6ec2d564dd
GT: Implemented format conversion function into rsgtutil
...
Using a new command switch -c, old V10 signature files can be
converted into V11.
closes https://github.com/rsyslog/rsyslog/issues/364
2015-06-30 07:33:16 -07:00
c6b96455cf
KSI/GT: Patch merged fixing problems when changing hash algorithm
...
Changing the hash algorithm in the middle of the log is possible now.
2015-06-25 07:54:24 -07:00
541c12f9ef
KSI/GT: Added TLV file format changes and block signature split
...
This format change affects the guardtime and ksi signature provider.
closes https://github.com/rsyslog/rsyslog/issues/362
2015-06-25 07:30:02 -07:00
d26632b258
KSI: Merged KSI Verify function into rsgtutil
2015-06-18 05:39:05 -07:00
6f4e8870cb
KSI: Splitted librsgt.h headerfile into librsgt.h and librsgt-common.h
...
Changed naming of all GT / KSI related functions.
2015-06-18 01:47:18 -07:00
Henri Lakk
8a5bfe4846
bugfix rsgtutil: deletion of logs at end of file was not reported
...
The verification function in rsgtutil tool did not report deletion of
whole signed blocks of lines from the end of the log file.
2014-10-07 11:55:36 +02:00
Ahto Truu
97f096e351
More careful TLV encoding/decoding
2013-09-02 14:55:01 +02:00
Rainer Gerhards
3a03b9b921
logsig: needed to refactor parts of the reader as well
...
the previous refactoring broke that code
2013-03-26 17:27:10 +01:00
Rainer Gerhards
113c5e20ca
logsig: refactor code to not reley on undocumented libgt parts
2013-03-26 17:14:41 +01:00
Rainer Gerhards
7e0ab0a1fb
logsig: handle error cases
2013-03-26 15:33:54 +01:00
Rainer Gerhards
c896a6ba74
rsgtsig: finish implementation of 'extend' mode
...
This is tested as far as possible. However, the actual extend
case can only be tested in about three weeks from now when the
next publication is out. I have done module-testing with a
mockup extend call, so chances are great the final test will
be passed.
2013-03-25 15:56:33 +01:00
Rainer Gerhards
199630a5ef
rsgtutil/milestone: basic 'extend' mode implementation
...
... done up until the point where I need to wait for the
timestamps to become extendible. So doing a milestone commit
to make sure the work is inside the archive. Actual writing of the
extended timestamp is missing.
2013-03-23 18:39:03 +01:00
Rainer Gerhards
6bc94b09b2
logsig: refactor 'dump' mode in rsgtutil
...
The way tlvrecords are processed is changed in order to
provide better extensibility for further work.
2013-03-23 12:24:23 +01:00
Rainer Gerhards
785e0c3c8b
logsig: complete initial version of verifier
2013-03-19 15:26:21 +01:00
Rainer Gerhards
b09d37063f
logsig: milestone/verfier: block timestamp verification almost complete
...
unfortunately, there seems to be a problem with the GuardTime API, so
that I need their support before being able to carry on. Once I
receive it, it should be fairly quick to complete the function. I am
commiting this work as I do not know how long it will take to receive
an answer.
2013-03-17 15:46:24 +01:00
Rainer Gerhards
d2467c38d4
logsig: milestone/verfier: record hashes are verified
2013-03-17 13:06:02 +01:00
Rainer Gerhards
44b4922825
rsgtutil: add --show-sigblock-params parameter
2013-03-14 12:32:03 +01:00
Rainer Gerhards
d028915752
logsig: support dynafiles
2013-03-11 12:35:15 +01:00
Rainer Gerhards
212d4e4fe6
logsig: add config parameters (for omfile)
2013-03-07 19:00:51 +01:00
Rainer Gerhards
85dd75a54c
logsig: preserve necessary state during file closed time
2013-03-07 17:19:45 +01:00
Rainer Gerhards
4786aa9e9c
logsig: add support to read signature files
...
... still incomplete ...
2013-03-07 15:45:13 +01:00
Rainer Gerhards
497d1e0963
logsig: write block-sig record
...
also some general improvements, e.g. random data is now gathered
correctly
2013-03-06 15:44:11 +01:00
