Commit Graph

994 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
c094a94d19 Added test for CRL file support. 2014-04-02 12:56:56 +02:00
Nikos Mavrogiannopoulos
d00319faf4 Updates in CRL handling.
Ensure reload on SIGHUP, and do print an appropriate error
when an empty CRL file is encountered.
2014-04-02 12:55:43 +02:00
Nikos Mavrogiannopoulos
7473731061 avoid a totally empty function body. 2014-04-02 11:01:44 +02:00
Nikos Mavrogiannopoulos
52d34b1d8d small code improvements 2014-04-02 10:14:15 +02:00
Nikos Mavrogiannopoulos
f65507ed66 properly copy the username from a certificate 2014-04-01 18:35:21 +02:00
Nikos Mavrogiannopoulos
a3ecb5b91f simplified and corrected test execution 2014-04-01 18:35:01 +02:00
Nikos Mavrogiannopoulos
cbb7bb28c9 Added check for connection with incorrect certificate 2014-04-01 11:57:30 +02:00
Nikos Mavrogiannopoulos
bfe4d4e9dc explicitly specify GPLv2+ (or later) in LICENSE. 2014-04-01 11:47:58 +02:00
Nikos Mavrogiannopoulos
f58a194054 Added sys/wait.h for WEXITSTATUS 2014-03-31 16:58:30 +02:00
Nikos Mavrogiannopoulos
c84452fe8f Added limits.h for POSIX_PATH_MAX 2014-03-31 16:58:02 +02:00
Nikos Mavrogiannopoulos
317fe62a56 Added sys/uio.h 2014-03-31 16:57:24 +02:00
Nikos Mavrogiannopoulos
a5f2bb1705 Added LIBGNUTLS_CFLAGS to ocserv's CFLAGS 2014-03-31 16:26:23 +02:00
Nikos Mavrogiannopoulos
7549548874 doc update 2014-03-31 16:06:23 +02:00
Nikos Mavrogiannopoulos
f65e771e54 more verbose log message 2014-03-31 16:01:37 +02:00
Nikos Mavrogiannopoulos
4aa423f936 notify the peer when disabling the DTLS channel with a close alert. 2014-03-30 17:15:08 +02:00
Nikos Mavrogiannopoulos
df6653229a more cleanups in MTU calculation 2014-03-30 17:10:30 +02:00
Nikos Mavrogiannopoulos
a4d85dee43 removed cast as it is not available on every readline version. 2014-03-30 14:59:30 +02:00
Nikos Mavrogiannopoulos
987284a947 doc update 2014-03-27 14:06:02 +01:00
Nikos Mavrogiannopoulos
1b711a1f7c Use the Base-MTU for MTU calculations. 2014-03-27 14:04:58 +01:00
Nikos Mavrogiannopoulos
1278074b0c removed unused functions 2014-03-25 14:43:57 +01:00
Nikos Mavrogiannopoulos
188b30e264 doc update 2014-03-25 14:40:39 +01:00
Nikos Mavrogiannopoulos
0b9c6ff633 Added diagram with authentication state machine. 2014-03-25 13:49:11 +01:00
Nikos Mavrogiannopoulos
35c46d05c5 Do not set the output-buffer in the default configuration. 2014-03-25 11:25:42 +01:00
Nikos Mavrogiannopoulos
1900a23e97 updated comment 2014-03-24 16:03:54 +01:00
Nikos Mavrogiannopoulos
214ae42cd3 The IP don't fragment bit is only set if try-mtu-discovery is true. 2014-03-24 13:22:22 +01:00
Nikos Mavrogiannopoulos
dd11a06951 better naming of variables. 2014-03-23 18:26:23 +01:00
Nikos Mavrogiannopoulos
4c4650ea17 dropped support for Salsa20 and UMAC.
They are not supported by openconnect and the latest IETF
drafts use Chacha20 with poly1305.
2014-03-20 22:54:58 +01:00
Nikos Mavrogiannopoulos
1879207f37 No longer send IPv6 information to CISCO clients that may not be able to handle it.
Now IPv6 information is only forwarded if the client is openconnect, or if
the client is unknown and has advertised full IPv6 support.
2014-03-20 22:51:30 +01:00
Nikos Mavrogiannopoulos
6eccb69c23 doc update 2014-03-20 22:35:05 +01:00
Nikos Mavrogiannopoulos
9ff9105df7 doc update 2014-03-20 22:26:45 +01:00
Nikos Mavrogiannopoulos
cb11549e44 doc update 2014-03-20 14:56:33 +01:00
Nikos Mavrogiannopoulos
6f875650c9 when printing link-local addresses do not include the zone info. 2014-03-20 07:29:17 +01:00
Nikos Mavrogiannopoulos
1324660760 doc update 2014-03-19 15:15:16 +01:00
Nikos Mavrogiannopoulos
9d98b07e46 fixed formatting of news 2014-03-19 15:11:01 +01:00
Nikos Mavrogiannopoulos
533e00ae6f doc update 2014-03-13 22:01:29 +01:00
Nikos Mavrogiannopoulos
1d611d793d doc update ocserv_0_3_2 2014-03-13 21:38:25 +01:00
Nikos Mavrogiannopoulos
9f1f6a8e60 doc update 2014-03-11 13:19:30 +01:00
Nikos Mavrogiannopoulos
4a2a80dc7d Updated the included http-parser 2014-03-11 13:19:06 +01:00
Nikos Mavrogiannopoulos
8a1ab0e32d Print a compact version of the DTLS ciphersuite. 2014-03-10 19:25:47 +01:00
Nikos Mavrogiannopoulos
35c31bc0b7 Allow TUN_MTU command only in authenticated state 2014-03-10 10:41:27 +01:00
Nikos Mavrogiannopoulos
6028e5d81d simplified handle_auth_res() 2014-03-10 10:41:27 +01:00
Nikos Mavrogiannopoulos
f55185b39c doc update 2014-03-09 21:42:00 +01:00
Nikos Mavrogiannopoulos
4f9e06d16d Do not block in TLS and DTLS reads
This prevents an issue where a client disconnects but the server
is blocked on a DTLS read without being able to detect the
disconnection.
2014-03-09 21:40:07 +01:00
Nikos Mavrogiannopoulos
a0723ccee9 check return value of tls_send() 2014-03-09 21:37:33 +01:00
Nikos Mavrogiannopoulos
6c331db70a move bytes2human in occtl.c to allow compilation without libnl 2014-03-09 21:31:51 +01:00
Nikos Mavrogiannopoulos
28e64c4eec doc update 2014-03-02 19:36:50 +01:00
Nikos Mavrogiannopoulos
e72414459a provide the bandwidth limit through d-bus 2014-03-02 13:24:44 +01:00
Nikos Mavrogiannopoulos
949fbacf32 doc update 2014-03-01 17:38:22 +01:00
Nikos Mavrogiannopoulos
a0ba998222 occtl will print the user's dns, nbns, routes, and iroutes. 2014-03-01 15:29:17 +01:00
Nikos Mavrogiannopoulos
20cc945383 Warn when setting a default route the wrong way. 2014-03-01 14:23:22 +01:00