Nikos Mavrogiannopoulos
9e8f39faf5
Avoid many system calls when sending serialized data.
2013-10-30 09:28:39 +01:00
Nikos Mavrogiannopoulos
2480a2cf58
Increased the number of directives allowed in group and user configurations.
2013-10-29 09:39:06 +01:00
Nikos Mavrogiannopoulos
00554b2f28
Allow loading additional configuration files per user or per group.
...
The directives currently allowed are: ipv4/6_dns and route.
2013-10-28 11:43:05 +01:00
Nikos Mavrogiannopoulos
be84ddc6b8
Added additional handlers for requested files.
2013-07-08 00:07:42 +02:00
Kevin Cernekee and Nikos Mavrogiannopoulos
190e1d7994
bypass AnyConnect client auto-update mechanism
2013-07-07 23:14:26 +02:00
Nikos Mavrogiannopoulos
c6b1113833
allow cookie-only authentication (fixes previously introduced bug)
2013-07-01 12:31:45 +02:00
Nikos Mavrogiannopoulos
e5def94e6a
Advanced auth implemented
2013-06-26 16:28:35 +02:00
Nikos Mavrogiannopoulos
1521a3caaa
Removed ability to send binary files.
2013-06-07 11:36:34 +02:00
Nikos Mavrogiannopoulos
754321c9e6
reorganized compatibility layer
2013-05-31 18:06:11 +02:00
Nikos Mavrogiannopoulos
10246b78c4
Allow downloading raw files from 1/binaries
2013-05-31 17:29:52 +02:00
Nikos Mavrogiannopoulos
47587f9bf9
Check X-CSTP-Address-Type and don't send addresses that were not requested.
2013-05-27 22:27:35 +02:00
Nikos Mavrogiannopoulos
e8458828ee
Allow for a ciphersuite negotiation
2013-05-17 21:15:24 +02:00
Nikos Mavrogiannopoulos
e679fd643f
reorganized HTTP header reading.
2013-05-17 20:07:58 +02:00
Nikos Mavrogiannopoulos
f275f8ac4c
removed unused variable
2013-03-24 17:45:07 +01:00
Nikos Mavrogiannopoulos
b42857ffdd
MTU discovery simplified
2013-03-24 16:25:32 +01:00
Nikos Mavrogiannopoulos
fc6e385abe
MTU handling updates
2013-03-24 13:19:51 +01:00
Nikos Mavrogiannopoulos
70b7f3d6d9
consider TCP MSS in MTU calculations.
2013-03-16 19:26:10 +01:00
Nikos Mavrogiannopoulos
4a114e7641
unified POST handlers, and auto-detect xml content
2013-03-04 20:07:30 +01:00
Nikos Mavrogiannopoulos
ef18851237
Added option to allow sending a cookie without the corresponding certificate.
...
This option is required for the cisco clients, that do not always use the
client certificate. When this option is set to false it means that the cookie
itself is sufficient for authentication. This is bad practice of smart cards
are in use.
2013-03-01 21:54:49 +01:00
Nikos Mavrogiannopoulos
27b3378d40
Send correct replies.
2013-02-27 23:29:07 +01:00
Nikos Mavrogiannopoulos
d2df8a3e4f
more complete http body handling
2013-02-23 09:59:02 +01:00
Nikos Mavrogiannopoulos
6ddb1ff631
print debugging information on the received HTTP headers
2013-02-17 22:02:25 +01:00
Nikos Mavrogiannopoulos
59026fb8f1
Added some kind of path MTU discovery using DPD.
2013-02-15 22:23:35 +01:00
Nikos Mavrogiannopoulos
8cba144e77
Added support for seccomp (untested)
2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
a5257b6167
small reorganization
2013-02-09 19:54:25 +01:00
Nikos Mavrogiannopoulos
0fdc35505a
kick out the peer if non DPD packets are received for 3x the DPD time
2013-02-09 01:53:03 +01:00
Nikos Mavrogiannopoulos
6c04ab3191
Added wait_fd state in UDP channel
2013-02-09 00:18:30 +01:00
Nikos Mavrogiannopoulos
d1946bbb3c
MTU is now set via the main server
2013-02-08 22:17:46 +01:00
Nikos Mavrogiannopoulos
b6f7abb3f4
separated tun handling code from main worker code.
2013-02-08 19:26:30 +01:00
Nikos Mavrogiannopoulos
bacf821953
cleaned up TLS code which was moved to tlslib
2013-02-08 18:20:17 +01:00
Nikos Mavrogiannopoulos
534ddfbfcc
Honour client's MTU choice.
2013-02-07 18:19:10 +01:00
Nikos Mavrogiannopoulos
1cb7ab38e9
Use a single UDP port in the server.
...
Several modifications to use a single UDP port in the server. This
is currently done using a hack, i.e., pass the UDP socket to worker,
close it on the main server and then re-open it (using REUSEADDR).
Also several updates in TUN handling to allow more than one clients connecting.
2013-02-07 17:49:51 +01:00
Nikos Mavrogiannopoulos
1e0bcc269d
reorganized headers
2013-02-05 22:11:38 +01:00
Nikos Mavrogiannopoulos
1fb76ce890
Added session resumption to TLS server.
2013-02-03 21:23:29 +01:00
