Commit Graph

2713 Commits

Author SHA1 Message Date
Mike Miller
e69a07ed6e tests: allow running tests with alternate OpenConnect
Allow $OPENCONNECT in the caller's environment to override the default
openconnect system installation.

Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-23 08:04:59 +01:00
Nikos Mavrogiannopoulos
3af590bc6c Merge branch 'preserve-user-libs' into 'master'
configure: preserve LIBS from calling environment

See merge request !27
2016-12-23 07:04:02 +00:00
Mike Miller
888cbeabc7 configure: preserve LIBS from calling environment
Use the existing oldlibs temporary variable that was used but never
populated.

Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-22 18:48:23 -08:00
Nikos Mavrogiannopoulos
b6a2e26f1a Merge branch 'no-more-no-cert-check' into 'master'
fix test-sighup-key-change for current OpenConnect

OpenConnect 7.08 removed the option `--no-cert-check`. Pass the actual id of the newly generated server key. Fall back to the key fingerprint on CentOS 6 with an older version of GnuTLS certtool.

Resolves #81

See merge request !22
2016-12-18 12:05:32 +00:00
Mike Miller
dc222463e0 tests: fix test-sighup-key-change for current OpenConnect
OpenConnect 7.08 removed the option `--no-cert-check`. Pass the actual
id of the newly generated server key. On systems with older versions of
GnuTLS, pass the server key fingerprint instead.

Resolves #81

Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-17 12:52:15 -08:00
Mike Miller
273024c7ce .gitlab-ci.yml: add gnutls-bin to Debian build environment
Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-17 12:52:15 -08:00
Nikos Mavrogiannopoulos
f0c11be578 Merge branch 'tmp-host-update-test-fix' into 'master'
tests: make test-pass-script pass with new openconnect

The new versions (7.07+) do not automatically send a bogus hostname,
they require the --local-hostname parameter to be passed.

Resolves #80

See merge request !25
2016-12-16 08:53:30 +00:00
Nikos Mavrogiannopoulos
b18cd67917 tests: make test-pass-script pass with new openconnect
The new versions (7.07+) do not automatically send a bogus hostname,
they require the --local-hostname parameter to be passed.

Resolves #80
2016-12-16 09:37:44 +01:00
Mike Miller
d3370cccd0 tests: allow test-gssapi to run on Debian
Check for alternate filename of ntlmssp.conf on Debian-based systems.

Resolves #82

Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-16 09:24:43 +01:00
Mike Miller
9f0776e6ae tests: ensure unique temporary config file names
Some unit tests share the same ocserv config file. Ensure that the file
written and used by each test script has a unique name.

Resolves #83

Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-15 16:44:14 -08:00
Nikos Mavrogiannopoulos
cd39da8ae1 tests: coverted to bash tests which had bashishms 2016-12-15 21:23:17 +01:00
Nikos Mavrogiannopoulos
2da126a585 .gitlab-ci.yml: added Debian:stretch build 2016-12-14 09:04:04 +01:00
Mike Miller
e3ccd247a0 configure: discover pam_wrapper directory from pkg-config
Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-14 09:04:04 +01:00
Nikos Mavrogiannopoulos
eed6ff6902 Makefile.am: corrected typo 2016-12-14 09:03:30 +01:00
Nikos Mavrogiannopoulos
98d0ae62f6 README.md: corrected name of pam-oath in debian
Also added packages where were not previously mentioned in
Debian.
2016-12-14 09:03:14 +01:00
Mike Miller
34fd11d3a8 Fix typos in man pages, config files, and comments
Signed-off-by: Mike Miller <mtmiller@debian.org>
2016-12-13 18:01:23 -08:00
Nikos Mavrogiannopoulos
2c64c99baa Reverted recursive make in src/
This simplifies the make process and allows for greater parallelism
during build.
2016-12-13 15:37:07 +01:00
Nikos Mavrogiannopoulos
1b7e00ed02 Use unique names for autogen files
This addresses issue in parallel builds caused by autogen
using the same temporary files for both occtl and ocpasswd
files.

