]>
git.ipfire.org Git - thirdparty/kea.git/log
Thomas Markwalder [Wed, 30 Jul 2025 19:14:30 +0000 (15:14 -0400)]
[#4014] Fixed change log entry file
modified: changelog_unreleased/4014-v6-fix-cb-command-behavior-for-mulitple-options-with-the-same-code-in-a-given-scope
Thomas Markwalder [Wed, 30 Jul 2025 19:13:05 +0000 (15:13 -0400)]
[#4014] Fixed change log typo
modified: ChangeLog
Razvan Becheriu [Wed, 30 Jul 2025 13:44:26 +0000 (16:44 +0300)]
[#4014] addressed review comments
Thomas Markwalder [Tue, 29 Jul 2025 13:37:46 +0000 (09:37 -0400)]
[#4014] Added Changelog file
new file: changelog_unreleased/4014-v6-fix-cb-command-behavior-for-mulitple-options-with-the-same-code-in-a-given-scope
Thomas Markwalder [Mon, 28 Jul 2025 17:48:45 +0000 (13:48 -0400)]
[#4014] Core and UT for v6 option class-tags
Changes to be committed:
modified: doc/sphinx/arm/hooks-cb-cmds.rst
modified: src/hooks/dhcp/mysql/mysql_cb_dhcp6.cc
modified: src/hooks/dhcp/mysql/mysql_cb_dhcp6.h
modified: src/hooks/dhcp/mysql/mysql_cb_impl.cc
modified: src/hooks/dhcp/mysql/tests/mysql_cb_dhcp6_unittest.cc
modified: src/hooks/dhcp/pgsql/pgsql_cb_dhcp6.cc
modified: src/hooks/dhcp/pgsql/pgsql_cb_dhcp6.h
modified: src/hooks/dhcp/pgsql/pgsql_cb_impl.cc
modified: src/hooks/dhcp/pgsql/tests/pgsql_cb_dhcp6_unittest.cc
modified: src/lib/dhcpsrv/config_backend_dhcp6.h
modified: src/lib/dhcpsrv/config_backend_pool_dhcp6.cc
modified: src/lib/dhcpsrv/config_backend_pool_dhcp6.h
modified: src/lib/dhcpsrv/testutils/generic_cb_dhcp4_unittest.h
modified: src/lib/dhcpsrv/testutils/generic_cb_dhcp6_unittest.cc
modified: src/lib/dhcpsrv/testutils/generic_cb_dhcp6_unittest.h
modified: src/lib/dhcpsrv/testutils/test_config_backend_dhcp4.cc
modified: src/lib/dhcpsrv/testutils/test_config_backend_dhcp4.h
modified: src/lib/dhcpsrv/testutils/test_config_backend_dhcp6.cc
modified: src/lib/dhcpsrv/testutils/test_config_backend_dhcp6.h
modified: src/share/api/remote-option4-global-del.json
modified: src/share/api/remote-option4-global-get.json
modified: src/share/api/remote-option4-global-set.json
modified: src/share/api/remote-option4-network-del.json
modified: src/share/api/remote-option4-network-set.json
modified: src/share/api/remote-option4-pool-del.json
modified: src/share/api/remote-option4-pool-set.json
modified: src/share/api/remote-option4-subnet-del.json
modified: src/share/api/remote-option4-subnet-set.json
modified: src/share/api/remote-option6-global-del.json
modified: src/share/api/remote-option6-global-get.json
modified: src/share/api/remote-option6-global-set.json
modified: src/share/api/remote-option6-network-del.json
modified: src/share/api/remote-option6-network-set.json
modified: src/share/api/remote-option6-pd-pool-del.json
modified: src/share/api/remote-option6-pd-pool-set.json
modified: src/share/api/remote-option6-pool-del.json
modified: src/share/api/remote-option6-pool-set.json
modified: src/share/api/remote-option6-subnet-del.json
Andrei Pavel [Mon, 28 Jul 2025 07:31:47 +0000 (10:31 +0300)]
[#4031] Convert some leftover docs from autotools to meson
Andrei Pavel [Mon, 28 Jul 2025 07:18:45 +0000 (10:18 +0300)]
[#4031] Add entry in SECURITY.md
Andrei Pavel [Mon, 28 Jul 2025 06:15:31 +0000 (09:15 +0300)]
[#4031] Tweak ChangeLog
Andrei Pavel [Mon, 28 Jul 2025 06:09:48 +0000 (09:09 +0300)]
[#4031] Additional updates to copyright dates
Andrei Pavel [Thu, 24 Jul 2025 17:51:44 +0000 (20:51 +0300)]
[#4031] release changes
Razvan Becheriu [Thu, 24 Jul 2025 15:32:50 +0000 (18:32 +0300)]
[#4030] bump up library versions for 3.1.0 release
Razvan Becheriu [Thu, 24 Jul 2025 13:35:35 +0000 (16:35 +0300)]
[#3944] added ChangeLog entry
Razvan Becheriu [Thu, 24 Jul 2025 10:59:55 +0000 (13:59 +0300)]
[#3944] addressed review comments
Razvan Becheriu [Thu, 17 Jul 2025 21:03:07 +0000 (00:03 +0300)]
[#3944] add support for CB global scalar lists
Thomas Markwalder [Wed, 23 Jul 2025 20:57:06 +0000 (16:57 -0400)]
[#3770] Addressed comments
Thomas Markwalder [Wed, 23 Jul 2025 18:19:51 +0000 (14:19 -0400)]
[#3770] Minor correction to hash input value.
