Commit Graph

1354 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
db48e3db07 added set_non_block() 2014-10-05 22:00:53 +02:00
Nikos Mavrogiannopoulos
5a32ad3f3f corrected typo 2014-10-05 19:34:28 +02:00
Nikos Mavrogiannopoulos
4cf06b934c released 0.8.6 ocserv_0_8_6 2014-10-05 19:30:27 +02:00
Nikos Mavrogiannopoulos
2ab42ed1f2 simplified FATAL_ERR_CMD() 2014-10-05 14:47:21 +02:00
Nikos Mavrogiannopoulos
60d3891b3b doc update 2014-10-05 14:43:15 +02:00
Nikos Mavrogiannopoulos
0390f21db6 added recv_timeout() to replace force_read_timeout() in socket reading 2014-10-05 14:41:45 +02:00
Nikos Mavrogiannopoulos
02dcbe6e56 cleanup of cstp_recv() and cstp_recv_nb() 2014-10-05 14:41:44 +02:00
Nikos Mavrogiannopoulos
c2640d0076 updated to libopts 5.18.4 ocserv_0_8_5_1 2014-10-04 10:09:31 +02:00
Nikos Mavrogiannopoulos
442ea48f2b released 0.8.5 ocserv_0_8_5 2014-10-03 20:32:51 +02:00
Nikos Mavrogiannopoulos
9118736555 eliminated last uses of force_close() 2014-10-02 09:37:21 +02:00
Nikos Mavrogiannopoulos
ef7fb7d594 Revert "use force_close() on server to avoid descriptor leaks"
This reverts commit f622f6696c.
2014-10-02 09:36:22 +02:00
Nikos Mavrogiannopoulos
3a455f4178 listen-file -> listen-clear-file 2014-09-28 09:06:14 +02:00
Nikos Mavrogiannopoulos
e2585b2f26 unix-conn-file -> listen-file 2014-09-26 08:54:41 +02:00
Nikos Mavrogiannopoulos
1cb35b8b09 use more reasonable names to open and close a session 2014-09-25 16:41:54 +02:00
Nikos Mavrogiannopoulos
4674508188 override the user's group prior to opening the group configuration file
That prevented opening group configuration for users that had their
group in a certificate. Reported by Norbert Paschedag.
2014-09-25 12:17:03 +02:00
Nikos Mavrogiannopoulos
bdcd27d13e optional-certificate was renamed to certificate[optional] 2014-09-25 10:36:46 +02:00
Nikos Mavrogiannopoulos
accdb24050 allow positive values to waitpid 2014-09-25 10:26:50 +02:00
Nikos Mavrogiannopoulos
f4de7e7757 increased the verbosity of shutdown messages 2014-09-25 10:04:00 +02:00
Nikos Mavrogiannopoulos
ba508b3d4d doc update 2014-09-24 13:13:12 +02:00
Nikos Mavrogiannopoulos
701559e4b0 Added self-tests for optional certificate authentication 2014-09-24 13:11:41 +02:00
Nikos Mavrogiannopoulos
365ca267d4 added new authentication mode optional-certificate
That mode allows having only specific group of users that are required
to present a certificate.
2014-09-24 12:41:31 +02:00
Nikos Mavrogiannopoulos
16cde4dc10 bumped version 2014-09-24 11:37:44 +02:00
Nikos Mavrogiannopoulos
93353f9ee6 doc update 2014-09-24 11:37:19 +02:00
Nikos Mavrogiannopoulos
67c76db309 replaced vasprintf() with correct variant 2014-09-24 11:36:30 +02:00
Nikos Mavrogiannopoulos
30bcf35576 Revert "license upgraded to GPLv3"
This reverts commit 213f9a63ee.

Conflicts:
	configure.ac
2014-09-24 11:34:15 +02:00
Nikos Mavrogiannopoulos
aeb0f1edd5 added test for unix socket operation 2014-09-24 11:33:25 +02:00
Nikos Mavrogiannopoulos
de486dbdfe Allow disabling the TCP port completely 2014-09-23 22:47:36 +02:00
Nikos Mavrogiannopoulos
f08612126d doc update 2014-09-23 22:40:37 +02:00
Nikos Mavrogiannopoulos
b479659836 do not allow the combination of AUTH_TYPE_CERTIFICATE and unix-conn-file 2014-09-23 22:33:37 +02:00
Nikos Mavrogiannopoulos
56bcfffed7 allow the group owner of the connection socket to access it 2014-09-23 16:42:30 +02:00
Nikos Mavrogiannopoulos
4ea5a56ace Allow the CSTP layer to operate without TLS
That also introduces a unix domain socket under which connections to the
server can occur.
2014-09-23 16:08:29 +02:00
Nikos Mavrogiannopoulos
ddcb609c5d corrected tun device closing order for BSD systems 2014-09-21 08:47:57 +02:00
Nikos Mavrogiannopoulos
f622f6696c use force_close() on server to avoid descriptor leaks 2014-09-21 01:40:36 +02:00
Nikos Mavrogiannopoulos
a8b32ed8f0 ensure that in all cases the tun fd is closed 2014-09-21 01:35:50 +02:00
Nikos Mavrogiannopoulos
0cd8002f0c when a UDP packet error occurs print the IP of the packet 2014-09-20 00:04:01 +02:00
Nikos Mavrogiannopoulos
552e7b24e7 fail when a tun device has no name 2014-09-19 21:29:30 +02:00
Nikos Mavrogiannopoulos
d5d27b2379 updated comment 2014-09-10 22:38:25 +02:00
Nikos Mavrogiannopoulos
88fb5ab33c reduced the severity of debug messages 2014-09-09 16:15:50 +02:00
Nikos Mavrogiannopoulos
0da35d20fa added more debugging messages in pam module 2014-09-09 14:13:30 +02:00
Nikos Mavrogiannopoulos
913274b44e pam messages made more specific 2014-09-09 13:48:39 +02:00
Nikos Mavrogiannopoulos
265e723cdb send the IPv6 netmask in a compatible with cisco servers way 2014-09-09 09:36:48 +02:00
Nikos Mavrogiannopoulos
06c02caa02 In IPv6 send the prefix instead of the netmask
That allows vpnc-script in windows to apply the correct settings.
2014-09-08 13:50:47 +02:00
Nikos Mavrogiannopoulos
aa6cacf041 TODO: updated 2014-09-04 16:55:37 +02:00
Nikos Mavrogiannopoulos
ab999fec4f doc update 2014-09-03 19:21:26 +02:00
Nikos Mavrogiannopoulos
1576a3195d modified rx test to an occtl test 2014-09-03 19:18:39 +02:00
Nikos Mavrogiannopoulos
c79eefcf9c Revert "print the per-user RX and TX bytes from occtl"
This reverts commit ecd6e316a9.
2014-09-03 19:15:08 +02:00
Nikos Mavrogiannopoulos
be50fb3ac1 updated full-test 2014-09-03 19:06:20 +02:00
Nikos Mavrogiannopoulos
9f42ae8da8 added test for RX data 2014-09-02 13:39:49 +02:00
Nikos Mavrogiannopoulos
ecd6e316a9 print the per-user RX and TX bytes from occtl 2014-09-02 11:44:03 +02:00
Nikos Mavrogiannopoulos
a40c5afcc8 sec-mod-auth: don't print misleading message on session control 2014-09-01 00:45:20 +02:00