From: Guus Sliepen Date: Mon, 22 Mar 2004 18:26:15 +0000 (+0000) Subject: Add m4 directory and all-caps files to make autoreconf happy. X-Git-Url: https://git.tinc-vpn.org/git/browse?a=commitdiff_plain;h=e10d80f4c2fbfd2f542e385a4da6a5515b5aad74;p=tinc Add m4 directory and all-caps files to make autoreconf happy. --- diff --git a/AUTHORS b/AUTHORS new file mode 100644 index 00000000..f0cf2657 --- /dev/null +++ b/AUTHORS @@ -0,0 +1,8 @@ +Main tinc authors: + +Guus Sliepen +Ivo Timmermans + +Also some of the macro files in the directory m4 were taken from GNU fileutils. + +Please see the file THANKS for more information on contributions from users. diff --git a/NEWS b/NEWS new file mode 100644 index 00000000..897719c3 --- /dev/null +++ b/NEWS @@ -0,0 +1,319 @@ +version 1.0.2 Nov 8 2003 + +* Fix address and hostname resolving under Windows. + +* Remove warnings about non-existing scripts and unsupported address families. + +* Use the event logger under Windows. + +* Fix quoting of filenames and command line arguments under Windows. + +* Strict checks for length incoming network packets and return values of + cryptographic functions, + +* Fix a bug in metadata handling that made the tinc daemon abort. + +version 1.0.1 Aug 14 2003 + +* Allow empty lines in config files. + +* Fix handling of spaces and backslashes in filenames under native Windows. + +* Allow scripts to be executed under native Windows. + +* Update documentation, make it less Linux specific. + +version 1.0 Aug 4 2003 + +* Lots of small bugfixes and code cleanups. + +* Throughput doubled and latency reduced. + +* Added support for LZO compression. + +* No need to set MAC address or disable ARP anymore. + +* Added support for Windows 2000 and XP, both natively and in a Cygwin + environment. + +version 1.0pre8 Sep 16 2002 + +* More fixes for subnets with prefixlength undivisible by 8. + +* Added support for NetBSD and MacOS/X. + +* Switched from undirected graphs to directed graphs to avoid certain race + conditions and improve scalability. + +* Generalized broadcasting and forwarding of protocol messages. + +* Cleanup of source code. + + +version 1.0pre7 Apr 7 2002 + +* Don't do blocking read()s when getting a signal. + +* Remove RSA key checking code, since it sometimes thinks perfectly good RSA + keys are bad. + +* Fix handling of subnets when prefixlength isn't divisible by 8. + + +version 1.0pre6 Mar 27 2002 + +* Improvement of redundant links: + + * Non-blocking connects. + + * Protocol broadcast messages can no longer go into an infinite loop. + + * Graph algorithm updated to look harder for direct connections. + +* Good support for routing IPv6 packets over the VPN. Works on Linux, + FreeBSD, possibly OpenBSD but not on Solaris. + +* Support for tunnels over IPv6 networks. Works on all supported + operating systems. + +* Optional compression of UDP connections using zlib. + +* Optionally let UDP connections inherit TOS field of tunneled packets. + +* Optionally start scripts when certain hosts become (un)reachable. + + +version 1.0pre5 Feb 9 2002 + +* Security enhancements: + + * Added sequence number and optional message authentication code to + the packets. + + * Configurable encryption cipher and digest algorithms. + +* More robust handling of dis- and reconnects. + +* Added a "switch" and a "hub" mode to allow bridging setups. + +* Preliminary support for routing of IPv6 packets. + +* Supports Linux, FreeBSD, OpenBSD and Solaris. + + +It looks like this might be the last release before 1.0. + + +version 1.0pre4 Jan 17 2001 + +* Updated documentation; the documentation now reflects the + configuration as it is. + +* Some internal changes to make tinc scale better for large + networks, such as using AVL trees instead of linked lists for the + connection list. + +* RSA keys can be stored in separate files if needed. See the + documentation for more information. + +* tinc has now been reported to run on Linux PowerPC and FreeBSD x86. + + + +version 1.0pre3 Oct 31 2000 + +* The protocol has been redesigned, and although some details are + still under discussion, this is secure. Care has been