Nikos Mavrogiannopoulos
392c6a0178
Do not use renegotiation in old clients.
2014-04-15 11:22:27 +02:00
Nikos Mavrogiannopoulos
e6364e8e52
Revert "When a disconnect script is set, the main process will close the tun device on client exit."
...
This reverts commit e50051b435
2014-04-15 10:33:53 +02:00
Nikos Mavrogiannopoulos
f8fbb9bde3
Corrected several coverity uncovered bugs.
2014-04-15 10:08:42 +02:00
Nikos Mavrogiannopoulos
b37fa7ae8c
use list_for_each_safe() when disconnecting a user.
2014-04-15 09:48:48 +02:00
Nikos Mavrogiannopoulos
104f12cd11
check the return value of socket()
2014-04-15 09:47:31 +02:00
Nikos Mavrogiannopoulos
bec93731eb
Simplified group configuration file loading.
2014-04-14 13:40:37 +02:00
Nikos Mavrogiannopoulos
be3920a08c
Correctly close tun lease descriptors prior to running worker.
...
That is, properly initialize them to -1, to avoid deinitializing
an unrelated descriptor.
2014-04-13 14:04:55 +02:00
Nikos Mavrogiannopoulos
70f82e72d3
corrected ipv6 netmask assignment.
2014-04-13 11:12:43 +02:00
Nikos Mavrogiannopoulos
1c3ca402b3
Revert "close tun lease descriptors prior to running worker"
...
This reverts commit 9496819a33
2014-04-13 09:35:20 +02:00
Nikos Mavrogiannopoulos
7071c75c85
correctly print message for no-ip.
2014-04-13 09:25:36 +02:00
Nikos Mavrogiannopoulos
d056ad5b4f
Avoid assigning broadcast address as either lip or rip.
2014-04-13 09:25:16 +02:00
Nikos Mavrogiannopoulos
c410891421
send ID as signed integer over dbus.
2014-04-13 08:56:36 +02:00
Nikos Mavrogiannopoulos
9496819a33
close tun lease descriptors prior to running worker
2014-04-12 23:56:23 +02:00
Nikos Mavrogiannopoulos
7e0ee385c2
Delay the cleanup of resources of a worker if a disconnect script is set.
...
In that case use the intermediate state PS_AUTH_DEAD to delay the
release of resources for few seconds. That would allow the disconnect
script to gather any required statistics from the device, IPs etc.
2014-04-12 21:29:14 +02:00
Nikos Mavrogiannopoulos
3bf5c03b4b
Test whether the connect and disconnect scripts have been called.
2014-04-12 21:07:53 +02:00
Nikos Mavrogiannopoulos
6410f6864c
The tun device will be closed only after the disconnect script has been called.
...
This allows gathering statistics from it. In addition, changed behavior of
script calling, and now will always contain the IP information.
2014-04-12 12:44:13 +02:00
Nikos Mavrogiannopoulos
e50051b435
When a disconnect script is set, the main process will close the tun device on client exit.
...
That allows the disconnect script to gather statistics from the client session.
2014-04-12 12:37:47 +02:00
Nikos Mavrogiannopoulos
491b3c9c7e
doc update
2014-04-12 08:51:40 +02:00
Nikos Mavrogiannopoulos
c1c9680efb
document new behavior in calling disconnect script.
2014-04-12 08:50:28 +02:00
Nikos Mavrogiannopoulos
1185cb07ee
Execute disconnect script for user that their IP was hijacked by a cookie reconnection
...
This will prevent having the script be called to initiate connections
that are never disconnected. This patch also introduces IPV6_LOCAL and
IPV6_REMOTE script environment variables that allow passing both addresses
in case both IPv4 and IPv6 are assigned.
2014-04-12 08:43:10 +02:00
Nikos Mavrogiannopoulos
3137c507e2
doc update
2014-04-08 22:02:12 +02:00
Nikos Mavrogiannopoulos
25137299c7
released 0.3.3
2014-04-08 21:27:42 +02:00
Nikos Mavrogiannopoulos
ee12a7509d
renamed function for consistency
2014-04-06 10:02:16 +02:00
Nikos Mavrogiannopoulos
bd9aaa1228
Revert "Try to read more than a single packet from the TUN device."
