Nikos Mavrogiannopoulos
b7a4a098a3
ping a single host in IPv6
2014-01-29 18:35:16 +01:00
Nikos Mavrogiannopoulos
ec9ee54eca
Set both IPv4 and IPv6 addresses in Linux.
2014-01-29 18:29:35 +01:00
Nikos Mavrogiannopoulos
fe927da089
corrected reading of IP addresses.
2014-01-29 18:27:57 +01:00
Nikos Mavrogiannopoulos
6abcbcedd3
Use getifaddrs() to obtain the IPs of the tun device.
...
This is a waste of resources but it seems there is no other easy
way to obtain to IPv6 address of a tun device.
2014-01-29 17:54:58 +01:00
Nikos Mavrogiannopoulos
555994ff47
use ffff instead of FFFF for IPv6 masks
2014-01-29 16:53:22 +01:00
Nikos Mavrogiannopoulos
8a29216228
doc update
2014-01-29 15:13:33 +01:00
Nikos Mavrogiannopoulos
b5b2d5b20a
Cleanups in IPv6 handling.
2014-01-29 14:31:18 +01:00
Nikos Mavrogiannopoulos
c814f5bb59
reduced log level
2014-01-28 18:13:34 +01:00
Nikos Mavrogiannopoulos
3477f9aa54
safer decoding of cookies.
2014-01-28 10:08:18 +01:00
Nikos Mavrogiannopoulos
ed43472ac9
print info when a UDP connection is rejected due to time.
2014-01-28 08:35:18 +01:00
Nikos Mavrogiannopoulos
be24d97cb7
doc update
2014-01-28 08:13:10 +01:00
Nikos Mavrogiannopoulos
0d72dede23
print message when a SID cannot be decoded.
2014-01-27 23:01:57 +01:00
Nikos Mavrogiannopoulos
3c331370ce
IP -> Remote IP
2014-01-26 21:32:37 +01:00
Nikos Mavrogiannopoulos
85afe45174
only ask to verify password in interactive mode
2014-01-25 21:42:12 +01:00
Nikos Mavrogiannopoulos
c15a3bb125
indented file
2014-01-22 22:30:02 +01:00
Nikos Mavrogiannopoulos
c1312145d4
Added support for getpeereid
2014-01-22 22:29:19 +01:00
Nikos Mavrogiannopoulos
28a2026363
updated seccomp rules.
2014-01-21 22:06:03 +01:00
Nikos Mavrogiannopoulos
f9a1dd94ae
Do not rehandshake on the DTLS channel.
2014-01-21 18:00:21 +01:00
Nikos Mavrogiannopoulos
5f3a6279d9
protect the server from multiple rehandshakes.
2014-01-21 17:29:45 +01:00
Nikos Mavrogiannopoulos
d8162d3c0b
when the client requests a rehandshake accept there request.
2014-01-21 17:24:29 +01:00
Nikos Mavrogiannopoulos
6a9600aa61
When libreadline isn't available try editline.
2014-01-21 14:34:35 +01:00
Nikos Mavrogiannopoulos
d4272b8e72
Changes to avoid the embedded protobuf files being included when not needed.
2014-01-20 23:26:56 +01:00
Nikos Mavrogiannopoulos
30d656ad92
code cleanup
2014-01-20 22:02:09 +01:00
Nikos Mavrogiannopoulos
8884cfc940
protocolbuf-c was made an optional dependency.
2014-01-20 11:23:19 +01:00
Nikos Mavrogiannopoulos
0695e05078
more reasonable line wrapping
2014-01-19 12:50:02 +01:00
Nikos Mavrogiannopoulos
268ba7a634
better order of options
2014-01-19 12:40:47 +01:00
Nikos Mavrogiannopoulos
b500de2ec0
simplified ciphersuite selection method and select ciphers based on server's desire.
2014-01-19 11:52:07 +01:00
Nikos Mavrogiannopoulos
404d831c35
better definition names.
2014-01-19 09:49:46 +01:00
Nikos Mavrogiannopoulos
2b743f5898
increased minimum maintainance time, and decreased log level of maintainance message.
2014-01-19 09:34:27 +01:00
Nikos Mavrogiannopoulos
3893ee6213
on unknown messages print the number of the message when cmd_request_to_str() is used.
2014-01-19 09:30:36 +01:00
Nikos Mavrogiannopoulos
e859125bb5
evened out the level of some debug messages.
2014-01-19 09:25:14 +01:00
Nikos Mavrogiannopoulos
0ed6332e09
mslog_hex() will allow printing values encoded in base64.
2014-01-19 09:21:48 +01:00
Nikos Mavrogiannopoulos
1b769d38d9
better debug messge
2014-01-19 09:16:08 +01:00
Nikos Mavrogiannopoulos
9d2b10de22
Use base64 to encode Cookies. That reduces the size of the cookie.
2014-01-19 09:14:11 +01:00
Nikos Mavrogiannopoulos
baf12348d4
Added proc_st status PS_AUTH_FAILED to prevent users that failed authentication to leave a zombie proc_st.
2014-01-19 04:14:56 +01:00
Nikos Mavrogiannopoulos
add57c5d32
use pselect() in worker process as well.
2014-01-19 04:10:42 +01:00
Nikos Mavrogiannopoulos
b611537683
better message when cannot reach server.
2014-01-19 04:02:31 +01:00
Nikos Mavrogiannopoulos
1ac47546f7
main-ctl-handler.c
...
when disconnecting IDs and ID==-1 then continue looping until all zombies have been cleaned up.
2014-01-19 04:00:57 +01:00
Nikos Mavrogiannopoulos
0f7e59a4f5
list users -> show users
2014-01-19 04:00:16 +01:00
Nikos Mavrogiannopoulos
f174f655db
remove zombie proc_st when its state has been 'stolen'
2014-01-19 04:00:02 +01:00
Nikos Mavrogiannopoulos
ef647c0190
reduce maintainance time to remove zombie processes sooner.
2014-01-19 03:43:30 +01:00
Nikos Mavrogiannopoulos
79b6f226af
when taking the state of a proc_st set its status to zombie.
2014-01-19 03:43:03 +01:00
Nikos Mavrogiannopoulos
3105398cc0
do not give information on zombie processes
2014-01-19 03:41:59 +01:00
Nikos Mavrogiannopoulos
445fcb666b
info printing updates
2014-01-19 03:41:35 +01:00
Nikos Mavrogiannopoulos
a88f30f3c9
updated copyright date
2014-01-19 03:21:25 +01:00
Nikos Mavrogiannopoulos
d83d71bf7a
updated authors
2014-01-19 03:14:43 +01:00
Nikos Mavrogiannopoulos
b9fe6b6263
instead of using the TLS session ID as session identifier prior to authentication use the webvpncontext cookie.
2014-01-19 02:59:04 +01:00
Nikos Mavrogiannopoulos
90a9286b88
send auth reply failure when needed.
2014-01-18 16:06:37 +01:00
Nikos Mavrogiannopoulos
7145db0d54
Added sketch of authentication protocol between main and worker.
2014-01-18 15:06:16 +01:00
Nikos Mavrogiannopoulos
b1af6f2829
enabling cisco-client-compat allows 'stealing' of processes.
...
This change puts a proc_st that its client has terminated to a "zombie"
state. That state will allow a client that connects later using the
same TLS session ID to reclaim it. That way clients that try to authenticate
by sending their credentials in different sessions can still authenticate with
ocserv. That however puts more trust to worker processes (as the main
process has no way of telling whether a TLS session is certainly
resumed).
2014-01-18 15:06:10 +01:00
