GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 08:46:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,326 Commits 19 Branches 88 Tags
b479659836aa57ff7fb1674a0571aa9a4038a684
Commit Graph

1326 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nikos Mavrogiannopoulos
b479659836 do not allow the combination of AUTH_TYPE_CERTIFICATE and unix-conn-file 2014-09-23 22:33:37 +02:00
Nikos Mavrogiannopoulos
56bcfffed7 allow the group owner of the connection socket to access it 2014-09-23 16:42:30 +02:00
Nikos Mavrogiannopoulos
4ea5a56ace Allow the CSTP layer to operate without TLS 
That also introduces a unix domain socket under which connections to the
server can occur.
 2014-09-23 16:08:29 +02:00
Nikos Mavrogiannopoulos
ddcb609c5d corrected tun device closing order for BSD systems 2014-09-21 08:47:57 +02:00
Nikos Mavrogiannopoulos
f622f6696c use force_close() on server to avoid descriptor leaks 2014-09-21 01:40:36 +02:00
Nikos Mavrogiannopoulos
a8b32ed8f0 ensure that in all cases the tun fd is closed 2014-09-21 01:35:50 +02:00
Nikos Mavrogiannopoulos
0cd8002f0c when a UDP packet error occurs print the IP of the packet 2014-09-20 00:04:01 +02:00
Nikos Mavrogiannopoulos
552e7b24e7 fail when a tun device has no name 2014-09-19 21:29:30 +02:00
Nikos Mavrogiannopoulos
d5d27b2379 updated comment 2014-09-10 22:38:25 +02:00
Nikos Mavrogiannopoulos
88fb5ab33c reduced the severity of debug messages 2014-09-09 16:15:50 +02:00
Nikos Mavrogiannopoulos
0da35d20fa added more debugging messages in pam module 2014-09-09 14:13:30 +02:00
Nikos Mavrogiannopoulos
913274b44e pam messages made more specific 2014-09-09 13:48:39 +02:00
Nikos Mavrogiannopoulos
265e723cdb send the IPv6 netmask in a compatible with cisco servers way 2014-09-09 09:36:48 +02:00
Nikos Mavrogiannopoulos
06c02caa02 In IPv6 send the prefix instead of the netmask 
That allows vpnc-script in windows to apply the correct settings.
 2014-09-08 13:50:47 +02:00
Nikos Mavrogiannopoulos
aa6cacf041 TODO: updated 2014-09-04 16:55:37 +02:00
Nikos Mavrogiannopoulos
ab999fec4f doc update 2014-09-03 19:21:26 +02:00
Nikos Mavrogiannopoulos
1576a3195d modified rx test to an occtl test 2014-09-03 19:18:39 +02:00
Nikos Mavrogiannopoulos
c79eefcf9c Revert "print the per-user RX and TX bytes from occtl" 
This reverts commit ecd6e316a9.
 2014-09-03 19:15:08 +02:00
Nikos Mavrogiannopoulos
be50fb3ac1 updated full-test 2014-09-03 19:06:20 +02:00
Nikos Mavrogiannopoulos
9f42ae8da8 added test for RX data 2014-09-02 13:39:49 +02:00
Nikos Mavrogiannopoulos
ecd6e316a9 print the per-user RX and TX bytes from occtl 2014-09-02 11:44:03 +02:00
Nikos Mavrogiannopoulos
a40c5afcc8 sec-mod-auth: don't print misleading message on session control 2014-09-01 00:45:20 +02:00
Nikos Mavrogiannopoulos
898af172c2 full_test: requires building on debian due to gnutls symbol differences 2014-08-28 10:21:32 +02:00
Nikos Mavrogiannopoulos
186dcf5652 tests: added check for the DEFAULT group in test-pass-group-cert 2014-08-28 10:09:17 +02:00
Nikos Mavrogiannopoulos
abe6d2d190 when the default group is selected, don't treat it as no selection 2014-08-28 10:08:42 +02:00
Nikos Mavrogiannopoulos
b52c49f133 doc update 2014-08-28 09:58:51 +02:00
Nikos Mavrogiannopoulos
91c0566523 made the comparison for XML fiels case insensitive 
Suggested by sskaje, based on an issue with the Anyconnect iOS client.
 2014-08-28 09:26:27 +02:00
Nikos Mavrogiannopoulos
7c7f472f2b gnulib: added strcasestr 2014-08-28 09:21:49 +02:00
Nikos Mavrogiannopoulos
85e9e36e78 full-test: do not require --without-protobuf ocserv_0_8_4 2014-08-27 18:17:08 +02:00
Nikos Mavrogiannopoulos
36d49a524b bumped version 2014-08-27 18:10:38 +02:00
Nikos Mavrogiannopoulos
2d39b710f4 doc update 2014-08-27 18:09:33 +02:00
Nikos Mavrogiannopoulos
718fc4565a avoid calling gnutls_record_get_discarded() when a DTLS session isn't available 2014-08-27 16:57:57 +02:00
Nikos Mavrogiannopoulos
d4ca7ba6c2 full-test: require the --without-protobuf option 2014-08-27 16:43:08 +02:00
Nikos Mavrogiannopoulos
103a357f96 doc update 2014-08-25 21:55:39 +02:00
Nikos Mavrogiannopoulos
77380a02b7 updated to protobuf 1.0.1 2014-08-25 21:54:59 +02:00
Nikos Mavrogiannopoulos
70eea332ff check for stdnoreturn.h presence 2014-08-25 21:52:04 +02:00
Nikos Mavrogiannopoulos
60bea96cce corrected included protobuf's path, to align with protobuf 1.0.0 2014-08-24 08:15:42 +02:00
Nikos Mavrogiannopoulos
a186da0fdb corrected typo ocserv_0_8_3 2014-08-23 18:28:42 +02:00
Nikos Mavrogiannopoulos
f2d9ac2d3f include the docker test into distribution 2014-08-23 18:06:11 +02:00
Nikos Mavrogiannopoulos
3d56f0ea8d released 0.8.3 2014-08-23 17:57:18 +02:00
Nikos Mavrogiannopoulos
6f4f60db5a added work-around for infinite loop if the UDP descriptor becomes invalid 2014-08-23 17:54:01 +02:00
Nikos Mavrogiannopoulos
817f757577 after fork restore the default signal mask 2014-08-22 15:23:16 +02:00
Nikos Mavrogiannopoulos
c567a129f4 worker: when the UDP socket is updated, update the DTLS session 2014-08-22 12:04:36 +02:00
Nikos Mavrogiannopoulos
7774aa9951 bumped version 2014-08-20 22:11:49 +02:00
Nikos Mavrogiannopoulos
60af35cd07 doc update 2014-08-16 20:33:41 +02:00
Nikos Mavrogiannopoulos
e7f9f152bd updated bsd's getpeereid() check to match the Linux behavior 2014-08-16 20:31:12 +02:00
Nikos Mavrogiannopoulos
f40a73a2ed doc update 2014-08-16 20:12:11 +02:00
Nikos Mavrogiannopoulos
9be381859d worker: call sigprocmask() prior to entering main loop 2014-08-08 12:27:08 +02:00
Nikos Mavrogiannopoulos
f194a59ba3 protobuf-c: upgraded to 1.0.0 2014-08-05 16:24:03 +02:00
Nikos Mavrogiannopoulos
215f0d7254 only consider DTLS pending data if the UDP port is in active state 
That may address a possibility for an infinite loop.
 2014-08-05 16:21:01 +02:00