Commit Graph

161 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
c60be929e0 simplified main loop 2013-02-13 18:04:33 +01:00
Nikos Mavrogiannopoulos
bbd9a588db reduced the default hash table size. 2013-02-13 17:58:52 +01:00
Nikos Mavrogiannopoulos
7ba28c0131 Added missing ioctl(). 2013-02-12 21:19:58 +01:00
Nikos Mavrogiannopoulos
e49fbbe547 Allow NULL PAM auth token. This would allow to have password authentication on certain users that have a certificate. 2013-02-12 21:12:35 +01:00
Nikos Mavrogiannopoulos
0e31edee4a Added example scripts and updated documentation. 2013-02-12 19:19:02 +01:00
Nikos Mavrogiannopoulos
35ce549e9e Added missing files 2013-02-12 18:57:06 +01:00
Nikos Mavrogiannopoulos
64a91f2b44 Simplify script calling by using the environment 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
2f1cdb5800 quit if no TCP port is available. 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
7270341e62 write the correct PID in pid file 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
e8f6332f36 Use PAM account management and added support for user groups. 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
121b2491aa HUP signal reloads configuration 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
8da6d44d8f Updated documentation 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
718d07208c use common function to exit 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
fba6115923 small updates 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
8cba144e77 Added support for seccomp (untested) 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
356da3fbe4 connect occurs before sending the fd to worker. 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
217a5e48e2 set time to entry only when writing the WTMP file 2013-02-12 09:35:01 +01:00
Nikos Mavrogiannopoulos
9bf5d7100f corrected definition 2013-02-11 20:41:33 +01:00
Nikos Mavrogiannopoulos
2e20c3f444 DTLS-Rekey time is set to be the 2/3 of cookie validity 2013-02-11 20:39:13 +01:00
Nikos Mavrogiannopoulos
4060c80469 fork moved to gdbm backend expiration 2013-02-10 13:50:56 +01:00
Nikos Mavrogiannopoulos
528f1e0ce8 more files to ignore 2013-02-10 13:41:29 +01:00
Nikos Mavrogiannopoulos
f3b085df61 added missing file 2013-02-10 13:41:00 +01:00
Nikos Mavrogiannopoulos
f8713edc3f better set socket options 2013-02-10 13:40:37 +01:00
Nikos Mavrogiannopoulos
db9f441e6e Write wtmp file if possible. 2013-02-10 13:35:50 +01:00
Nikos Mavrogiannopoulos
3784aa6ddc increased cookie hash table size and better cleanup resources on errors 2013-02-10 10:04:42 +01:00
Nikos Mavrogiannopoulos
985da9e264 erase cookie data before forking to unprivileged process. 2013-02-09 21:28:30 +01:00
Nikos Mavrogiannopoulos
478c6ca2ce when expiring stuff, do it on the main process unless we use gdbm. 2013-02-09 21:15:24 +01:00
Nikos Mavrogiannopoulos
184b8d7a66 enforce maximum number of same clients 2013-02-09 20:23:46 +01:00
Nikos Mavrogiannopoulos
429b0bb213 Set a default config file. 2013-02-09 20:10:01 +01:00
Nikos Mavrogiannopoulos
8b2ae25e58 Added PID file 2013-02-09 20:06:10 +01:00
Nikos Mavrogiannopoulos
a5257b6167 small reorganization 2013-02-09 19:54:25 +01:00
Nikos Mavrogiannopoulos
4ac5d57b40 Added OID examples 2013-02-09 19:49:27 +01:00
Nikos Mavrogiannopoulos
8ad4e50db6 ignore certificate in DTLS session 2013-02-09 13:22:19 +01:00
Nikos Mavrogiannopoulos
e94ad75905 more explicit debug messages. 2013-02-09 13:09:18 +01:00
Nikos Mavrogiannopoulos
6b20fa9193 do not require certificate on DTLS session 2013-02-09 13:09:08 +01:00
Nikos Mavrogiannopoulos
43fed529bb simplified logging in debug mode 2013-02-09 12:40:49 +01:00
Nikos Mavrogiannopoulos
519f0a13ef Several changes to compile on old linux kernels, and in constrained libgnutls libraries 2013-02-09 12:15:55 +01:00
Nikos Mavrogiannopoulos
0fdc35505a kick out the peer if non DPD packets are received for 3x the DPD time 2013-02-09 01:53:03 +01:00
Nikos Mavrogiannopoulos
da60bbebe1 Ignore non-fatal DTLS errors. 2013-02-09 01:35:40 +01:00
Nikos Mavrogiannopoulos
779ed61893 Use a compatible with BSD's setproctitle. 2013-02-09 00:33:39 +01:00
Nikos Mavrogiannopoulos
39373b605c changes in debugging messages 2013-02-09 00:27:15 +01:00
Nikos Mavrogiannopoulos
6c04ab3191 Added wait_fd state in UDP channel 2013-02-09 00:18:30 +01:00
Nikos Mavrogiannopoulos
d6da960b1e updated 2013-02-08 22:49:02 +01:00
Nikos Mavrogiannopoulos
0fee2289be used a more sane setproctitle 2013-02-08 22:48:45 +01:00
Nikos Mavrogiannopoulos
6aae1d60d5 set process title 2013-02-08 22:37:41 +01:00
Nikos Mavrogiannopoulos
b70a0251ba added license 2013-02-08 22:31:09 +01:00
Nikos Mavrogiannopoulos
d1946bbb3c MTU is now set via the main server 2013-02-08 22:17:46 +01:00
Nikos Mavrogiannopoulos
5f4b8711ef Added configurable DPD 2013-02-08 21:51:58 +01:00
Nikos Mavrogiannopoulos
6ac7986342 explicitly close the logging subsystem 2013-02-08 19:30:14 +01:00
Nikos Mavrogiannopoulos
b6f7abb3f4 separated tun handling code from main worker code. 2013-02-08 19:26:30 +01:00