Use non-empy delimiter.
modified: ../classify.cc
modified: classify_unittest.cc
Thomas Markwalder [Wed, 23 Jul 2025 17:29:27 +0000 (13:29 -0400)]
[#3770] Add hashing to CfgOption
modified: src/lib/dhcp/classify.cc
modified: src/lib/dhcp/classify.h
modified: src/lib/dhcp/tests/classify_unittest.cc
modified: src/lib/dhcpsrv/cfg_option.h
Francis Dupont [Tue, 22 Jul 2025 15:57:16 +0000 (17:57 +0200)]
[#3553] Fixed macOS compiler errors
Francis Dupont [Tue, 22 Jul 2025 14:54:55 +0000 (16:54 +0200)]
[#3553] Fixed unrelated typo
Francis Dupont [Wed, 11 Jun 2025 16:41:53 +0000 (18:41 +0200)]
[#3553] Addressed comments
Francis Dupont [Wed, 26 Mar 2025 15:25:14 +0000 (16:25 +0100)]
[#3553] Added ChangeLog entry
Francis Dupont [Wed, 26 Mar 2025 09:30:04 +0000 (10:30 +0100)]
[#3553] Added botan check
Francis Dupont [Tue, 25 Mar 2025 17:16:31 +0000 (18:16 +0100)]
[#3553] Updated to Botab 3 (only)
Francis Dupont [Sat, 31 Aug 2024 10:15:38 +0000 (12:15 +0200)]
[#3553] Checkpoint
Thomas Markwalder [Tue, 22 Jul 2025 13:59:27 +0000 (09:59 -0400)]
[#3770] Fix option client-classes buffer size
modified: src/hooks/dhcp/mysql/mysql_host_data_source.cc
Thomas Markwalder [Tue, 22 Jul 2025 13:10:24 +0000 (09:10 -0400)]
[#3770] Fix change log
modified: changelog_unreleased/3770-examine-cb-command-behavior-for-mulitple-options-with-the-same-code-in-a-given-scope
Thomas Markwalder [Tue, 22 Jul 2025 13:07:54 +0000 (09:07 -0400)]
[#3770] Revert v6 doc change
modified: doc/sphinx/arm/hooks-cb-cmds.rst
Thomas Markwalder [Mon, 21 Jul 2025 19:36:55 +0000 (15:36 -0400)]
[#3770] Updated ARM and api files
new file: changelog_unreleased/3770-examine-cb-command-behavior-for-mulitple-options-with-the-same-code-in-a-given-scope
modified: doc/sphinx/arm/hooks-cb-cmds.rst
modified: src/share/api/remote-option4-global-del.json
modified: src/share/api/remote-option4-global-get.json
modified: src/share/api/remote-option4-global-set.json
modified: src/share/api/remote-option4-network-del.json
modified: src/share/api/remote-option4-network-set.json
modified: src/share/api/remote-option4-pool-del.json
modified: src/share/api/remote-option4-pool-set.json
modified: src/share/api/remote-option4-subnet-del.json
modified: src/share/api/remote-option4-subnet-set.json
Thomas Markwalder [Mon, 21 Jul 2025 18:44:25 +0000 (14:44 -0400)]
[#3770] Revert length changes in mysql host code
modified: src/hooks/dhcp/mysql/mysql_host_data_source.cc
Thomas Markwalder [Mon, 21 Jul 2025 17:29:01 +0000 (13:29 -0400)]
[#3770] Fixed OID type mismatch
modified: src/hooks/dhcp/pgsql/pgsql_cb_dhcp4.cc
Thomas Markwalder [Mon, 21 Jul 2025 15:50:31 +0000 (11:50 -0400)]
[#3770] Addressed review comments
modified: src/hooks/dhcp/mysql/mysql_host_data_source.cc
modified: src/lib/dhcpsrv/cfg_option.cc
modified: src/lib/dhcpsrv/tests/cfg_option_unittest.cc
Razvan Becheriu [Mon, 21 Jul 2025 15:08:25 +0000 (18:08 +0300)]
[#3770] addressed review comments
Thomas Markwalder [Thu, 17 Jul 2025 12:03:17 +0000 (08:03 -0400)]
[#3770] Fix dhcp6_options.modfication_ts
Fix dhcp6_options modification_ts column omitted in
original upgrade script and add checks of dhcp6_options changes
/src/bin/admin/tests/mysql_tests.sh.in
mysql_upgrade_30_to_31_test()
mysql_migrate_dhcpX_options_client_classes()
- add dhcp6_options check
/src/bin/admin/tests/pgsql_tests.sh.in
pgsql_upgrade_29_to_30_test()
