Commit Graph

3888 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
92dba6e4f5 released 1.3.0
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
1.3.0
2024-05-05 21:08:20 +02:00
Nikos Mavrogiannopoulos
538be2b5ff NEWS: mentioned closed issue
Resolves: #597

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-29 22:26:21 +02:00
Nikos Mavrogiannopoulos
fe144f86c4 Merge branch 'tmp-llhttp' into 'master'
Switch from http-parser to llhttp

Closes #598

See merge request openconnect/ocserv!422
2024-04-28 18:24:13 +00:00
Nikos Mavrogiannopoulos
cf56c9754b Switch from http-parser to llhttp
http-parser is an unmaintained library that has been replaced by llhttp.

Resolves: #598

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-28 13:37:19 +02:00
Nikos Mavrogiannopoulos
db90324b08 tls_load_files: do not print informational messages on worker load
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-28 13:35:52 +02:00
Nikos Mavrogiannopoulos
57ff431c9e Merge branch 'tmp-silent-worker' into 'master'
config: silence informational messages on worker reload

See merge request openconnect/ocserv!423
2024-04-28 11:23:21 +00:00
Nikos Mavrogiannopoulos
71e4aba580 config: silence informational messages on worker reload
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-27 21:32:19 +02:00
Nikos Mavrogiannopoulos
8e523597f1 Merge branch 'tmp-config-url' into 'master'
Allow selecting group by URL or profile

See merge request openconnect/ocserv!403
2024-04-27 19:07:09 +00:00
Nikos Mavrogiannopoulos
48d7057fb3 config: auto-select-group made global not per vhost
The group functionality is available globally only and
there is no benefit from this option being per vhost.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-23 21:35:44 +02:00
Marcin Ochab
3f966ae8ca Allow selecting group by URL or profile
This introduces the 'select-group-by-url' config option
that allows selecting an authgroup just by connecting to
a dedicated URI.

Signed-off-by: Marcin Ochab <marcin.ochab@gmail.com>
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-23 21:35:00 +02:00
Nikos Mavrogiannopoulos
72b8e19cac updated copyright notices and minor text update
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-04-01 12:19:46 +02:00
Dimitri Papadopoulos Orfanos
8cd5e12e81 Merge branch 'MAX_GROUPS' into 'master'
Bump MAX_GROUPS to allow for more groups

See merge request openconnect/ocserv!415
2024-03-26 20:16:21 +00:00
Dimitri Papadopoulos Orfanos
6728eb2436 Merge branch 'malloc.h' into 'master'
Do not include <malloc.h> but for malloc_trim()

See merge request openconnect/ocserv!418
2024-03-26 14:25:41 +00:00
Nikos Mavrogiannopoulos
332644b31e Merge branch 'master' into 'master'
src/ocpasswd/ocpasswd.c: handle malloc errors

See merge request openconnect/ocserv!417
2024-03-26 14:07:47 +00:00
Ilya Shipitsin
ee7bc8ae60 src/ocpasswd/ocpasswd.c: handle malloc errors
Signed-off-by: Ilya Shipitsin <chipitsine@gmail.com>
2024-03-22 14:53:36 +01:00
Dimitri Papadopoulos
20ed2bfc7a Do not include <malloc.h> but for malloc_trim()
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2024-03-22 13:56:38 +01:00
Dimitri Papadopoulos
c734a9c929 Bump MAX_GROUPS to allow for more groups
Especially Radius accounts might belong to a large number of groups.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2024-03-19 07:53:15 +01:00
Nikos Mavrogiannopoulos
44721552be README.md: updated URI [ci skip]
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-22 22:56:53 +01:00
Nikos Mavrogiannopoulos
1ea5385c2b Merge branch 'feature-expand_no-ipv6-ocv3_test' into 'master'
Expand no-ipv6-ocv3 test

See merge request openconnect/ocserv!414
2024-02-20 13:23:35 +00:00
Daniel Lenski
aa8ab8ed30 Expand no-ipv6-ocv3 test
As added in c1a6f2b04a, this test verifies
that ocserv will NOT send IPv6 routes to OpenConnect v3 clients, which can't
handle them correctly.

Additionally, we can also verify that ocserv DOES send IPv6 routes to
totally unknown clients, which is the intended outcome resulting from
8b8a1a7b53.

Signed-off-by: Daniel Lenski <dlenski@amazon.com>
2024-02-19 17:41:29 -08:00
Nikos Mavrogiannopoulos
444ae6022a bumped version [ci skip]
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-02-02 16:29:50 +01:00
Nikos Mavrogiannopoulos
fe05d2a630 Require ipcalc for the test suite
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-25 09:57:39 +01:00
Nikos Mavrogiannopoulos
2a17ffb874 release.sh: use package type for tarball
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-24 10:26:35 +01:00
Nikos Mavrogiannopoulos
b94591a168 release.sh: updated
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-22 23:22:58 +01:00
Nikos Mavrogiannopoulos
7ced730fb2 released 1.2.4
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
1.2.4
2024-01-22 22:57:08 +01:00
Nikos Mavrogiannopoulos
ab02819cd8 release.sh: read .gitlab-token from home dir
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-22 16:11:40 +01:00
Nikos Mavrogiannopoulos
b569822267 Merge branch 'speed-limit' into 'master'
Retrieve connection speed from RADIUS

