trim excess whitespace

fix spelling

Configurable value for time drift between client/server for authentication request issue1065 (#1070)

* Issue 1065

* feat: Allow to configure a custom value for time drift between client/server fo

Configurable value for time drift between client/server for authentication request issue1065 (#1070)

* Issue 1065

* feat: Allow to configure a custom value for time drift between client/server for authentication

The use case is to support scenarios where it's not possible to enforce sync between client and server times.

* enh: drift redefined with skew

Co-authored-by: Francesco Marino <[email protected]>

show more ...

fix[auth]: Ensure 64-bit time_t works on 32-bit systems (#1056)

On a 32-bit PowerPC Linux system using musl libc (with 64-bit time_t),
the t_auth test fails because `long` is not the same type as `

fix[auth]: Ensure 64-bit time_t works on 32-bit systems (#1056)

On a 32-bit PowerPC Linux system using musl libc (with 64-bit time_t),
the t_auth test fails because `long` is not the same type as `time_t`.

This patch uses an int64_t temporary value, which can be truncated to
32-bit if necessary.

show more ...

fix: Plug various minor memory leaks (#1033)

* fix: Fix memory leaks related to --logfile.
* fix: Fix memory leaks related to loading RSA keys.
* fix: Fix some memory leaks in failure cases in the

fix: Plug various minor memory leaks (#1033)

* fix: Fix memory leaks related to --logfile.
* fix: Fix memory leaks related to loading RSA keys.
* fix: Fix some memory leaks in failure cases in the iperf3 client.

Fixes #1023.

show more ...

chore: Change applicable function arguments from 'char *' to 'const char *' (#1006)

Fixes #946. Should not present any functional changes.

fix: Fix stupid memory leak. (#1005)

Pointed out by @oleh-yudin-ring. Follow-up to #996.

fix(auth): Fix a potential buffer overflow in iperf3 client.
This condition was only possible when configuration authentication
via the libiperf API.

While here, also fix a few other sundry issues:

fix(auth): Fix a potential buffer overflow in iperf3 client.
This condition was only possible when configuration authentication
via the libiperf API.

While here, also fix a few other sundry issues:

* Remove arbitrary length limits on username and password.

* Improved error handling.

* Updated error messages for readability.

* Fixed minor typo in some identifiers.

Fixes #996.

show more ...

Fix memory leaks for RSA key setters (#949)

Originally discussed in #940.

enh: Add server authentication API functions (#911)

fix: Fix off-by-one memory overwrite crash and memory leaks (#887)

The base64 decode will crash on musl c-library builds for OpenWRT
due to the write of the '\0' past the end of the allocated buffe

fix: Fix off-by-one memory overwrite crash and memory leaks (#887)

The base64 decode will crash on musl c-library builds for OpenWRT
due to the write of the '\0' past the end of the allocated buffer.
Fix other various memory leaks on the authentication code paths.
Fix some memory-free library calls into OpenSSL.

Based heavily on PR #881 originally submitted by @acmay,
with comments from @ralcini.

show more ...

Add authentication functions to libiperf (#713)

Fixes #712. A subsequent commit will add some information to the libiperf manual page.

Close credentials file when we're done reading it. (#704)

Fixes #701.

Fix comparison when checking for time skew when using authentication. (#674)

Fixes #673.

Submitted by @FuzzyStatic, reviewed by @ralcini.

Fix a compiler warning on FreeBSD related to getline(3).

Add required RSA header for OpenSSL (#622)

Signed-off-by: Philip Prindeville <[email protected]>

fix invalid sizeof on pointer instead of type (#556)

This is only a coherency fix since sizeof(char*) >> sizeof(char)
There should be no functional nor stability impact whatsoever

Service Authentication (#517)

Add an optional mode that requires clients to authenticate with the server.

In this mode, clients need to provide a username and a password, which are checked agains

Service Authentication (#517)

Add an optional mode that requires clients to authenticate with the server.

In this mode, clients need to provide a username and a password, which are checked against a password file on the server. The authentication credentials are protected by an RSA public keypair...the encrypted credentials are sent along with the test parameters.

Operationally the use of this feature places the following additional requirements on the build and installation of iperf3:

o The presence of the OpenSSL headers and libraries to build iperf3, and the libraries available on the client and server at runtime.

o Generation of an RSA public keypair; the private part is used by the server and the public part must be distributed to the clients.

o Username/password pairs for all authorized users, to be stored in a file on the server.

o Loose time synchronization between the server and clients (to within approximately 30 seconds).

o Appropriate command-line flags given on the client and server.

Note that iperf3 can be built and run as before, without fulfilling any of these requirements.

Partial documentation for this feature is included in this commit. It is anticipated that additional documentation text and editing will follow this merge.

Submitted by @ralcini. First suggested by @codyhanson in pull request #242.

show more ...