pgsql_migrate_dhcpX_options_client_classes()
- add dhcp6_options check
/src/share/database/scripts/pgsql/dhcpdb_create.pgsql
Include conditional add of dhcp6_columns.modification_ts
src/share/database/scripts/pgsql/upgrade_006.2_to_007.0.sh.in
Add dhcp6_columns.modification_ts
/src/share/database/scripts/pgsql/upgrade_029_to_030.sh.in
Include conditional add of dhcp6_columns.modification_ts
Thomas Markwalder [Wed, 16 Jul 2025 17:01:33 +0000 (13:01 -0400)]
[#3770] Add client-classes to host back end
/src/hooks/dhcp/mysql/mysql_host_data_source.cc
/src/hooks/dhcp/pgsql/pgsql_host_data_source.cc
Set and fetch host options' client-classes
/src/lib/dhcpsrv/testutils/generic_host_data_source_unittest.cc
Update tests
/src/share/database/scripts/mysql/upgrade_030_to_031.sh.in
/src/share/database/scripts/mysql/dhcpdb_create.mysql
/src/share/database/scripts/pgsql/dhcpdb_create.pgsql
/src/share/database/scripts/pgsql/upgrade_029_to_030.sh.in
update dhcp6_options table
Thomas Markwalder [Tue, 15 Jul 2025 19:48:58 +0000 (15:48 -0400)]
[#3770] Update dhcp4_options in schema
Change dhcp4_options.client_classes NULL values with '[ ]'
Change dhcp4_options.client_classes column to NOT NULL
modified: src/bin/admin/tests/mysql_tests.sh.in
modified: src/bin/admin/tests/pgsql_tests.sh.in
modified: src/lib/mysql/mysql_constants.h
modified: src/lib/pgsql/pgsql_connection.h
modified: src/share/database/scripts/mysql/dhcpdb_create.mysql
modified: src/share/database/scripts/mysql/meson.build
new file: src/share/database/scripts/mysql/upgrade_030_to_031.sh.in
modified: src/share/database/scripts/pgsql/dhcpdb_create.pgsql
modified: src/share/database/scripts/pgsql/meson.build
new file: src/share/database/scripts/pgsql/upgrade_029_to_030.sh.in
Thomas Markwalder [Tue, 15 Jul 2025 13:34:15 +0000 (09:34 -0400)]
[#3770] Minor clean up
modified: src/lib/dhcpsrv/testutils/test_config_backend_dhcp4.cc
Thomas Markwalder [Mon, 14 Jul 2025 19:33:52 +0000 (15:33 -0400)]
[#3770] V4 option cmds parse and use client-classes
/src/hooks/dhcp/cb_cmds/cb_cmds_dhcp4.cc
ConfigCmdsDhcp4Impl::delSharedNetworkOption4()
ConfigCmdsDhcp4Impl::delSubnetOption4()
ConfigCmdsDhcp4Impl::delPoolOption4()
- added client-classes parameter
/src/hooks/dhcp/cb_cmds/cb_cmds_dhcp6.cc
ConfigCmdsDhcp6Impl::delGlobalOption6()
ConfigCmdsDhcp6Impl::getGlobalOption6()
ConfigCmdsDhcp4Impl::delSharedNetworkOption6()
ConfigCmdsDhcp4Impl::delSubnetOption6()
ConfigCmdsDhcp4Impl::delPoolOption6()
- added client-classes parameter
/src/hooks/dhcp/cb_cmds/cb_cmds_impl.h
makeOptionInfoElement(const OptionDefinition& def)
makeOptionInfoElement(const OptionDescriptor& desc) - new convenience functions
Use makeOptionInfoElement() for set() respsonses
Update parseInputListElement() for shared-networks, subnets, pools
/src/hooks/dhcp/cb_cmds/tests/cb_cmds_test.h
void checkOptionInfo() - new test func
/src/hooks/dhcp/cb_cmds/tests/option4_cmds_unittest.cc
udpated test
/src/hooks/dhcp/cb_cmds/tests/option4_network_cmds_unittest.cc
TEST_F(OptionNetwork4CmdsTest, networkOption4WithClientClasses)
/src/hooks/dhcp/cb_cmds/tests/option4_pool_cmds_unittest.cc
TEST_F(OptionPool4CmdsTest, poolOption4WithClientClasses)
/src/hooks/dhcp/cb_cmds/tests/option4_subnet_cmds_unittest.cc
TEST_F(OptionSubnet4CmdsTest, subnetOption4WithClientClasses)
/src/hooks/dhcp/cb_cmds/tests/option6_cmds_unittest.cc
