mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-10-14 02:22:03 +08:00
listen-file -> listen-clear-file
This commit is contained in:
@@ -4,7 +4,7 @@
|
||||
by sskaje).
|
||||
- fixed an infinite loop when asking for group if the default group
|
||||
is selected.
|
||||
- Added the listen-file configuration option. That allows obtaining
|
||||
- Added the listen-clear-file configuration option. That allows obtaining
|
||||
plaintext HTTP sessions through a unix domain socket. That is useful
|
||||
when combined with a forwarder HTTPS server like nginx, nxweb or haproxy.
|
||||
- Added the certificate[optional] auth configuration option. That option
|
||||
|
||||
+1
-1
@@ -51,7 +51,7 @@ udp-port = 443
|
||||
|
||||
# Accept connections using a socket file. The connections are
|
||||
# forwarded without SSL/TLS.
|
||||
listen-file = /var/run/ocserv-conn.socket
|
||||
listen-clear-file = /var/run/ocserv-conn.socket
|
||||
|
||||
# Keepalive in seconds
|
||||
keepalive = 32400
|
||||
|
||||
+3
-3
@@ -82,7 +82,7 @@ static struct cfg_options available_options[] = {
|
||||
{ .name = "disconnect-script", .type = OPTION_STRING, .mandatory = 0 },
|
||||
{ .name = "pid-file", .type = OPTION_STRING, .mandatory = 0 },
|
||||
{ .name = "socket-file", .type = OPTION_STRING, .mandatory = 1 },
|
||||
{ .name = "listen-file", .type = OPTION_STRING, .mandatory = 0 },
|
||||
{ .name = "listen-clear-file", .type = OPTION_STRING, .mandatory = 0 },
|
||||
{ .name = "occtl-socket-file", .type = OPTION_STRING, .mandatory = 0 },
|
||||
{ .name = "banner", .type = OPTION_STRING, .mandatory = 0 },
|
||||
{ .name = "use-seccomp", .type = OPTION_BOOLEAN, .mandatory = 0 },
|
||||
@@ -439,9 +439,9 @@ unsigned force_cert_auth;
|
||||
if (reload == 0 && pid_file[0] == 0)
|
||||
READ_STATIC_STRING("pid-file", pid_file);
|
||||
|
||||
READ_STRING("listen-file", config->unix_conn_file);
|
||||
READ_STRING("listen-clear-file", config->unix_conn_file);
|
||||
if (config->unix_conn_file != NULL && (config->auth_types & AUTH_TYPE_CERTIFICATE)) {
|
||||
fprintf(stderr, "The option 'listen-file' cannot be combined with 'auth=certificate'\n");
|
||||
fprintf(stderr, "The option 'listen-clear-file' cannot be combined with 'auth=certificate'\n");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
|
||||
+1
-1
@@ -134,7 +134,7 @@ udp-port = 3333
|
||||
# connections (i.e., without SSL/TLS unlike its TCP counterpart),
|
||||
# and uses it as the primary channel. That option cannot be
|
||||
# combined with certificate authentication.
|
||||
#listen-file = /var/run/ocserv-conn.socket
|
||||
#listen-clear-file = /var/run/ocserv-conn.socket
|
||||
|
||||
# Keepalive in seconds
|
||||
keepalive = 32400
|
||||
|
||||
@@ -45,7 +45,7 @@ udp-port = 6551
|
||||
|
||||
# Accept connections using a socket file. The connections are
|
||||
# forwarded without SSL/TLS.
|
||||
listen-file = /var/run/ocserv-conn.socket
|
||||
listen-clear-file = /var/run/ocserv-conn.socket
|
||||
|
||||
# Keepalive in seconds
|
||||
keepalive = 32400
|
||||
|
||||
Reference in New Issue
Block a user