Commit Graph

1335 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
817f757577 after fork restore the default signal mask 2014-08-22 15:23:16 +02:00
Nikos Mavrogiannopoulos
c567a129f4 worker: when the UDP socket is updated, update the DTLS session 2014-08-22 12:04:36 +02:00
Nikos Mavrogiannopoulos
7774aa9951 bumped version 2014-08-20 22:11:49 +02:00
Nikos Mavrogiannopoulos
60af35cd07 doc update 2014-08-16 20:33:41 +02:00
Nikos Mavrogiannopoulos
e7f9f152bd updated bsd's getpeereid() check to match the Linux behavior 2014-08-16 20:31:12 +02:00
Nikos Mavrogiannopoulos
f40a73a2ed doc update 2014-08-16 20:12:11 +02:00
Nikos Mavrogiannopoulos
9be381859d worker: call sigprocmask() prior to entering main loop 2014-08-08 12:27:08 +02:00
Nikos Mavrogiannopoulos
f194a59ba3 protobuf-c: upgraded to 1.0.0 2014-08-05 16:24:03 +02:00
Nikos Mavrogiannopoulos
215f0d7254 only consider DTLS pending data if the UDP port is in active state
That may address a possibility for an infinite loop.
2014-08-05 16:21:01 +02:00
Nikos Mavrogiannopoulos
ce2258b391 doc update 2014-07-31 16:07:22 +02:00
Nikos Mavrogiannopoulos
c7349f124f doc update 2014-07-31 14:57:40 +02:00
Nikos Mavrogiannopoulos
c781bea7cd user-profile is now allowed in per-user configuration 2014-07-31 14:57:09 +02:00
Nikos Mavrogiannopoulos
63dd47a786 removed text on seccomp 2014-07-30 16:24:33 +02:00
Nikos Mavrogiannopoulos
a988dc11dc updated libopts to 5.18.3 2014-07-29 22:19:29 +02:00
Nikos Mavrogiannopoulos
60dcb9d62f /profiles request allows partial match 2014-07-27 14:05:19 +02:00
Nikos Mavrogiannopoulos
40d499ac1a better error messages when certificate username limit is reached 2014-07-27 11:21:36 +02:00
Nikos Mavrogiannopoulos
f838584e0e bumped version ocserv_0_8_2 2014-07-26 11:07:00 +02:00
Nikos Mavrogiannopoulos
be326bd7ed doc update 2014-07-26 11:03:45 +02:00
Nikos Mavrogiannopoulos
6de26b9408 made macro usage safer
That solves an issue where the pid_file would be overwritten on
a configuration file reload.
2014-07-26 10:59:26 +02:00
Nikos Mavrogiannopoulos
bf39dc0398 updated todo list 2014-07-23 15:27:14 +02:00
Nikos Mavrogiannopoulos
6079cdb833 doc update 2014-06-28 22:59:29 +02:00
Nikos Mavrogiannopoulos
eb6e3fea81 doc update 2014-06-28 22:57:16 +02:00
Nikos Mavrogiannopoulos
def560ec75 doc: do not explicitly set serial number in generated certificate
That would allow certtool to use a random one.
2014-06-28 22:48:51 +02:00
Nikos Mavrogiannopoulos
ff0e39bae1 pam: deinitialize co-routine when session is open to save memory 2014-06-28 20:49:30 +02:00
Nikos Mavrogiannopoulos
bb4f2ae453 pam: reduced default stack size 2014-06-28 20:45:43 +02:00
Nikos Mavrogiannopoulos
f44e0d63bf released 0.8.1 ocserv_0_8_1 2014-06-28 13:24:41 +02:00
Nikos Mavrogiannopoulos
5aeab28cae initialize str to null 2014-06-27 09:08:31 +02:00
Nikos Mavrogiannopoulos
f541dc3633 fix typo 2014-06-26 13:50:07 +02:00
Nikos Mavrogiannopoulos
47918f97c6 doc update 2014-06-26 13:49:10 +02:00
Nikos Mavrogiannopoulos
53c7bbeb1d ocserv: corrected debug message 2014-06-26 13:47:54 +02:00
Nikos Mavrogiannopoulos
309ad41475 ocserv: print the correct message when only selecting a group. 2014-06-26 13:46:31 +02:00
Nikos Mavrogiannopoulos
3de707b0fe introduced str_append_printf() 2014-06-26 13:46:31 +02:00
Nikos Mavrogiannopoulos
5ef450086d tests: Increased the server start wait time 2014-06-26 13:46:31 +02:00
Nikos Mavrogiannopoulos
e5434ea89e tests: Added check for certificate-only client with groups 2014-06-26 13:46:31 +02:00
Nikos Mavrogiannopoulos
4fa0053d54 ocserv: prompt the user for group selection even if only certificate authentication is used. 2014-06-26 13:46:31 +02:00
Nikos Mavrogiannopoulos
caa98a05fd document how to convert key to pkcs12 file 2014-06-26 08:29:54 +02:00
Nikos Mavrogiannopoulos
29a0604eb0 doc update 2014-06-25 22:00:58 +02:00
Nikos Mavrogiannopoulos
3fac1c4e0c search for group_list in addition to group%5flist
That allows to read the group from AnyConnect clients.
2014-06-25 21:58:00 +02:00
Nikos Mavrogiannopoulos
e48ad13e82 Set the applicable DNS and NBNS servers in complete_vpn_info(). 2014-06-25 10:11:00 +02:00
Nikos Mavrogiannopoulos
a144fde0e4 Eliminated the MAX_ROUTES requirement. 2014-06-25 10:05:34 +02:00
Nikos Mavrogiannopoulos
3e3e05f30a doc update 2014-06-25 10:04:10 +02:00
Nikos Mavrogiannopoulos
4a0b16fb98 Forward the appropriate DNS and NBNS values when using a per-user/group config. 2014-06-25 10:02:16 +02:00
Nikos Mavrogiannopoulos
6ebaac8839 tests: Added check for the basic commands of ocpasswd. 2014-06-24 14:00:40 +02:00
Nikos Mavrogiannopoulos
4117bf2661 Use a more terse, but with more dynamic information version string. 2014-06-23 21:09:43 +02:00
Nikos Mavrogiannopoulos
0629345022 Avoid using snprintf() and simply use strcpy(). 2014-06-23 17:30:15 +02:00
Nikos Mavrogiannopoulos
85288fd96f Ignore the return code of snprintf(); it is useless. 2014-06-23 17:26:01 +02:00
Nikos Mavrogiannopoulos
1d2f36f9bf When renegotiating, verify that any certificate received from the client contains the same username. 2014-06-13 15:08:40 +02:00
Nikos Mavrogiannopoulos
18cef50ebe doc update 2014-06-12 15:36:39 +02:00
Nikos Mavrogiannopoulos
70623591d5 Seccomp is now compiled in by default, and can be enabled at run-time. 2014-06-12 15:35:45 +02:00
Nikos Mavrogiannopoulos
ae3b9e5111 doc update 2014-06-12 10:20:10 +02:00