1. 17 Jan, 2016 1 commit
    • Russ Allbery's avatar
      Update to rra-c-util 5.10 and C TAP Harness 3.4 · 57a5a009
      Russ Allbery authored
      Update to rra-c-util 5.10:
      * Add missing va_end to xasprintf implementation.
      * Fix Perl test suite framework for new Automake relative paths.
      * Improve portability to Kerberos included in Solaris 10.
      * Use appropriate warning flags with Clang (currently not warning clean).
      Update to C TAP Harness 3.4:
      * Fix segfault in runtests with an empty test list.
      * Display verbose test results with -v or C_TAP_VERBOSE.
      * Test infrastructure builds cleanly with Clang warnings.
      * Support comments and blank lines in test lists.
  2. 09 Dec, 2014 3 commits
  3. 16 Jul, 2014 6 commits
  4. 12 Jul, 2014 5 commits
    • Russ Allbery's avatar
      Test for Perl strict and minimum version · 1329e6db
      Russ Allbery authored
      Fix strictness issues across the whole code base, and ensure that
      all Perl scripts enable warnings.  (Hopefully enabling warnings
      won't cause problems for the server.)
      Change-Id: I4dee49f7a6bcbeeee21d74bf61a1fd26514f832c
      Reviewed-on: https://gerrit.stanford.edu/1532
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
    • Russ Allbery's avatar
      Switch to Module::Build for the Perl module · 1575d5c3
      Russ Allbery authored
      The wallet server now requires Perl 5.8 or later (instead of 5.006 in
      previous versions) and is now built with Module::Build instead of
      ExtUtils::MakeMaker.  This should be transparent to anyone not working
      with the source code, since Perl 5.8 was released in 2002, but
      Module::Build is now required to build the wallet server.  It is
      included in some versions of Perl, or can be installed separately from
      CPAN, distribution packages, or other sources.
      Also reorganize the test suite to use subdirectories.
      Change-Id: Id06120ba2bad1ebbfee3d8a48ca2f25869463165
      Reviewed-on: https://gerrit.stanford.edu/1530
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
    • Russ Allbery's avatar
      Update to rra-c-util 5.5 and C TAP Harness 3.1 · da0aba21
      Russ Allbery authored
      Update to rra-c-util 5.5:
      * Use Lancaster Consensus environment variables to control tests.
      * Use calloc or reallocarray for protection against integer overflows.
      * Suppress warnings from Kerberos headers in non-system paths.
      * Assume calloc initializes pointers to NULL.
      * Assume free(NULL) is properly ignored.
      * Improve error handling in xasprintf and xvasprintf.
      * Check the return status of snprintf and vsnprintf properly.
      * Preserve errno if snprintf fails in vasprintf replacement.
      Update to C TAP Harness 3.1:
      * Reopen standard input to /dev/null when running a test list.
      * Don't leak extraneous file descriptors to tests.
      * Suppress lazy plans and test summaries if the test failed with bail.
      * runtests now treats the command line as a list of tests by default.
      * The full test executable path can now be passed to runtests -o.
      * Improved harness output for tests with lazy plans.
      * Improved harness output to a terminal for some abort cases.
      * Flush harness output after each test even when not on a terminal.
      Change-Id: I05161eb3d3be49a98f7762e876cb114da0c84e9a
      Reviewed-on: https://gerrit.stanford.edu/1529
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
    • Russ Allbery's avatar
      List all SQL files separately in Makefile.am · cc98e4d3
      Russ Allbery authored
      Otherwise, they won't be copied properly to the perl directory
      when building out of tree.
      Change-Id: Id178d1b58d14a3595f372e25744dbdc61a81ff34
      Reviewed-on: https://gerrit.stanford.edu/1527
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
    • Russ Allbery's avatar
      Add new object type for Duo integrations · 26927d5b
      Russ Allbery authored
      A new object type, duo (Wallet::Object::Duo), is now supported.  This
      creates an integration with the Duo Security cloud multifactor
      authentication service and allows retrieval of the integration key,
      secret key, and admin hostname.  Currently, only UNIX integration
      types are supported.  The Net::Duo Perl module is required to use this
      object type.  New configuration settings are required as well; see
      Wallet::Config for more information.  To enable this object type for
      an existing wallet database, use wallet-admin to register the new
      Change-Id: I2c0dac75e81f526b34d6b509c4bdaecb43dd4a9d
      Reviewed-on: https://gerrit.stanford.edu/1516
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
  5. 13 Apr, 2014 1 commit
  6. 27 Mar, 2013 7 commits
  7. 28 Feb, 2013 2 commits
    • Russ Allbery's avatar
      Drop use of concat in favor of xasprintf · 93e566f6
      Russ Allbery authored
      Change-Id: I6a84920b0c0dc1849af8a34ecf8f3fb70b45e17c
      Reviewed-on: https://gerrit.stanford.edu/843
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
    • Russ Allbery's avatar
      Update to rra-c-util 4.8 and C TAP Harness 1.12 · 234e3805
      Russ Allbery authored
      Update to rra-c-util 4.8:
      * Look for krb5-config in /usr/kerberos/bin after the user's PATH.