taken to + resist most, if not all, attacks. + +* Unfortunately this protocol is not compatible with earlier versions, + nor are earlier versions compatible with this version. Because the + older protocol has huge security flaws, we feel that not + implementing backwards compatibility is justified. + +* Some data about the protocol: + + * It uses public/private RSA keys for authentication (this is the + actual fix for the security hole). + + * All cryptographic functions have been taken out of tinc, instead + it uses the OpenSSL library functions. + + * Offers support for multiple subnets per tinc daemon. + +* New is also the support for the universal tun/tap device. This + means better portability to FreeBSD and Solaris. + +* tinc is tested to compile on Solaris, Linux x86, Linux alpha. + +* tinc now uses the OpenSSL library for cryptographic operations. + More information on getting and installing OpenSSL is in the manual. + This also means that the GMP library is no longer required. + +* Further, thanks to Enrique Zanardi, we have Spanish messages; Matias + Carrasco provided us with a Spanish translation of the manual. + + +What still needs to be done before 1.0: + +* Documentation. Especially since the protocol has changed, and a lot + of configuration directives have been added. + + + + +version 1.0pre2 May 31 2000 + +* This version has been internationalized; and a Dutch translation has + been included. + +* Two configuration variables have been added: + * VpnMask - the IP network mask for the entire VPN, not just our + subnet (as given by MyVirtualIP). The Redhat and Debian packages + use this variable in their system startup scripts, but it is + ignored by tinc. + * Hostnames - if set to `yes', look up the names of IP addresses + trying to connect to us. Default set to `no', to prevent lockups + during lookups. + +* The system startup scripts for Debian and Redhat use + /etc/tinc/nets.boot to find out which networks need to be started + during system boot. + +* Fixes to prevent denial of service attacks by sending random data + after connecting (and even when the connection has been established), + either random garbage or just nonsensical protocol fields. + +* tinc will retry to connect upon startup, does not quit if it doesn't + work the first time. + +* Hosts that are disconnected implicitly if we lose a connection get + deleted from the internal list, to prevent hogging eachother with + add and delete requests when the connection is restored. + + +What still needs to be done before 1.0: + +* Documentation. +* Failover ConnectTo lines, try another one if the first doesn't work. + + + + +version 1.0pre1 May 12 2000 + * New meta-protocol + * Various other bugfixes + * Documentation updates + +version 0.3.3 Feb 9 2000 + * Fixed bug that made tinc stop working with latest kernels (Guus + Sliepen) + * Updated the manual + +version 0.3.2 Nov 12 1999 + * no more `Invalid filedescriptor' when working with multiple + connections + * forward unknown packets to uplink + +version 0.3.1 Oct 20 1999 + * fixed a bug where tinc would exit without a trace + +version 0.3 Aug 20 1999 + * pings now work immediately + * all packet sizes get transmitted correctly + +version 0.2.26 Aug 15 1999 + * fixed some remaining bugs + * --sysconfdir works with configure + * last version before 0.3 + +version 0.2.25 Aug 8 1999 + * improved stability, going towards 0.3 now. + +version 0.2.24 Aug 7 1999 + * added key aging, there's a new config variable, KeyExpire. + * updated man and info pages + +version 0.2.23 Aug 5 1999 + * all known bugs fixed, this is a candidate for 0.3 + +version 0.2.22 Apr 11 1999 + * multiconnection thing is now working nearly perfect :) + +version 0.2.21 Apr 10 1999 + * You shouldn't notice a thing, but a lot has changed wrt key +management - except that it refuses to talk to versions < 0.2.20 + +version 0.2.20 + +version 0.2.19 Apr 3 1999 + * don't install a libcipher.so + +version 0.2.18 Apr 3 1999 + * blowfish library dynamically loaded upon execution + * included Eric Young's IDEA library + +version 0.2.17 Apr 1 1999 + * tincd now re-executes itself