Commit Graph

2703 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
cd39da8ae1 tests: coverted to bash tests which had bashishms 2016-12-15 21:23:17 +01:00
Nikos Mavrogiannopoulos
2da126a585 .gitlab-ci.yml: added Debian:stretch build 2016-12-14 09:04:04 +01:00
Mike Miller
e3ccd247a0 configure: discover pam_wrapper directory from pkg-config
Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-14 09:04:04 +01:00
Nikos Mavrogiannopoulos
eed6ff6902 Makefile.am: corrected typo 2016-12-14 09:03:30 +01:00
Nikos Mavrogiannopoulos
98d0ae62f6 README.md: corrected name of pam-oath in debian
Also added packages where were not previously mentioned in
Debian.
2016-12-14 09:03:14 +01:00
Mike Miller
34fd11d3a8 Fix typos in man pages, config files, and comments
Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-13 18:01:23 -08:00
Nikos Mavrogiannopoulos
2c64c99baa Reverted recursive make in src/
This simplifies the make process and allows for greater parallelism
during build.
2016-12-13 15:37:07 +01:00
Nikos Mavrogiannopoulos
1b7e00ed02 Use unique names for autogen files
This addresses issue in parallel builds caused by autogen
using the same temporary files for both occtl and ocpasswd
files.

Resolves #76
2016-12-13 09:39:51 +01:00
Nikos Mavrogiannopoulos
7fea131d00 use stamp files to allow parallel build of autogen files
Autogen seems to output on the creates files gradually, something that
makes 'make' believe that the command is complete prior to the output
file being fully populated. The current approach uses stamp files to
ensure that no incomplete files are used for compilation.
2016-12-10 14:30:15 +01:00
Nikos Mavrogiannopoulos
729b04b00b doc update 2016-11-17 08:43:41 +01:00
Nikos Mavrogiannopoulos
eb9c86218e .gitlab-ci.yml: update autogenerated files prior to make dist 2016-11-17 08:33:41 +01:00
Nikos Mavrogiannopoulos
63e924b621 .gitlab-ci.yml: cleanups 2016-11-17 08:28:15 +01:00
Nikos Mavrogiannopoulos
e42c5ed7e7 autogen: store and use auto-generated autogen .in files in git builds
This simplifies the generation of the files (delegated to configure),
and allows systems without autogen to be used to compile git sources.
2016-11-17 08:28:11 +01:00
Nikos Mavrogiannopoulos
1f940f04c5 Revert "autogen: store and use auto-generated autogen files in git builds"
This reverts commit d0908f2c52.
2016-11-16 22:24:23 +01:00
Nikos Mavrogiannopoulos
b5c39e2edf sample.config: include switch-to-tcp-timeout directive 2016-11-15 14:57:48 +01:00
Nikos Mavrogiannopoulos
fce7610aa5 released 0.11.6 ocserv_0_11_6 2016-11-14 19:17:16 +01:00
Nikos Mavrogiannopoulos
943e2fb597 bumped version 2016-11-14 19:16:50 +01:00
Nikos Mavrogiannopoulos
7606842d99 occtl.8: Added examples of usage 2016-11-14 14:15:50 +01:00
Nikos Mavrogiannopoulos
e7b1636de4 occtl.8: added more info on JSON output 2016-11-14 14:10:49 +01:00
Nikos Mavrogiannopoulos
7b0e84a36e doc update 2016-11-11 18:17:28 +01:00
Nikos Mavrogiannopoulos
c8ea2a9183 .gitlab-ci.yml: added centos6 build 2016-11-11 18:17:28 +01:00
Nikos Mavrogiannopoulos
b7b8c084d0 common.mk: corrected path of generated static libs 2016-11-11 18:17:28 +01:00
Nikos Mavrogiannopoulos
d0908f2c52 autogen: store and use auto-generated autogen files in git builds
That is, if autogen is not present in the build system use the
stored files.
2016-11-11 18:17:22 +01:00
Nikos Mavrogiannopoulos
813a3a2451 configure: require automake 1.11.1
This allows ocserv to compile on Centos 6.