      * Kerberos library probing fixes without transitive shared libraries.
      * Fix Autoconf warnings when probing for AIX's bundled Kerberos.
      * Avoid using krb5-config if --with-{krb5,gssapi}-{include,lib} given.
      * Correctly remove -I/usr/include from Kerberos and GSS-API flags.
      * Build on systems where krb5/krb5.h exists but krb5.h does not.
      * Pass --deps to krb5-config unless --enable-reduced-depends was used.
      * Do not use krb5-config results unless gssapi is supported.
      * Fix probing for Heimdal's libroken to work with older versions.
      * Update warning flags for GCC 4.6.1.
      * Update utility library and test suite for newer GCC warnings.
      * Fix broken GCC attribute markers causing compilation problems.
      * Suppress warnings on compilers that support gcc's __attribute__.
      * Add notices to all files copied over from rra-c-util.
      * Fix warnings when reporting memory allocation failure in messages.c.
      * Fix message utility library compiler warnings on 64-bit systems.
      * Include strings.h for additional POSIX functions where found.
      * Use an atexit handler to clean up after Kerberos tests.
      * Kerberos test configuration now goes in tests/config.
      * The principal of the test keytab is determined automatically.
      * Simplify the test suite calls for Kerberos and remctl tests.
      * Check for a missing ssize_t.
      * Improve the xstrndup utility function.
      * Checked asprintf variants are now void functions and cannot fail.
      * Fix use of long long in portable/mkstemp.c.
      * Fix test suite portability to Solaris.
      * Substantial improvements to the POD syntax and spelling checks.
      Update to C TAP Harness 1.12:
      * Fix compliation of runtests with more aggressive warnings.
      * Add a more complete usage message and a -h command-line flag.
      * Flush stderr before printing output from tests.
      * Better handle running shell tests without BUILD and SOURCE set.
      * Fix runtests to honor -s even if BUILD and -b aren't given.
      * runtests now frees all allocated resources on exit.
      * Only use feature-test macros when requested or built with gcc -ansi.
      * Drop is_double from the C TAP library to avoid requiring -lm.
      * Avoid using local in the shell libtap.sh library.
      * Suppress warnings on compilers that support gcc's __attribute__.
      Change-Id: I394294d5486ac1ce265c7713bec71a148aaaf1ce
      Reviewed-on: https://gerrit.stanford.edu/841
      Reviewed-by: default avatarRuss Allbery <rra@stanford.edu>
      Tested-by: default avatarRuss Allbery <rra@stanford.edu>
  8. 14 Feb, 2013 1 commit
  9. 16 Jul, 2012 1 commit
  10. 26 Aug, 2010 1 commit
  11. 25 Aug, 2010 2 commits
  12. 30 Jul, 2010 1 commit
    • Russ Allbery's avatar
      Add an initial test for wallet-rekey · 7a1d4f9e
      Russ Allbery authored
      This confirms basic functionality, but doesn't test more interesting
      things like rekeying multiple keys in the same keytab or skipping
      principals that aren't from the local realm.
  13. 29 Jul, 2010 2 commits
  14. 21 Feb, 2010 6 commits
  15. 19 Feb, 2010 1 commit
    • Russ Allbery's avatar
      Refactor reporting into a separate module and script · 345333f0
      Russ Allbery authored
      Move all reporting from Wallet::Admin to Wallet::Report and simplify
      the method names since they're now part of a dedicated reporting
      class.  Similarly, create a new wallet-report script to wrap
      Wallet::Report, moving all reporting commands to it from wallet-admin,
      and simplify the commands since they're for a dedicated reporting
      Remove the contrib script wallet-report to wallet-summary so that it
      doesn't conflict with the new reporting backend script.