in case of a segmentation fault. + +version 0.2.16 Apr 1 1999 + * wrote tincd.conf(5) man page, which still needs a lot of work. + * config file now accepts and tolerates spaces, and any integer base +for integer variables, and better error reporting. See +doc/tincd.conf.sample for an example. + +version 0.2.15 Mar 29 1999 + * fixed bugs + +version 0.2.14 Feb 10 1999 + * added --timeout flag and PingTimeout configuration + * did some first syslog cleanup work + +version 0.2.13 Jan 23 1999 + * bugfixes + +version 0.2.12 Jan 23 1999 + * fixed nauseating bug so that it would crash whenever a connection +got lost + +version 0.2.11 Jan 22 1999 + * framework for multiple connections has been done + * simple manpage for tincd + +version 0.2.10 Jan 18 1999 + * passphrase support added + +version 0.2.9 Jan 13 1999 + * bugs fixed. + +version 0.2.8 Jan 11 1999 + * a reworked protocol version + * a ping/pong system + * more reliable networking code + * automatic reconnection + * still does not work with more than one connection :) + * strips MAC addresses before sending, so there's less overhead, and +less redundancy + +version 0.2.7 Jan 3 1999 + * several updates to make extending more easy. + +version 0.2.6 Dec 20 1998 + * Point-to-Point connections have been established, including +blowfish encryption and a secret key-exchange. + +version 0.2.5 Dec 16 1998 + * Project renamed to tinc, in honour of TINC. + +version 0.2.4 Dec 16 1998 + * now it really does ;) + +version 0.2.3 Nov 24 1998 + * it sort of works now + +version 0.2.2 Nov 20 1998 + * uses GNU gmp. + +version 0.2.1 Nov 14 1998 + + * Bare version. diff --git a/README b/README new file mode 100644 index 00000000..420066a9 --- /dev/null +++ b/README @@ -0,0 +1,41 @@ +This is the README file for tinc version 2.0. Installation +instructions may be found in the INSTALL file. + +tinc is Copyright (C) 1998-2004 by: + +Ivo Timmermans , +Guus Sliepen , +and others. + +For a complete list of authors see the AUTHORS file. + +This program is free software; you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation; either version 2 of the License, or (at +your option) any later version. See the file COPYING for more details. + +Security statement +------------------ + +Revamped. + + +Compatibility +------------- + +Version 2.0 is not compatible with older version. + + +Requirements +------------ + +Gnutls, gcrypt, zlib, lzo. + +In order to compile tinc, you will need a GNU C compiler environment. + + +Features +-------- + +Kitchen sink and LRF support. + diff --git a/THANKS b/THANKS new file mode 100644 index 00000000..cbdc5a52 --- /dev/null +++ b/THANKS @@ -0,0 +1,33 @@ +We would like to thank + + * Hans Bayle (for making some useful coding suggestions and fixing a + bug or two) + * Lubomír Bulej (for the Redhat system init script) + * Wessel Dankers (for the name `tinc' and various suggestions) + * Mads Kiilerich (for finding some bugs and some errors in the + documentation, and for making several suggestions to make it all + more userfriendly, and the Redhat package) + * James MacLean (for fixing several mission critical bugs, and for + giving me a few good ideas, and, most of all, for the wonderful + testing and debugging) + * Robert van der Meulen (early configuration code) + * Cris van Pelt (small fixes) + * Enrique Zanardi (for the Spanish translation) + * Matias Carrasco (for the Spanish translation of the manual) + * Jamie Briggs (for finding a lot of socket leaks) + * Armijn Hemel (for being our very own PR manager) + * Jerome Etienne (for a thorough security analysis of tinc) + * Mark Glines (for his compression patch) + * Nick Patavalis (RedHat package) + * Alessandro Gatti (for helping us support Darwin) + * Ivo van Dong (for help during the early versions of tinc) + * Jeroen Ubbink (for help testing tinc on Free- and NetBSD) + * LarstiQ (for help testing tinc on MacOS/X) + * Marc A. Lehmann (for criticism) + * Teemu Kiviniemi (for his lzo compression patch) + * Flynn Marquardt (for help testing tinc on Solaris 2.6) + +for their help, support and ideas. Thank you guys! + +Ivo Timmermans +Guus Sliepen