Use makeOptionInfoElement() for set() respsonses
Thomas Markwalder [Thu, 10 Jul 2025 20:17:38 +0000 (16:17 -0400)]
[#3770] Clean up
/src/hooks/dhcp/pgsql/pgsql_cb_impl.cc
PgSqlConfigBackendImpl::addClientClassesBinding()
- use ClientClasses::toElement()
/src/lib/dhcpsrv/cfg_option.*
ClientClassesPtr OptionDescriptor::copyClientClasses()
- new convenience function
/src/lib/dhcpsrv/testutils/generic_cb_dhcp4_unittest.cc
Use new convenience function
Thomas Markwalder [Thu, 10 Jul 2025 18:55:23 +0000 (14:55 -0400)]
[#3770] Fix v6 UTs
src/lib/dhcpsrv/testutils/generic_cb_dhcp6_unittest.cc
Fix globalOptions6WithServerTagsTest
Thomas Markwalder [Thu, 10 Jul 2025 18:11:31 +0000 (14:11 -0400)]
[#3770] v4 global options work
Fixed fetch of global options added UT tests
/src/hooks/dhcp/mysql/mysql_cb_impl.cc
MySqlConfigBackendImpl::getOptions() - take client-classes into account
MySqlConfigBackendImpl::createInputClientClassesBinding() - use ClientClasses::toElement()
/src/hooks/dhcp/mysql/tests/mysql_cb_dhcp4_unittest.cc
TEST_F(MySqlConfigBackendDHCPv4Test, globalOption4WithClientClassesTest)
TEST_F(MySqlConfigBackendDHCPv4Test, getAllOptions4WithClientClassesTest)
- new tests
/src/hooks/dhcp/pgsql/pgsql_cb_impl.cc
PgSqlConfigBackendImpl::getOptions() - take client-classes into account
/src/hooks/dhcp/pgsql/tests/pgsql_cb_dhcp4_unittest.cc
TEST_F(PgSqlConfigBackendDHCPv4Test, globalOption4WithClientClassesTest)
TEST_F(PgSqlConfigBackendDHCPv4Test, getAllOptions4WithClientClassesTest)
- new tests
/src/lib/dhcpsrv/parsers/option_data_parser.cc
OptionDataParser::createOption() - use ClientClasses::fromElement()
/src/lib/dhcpsrv/testutils/generic_cb_dhcp4_unittest.*
GenericConfigBackendDHCPv4Test::TearDown() - skip schema destroy
if env variable KEA_UNIT_TEST_KEEP_SCHEMA is defined
GenericConfigBackendDHCPv4Test::makeClassTaggedOptions()
GenericConfigBackendDHCPv4Test::updateClassTaggedOptions()
GenericConfigBackendDHCPv4Test::globalOption4WithClientClassesTest()
GenericConfigBackendDHCPv4Test::getAllOptions4WithClientClassesTest()
- new tests
Thomas Markwalder [Mon, 7 Jul 2025 15:45:25 +0000 (11:45 -0400)]
[#3770] Finished MySql v4, Expanded v4 UTs
/src/hooks/dhcp/mysql/mysql_cb_dhcp4.*
/src/hooks/dhcp/mysql/mysql_cb_impl.cc
Added client classes to where clauses as needed
/src/hooks/dhcp/mysql/tests/mysql_cb_dhcp4_unittest.cc
TEST_F(MySqlConfigBackendDHCPv4Test, globalOption4WithClientClassesTest)
TEST_F(MySqlConfigBackendDHCPv4Test, sharedNetworkOption4WithClientClassesTest)
TEST_F(MySqlConfigBackendDHCPv4Test, subnetOption4WithClientClassesTest)
TEST_F(MySqlConfigBackendDHCPv4Test, poolOption4WithClientClassesTest) - new tests
/src/hooks/dhcp/pgsql/tests/pgsql_cb_dhcp4_unittest.cc
TEST_F(PgSqlConfigBackendDHCPv4Test, globalOption4WithClientClassesTest)
TEST_F(PgSqlConfigBackendDHCPv4Test, sharedNetworkOption4WithClientClassesTest)
TEST_F(PgSqlConfigBackendDHCPv4Test, subnetOption4WithClientClassesTest)
TEST_F(PgSqlConfigBackendDHCPv4Test, poolOption4WithClientClassesTest) - new tests
/src/lib/dhcpsrv/testutils/generic_cb_dhcp4_unittest.cc
New tests and functions
Thomas Markwalder [Tue, 1 Jul 2025 14:00:32 +0000 (10:00 -0400)]
[#3770] CfgOption and CB v4 use client-classes
v4 CfgOption and CB internals support client-classes
as part of key for updating and delete options.
