GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-14 02:22:03 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,671 Commits 38 Branches 91 Tags
773d277802a92cb4de2163de4d880d90e0c923c0
Commit Graph
215 Commits
Author SHA1 Message Date
Nikos Mavrogiannopoulos 6cf43e6d20 Added support for systemd's socket activatable service. 2013-12-30 21:37:34 +01:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos 058b986967 Converted IPC messaging to protocolbuffers-c 
That adds a dependency on protocolbuffers-c, but simplifies
the worker-main communication protocol handling.
 2013-12-21 12:38:01 +01:00
Nikos Mavrogiannopoulos fed26bec2e disabled limits that break the worker 2013-12-13 19:09:12 +01:00
Nikos Mavrogiannopoulos c6a08db6db Added support for cgroups 2013-12-10 11:07:08 +01:00
Nikos Mavrogiannopoulos 74a566c540 enforce the RLIMIT_FSIZE and RLIMIT_AS 2013-12-09 11:44:22 +01:00
Nikos Mavrogiannopoulos 8a919d236f udp-port can now be unset, and that will disable listening to UDP. 2013-12-07 17:44:31 +01:00
Nikos Mavrogiannopoulos d4a56c6a33 initialize values prior to list_for_each() calls, to avoid static analysers complaints on garbage values. 2013-12-06 14:50:48 +01:00
Nikos Mavrogiannopoulos e08f70987a Added the --http-debug option to ocserv to avoid printing full HTTP messages to normal debug mode. 2013-11-16 17:33:50 +01:00
Nikos Mavrogiannopoulos 17946ca700 better phrasing. 2013-11-09 10:00:56 +01:00
Nikos Mavrogiannopoulos 1ff55f4e91 print package version on initialization 2013-11-06 21:11:36 +01:00
Nikos Mavrogiannopoulos 74f0ba5e72 do not ignore errors from system calls 2013-11-05 20:06:18 +01:00
Nikos Mavrogiannopoulos 8117fc0b03 call setgroups() after setgid() to avoid staying with an unexpected group set. 2013-11-05 20:04:00 +01:00
Nikos Mavrogiannopoulos 85f4db201c updated license information and authors 2013-11-05 19:38:30 +01:00
Nikos Mavrogiannopoulos e358af2578 Always terminate the worker unless he has already been dead. 2013-10-31 12:30:32 +01:00
Nikos Mavrogiannopoulos 929b8dcaec Avoid forwarding the UDP fd within a minute. That is to avoid duplicate messages messing the worker session. 2013-10-31 09:30:44 +01:00
Nikos Mavrogiannopoulos 3c583e3a35 Added the 'iroute' directive to allow routes set on server. 2013-10-29 11:37:57 +01:00
Nikos Mavrogiannopoulos 2480a2cf58 Increased the number of directives allowed in group and user configurations. 2013-10-29 09:39:06 +01:00
Mike MillerandNikos Mavrogiannopoulos 5e0e286c27 Fix typo maintainance -> maintenance 2013-07-23 21:33:18 +02:00
Nikos Mavrogiannopoulos 126c52ab5c Cookies are no longer persistent 2013-07-01 12:18:51 +02:00
Nikos Mavrogiannopoulos a13c50f6cc removed debugging info 2013-06-27 09:57:40 +02:00
Nikos Mavrogiannopoulos e5def94e6a Advanced auth implemented 2013-06-26 16:28:35 +02:00
Nikos Mavrogiannopoulos 81dca4ccdc more verbose printing of signal deaths 2013-05-22 16:21:33 +02:00
Nikos Mavrogiannopoulos 026c31e72a do not restrict worker's memory 2013-05-19 19:05:13 +02:00
Nikos Mavrogiannopoulos ddae1e8339 check for children cleanup prior to checking for termination. 
That allows to quickly terminate after the secmod death is detected.