...
This reverts commit 019126abfd
2014-04-06 09:08:44 +02:00
Nikos Mavrogiannopoulos
7d07ccb1e4
Revert "corrected DTLS data sending."
...
This reverts commit 374f8d52a9
2014-04-06 09:08:37 +02:00
Nikos Mavrogiannopoulos
374f8d52a9
corrected DTLS data sending.
2014-04-05 19:57:53 +02:00
Nikos Mavrogiannopoulos
f9968decf9
Revert "check sockets for writability and use that information to discard packets rather than block."
...
This reverts commit 449302afe2
2014-04-04 09:23:54 +02:00
Nikos Mavrogiannopoulos
019126abfd
Try to read more than a single packet from the TUN device.
2014-04-03 13:54:56 +02:00
Nikos Mavrogiannopoulos
449302afe2
check sockets for writability and use that information to discard packets rather than block.
2014-04-03 13:32:08 +02:00
Nikos Mavrogiannopoulos
0d1eef4fa5
refactored worker main loop
2014-04-03 11:42:18 +02:00
Nikos Mavrogiannopoulos
9b36471d22
corrected name of crl template
2014-04-03 10:32:36 +02:00
Nikos Mavrogiannopoulos
78c0200a69
updated comments
2014-04-02 20:54:23 +02:00
Nikos Mavrogiannopoulos
f79fa04a83
doc update
2014-04-02 13:16:10 +02:00
Nikos Mavrogiannopoulos
a64edf9c6d
better message
2014-04-02 13:12:50 +02:00
Nikos Mavrogiannopoulos
d5597c71c6
doc update
2014-04-02 12:57:43 +02:00
Nikos Mavrogiannopoulos
c094a94d19
Added test for CRL file support.
2014-04-02 12:56:56 +02:00
Nikos Mavrogiannopoulos
d00319faf4
Updates in CRL handling.
...
Ensure reload on SIGHUP, and do print an appropriate error
when an empty CRL file is encountered.
2014-04-02 12:55:43 +02:00
Nikos Mavrogiannopoulos
7473731061
avoid a totally empty function body.
2014-04-02 11:01:44 +02:00
Nikos Mavrogiannopoulos
52d34b1d8d
small code improvements
2014-04-02 10:14:15 +02:00
Nikos Mavrogiannopoulos
f65507ed66
properly copy the username from a certificate
2014-04-01 18:35:21 +02:00
Nikos Mavrogiannopoulos
a3ecb5b91f
simplified and corrected test execution
2014-04-01 18:35:01 +02:00
Nikos Mavrogiannopoulos
cbb7bb28c9
Added check for connection with incorrect certificate
2014-04-01 11:57:30 +02:00
Nikos Mavrogiannopoulos
bfe4d4e9dc
explicitly specify GPLv2+ (or later) in LICENSE.
2014-04-01 11:47:58 +02:00
Nikos Mavrogiannopoulos
f58a194054
Added sys/wait.h for WEXITSTATUS
2014-03-31 16:58:30 +02:00
Nikos Mavrogiannopoulos
c84452fe8f
Added limits.h for POSIX_PATH_MAX
2014-03-31 16:58:02 +02:00
Nikos Mavrogiannopoulos
317fe62a56
Added sys/uio.h
2014-03-31 16:57:24 +02:00
Nikos Mavrogiannopoulos
a5f2bb1705
Added LIBGNUTLS_CFLAGS to ocserv's CFLAGS
2014-03-31 16:26:23 +02:00
Nikos Mavrogiannopoulos
7549548874
doc update
2014-03-31 16:06:23 +02:00
Nikos Mavrogiannopoulos
f65e771e54
more verbose log message
2014-03-31 16:01:37 +02:00
Nikos Mavrogiannopoulos
4aa423f936
notify the peer when disabling the DTLS channel with a close alert.
2014-03-30 17:15:08 +02:00