CB parsing does NOT yet support it as argument.
/src/lib/dhcpsrv/cfg_option.*
Added composite key index type + client_classes to OptionContainer
OptionDescriptor::equals() - add comparision of client_classes_
CfgOption::replace() - Use new type + client_classes index
CfgOption::del(const std::string& option_space, const uint16_t option_code,
const ClientClasses& client_classes) - new function
CfgOption::get(const Selector& key, const uint16_t option_code,
ClientClasses& client_classes) - new function
CfgOption::del(const std::string& option_space, const uint16_t option_code,
const ClientClasses& client_classes);
/src/hooks/dhcp/mysql/mysql_cb_dhcp4.*
Added client-classes to createUpdate and delete option SQL statements and functions
/src/hooks/dhcp/mysql/mysql_cb_impl.*
MySqlConfigBackendImpl::createClientClassesForWhereClause() - new function
/src/hooks/dhcp/pgsql/pgsql_cb_dhcp4.*
Added client-classes to createUpdate and delete option SQL statements and functions
/src/hooks/dhcp/pgsql/pgsql_cb_impl.cc
PgSqlConfigBackendImpl::addClientClassesForWhereClause() - new function
/src/hooks/dhcp/pgsql/tests/pgsql_cb_dhcp4_unittest.cc
/src/hooks/dhcp/pgsql/tests/pgsql_cb_dhcp4_unittest.cc
TEST_F(PgSqlConfigBackendDHCPv4Test, subnetOption4WithClienClassesTest) - new test
/src/lib/dhcp/classify.h b/src/lib/dhcp/classify.h
Added typedef boost::shared_ptr<ClientClasses> ClientClassesPtr;
/src/lib/dhcpsrv/config_backend_dhcp4.h
/src/lib/dhcpsrv/config_backend_pool_dhcp4.*
Udpated with client_classes parameter where needed
/src/lib/dhcpsrv/tests/cfg_option_unittest.cc
TEST_F(CfgOptionTest, optionsWithClientClasses)
TEST_F(CfgOptionTest, replaceWithClientClasses)
TEST_F(CfgOptionTest, deleteWithClientClasses) - new tests
/src/lib/dhcpsrv/testutils/generic_cb_dhcp4_unittest.*
GenericConfigBackendDHCPv4Test::subnetOption4WithClienClassesTest() - new test
/src/lib/dhcpsrv/testutils/test_config_backend_dhcp4.cc
Update functions as needed
Andrei Pavel [Tue, 15 Jul 2025 08:54:56 +0000 (11:54 +0300)]
[kea-packaging#48] Hammer: Do not reset-failed kea-ctrl-agent because it no longer starts after installation so it no longer fails either
Francis Dupont [Thu, 10 Jul 2025 15:04:19 +0000 (17:04 +0200)]
[#4005] Added doc and ChangeLog entry
Razvan Becheriu [Thu, 10 Jul 2025 07:39:28 +0000 (10:39 +0300)]
[#3927] fixed TLS unit tests
Francis Dupont [Wed, 9 Jul 2025 15:52:42 +0000 (17:52 +0200)]
[#3927] Doc and chmod fixes
Razvan Becheriu [Wed, 9 Jul 2025 15:19:33 +0000 (18:19 +0300)]
[#3927] updated documentation
Razvan Becheriu [Wed, 9 Jul 2025 15:09:37 +0000 (18:09 +0300)]
[#3927] remove ssl-mode for mysql
Francis Dupont [Wed, 9 Jul 2025 13:57:32 +0000 (15:57 +0200)]
[#3927] Updated pgsql ssslmode code
Francis Dupont [Wed, 9 Jul 2025 13:52:51 +0000 (15:52 +0200)]
[#3927] Updated the default to library one 2
Francis Dupont [Wed, 9 Jul 2025 13:35:13 +0000 (15:35 +0200)]
[#3927] Updated the default to library one
Francis Dupont [Wed, 9 Jul 2025 12:51:09 +0000 (14:51 +0200)]
[#3927] Indented SSL_MODE
Razvan Becheriu [Wed, 9 Jul 2025 12:14:09 +0000 (15:14 +0300)]
[#3927] remove key-password
Razvan Becheriu [Tue, 8 Jul 2025 19:28:57 +0000 (22:28 +0300)]
[#3927] add ssl-mode parameter
Razvan Becheriu [Tue, 8 Jul 2025 11:03:11 +0000 (14:03 +0300)]
[#3927] fixed unit tests
Razvan Becheriu [Mon, 30 Jun 2025 19:22:48 +0000 (22:22 +0300)]
[#3927] add TLS parameters to pgsql connection
