16 Commits

Author SHA1 Message Date
Rainer Gerhards
cbdc147394 file crypto provider: refactor interface
This permits an atomic check for error conditions and helps avoid
inconsistency between check and use of file name, which can also
pose security issues (not in the previous code, as the check was only
used for error-reporting).

Detected by Coverty scan, CID 185400
2017-10-28 11:25:08 +02:00
Rainer Gerhards
51c03c66e0 make inline functions C99-compliant
As it seems, different C compilers have different rules/interpretations
on inline functions. The current code base did not properly obey all C99
rules. We fix this by converting some functions to macros and others to
include the necessary C99 plumbing. We also remove some inline attributes
for functions where this seems to be to agressive (aka "function to big").

This fixes build problems in some environments and is a general code
cleanup measure.
2016-09-05 16:47:14 +02:00
Rainer Gerhards
db5b81ae6b bugfix: build system: libgcrypt.h needed even if libgrcypt was disabled
Thanks to Jonny Törnbom for reporting this problem
2013-09-12 09:31:38 +02:00
Rainer Gerhards
afe14ce2f6 complete handle multiple blocks in encrypted queue files 2013-05-16 09:49:22 +02:00
Rainer Gerhards
9205c5541b clean up crypto provider state files on queue file rollover 2013-05-15 12:59:11 +02:00
Rainer Gerhards
3382800afc do not try to write to read-open encryption state file 2013-05-15 12:19:18 +02:00
Rainer Gerhards
bad876b265 clean up crypto provider state files on queue file close 2013-05-15 12:08:54 +02:00
Rainer Gerhards
0d000a8b10 basic queue file encryption 2013-05-13 08:04:13 +02:00
Rainer Gerhards
8557250bce fix invalid include dependency in encryption support 2013-04-24 11:42:47 +02:00
Rainer Gerhards
1244a50d85 platform compatibility enhancement: solve compile issue with libgcrypt
do not use GCRY_CIPHER_MODE_AESWRAP where not available
2013-04-24 09:26:07 +02:00
Rainer Gerhards
7a62ef673f logenc: support keyfiles in rscryutil 2013-04-12 12:52:59 +02:00
Rainer Gerhards
815bae1f35 logenc: add parameters to select cipher algo and mode 2013-04-12 11:22:04 +02:00
Rainer Gerhards
2679dd4af1 logenc: rscryutil can now decrypt multi-block logfiles 2013-04-12 08:49:04 +02:00
Rainer Gerhards
5f72832b3d logenc: milestone: rsyslog writes .encinfo side files 2013-04-11 14:49:06 +02:00
Rainer Gerhards
5242a0b4a3 log encryption: add rscrytool to decrypt log files
also add test parameter to be able to set key
2013-04-05 18:52:52 +02:00
Rainer Gerhards
0cee769fcd log encryption: initial PoC implementation
rough baseline, needs to be extended for actual use.
2013-04-05 12:08:49 +02:00