 2013-05-13 22:53:21 +02:00
Nikos Mavrogiannopoulos 67e83f89d7 Use sigaction() to have a consistent behavior across systems for signals. 2013-05-02 11:46:02 +03:00
Nikos Mavrogiannopoulos 6c43eedf50 several updates to allow compilation on FreeBSD 2013-04-12 17:00:52 +02:00
Nikos Mavrogiannopoulos 123eae6510 clear any lists prior to running sec mod 2013-03-24 09:36:42 +01:00
Nikos Mavrogiannopoulos 2a8bd08288 Revert "run sec mod earlier to save memory" 
This reverts commit a8152e8c59.
 2013-03-24 09:31:46 +01:00
Nikos Mavrogiannopoulos b433e20682 when debugging do not set memory limits 2013-03-24 09:11:02 +01:00
Nikos Mavrogiannopoulos a8152e8c59 run sec mod earlier to save memory 2013-03-24 08:50:40 +01:00
Nikos Mavrogiannopoulos c6f3f5b428 cookies are overwritten prior to fork 2013-03-17 09:54:13 +01:00
Nikos Mavrogiannopoulos 82df00f0b0 updates in unix socket creation 2013-03-16 21:27:58 +01:00
Nikos Mavrogiannopoulos be6033e7b4 set certain limits on the worker process using setrlimit() 2013-03-15 20:01:56 +01:00
Nikos Mavrogiannopoulos 5a4ce846b7 The TLS private keys are kept into a privileged process. 
That process is called security-module (sec-mod) and communicates
with the workers using a unix domain socket.
 2013-03-15 17:47:38 +01:00
Nikos Mavrogiannopoulos b552f27ddb Do not let scripts block the server operation. 2013-03-13 19:18:52 +01:00
Nikos Mavrogiannopoulos efd36016a5 Eliminated memory leaks on lists. 2013-03-04 19:43:32 +01:00
Nikos Mavrogiannopoulos 432a2da897 Allow setting a reconnection delay time after a failed authentication attempt (added min-reauth-time option). 2013-03-04 19:42:10 +01:00
Nikos Mavrogiannopoulos 2674af5aec Allow longer sleeps than a second. 2013-03-04 18:52:47 +01:00
Nikos Mavrogiannopoulos ecd90b533e Allow setting a rate limit on the number of connections. 2013-03-04 06:23:58 +01:00
Nikos Mavrogiannopoulos 394493dbcb use chdir prior to chroot. 2013-03-01 21:26:19 +01:00
Nikos Mavrogiannopoulos 41e8d020b5 Several updates to handle URLs requested by the cisco client. 2013-03-01 19:52:10 +01:00
Jason CooperandNikos Mavrogiannopoulos a017004302 main: check return of daemon() 
Signed-off-by: Jason Cooper <jason@lakedaemon.net>
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2013-02-26 18:31:12 +01:00
Nikos Mavrogiannopoulos faf4736532 updated 2013-02-25 21:22:19 +01:00
Nikos Mavrogiannopoulos 9cb139bdb0 Added support for TCP wrappers (libwrap) 2013-02-25 21:12:14 +01:00
Nikos Mavrogiannopoulos a98e48b9b7 when receive a new UDP session, forward the fd and replace the old. 2013-02-19 19:12:05 +01:00
Nikos Mavrogiannopoulos e5198dd40f simplified TLS file load and reload. 2013-02-19 07:42:42 +01:00
Nikos Mavrogiannopoulos 628877881d Added configuration options for PIN files. 2013-02-18 23:47:20 +01:00
Nikos Mavrogiannopoulos 6b70200777 When the cookie DB is full enforce maintainance. 2013-02-14 08:04:48 +01:00
Nikos Mavrogiannopoulos c60be929e0 simplified main loop 2013-02-13 18:04:33 +01:00
Nikos Mavrogiannopoulos 2f1cdb5800 quit if no TCP port is available. 2013-02-12 18:57:05 +01:00