William Leuschner [Tue, 24 Jun 2025 19:26:22 +0000 (15:26 -0400)]
[#3978] Correct reference to kea-lfc in 5.3.1
Andrei Pavel [Tue, 1 Jul 2025 07:10:27 +0000 (10:10 +0300)]
[#3848] Adapt packaging in Hammer to the -X changes
Andrei Pavel [Tue, 1 Jul 2025 12:12:38 +0000 (15:12 +0300)]
[#3848] Fix fuzzers after security enforcement
Thomas Markwalder [Tue, 1 Jul 2025 11:37:40 +0000 (07:37 -0400)]
[#3848] Addressed review comments
modified: src/bin/keactrl/kea-ctrl-agent.conf.pre
Thomas Markwalder [Mon, 30 Jun 2025 13:58:33 +0000 (09:58 -0400)]
[#3848] Remove user from default agent file
modified: src/bin/keactrl/kea-ctrl-agent.conf.pre
Suzanne Goldlust [Mon, 30 Jun 2025 19:11:39 +0000 (15:11 -0400)]
[#3980] Removed outdated reference to SF portal
Thomas Markwalder [Mon, 23 Jun 2025 15:39:37 +0000 (11:39 -0400)]
[#3848] Fix duplicated log ids
modified: src/bin/dhcp4/dhcp4_messages.mes
modified: src/bin/dhcp6/dhcp6_messages.mes
modified: src/lib/d2srv/d2_messages.mes
Thomas Markwalder [Wed, 18 Jun 2025 16:04:24 +0000 (12:04 -0400)]
[#3848] Fix element position reporting
modified: src/lib/cc/data.cc
altered data::copy() to also copy the source element's position
modified: src/bin/dhcp4/json_config_parser.cc
modified: src/hooks/dhcp/lease_query/tests/lease_query_impl4_unittest.cc
modified: src/lib/http/tests/basic_auth_config_unittests.cc
Thomas Markwalder [Wed, 18 Jun 2025 13:52:02 +0000 (09:52 -0400)]
[#3848] Change risk to policy
modified: doc/sphinx/arm/agent.rst
modified: doc/sphinx/arm/ddns.rst
modified: doc/sphinx/arm/dhcp4-srv.rst
modified: doc/sphinx/arm/dhcp6-srv.rst
modified: doc/sphinx/arm/security.rst
Thomas Markwalder [Wed, 18 Jun 2025 13:26:00 +0000 (09:26 -0400)]
[#3848] Replace WARN with WARNING some more
Thomas Markwalder [Wed, 18 Jun 2025 11:56:25 +0000 (07:56 -0400)]
[#3848] Make message IDs consistent
Marcin Siodelski [Wed, 18 Jun 2025 09:13:23 +0000 (11:13 +0200)]
[#3848] Fixed whitespace
Thomas Markwalder [Tue, 17 Jun 2025 13:39:28 +0000 (09:39 -0400)]
[#3848] Addressed review comments
Fixed minor nits
modified: doc/sphinx/arm/agent.rst
modified: doc/sphinx/arm/ddns.rst
modified: doc/sphinx/arm/dhcp4-srv.rst
modified: doc/sphinx/arm/dhcp6-srv.rst
modified: doc/sphinx/arm/security.rst
modified: src/bin/dhcp4/main.cc
modified: src/bin/dhcp6/main.cc
modified: src/hooks/dhcp/host_cache/tests/command_unittests.cc
modified: src/hooks/dhcp/lease_cmds/lease_cmds.cc
modified: src/hooks/dhcp/lease_cmds/lease_cmds_messages.cc
modified: src/hooks/dhcp/lease_cmds/lease_cmds_messages.h
modified: src/hooks/dhcp/lease_cmds/lease_cmds_messages.mes
modified: src/hooks/dhcp/lease_cmds/libloadtests/lease_cmds4_unittest.cc
modified: src/lib/d2srv/d2_config.cc
modified: src/lib/hooks/tests/hooks_manager_unittest.cc
modified: src/lib/http/tests/basic_auth_config_unittests.cc
modified: src/lib/process/d_controller.cc
modified: src/lib/util/filesystem.cc
modified: src/lib/util/filesystem.h
Thomas Markwalder [Thu, 12 Jun 2025 15:36:37 +0000 (11:36 -0400)]
[#3848] Updated the ARM
new file: changelog_unreleased/3848-security-policy-security-strict-relaxed
modified: doc/sphinx/arm/agent.rst
modified: doc/sphinx/arm/ddns.rst
modified: doc/sphinx/arm/dhcp4-srv.rst
modified: doc/sphinx/arm/dhcp6-srv.rst
modified: doc/sphinx/arm/security.rst
Thomas Markwalder [Wed, 11 Jun 2025 19:47:07 +0000 (15:47 -0400)]
[#3848] Warn if running as root
Servers now all warn if they are running
as root.
