Ian Jackson <ijackson@chiark.greenend.org.uk> Sat, 10 Dec 2011 22:44:41 +0000
494 secnet (0.1.18-1) unstable; urgency=low
496 * New upstream version.
498 -- Stephen Early <steve@greenend.org.uk> Tue, 18 Mar 2008 17:45:00 +0000