Commit Graph

3582 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
a299300e67 seccomp: allow setitimer
This enables ocserv on musl/alpine.

Resolves #455

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-10-09 20:12:13 +02:00
Dimitri Papadopoulos
d034f0d95a Fix codespell false positive
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2022-10-09 20:11:29 +02:00
Feng Xie
f1afd357e4 Merge branch 'taramallesh-master-patch-65583' into 'master'
Allow HTTP headers to be  configurable

See merge request openconnect/ocserv!293
2022-07-02 04:02:57 +00:00
Tara Mallesh
cfe2ea06d9 Allow HTTP headers to be configurable 2022-07-02 04:02:56 +00:00
Nikos Mavrogiannopoulos
413edf38bf Makefile.am: LICENSE -> COPYING
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-06-02 08:51:20 +02:00
Nikos Mavrogiannopoulos
95b521d58e Added detailed licensing information in README.md
This keeps COPYING as the main licensing file.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-06-01 16:00:39 +02:00
Nikos Mavrogiannopoulos
1c17846ea5 Merge branch 'tun-iteration-fix-issue-443' into 'master'
Base /dev/tunN iteration on max-clients

Closes #443

See merge request openconnect/ocserv!291
2022-03-17 07:44:26 +00:00
Marc West
e0a2fa4c3c Base /dev/tunN iteration on max-clients for OSes that do not have the /dev/tun special control device 2022-03-16 22:47:29 +00:00
Nikos Mavrogiannopoulos
7114104b8c Merge branch 'taramallesh-master-patch-01031' into 'master'
Add Pragma and Cache-control HTTP headers.

See merge request openconnect/ocserv!290
2022-03-15 08:36:22 +00:00
Tara Mallesh
73307e2dac Update worker-http.c 2022-03-14 05:25:11 +00:00
Tara Mallesh
058c63303f Update test-owasp-headers with Pragma and Cache-control checks 2022-03-09 17:48:51 +00:00
Tara Mallesh
c60c7cad98 Fix typo to remove extra closing bracket 2022-03-07 21:16:11 +00:00
Tara Mallesh
49a03419e8 Add Pragma and Cache-control HTTP headers. 2022-03-07 19:57:46 +00:00
Nikos Mavrogiannopoulos
a1bd01169f Merge branch 'groovyfengx-master-patch-69245' into 'master'
Fixing memory leak in OpenID Connect auth module

See merge request openconnect/ocserv!289
2022-03-02 08:48:55 +00:00
Feng Xie
030163fbbe Fixing memory leak in OpenConnect auth module 2022-03-01 22:28:47 +00:00
Nikos Mavrogiannopoulos
3d19078be6 Merge branch 'groovyfengx-master-patch-58049' into 'master'
Fixing issue: Authentication requests from the same IP address are not load balanced among security modules

Closes #444

See merge request openconnect/ocserv!288
2022-03-01 20:26:44 +00:00
Nikos Mavrogiannopoulos
43dbe741c7 Merge branch 'groovyfengx-master-patch-44853' into 'master'
Fixing memory deallocation issue in auth

See merge request openconnect/ocserv!287
2022-03-01 20:25:01 +00:00
Feng Xie
4ec99609ca Fixing issue: Authentication requests from the same IP address are not load balanced among security modules 2022-02-28 16:00:13 +00:00
Feng Xie
765472bd2c Fixing memory deallocation issue in auth. 2022-02-28 15:54:18 +00:00
Nikos Mavrogiannopoulos
8b00d198d9 released 1.1.6
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
1.1.6
2022-02-17 09:21:36 +01:00
Nikos Mavrogiannopoulos
eb6d1c0aef sec-mod: increased max groups to 128
Relates to #219

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-17 08:53:30 +01:00
Nikos Mavrogiannopoulos
1b826069eb str_rep_tab: added explicit initializer
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-15 10:34:18 +01:00
Nikos Mavrogiannopoulos
53b08d2433 forward_udp_to_owner: sanity check of session_id_size
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-15 10:33:45 +01:00
Nikos Mavrogiannopoulos
cdcc5eda4d doc update
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-11 11:41:58 +01:00
Nikos Mavrogiannopoulos
93e62b93ac Merge branch 'tmp-fix-f36-issues' into 'master'
Updates to fix operation in fedora 36

See merge request openconnect/ocserv!285
2022-02-10 15:28:23 +00:00
Nikos Mavrogiannopoulos
c1030512a7 load_keys: work around GnuTLS 3.7.3 regression
GnuTLS 3.7.3 introduces a backwards incompatible change and
GNUTLS_E_PKCS11_PIN_ERROR is returned when an encrypted
file is loaded.