Thomas Markwalder [Wed, 11 Jun 2025 18:30:15 +0000 (14:30 -0400)]
[#3848] Detect authentication risks
Throw or Warn if API end points do not use some form
of authentication
Throw or Warn if 'user', 'password' - API end points
Throw or Warn if 'secret' is used - TSIG
Disable/enable security for UTs as needed
modified: src/bin/agent/tests/ca_cfg_mgr_unittests.cc
modified: src/bin/agent/tests/ca_response_creator_unittests.cc
modified: src/bin/agent/tests/get_config_unittest.cc
modified: src/bin/d2/tests/d2_cfg_mgr_unittests.cc
modified: src/bin/d2/tests/d2_command_unittest.cc
modified: src/bin/d2/tests/d2_controller_unittests.cc
modified: src/bin/d2/tests/d2_http_command_unittest.cc
modified: src/bin/d2/tests/d2_process_unittests.cc
modified: src/bin/d2/tests/d2_simple_parser_unittest.cc
modified: src/bin/d2/tests/get_config_unittest.cc
modified: src/bin/dhcp4/tests/config_parser_unittest.cc
modified: src/bin/dhcp4/tests/dhcp4_srv_unittest.cc
modified: src/bin/dhcp4/tests/dhcp4_test_utils.cc
modified: src/bin/dhcp4/tests/get_config_unittest.cc
modified: src/bin/dhcp4/tests/get_config_unittest.cc.skel
modified: src/bin/dhcp4/tests/http_control_socket_unittest.cc
modified: src/bin/dhcp6/tests/config_parser_unittest.cc
modified: src/bin/dhcp6/tests/dhcp6_srv_unittest.cc
modified: src/bin/dhcp6/tests/dhcp6_test_utils.cc
modified: src/bin/dhcp6/tests/get_config_unittest.cc
modified: src/bin/dhcp6/tests/get_config_unittest.cc.skel
modified: src/bin/dhcp6/tests/http_control_socket_unittest.cc
modified: src/lib/config/tests/http_command_config_unittests.cc
modified: src/lib/d2srv/d2_config.cc
modified: src/lib/d2srv/d2_messages.cc
modified: src/lib/d2srv/d2_messages.h
modified: src/lib/d2srv/d2_messages.mes
modified: src/lib/http/auth_messages.cc
modified: src/lib/http/auth_messages.h
modified: src/lib/http/auth_messages.mes
modified: src/lib/http/basic_auth_config.cc
modified: src/lib/http/tests/basic_auth_config_unittests.cc
modified: src/lib/testutils/dhcp_test_lib.sh.in
Thomas Markwalder [Tue, 10 Jun 2025 14:52:30 +0000 (10:52 -0400)]
[#3848] Throw or Warn if API sockets are unsecured
/src/lib/config/config_messages.*
COMMAND_HTTP_SOCKET_SECURITY_WARN - new message
/src/lib/config/http_command_config.*
HttpCommandConfig::HttpCommandConfig() - throw or warn when
socket is unsecured
HttpCommandConfig::checkTlsSetup() - return true if valid TLS
is configured
/src/lib/config/tests/http_command_config_unittests.cc
/src/lib/config/tests/http_command_mgr_unittests.cc
/src/lib/config/tests/http_command_response_creator_factory_unittests.cc
/src/lib/config/tests/http_command_response_creator_unittests.cc
Udpated tests
Thomas Markwalder [Mon, 9 Jun 2025 18:09:08 +0000 (14:09 -0400)]
[#3848] Warn on socket permissions
Warn if control socket path is valid but
socket permissions are wrong and security is
disabled.
