Nikos Mavrogiannopoulos
2f5141b00f
Added directives to allow bandwidth limitation.
2013-11-03 17:06:02 +01:00
Nikos Mavrogiannopoulos
05a8f946c4
doc update
2013-11-02 16:25:23 +01:00
Nikos Mavrogiannopoulos
245e7e0b44
doc update
2013-10-30 09:30:18 +01:00
Nikos Mavrogiannopoulos
7ac0cfbb14
doc update
2013-10-29 22:05:11 +01:00
Nikos Mavrogiannopoulos
f607b6dad4
doc update
2013-10-29 21:49:39 +01:00
Nikos Mavrogiannopoulos
6d8d111f6d
doc update
2013-10-29 11:40:33 +01:00
Nikos Mavrogiannopoulos
3c583e3a35
Added the 'iroute' directive to allow routes set on server.
2013-10-29 11:37:57 +01:00
Nikos Mavrogiannopoulos
e4d2e5803d
Added commands to add and remove a route.
2013-10-29 11:07:03 +01:00
Nikos Mavrogiannopoulos
30f0e93e70
Added the ipv6-prefix configuration option
2013-10-29 10:01:53 +01:00
Nikos Mavrogiannopoulos
2480a2cf58
Increased the number of directives allowed in group and user configurations.
2013-10-29 09:39:06 +01:00
Nikos Mavrogiannopoulos
00554b2f28
Allow loading additional configuration files per user or per group.
...
The directives currently allowed are: ipv4/6_dns and route.
2013-10-28 11:43:05 +01:00
Nikos Mavrogiannopoulos
988116bbeb
Added config options 'mtu' and 'output-buffer'.
2013-10-20 17:45:51 +02:00
Nikos Mavrogiannopoulos
067ff8fa52
doc update
2013-10-05 09:37:23 +02:00
Nikos Mavrogiannopoulos
17ca01e594
doc update
2013-08-03 10:52:21 +02:00
Nikos Mavrogiannopoulos
355dbdbef0
regenerate autogen'ed files when making a distribution.
2013-07-23 21:39:47 +02:00
Nikos Mavrogiannopoulos
126c52ab5c
Cookies are no longer persistent
2013-07-01 12:18:51 +02:00
Nikos Mavrogiannopoulos
e7aa89dc96
document way to force PFS
2013-06-27 17:58:48 +02:00
Nikos Mavrogiannopoulos
10246b78c4
Allow downloading raw files from 1/binaries
2013-05-31 17:29:52 +02:00
Nikos Mavrogiannopoulos
96a7f04237
doc update
2013-05-23 16:06:20 +02:00
Nikos Mavrogiannopoulos
e0a7ad9fe6
Added X-CSTP-Default-Domain option.
2013-05-06 10:56:21 +03:00
Nikos Mavrogiannopoulos
dd3571bc99
Updates for cisco's client.
2013-04-29 14:19:59 +03:00
Nikos Mavrogiannopoulos
947214a9a4
Added config file option ping-leases.
2013-04-29 00:12:37 +03:00
Nikos Mavrogiannopoulos
38464bd822
Updated autogen generated files, and added more options to ocpasswd.
...
ocpasswd now accepts the --lock and --unlock options and accepts the
username as the last argument.
2013-04-28 15:30:53 +03:00
Nikos Mavrogiannopoulos
8f5e98579a
updated doc
2013-04-03 19:02:22 +02:00
Nikos Mavrogiannopoulos
cbcb97cc79
doc update
2013-03-23 23:25:29 +01:00
Nikos Mavrogiannopoulos
42d532c3a3
doc update
2013-03-23 10:08:03 +01:00
Nikos Mavrogiannopoulos
6632f53f58
updated doc
2013-03-22 08:56:55 +01:00
Nikos Mavrogiannopoulos
9f18e7db9a
consider chroot environment when creating socket file.
2013-03-16 23:02:50 +01:00
Nikos Mavrogiannopoulos
5a4ce846b7
The TLS private keys are kept into a privileged process.
...
That process is called security-module (sec-mod) and communicates
with the workers using a unix domain socket.
2013-03-15 17:47:38 +01:00
Nikos Mavrogiannopoulos
0be2b2a054
crypt(3) is used in the plain password file.
...
In addition, ocpasswd program was added to generate password file entries.
2013-03-14 16:23:47 +01:00
Nikos Mavrogiannopoulos
b552f27ddb
Do not let scripts block the server operation.
2013-03-13 19:18:52 +01:00
Nikos Mavrogiannopoulos
0c4b013b3f
Added plain password format
2013-03-12 23:40:11 +01:00
Nikos Mavrogiannopoulos
b0a99ad57c
doc update
2013-03-07 10:43:45 +01:00
Nikos Mavrogiannopoulos
23977b5359
Added ability to specify multiple certificate and key pairs.
2013-03-07 09:51:50 +01:00
Nikos Mavrogiannopoulos
a0f1867c58
Allow setting DH parameters.
2013-03-07 09:19:25 +01:00
Nikos Mavrogiannopoulos
66a8ab6ad8
updated doc
2013-03-05 22:09:43 +01:00
Nikos Mavrogiannopoulos
6c54a37e69
Allow setting OCSP responses.
2013-03-05 01:42:25 +01:00
Nikos Mavrogiannopoulos
d547cbea65
doc update
2013-03-04 20:45:42 +01:00
Nikos Mavrogiannopoulos
432a2da897
Allow setting a reconnection delay time after a failed authentication attempt (added min-reauth-time option).
2013-03-04 19:42:10 +01:00
Nikos Mavrogiannopoulos
ecd90b533e
Allow setting a rate limit on the number of connections.
2013-03-04 06:23:58 +01:00
Nikos Mavrogiannopoulos
62392660cd
Anyconnect client compatibility is optional.
2013-03-02 15:35:16 +01:00
Nikos Mavrogiannopoulos
ef18851237
Added option to allow sending a cookie without the corresponding certificate.
...
This option is required for the cisco clients, that do not always use the
client certificate. When this option is set to false it means that the cookie
itself is sufficient for authentication. This is bad practice of smart cards
are in use.
2013-03-01 21:54:49 +01:00
Nikos Mavrogiannopoulos
41e8d020b5
Several updates to handle URLs requested by the cisco client.
2013-03-01 19:52:10 +01:00
Nikos Mavrogiannopoulos
833b1979ec
Banner was made configurable.
2013-02-27 19:16:46 +01:00
Nikos Mavrogiannopoulos
d06de0c46b
Allow setting NBNS.
2013-02-24 11:24:14 +01:00
Nikos Mavrogiannopoulos
b489e0f912
doc update
2013-02-22 19:35:50 +01:00
Nikos Mavrogiannopoulos
6a5efd629b
small update
2013-02-20 21:27:21 +01:00
Nikos Mavrogiannopoulos
b16690b8ca
small update
2013-02-20 21:26:24 +01:00
Nikos Mavrogiannopoulos
bbca1c2736
updated manual
2013-02-20 21:23:26 +01:00
Nikos Mavrogiannopoulos
a98e48b9b7
when receive a new UDP session, forward the fd and replace the old.
2013-02-19 19:12:05 +01:00