Resolves #76
2016-12-13 09:39:51 +01:00
Nikos Mavrogiannopoulos
7fea131d00 use stamp files to allow parallel build of autogen files
Autogen seems to output on the creates files gradually, something that
makes 'make' believe that the command is complete prior to the output
file being fully populated. The current approach uses stamp files to
ensure that no incomplete files are used for compilation.
2016-12-10 14:30:15 +01:00
Nikos Mavrogiannopoulos
729b04b00b doc update 2016-11-17 08:43:41 +01:00
Nikos Mavrogiannopoulos
eb9c86218e .gitlab-ci.yml: update autogenerated files prior to make dist 2016-11-17 08:33:41 +01:00
Nikos Mavrogiannopoulos
63e924b621 .gitlab-ci.yml: cleanups 2016-11-17 08:28:15 +01:00
Nikos Mavrogiannopoulos
e42c5ed7e7 autogen: store and use auto-generated autogen .in files in git builds
This simplifies the generation of the files (delegated to configure),
and allows systems without autogen to be used to compile git sources.
2016-11-17 08:28:11 +01:00
Nikos Mavrogiannopoulos
1f940f04c5 Revert "autogen: store and use auto-generated autogen files in git builds"
This reverts commit d0908f2c52.
2016-11-16 22:24:23 +01:00
Nikos Mavrogiannopoulos
b5c39e2edf sample.config: include switch-to-tcp-timeout directive 2016-11-15 14:57:48 +01:00
Nikos Mavrogiannopoulos
fce7610aa5 released 0.11.6 ocserv_0_11_6 2016-11-14 19:17:16 +01:00
Nikos Mavrogiannopoulos
943e2fb597 bumped version 2016-11-14 19:16:50 +01:00
Nikos Mavrogiannopoulos
7606842d99 occtl.8: Added examples of usage 2016-11-14 14:15:50 +01:00
Nikos Mavrogiannopoulos
e7b1636de4 occtl.8: added more info on JSON output 2016-11-14 14:10:49 +01:00
Nikos Mavrogiannopoulos
7b0e84a36e doc update 2016-11-11 18:17:28 +01:00
Nikos Mavrogiannopoulos
c8ea2a9183 .gitlab-ci.yml: added centos6 build 2016-11-11 18:17:28 +01:00
Nikos Mavrogiannopoulos
b7b8c084d0 common.mk: corrected path of generated static libs 2016-11-11 18:17:28 +01:00
Nikos Mavrogiannopoulos
d0908f2c52 autogen: store and use auto-generated autogen files in git builds
That is, if autogen is not present in the build system use the
stored files.
2016-11-11 18:17:22 +01:00
Nikos Mavrogiannopoulos
813a3a2451 configure: require automake 1.11.1
This allows ocserv to compile on Centos 6.
2016-11-11 17:53:21 +01:00
Nikos Mavrogiannopoulos
2c6f73222d when compiled with gnutls 3.5.6 or later use its pre-generated DH parameters 2016-11-11 09:37:12 +01:00
Nikos Mavrogiannopoulos
76ddc60c24 doc update 2016-11-11 09:27:18 +01:00
Nikos Mavrogiannopoulos
41a896fbe1 doc update 2016-11-11 09:24:54 +01:00
Nikos Mavrogiannopoulos
bcb2ec6505 ocserv: pre-load the OCSP response file
That allows the worker processes to serve OCSP responses, even when they
have no access to the actual file.
2016-11-11 09:17:31 +01:00
Nikos Mavrogiannopoulos
e9ea737707 doc update 2016-11-04 10:07:34 +01:00
Andrew Patrikalakis
69261b6aa8 Automatically switch to TCP in case of no received UDP traffic
and enable by default
2016-11-01 19:53:33 -07:00
Nikos Mavrogiannopoulos
135ee6dd75 doc update 2016-10-20 16:28:49 +02:00
Nikos Mavrogiannopoulos
9ca37523c7 doc update 2016-10-20 16:23:17 +02:00
Nikos Mavrogiannopoulos
9462dfd8c3 html: enhanced HTML decoding with decoding of explicit unicode chars 2016-10-16 17:08:49 +02:00
Nikos Mavrogiannopoulos
34caca57b0 tests: added basic checks for HTML escaping/unescaping 2016-10-16 16:58:49 +02:00
Nikos Mavrogiannopoulos
32e9766fe8 tests: added basic checks for URL escaping/unescaping 2016-10-16 15:48:42 +02:00
Nikos Mavrogiannopoulos
d743cf7bdd html: fixed URL escaping 2016-10-16 15:48:17 +02:00
Nikos Mavrogiannopoulos
f0f25dde00 doc: point to README-radius.md for radius configuration attributes 2016-10-09 17:39:37 +02:00
Nikos Mavrogiannopoulos
7f1297959b doc: mention about NAS-Port in radius README file 2016-09-27 15:41:48 +02:00
Nikos Mavrogiannopoulos
e474a15598 radius: update the worker's pid on subsequent updates
That is, even if we initially advertize the PID of the worker
handling the client as NAS-Port, the client may eventually end-up
being served by another process. In that case we make sure that
the radius server is notified on the next accounting message.
2016-09-27 09:06:18 +02:00
Nikos Mavrogiannopoulos
2c308e3a86 doc update 2016-09-25 15:46:54 +02:00