modified: src/lib/config/config_messages.cc
modified: src/lib/config/config_messages.h
modified: src/lib/config/config_messages.mes
modified: src/lib/config/tests/unix_command_config_unittests.cc
modified: src/lib/config/unix_command_config.cc
Thomas Markwalder [Mon, 9 Jun 2025 17:08:08 +0000 (13:08 -0400)]
[#3848] Warn on invalid paths when security disabled
Warn but still use invalid paths when security is
disabled.
Marcin Godzina [Wed, 25 Jun 2025 13:34:31 +0000 (15:34 +0200)]
[#3967] release checklist update
Marcin Godzina [Wed, 25 Jun 2025 13:05:27 +0000 (15:05 +0200)]
[#3979] bump up kea version in meson.build
Marcin Godzina [Fri, 20 Jun 2025 15:30:19 +0000 (17:30 +0200)]
[#3973] release changes
Razvan Becheriu [Fri, 20 Jun 2025 14:23:00 +0000 (17:23 +0300)]
[#3907] added ChangeLog entry
Razvan Becheriu [Fri, 20 Jun 2025 13:44:36 +0000 (16:44 +0300)]
[#3907] use strict format for clients in yang
Andrei Pavel [Fri, 20 Jun 2025 13:06:31 +0000 (16:06 +0300)]
[#3907] NETCONF: Turn authentication.clients into a string just like hooks-libraries.parameters
Andrei Pavel [Fri, 20 Jun 2025 12:36:15 +0000 (15:36 +0300)]
[#3907] Progressed some more with YANG modules
Andrei Pavel [Fri, 20 Jun 2025 11:57:19 +0000 (14:57 +0300)]
[#3907] Progressed some more with YANG modules
Razvan Becheriu [Fri, 20 Jun 2025 10:32:03 +0000 (13:32 +0300)]
[#3907] fixed some UTs
Razvan Becheriu [Fri, 20 Jun 2025 10:18:40 +0000 (13:18 +0300)]
[#3907] clean up modules
Razvan Becheriu [Fri, 20 Jun 2025 09:56:18 +0000 (12:56 +0300)]
[#3907] updated yang modules
Razvan Becheriu [Fri, 20 Jun 2025 09:45:05 +0000 (12:45 +0300)]
[#3907] use tls for control-socket
Andrei Pavel [Fri, 20 Jun 2025 09:44:28 +0000 (12:44 +0300)]
[#3907] Get rid of skips in yang. Skip was always true
Razvan Becheriu [Fri, 20 Jun 2025 09:26:21 +0000 (12:26 +0300)]
[#3907] fixed http-header yang parsing
Andrei Pavel [Fri, 20 Jun 2025 09:14:55 +0000 (12:14 +0300)]
[#3907] Add TranslatorControlSocket::getControlSocketHttpHeaders
Andrei Pavel [Fri, 20 Jun 2025 09:06:51 +0000 (12:06 +0300)]
[#3907] Update control sockets in YANG modules
Andrei Pavel [Fri, 20 Jun 2025 09:07:08 +0000 (12:07 +0300)]
[#3907] Update copyright dates
Andrei Pavel [Fri, 20 Jun 2025 08:20:54 +0000 (11:20 +0300)]
[#3907] Fix some paths about reinstall.sh
Andrei Pavel [Fri, 20 Jun 2025 08:02:36 +0000 (11:02 +0300)]
[#3907] Fix check-hashes.sh
Razvan Becheriu [Wed, 18 Jun 2025 19:16:23 +0000 (22:16 +0300)]
[#3907] updated control-socket in yang modules
Razvan Becheriu [Tue, 17 Jun 2025 10:22:11 +0000 (13:22 +0300)]
[#3907] updated yang modules
Wlodek Wencel [Fri, 20 Jun 2025 11:45:08 +0000 (13:45 +0200)]
[#3968] lib version bump up for 3.0.0
Tomek Mrugalski [Fri, 20 Jun 2025 11:07:06 +0000 (13:07 +0200)]
[#3966] Added note about LTS
Marcin Godzina [Fri, 20 Jun 2025 10:30:55 +0000 (10:30 +0000)]
[#3966] security.md update
Andrei Pavel [Fri, 20 Jun 2025 11:19:54 +0000 (14:19 +0300)]
[#3919] Remove leftover incomplete sentence in bison.dox