Reported at https://gitlab.com/gnutls/gnutls/-/issues/1321

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-10 16:05:35 +01:00
Nikos Mavrogiannopoulos
94af87c7a2 libtasn1: use NULL instead of ASN1_TYPE_EMPTY
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-10 15:31:39 +01:00
Nikos Mavrogiannopoulos
a2fbdabf5e seccomp: allow futex()
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-10 15:03:23 +01:00
Nikos Mavrogiannopoulos
ed4ec0a3cb NEWS: doc update
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-05 10:20:26 +01:00
Nikos Mavrogiannopoulos
44ec3c60ed sample.config: document the local subnet exemption from ban.
Relates: #441

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-05 10:20:26 +01:00
Nikos Mavrogiannopoulos
f65bb80e9a Merge branch 'Openconnect' into 'master'
Openconnect → OpenConnect

See merge request openconnect/ocserv!282
2022-01-27 10:35:55 +00:00
Nikos Mavrogiannopoulos
3a5dd582eb Merge branch 'master' into 'master'
Make compatible with AnyConnect client on Windows ARM64

See merge request openconnect/ocserv!284
2022-01-27 10:23:28 +00:00
David Madole
bfeab649c8 Make compatible with AnyConnect client on Windows ARM64 2022-01-26 01:46:57 +00:00
Dimitri Papadopoulos
feffac374a Openconnect → OpenConnect
Spell OpenConnect products consistently.

This will modify the README file, but not the online documentation.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-27 12:48:20 +01:00
Nikos Mavrogiannopoulos
dcd08a6639 Merge branch 'makefile_silent_recipe' into 'master'
Silence the codespell recipe in Makefile

See merge request openconnect/ocserv!281
2021-12-23 14:34:56 +00:00
Dimitri Papadopoulos
2cec6c92d1 Silence the codespell recipe in Makefile
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 11:52:17 +01:00
Nikos Mavrogiannopoulos
5b7e35cbc1 Merge branch 'codespell' into 'master'
Add codespell configuration file

See merge request openconnect/ocserv!275
2021-12-23 09:46:41 +00:00
Dimitri Papadopoulos
c009134915 Add codespell CI runner
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:30 +01:00
Dimitri Papadopoulos
44bb12bb1a Revert previous typo fixes to CCAN and PCL
Revert !271 / 81df79a9 and !276 / 3a92062b.

These are vendored files that need to be fixed upstream.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:29 +01:00
Dimitri Papadopoulos
e51acb8c3e Fix more typos
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:29 +01:00
Dimitri Papadopoulos
172d91328d Add codespell configuration file
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:29 +01:00
Nikos Mavrogiannopoulos
ace958c31f Merge branch 'tmp-fedora35' into 'master'
fedora: updated to 35

See merge request openconnect/ocserv!279
2021-12-22 21:57:19 +00:00
Nikos Mavrogiannopoulos
cd2ad0c66f radiusd.conf: set libdir through autoconf
It should depend on the system tested.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-12-22 22:28:06 +01:00
Nikos Mavrogiannopoulos
db505b373c Merge branch 'visual_studio_spell_checker' into 'master'
Typos found by Visual Studio Code Checker

See merge request openconnect/ocserv!276
2021-12-22 18:41:17 +00:00
Nikos Mavrogiannopoulos
cffd7d23b3 fedora: updated to 35
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-12-22 19:38:16 +01:00
Nikos Mavrogiannopoulos
accfc8169d Merge branch 'chmod+x' into 'master'
chmod +x executable scripts

See merge request openconnect/ocserv!280
2021-12-22 18:35:24 +00:00
Dimitri Papadopoulos
3a92062b44 Typos found by Visual Studio Code Checker
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-22 19:21:02 +01:00
Dimitri Papadopoulos
a58ff2534f chmod +x autogen.sh
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-22 19:17:58 +01:00
Nikos Mavrogiannopoulos
d28b2e9f01 Merge branch 'const_char' into 'master'
Improve const char declarations

See merge request openconnect/ocserv!278
2021-12-22 18:16:36 +00:00
Dimitri Papadopoulos
a5d79fc230 Improve const char declarations
Declare C string constants using array syntax, avoid pointer syntax
when possible. They are different, the array syntax generates smaller,
faster code.

Also, const char[] should usually be static, again to avoid poor
compilation and runtime performance where compilers tend to
initialize the const declaration for every call instead of using
.rodata for the string.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-17 10:26:17 +01:00