 Nikos Mavrogiannopoulos
|
8519cfc234
|
better log messages
|
2013-02-14 08:16:46 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
334338c73b
|
Enable maintainance when maximum TLS sessions have been reached. Set more sane defaults for max sessions.
|
2013-02-14 08:11:16 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
6b70200777
|
When the cookie DB is full enforce maintainance.
|
2013-02-14 08:04:48 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
85a5db0604
|
updated
|
2013-02-13 22:40:27 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
8caff361c9
|
simplified (and corrected) TUN device creation and re-use
|
2013-02-13 21:33:17 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
2262d1c34a
|
postpone usage of cork and uncork
|
2013-02-13 21:10:25 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
56d1847e29
|
corrected typo
|
2013-02-13 21:07:53 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
c60be929e0
|
simplified main loop
|
2013-02-13 18:04:33 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
bbd9a588db
|
reduced the default hash table size.
|
2013-02-13 17:58:52 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
7ba28c0131
|
Added missing ioctl().
|
2013-02-12 21:19:58 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
e49fbbe547
|
Allow NULL PAM auth token. This would allow to have password authentication on certain users that have a certificate.
|
2013-02-12 21:12:35 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
0e31edee4a
|
Added example scripts and updated documentation.
|
2013-02-12 19:19:02 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
35ce549e9e
|
Added missing files
|
2013-02-12 18:57:06 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
64a91f2b44
|
Simplify script calling by using the environment
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
2f1cdb5800
|
quit if no TCP port is available.
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
7270341e62
|
write the correct PID in pid file
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
e8f6332f36
|
Use PAM account management and added support for user groups.
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
121b2491aa
|
HUP signal reloads configuration
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
8da6d44d8f
|
Updated documentation
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
718d07208c
|
use common function to exit
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
fba6115923
|
small updates
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
8cba144e77
|
Added support for seccomp (untested)
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
356da3fbe4
|
connect occurs before sending the fd to worker.
|
2013-02-12 18:57:05 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
217a5e48e2
|
set time to entry only when writing the WTMP file
|
2013-02-12 09:35:01 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
9bf5d7100f
|
corrected definition
|
2013-02-11 20:41:33 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
2e20c3f444
|
DTLS-Rekey time is set to be the 2/3 of cookie validity
|
2013-02-11 20:39:13 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
4060c80469
|
fork moved to gdbm backend expiration
|
2013-02-10 13:50:56 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
528f1e0ce8
|
more files to ignore
|
2013-02-10 13:41:29 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
f3b085df61
|
added missing file
|
2013-02-10 13:41:00 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
f8713edc3f
|
better set socket options
|
2013-02-10 13:40:37 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
db9f441e6e
|
Write wtmp file if possible.
|
2013-02-10 13:35:50 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
3784aa6ddc
|
increased cookie hash table size and better cleanup resources on errors
|
2013-02-10 10:04:42 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
985da9e264
|
erase cookie data before forking to unprivileged process.
|
2013-02-09 21:28:30 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
478c6ca2ce
|
when expiring stuff, do it on the main process unless we use gdbm.
|
2013-02-09 21:15:24 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
184b8d7a66
|
enforce maximum number of same clients
|
2013-02-09 20:23:46 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
429b0bb213
|
Set a default config file.
|
2013-02-09 20:10:01 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
8b2ae25e58
|
Added PID file
|
2013-02-09 20:06:10 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
a5257b6167
|
small reorganization
|
2013-02-09 19:54:25 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
4ac5d57b40
|
Added OID examples
|
2013-02-09 19:49:27 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
8ad4e50db6
|
ignore certificate in DTLS session
|
2013-02-09 13:22:19 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
e94ad75905
|
more explicit debug messages.
|
2013-02-09 13:09:18 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
6b20fa9193
|
do not require certificate on DTLS session
|
2013-02-09 13:09:08 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
43fed529bb
|
simplified logging in debug mode
|
2013-02-09 12:40:49 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
519f0a13ef
|
Several changes to compile on old linux kernels, and in constrained libgnutls libraries
|
2013-02-09 12:15:55 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
0fdc35505a
|
kick out the peer if non DPD packets are received for 3x the DPD time
|
2013-02-09 01:53:03 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
da60bbebe1
|
Ignore non-fatal DTLS errors.
|
2013-02-09 01:35:40 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
779ed61893
|
Use a compatible with BSD's setproctitle.
|
2013-02-09 00:33:39 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
39373b605c
|
changes in debugging messages
|
2013-02-09 00:27:15 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
6c04ab3191
|
Added wait_fd state in UDP channel
|
2013-02-09 00:18:30 +01:00 |
|
|
Nikos Mavrogiannopoulos
|
d6da960b1e
|
updated
|
2013-02-08 22:49:02 +01:00 |
|