Commit Graph

3457 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
d60cbf53c5 handle_commands_from_main: silence coverity
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:38:03 +01:00
Nikos Mavrogiannopoulos
9680622d86 handle_events_cmd: silence coverity
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:25:14 +01:00
Nikos Mavrogiannopoulos
65a0e595e5 gssapi_vhost_init: simplified
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:22:36 +01:00
Nikos Mavrogiannopoulos
6fe528ec4c post_auth_handler: added error checking to cstp_printf
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:22:25 +01:00
Nikos Mavrogiannopoulos
57c0381269 send_stats_to_secmod: silence coverity
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:22:17 +01:00
Nikos Mavrogiannopoulos
56c6ab9cbf _listen_unix_ports: error when remove fails
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:20:26 +01:00
Nikos Mavrogiannopoulos
4150c2251b pam: silence coverity warning
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-26 14:20:22 +01:00
Nikos Mavrogiannopoulos
9d98e08aa1 Merge branch 'tmp-always-check-rnd' into 'master'
gnutls_rnd(): always check its return value

See merge request openconnect/ocserv!236
2020-11-19 22:04:23 +00:00
Nikos Mavrogiannopoulos
3be9234cb9 gnutls_rnd(): always check its return value
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-19 22:20:19 +01:00
Nikos Mavrogiannopoulos
fa73c53d46 Merge branch 'tmp-upgrade-ci-to-f33' into 'master'
Upgrade fedora CI to fedora33

See merge request openconnect/ocserv!235
2020-11-14 22:03:18 +00:00
Nikos Mavrogiannopoulos
7ee163ad2c kerberos: fixes for fedora33 kdc
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-14 22:05:56 +01:00
Nikos Mavrogiannopoulos
6d8bcb4795 .gitlab-ci.yml: do not use --disable-maintainer-mode
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-12 16:55:01 +01:00
Nikos Mavrogiannopoulos
dfadd45b9b Makefile: removed unused rules
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-11-12 16:37:25 +01:00
Alan Jowett
5b9fc73fd9 Merge branch 'issue360' into 'master'
Issue360 - Send disconnect reason with BanIP message

Closes #360

See merge request openconnect/ocserv!234
2020-11-06 22:30:21 +00:00
Alan Jowett
01a9815bdf Set disconnect reason when updating ban-ip
Resolves: #360

Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-11-06 13:16:32 -07:00
Nikos Mavrogiannopoulos
82fc1e4881 Merge branch 'tmp-enhance-syscalls' into 'master'
worker-privs: enhanced with syscalls used by socket wrapper

See merge request openconnect/ocserv!233
2020-11-01 22:27:55 +00:00
Nikos Mavrogiannopoulos
4afbf8fdb2 Merge branch 'tmp-init-snapshot' into 'master'
set_env_from_ws: ensure there are no uninitialized variables from snapshot

See merge request openconnect/ocserv!231
2020-11-01 21:39:29 +00:00
Nikos Mavrogiannopoulos
9521918143 worker-privs: allow new syscalls
This adds the syscalls used by socket wrapper as observed
in Fedora builders, as well as syscalls observed in different
platforms such as aarch64.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-30 22:31:59 +01:00
Nikos Mavrogiannopoulos
d83a39da51 set_env_from_ws: ensure there are no uninitialized variables from snapshot
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-30 22:11:09 +01:00
Nikos Mavrogiannopoulos
940e489500 .gitlab-ci.yml: i386/Debian: do not run on schedules
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-21 16:30:09 +02:00
Nikos Mavrogiannopoulos
37856ba314 doc update
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-19 21:38:35 +02:00
Alan Jowett
73ebc58265 Merge branch 'issue359' into 'master'
Allow setup of new DTLS session while processing on old session

Closes #359

See merge request openconnect/ocserv!223
2020-10-19 17:21:33 +00:00
Alan Jowett
3436705a9c Allow setup of new DTLS session while processing on old session
Resolves: #359

Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-10-19 10:36:03 -06:00
Nikos Mavrogiannopoulos
c5d3e4f321 Merge branch 'tmp-inih-update' into 'master'
inih: increase the limit for a config line

Closes #364

See merge request openconnect/ocserv!230
2020-10-18 19:58:51 +00:00
Nikos Mavrogiannopoulos
b7575cc220 tests: fixed space after \
Also ensure that similar warnings are treated as errors
in CI.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-18 21:15:40 +02:00
Nikos Mavrogiannopoulos
16bfb30586 inih: reintroduced INI_STOP_ON_FIRST_ERROR
This also introduces better error reporting to inih, and
handling of the errors received by inih.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-18 21:05:08 +02:00
Nikos Mavrogiannopoulos
c49d981274 inih: updated to latest version
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-18 21:05:05 +02:00
Nikos Mavrogiannopoulos
66a263e477 tests: increase the size of a transmitted banner to reproduce #364
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-18 13:30:12 +02:00
Nikos Mavrogiannopoulos
e7233819da inih: increased max line size
This also removes the stop on first error directive
which was set but not used for very long time.