2016-11-11 17:53:21 +01:00
Nikos Mavrogiannopoulos
2c6f73222d when compiled with gnutls 3.5.6 or later use its pre-generated DH parameters 2016-11-11 09:37:12 +01:00
Nikos Mavrogiannopoulos
76ddc60c24 doc update 2016-11-11 09:27:18 +01:00
Nikos Mavrogiannopoulos
41a896fbe1 doc update 2016-11-11 09:24:54 +01:00
Nikos Mavrogiannopoulos
bcb2ec6505 ocserv: pre-load the OCSP response file
That allows the worker processes to serve OCSP responses, even when they
have no access to the actual file.
2016-11-11 09:17:31 +01:00
Nikos Mavrogiannopoulos
e9ea737707 doc update 2016-11-04 10:07:34 +01:00
Andrew Patrikalakis
69261b6aa8 Automatically switch to TCP in case of no received UDP traffic
and enable by default
2016-11-01 19:53:33 -07:00
Nikos Mavrogiannopoulos
135ee6dd75 doc update 2016-10-20 16:28:49 +02:00
Nikos Mavrogiannopoulos
9ca37523c7 doc update 2016-10-20 16:23:17 +02:00
Nikos Mavrogiannopoulos
9462dfd8c3 html: enhanced HTML decoding with decoding of explicit unicode chars 2016-10-16 17:08:49 +02:00
Nikos Mavrogiannopoulos
34caca57b0 tests: added basic checks for HTML escaping/unescaping 2016-10-16 16:58:49 +02:00
Nikos Mavrogiannopoulos
32e9766fe8 tests: added basic checks for URL escaping/unescaping 2016-10-16 15:48:42 +02:00
Nikos Mavrogiannopoulos
d743cf7bdd html: fixed URL escaping 2016-10-16 15:48:17 +02:00
Nikos Mavrogiannopoulos
f0f25dde00 doc: point to README-radius.md for radius configuration attributes 2016-10-09 17:39:37 +02:00
Nikos Mavrogiannopoulos
7f1297959b doc: mention about NAS-Port in radius README file 2016-09-27 15:41:48 +02:00
Nikos Mavrogiannopoulos
e474a15598 radius: update the worker's pid on subsequent updates
That is, even if we initially advertize the PID of the worker
handling the client as NAS-Port, the client may eventually end-up
being served by another process. In that case we make sure that
the radius server is notified on the next accounting message.
2016-09-27 09:06:18 +02:00
Nikos Mavrogiannopoulos
2c308e3a86 doc update 2016-09-25 15:46:54 +02:00
Nikos Mavrogiannopoulos
5fce6c8c86 Use the X-AnyConnect-Identifier-Platform header to identify mobile clients
That is, if the header contains "android" or "apple-ios" mark it as
a mobile client. The header X-AnyConnect-Identifier-DeviceType is only
considered for logging purposes and appended to the user-agent name
if present.
2016-09-25 15:44:43 +02:00
Nikos Mavrogiannopoulos
d30c5616af .gitlab-ci.yml: restrict freebsd build on ocserv branches
This runner is not shared and cannot be taken advantage outside
the ocserv group.
2016-09-24 13:20:22 +02:00
Nikos Mavrogiannopoulos
047b70e1bb bumped version ocserv_0_11_5 2016-09-23 09:38:40 +02:00
Nikos Mavrogiannopoulos
17122fe364 bumped version 2016-09-22 17:55:59 +02:00
Nikos Mavrogiannopoulos
8f8ff565af get_session_id: added explicit casts 2016-09-22 15:56:23 +02:00
Nikos Mavrogiannopoulos
c53b97367e config: more consistent printing of startup error and info messages 2016-09-22 15:52:22 +02:00
Nikos Mavrogiannopoulos
445b9070a6 untied the cisco-client-compat option from the DTLS-LEGACY protocol
Introduced instead the 'dtls-legacy' config option which can be used
to explicitly disable the legacy DTLS protocol.
2016-09-22 15:43:50 +02:00
Nikos Mavrogiannopoulos
bd87c7607e renamed match-tls-and-dtls-ciphers to match-tls-dtls-ciphers 2016-09-22 15:26:02 +02:00
Nikos Mavrogiannopoulos
22a01d2981 doc update 2016-09-22 15:21:57 +02:00
Nikos Mavrogiannopoulos
4c85fa97f0 Added configuration option 'dtls-psk'
When this option is set to false, the DTLS-PSK protocol
will not be negotiated by worker processes. The process will fallback
to the legacy protocol in that case.
2016-09-22 15:20:35 +02:00