Nikos Mavrogiannopoulos
8ffca1fcd9
eliminate small leak
2014-02-15 09:57:52 +01:00
Nikos Mavrogiannopoulos
828814862b
Added stress test
2014-02-15 09:53:57 +01:00
Nikos Mavrogiannopoulos
dd3bd9dcdd
Do not enforce safe negotiation on the main TLS channel.
...
This is only set when in CISCO compatibility mode, as CISCO clients
come from the past.
2014-02-14 21:35:41 +01:00
Nikos Mavrogiannopoulos
452ff7973a
simplified type usage
2014-02-14 12:47:22 +01:00
Nikos Mavrogiannopoulos
ea39d512dc
switch to strtok_r() and other small fixes.
2014-02-14 12:43:54 +01:00
Nikos Mavrogiannopoulos
af6714605b
when a user is rejected due to multiple connections set an appropriate status.
2014-02-14 10:37:35 +01:00
Nikos Mavrogiannopoulos
f8f30bffa4
set a reasonable default rekey time
2014-02-12 11:07:14 +01:00
Nikos Mavrogiannopoulos
6d8841cae7
sample.conf update
2014-02-12 11:05:14 +01:00
Nikos Mavrogiannopoulos
c8a9ab3191
removed exclamation mark
2014-02-12 11:05:11 +01:00
Nikos Mavrogiannopoulos
22ffb526dd
DTLS rekey time and method was aligned with CSTP.
2014-02-12 10:48:10 +01:00
Nikos Mavrogiannopoulos
001fd57c71
Allow rehandshakes on the DTLS channel.
2014-02-11 16:18:08 +01:00
Nikos Mavrogiannopoulos
8f559e89e5
doc update
2014-02-11 15:48:55 +01:00
Nikos Mavrogiannopoulos
c92925e727
Rekey time is now configurable and can be disabled.
2014-02-11 15:47:20 +01:00
Nikos Mavrogiannopoulos
fa4b24ddac
removed unused label
2014-02-11 15:30:25 +01:00
Nikos Mavrogiannopoulos
266b06f7d2
when the tcp channel is terminated attempt to close the DTLS channel as well.
2014-02-10 09:45:12 +01:00
Nikos Mavrogiannopoulos
295a87b8ab
bumped version
2014-02-05 19:27:44 +01:00
Nikos Mavrogiannopoulos
638228e284
Use brackets in DEL macro
2014-02-05 09:56:06 +01:00
Nikos Mavrogiannopoulos
eb5f78c748
seccomp will make the forbidden system calls to return an error.
2014-02-02 09:45:34 +01:00
Nikos Mavrogiannopoulos
cfc10eec81
reduced the number of allowed ioctl() to the ones used.
2014-02-02 09:44:09 +01:00
Nikos Mavrogiannopoulos
5bf791bdfa
doc update
2014-02-01 19:03:33 +01:00
Nikos Mavrogiannopoulos
91ceefb1f3
Added the split-dns config option.
2014-02-01 18:59:50 +01:00
Nikos Mavrogiannopoulos
311d5ddd20
Added configuration option to send custom headers to client.
2014-02-01 18:55:27 +01:00
Nikos Mavrogiannopoulos
0ec67882c0
Added support for multiple DNS and NBNS servers.
...
This patch also combines ipv4-dns and ipv6-dns options
that are now handled as aliases to dns.
A side-effect of this patch is that the local keyword is no
longer supported.
2014-02-01 14:50:52 +01:00
Nikos Mavrogiannopoulos
5c49678568
doc update
2014-02-01 10:27:49 +01:00
Nikos Mavrogiannopoulos
51c0e1bee1
Added untested code to set an IPv6 on FreeBSD.
2014-02-01 10:25:41 +01:00
Nikos Mavrogiannopoulos
97c2a4428f
separated linux-specific code to allow easier portability fixes.
2014-02-01 09:57:18 +01:00
Nikos Mavrogiannopoulos
16f731bd2e
on systems without IPv6 support remove the IPv6 lease.
2014-02-01 09:49:10 +01:00
Nikos Mavrogiannopoulos
ea02f38a04
if the loading of default config in the new location fails, try the old default file.
2014-02-01 09:24:52 +01:00
Nikos Mavrogiannopoulos
a22b846ece
use linux/types.h for __u32
2014-02-01 09:12:41 +01:00
Nikos Mavrogiannopoulos
28e5d62f3f
The worker process receives the client's IPs from the main process.
...
That eliminates the need to read the IP address from the tun device
(which can be quite tricky to implement in a clean portable way).
2014-01-31 20:53:45 +01:00
Nikos Mavrogiannopoulos
f715cf08f0
doc update
2014-01-31 13:28:58 +01:00
Nikos Mavrogiannopoulos
798eb38eb0
remove socket and pid files prior to waiting for kill.
2014-01-31 13:28:11 +01:00
Nikos Mavrogiannopoulos
a51de1cb0c
Get real-time netlink information rather than using the cache.
2014-01-30 22:15:42 +01:00
Nikos Mavrogiannopoulos
4ce8365873
updated netlink handling.
2014-01-30 20:51:00 +01:00
Nikos Mavrogiannopoulos
ab7a5623ad
better error messages
2014-01-30 20:03:13 +01:00
Nikos Mavrogiannopoulos
4dfa0e560b
doc update
2014-01-30 19:25:38 +01:00
Nikos Mavrogiannopoulos
313f1b67fd
When not reading from a tty use getline().
2014-01-30 19:22:02 +01:00
Nikos Mavrogiannopoulos
aeb0b40221
use etc/ocserv as config directory
2014-01-30 19:13:23 +01:00
Nikos Mavrogiannopoulos
2254ba554b
Set a default password file if one is not specified in ocpasswd.
2014-01-30 19:12:02 +01:00
Nikos Mavrogiannopoulos
44cd152f02
doc update
2014-01-30 14:05:18 +01:00
Nikos Mavrogiannopoulos
6f25bf1889
ensure that our MTU discovery will not try an MTU smaller than the minimum.
2014-01-30 14:01:54 +01:00
Nikos Mavrogiannopoulos
4a1f5a1162
doc update
2014-01-30 13:56:45 +01:00
Nikos Mavrogiannopoulos
32d608a169
doc update
2014-01-30 13:56:25 +01:00
Nikos Mavrogiannopoulos
524e90351f
Take into account peer's MTU values after considering the overhead.
2014-01-30 10:36:01 +01:00
Nikos Mavrogiannopoulos
7129b7b316
change default ipv6 to link-local
2014-01-30 09:43:18 +01:00
Nikos Mavrogiannopoulos
f6244539b9
set IFF_RUNNING and fail if tun interfaces cannot be brought up.
2014-01-30 04:54:26 +01:00
Nikos Mavrogiannopoulos
326bf7143a
'guess' DST address in IPv6 links
2014-01-30 04:53:00 +01:00
Nikos Mavrogiannopoulos
83b2d75a24
Corrected auto-detection of the address.
2014-01-30 03:58:56 +01:00
Nikos Mavrogiannopoulos
b80ac284a2
simpler handling of IPv6 assignment
2014-01-30 03:41:25 +01:00
Nikos Mavrogiannopoulos
2409fd3abe
Revert "ping a single host in IPv6"
...
This reverts commit b7a4a098a3
2014-01-30 03:37:31 +01:00