Resolves: #364

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-18 13:30:00 +02:00
Alan Jowett
117bad2e29 Merge branch 'issue362' into 'master'
Log disconnects from TCP healt probe at debug level

See merge request openconnect/ocserv!229
2020-10-16 15:56:53 +00:00
Alan Jowett
6fe6926cff Log disconnects from TCP healt probe at debug level
Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-10-16 09:13:49 -06:00
Alan Jowett
1b938f8726 Merge branch 'user/alanjo/issue365' into 'master'
Log fatal key retrieval errors at LOG_ERR

Closes #365

See merge request openconnect/ocserv!228
2020-10-14 22:30:48 +00:00
Alan Jowett
f116c134a4 Log fatal key retrieval errors at LOG_ERR
Resolves #365

Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-10-14 15:47:48 -06:00
Alan Jowett
0d3d0dbd3d Merge branch 'malloc_enforce' into 'master'
Raise warning level on malloc to catch double frees earlier.

See merge request openconnect/ocserv!227
2020-10-09 16:23:15 +00:00
Alan Jowett
afe437f8eb Raise warning level on malloc to catch double frees earlier.
Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-10-09 09:39:35 -06:00
Alan Jowett
c106bb86fc Merge branch 'issue363' into 'master'
Latency stats should be at LOG_DEBUG not LOG_INFO level

Closes #363

See merge request openconnect/ocserv!225
2020-10-07 19:52:35 +00:00
Alan Jowett
f0f90ef4d7 Merge branch 'issue362' into 'master'
TCP health probes shouldn't be logged at INFO level

Closes #362

See merge request openconnect/ocserv!224
2020-10-07 19:39:40 +00:00
Alan Jowett
cd0f382628 Latency stats should be at LOG_DEBUG not LOG_INFO level
Resolves: #363

Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-10-07 13:09:05 -06:00
Alan Jowett
7ffb4d1ca2 TCP health probes shouldn't be logged at INFO level
Resolves: #362

Signed-off-by: Alan Jowett alan.jowett@microsoft.com
2020-10-07 12:56:24 -06:00
Nikos Mavrogiannopoulos
f8ff70a098 NEWS: updated
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-10-02 21:56:48 +02:00
Alan Jowett
f94b54341e Merge branch 'issue360' into 'master'
Don't apply BanIP checks to clients on the same subnet.

Closes #360

See merge request openconnect/ocserv!222
2020-10-01 21:22:45 +00:00
Alan Jowett
5b402014fd Don't apply BanIP checks to clients on the same subnet.
Resolves #360

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>
2020-10-01 11:59:41 -06:00
Alan Jowett
8cc7fed172 Merge branch 'issue357-part1' into 'master'
Don't attempt TLS if the client closes the connection with zero data sent.

Closes #357

See merge request openconnect/ocserv!221
2020-09-30 22:46:37 +00:00
Alan Jowett
7a924b6d9c Don't attempt TLS if the client closes the connection with zero data sent.
Resolves #357

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>
2020-09-30 16:03:38 -06:00
Nikos Mavrogiannopoulos
7c0c6ec1ad Merge branch 'tmp-remove-todo' into 'master'
Removed TODO file; it is out-of-date

See merge request openconnect/ocserv!220
2020-09-30 19:06:06 +00:00
Nikos Mavrogiannopoulos
333bbd536c Removed TODO file; it is out-of-date
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-30 20:00:26 +02:00
Nikos Mavrogiannopoulos
71e36ccae4 README.md: corrected links
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-29 23:43:07 +02:00
Nikos Mavrogiannopoulos
2a1e91795b Merge branch 'tmp-drain-ms-repro' into 'master'
Stop listening on ocserv-sm socket on error to prevent looping.

Closes #356

See merge request openconnect/ocserv!219
2020-09-29 21:39:09 +00:00
Alan Jowett
12c3d62276 Stop listening on ocserv-sm socket on error to prevent looping.
Resolves #356

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>
2020-09-29 22:51:52 +02:00
Nikos Mavrogiannopoulos
53c8c0f139 tests: added reproducer for drain-server-ms failure
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-29 22:51:47 +02:00