Closes #554

See merge request openconnect/ocserv!390
2024-01-22 15:10:09 +00:00
Dimitri Papadopoulos
ab58d9e9d7 Retrieve connection speed from RADIUS
Hijack Roaring Penguin's RADIUS attributes for that purpose:
* RP-Upstream-Speed-Limit → rx_per_sec
* RP-Downstream-Speed-Limit → tx_per_sec

While the ocserv configuration options use b/s, ocserv uses kb/s
internally. The radius attributes are already expressed in kb/s,
so we don't need to convert them.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2024-01-20 20:12:34 +01:00
Nikos Mavrogiannopoulos
df657e2772 .triage-policies.yml: updated
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-16 06:12:32 +01:00
Nikos Mavrogiannopoulos
dd6778bf60 .gitlab-ci.yml: use CI_PROJECT_ID for triage
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-16 06:06:05 +01:00
Dimitri Papadopoulos Orfanos
aa41bfb8fe Merge branch 'PACKAGE_NAME' into 'master'
Further improvements to arguments of AC_INIT

See merge request openconnect/ocserv!410
2024-01-07 16:28:04 +00:00
Nikos Mavrogiannopoulos
313e68b933 main: increased details on error message
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-07 00:37:33 +01:00
Nikos Mavrogiannopoulos
072dd794c8 Merge branch 'tmp-detect-new-openconnect' into 'master'
Added detection logic for new openconnect

See merge request openconnect/ocserv!411
2024-01-06 21:59:54 +00:00
Nikos Mavrogiannopoulos
c403e2bd02 Added detection logic for new openconnect
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-06 22:21:54 +01:00
Dimitri Papadopoulos
badf9be99a Further improvements to arguments of AC_INIT
Reapply df6a3c2a, this time without regression.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2024-01-06 18:21:27 +01:00
Dimitri Papadopoulos Orfanos
7e9af98c28 Merge branch 'bug_reports' into 'master'
Bug reports are not to be sent by mail anymore

See merge request openconnect/ocserv!409
2024-01-06 09:04:55 +00:00
Dimitri Papadopoulos
3a3edcfd80 Bug reports are not to be sent by mail anymore
Instead they should be filed on GitLab.

Adapt the relevant explanation to the different tpye of bug reporting mechanism.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2024-01-05 23:31:05 +01:00
Nikos Mavrogiannopoulos
5756c06d81 .gitlab-ci.yml: removed the cppcheck checks
They were causing more troubles than they were detecting actual
issues.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-05 22:09:11 +01:00
Nikos Mavrogiannopoulos
311abb5443 coverage: fix coverage calculation
This fixes regression from df6a3c2abe

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-05 21:13:08 +01:00
Nikos Mavrogiannopoulos
29dba5cee8 web: updated links to web page
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2024-01-05 16:47:18 +01:00
Nikos Mavrogiannopoulos
2bc6ab240e Merge branch 'man' into 'master'
Reorder man pages

See merge request openconnect/ocserv!408
2024-01-01 07:14:21 +00:00
Dimitri Papadopoulos
b41130163d Reorder man pages
Follow the conventions for writing Linux man pages:
https://man7.org/linux/man-pages/man7/man-pages.7.html

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2023-12-30 22:48:02 +01:00
Dimitri Papadopoulos Orfanos
92a9205814 Merge branch 'automake_1.14' into 'master'
Restore AM_PROG_CC_C_O instead of bumping minimal Automake version

See merge request openconnect/ocserv!402
2023-12-30 19:06:31 +00:00
Dimitri Papadopoulos Orfanos
bdacff5e50 Merge branch 'gl_HOST_CPU_C_ABI_32BIT' into 'master'
Avoid Autoconf warning

Closes #570

See merge request openconnect/ocserv!407
2023-12-30 19:04:55 +00:00
Nikos Mavrogiannopoulos
5a40095efa README.md: mention ronn for manpage building
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-12-30 18:05:23 +01:00
Nikos Mavrogiannopoulos
7c9e9b76a6 doc: mention issue tracker to manpage
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-12-30 18:03:51 +01:00
Nikos Mavrogiannopoulos
a002d81685 Merge branch 'AC_INIT' into 'master'
Further improvements to arguments of AC_INIT

See merge request openconnect/ocserv!406
2023-12-30 16:55:06 +00:00
Nikos Mavrogiannopoulos
2bfb188574 Merge branch 'tmp-better-log-radius' into 'master'
tests: improved radius log presentation & IP assignment

See merge request openconnect/ocserv!404
2023-12-30 14:26:06 +00:00
Dimitri Papadopoulos
ff9d43df09 Revert eeac2728
AM_PROG_CC_C_O is obsolescent starting with Automake 1.14.

CentOS 7 ships Automake 1.13.4. Keep AM_PROG_CC_C_O as long as we need
to support CentOS 7, to avoid this warning:
	src/Makefile.am:170: warning: compiling 'ccan/hash/hash.c' in
	                              subdir requires 'AM_PROG_CC_C_O'
	                              in 'configure.ac'

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2023-12-30 13:06:04 +01:00
Nikos Mavrogiannopoulos
bc4b1c5f12 tests: auto-generate random addresses instead of hard-coding them
The main benefit is that there is less manual work to add a
test (discovery of unique random addresses is not necessary),
but it also ensures that the tests can run on environments where the
previously hard-coded addresses were present.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2023-12-29 21:18:28 +01:00