Commit Graph

2319 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
e91a56117b tests: modified cwrap tests to run from different builddir 2015-11-19 14:30:48 +01:00
Nikos Mavrogiannopoulos
ba44c2a6c1 pass DPD and keepalive values to occtl 2015-11-19 12:23:37 +01:00
Nikos Mavrogiannopoulos
01a6435fad .gitlab-ci.yml: run all checks on build systems 2015-11-19 10:46:22 +01:00
Nikos Mavrogiannopoulos
345a752676 tests: converted part of the test suite to run with cwrap
That allows several tests to run as non-root.
2015-11-19 10:44:34 +01:00
Nikos Mavrogiannopoulos
a09d4f51ab relocated confusing message on user logged in 2015-11-19 10:09:38 +01:00
Nikos Mavrogiannopoulos
8d03519fb2 doc update 2015-11-17 11:02:26 +01:00
Nikos Mavrogiannopoulos
2b0102d1c5 tests: use more sensible names for pid files 2015-11-17 08:36:27 +01:00
Nikos Mavrogiannopoulos
f770e0000c tests: added check to verify the proper operation of cookie key rotation 2015-11-17 08:36:04 +01:00
Nikos Mavrogiannopoulos
2473633b8d Added cookie key rotation 2015-11-17 08:33:38 +01:00
Nikos Mavrogiannopoulos
fd5f9df898 route-add: added more sensible version of system() 2015-11-16 22:30:56 +01:00
Nikos Mavrogiannopoulos
9f93c318a3 prior to calling system set the default signal mask 2015-11-16 18:14:16 +01:00
Nikos Mavrogiannopoulos
684f779381 tests: use fedora 23 for docker images 2015-11-16 17:59:32 +01:00
Nikos Mavrogiannopoulos
850dd24be3 document testing dependencies 2015-11-16 17:59:23 +01:00
Nikos Mavrogiannopoulos
cc48b0808a A failure to apply iroutes is propagated and login is denied 2015-11-16 17:22:45 +01:00
Nikos Mavrogiannopoulos
8cb807d27d design.md: document a possible optimization in IPC protocol 2015-11-13 12:46:36 +01:00
Nikos Mavrogiannopoulos
3c653fa747 worker-extras -> worker-http-handers 2015-11-13 10:24:02 +01:00
Nikos Mavrogiannopoulos
a53ee64472 occtl: include files from generated common dir 2015-11-11 16:30:29 +01:00
Nikos Mavrogiannopoulos
0d9d283b12 tests: remove CCAN sources - we already link to libccan.a 2015-11-11 16:26:47 +01:00
Nikos Mavrogiannopoulos
8d17358c8b don't export LIBTALLOC_CFLAGS when using the included 2015-11-11 16:25:45 +01:00
Nikos Mavrogiannopoulos
b2881375af tests: use proper cflags after code refactor 2015-11-11 16:16:02 +01:00
Nikos Mavrogiannopoulos
ba81d998e9 common: include upper dir for auto-generated headers 2015-11-11 16:12:54 +01:00
Nikos Mavrogiannopoulos
d9d246a375 finish move of ctl.proto to common/ 2015-11-11 16:10:31 +01:00
Nikos Mavrogiannopoulos
113c265030 common: Added missing file 2015-11-11 16:06:19 +01:00
Nikos Mavrogiannopoulos
b5640d61fb cstp_send_file: use system calls instead of libc for open/read
That simplifies the handling of seccomp rules.
2015-11-11 16:06:16 +01:00
Nikos Mavrogiannopoulos
3ba4c2b618 move common sources to common/ 2015-11-11 14:59:30 +01:00
Nikos Mavrogiannopoulos
2ef8d5a4c2 gnulib: remove all fcntl/open/etc compatibility functions 2015-11-11 14:53:17 +01:00
Nikos Mavrogiannopoulos
e6b942b5f8 .gitlab-ci.yml: cannot build with --with-local-talloc - it conflicts with system header 2015-11-11 14:10:50 +01:00
Nikos Mavrogiannopoulos
75b3461f70 .gitlab-ci.yml: don't use --enable-local-libopts on minimal build
It cannot be used everywhere.
2015-11-11 14:04:33 +01:00
Nikos Mavrogiannopoulos
6c3e5d31a7 ccan: build as an included library 2015-11-11 14:03:55 +01:00
Nikos Mavrogiannopoulos
805db4f9f6 use an intermediate protobuf library for the included protobuf sources 2015-11-11 13:35:25 +01:00
Nikos Mavrogiannopoulos
e618f2891a .gitlab-ci.yml: added build check with minimal setup 2015-11-10 16:13:48 +01:00
Nikos Mavrogiannopoulos
65004a55df Added configuration option tunnel-all-dns 2015-11-10 13:50:03 +01:00
Nikos Mavrogiannopoulos
f10b7e0055 use 'secondary_password' as name for any additional XML password fields 2015-11-10 13:49:59 +01:00
Nikos Mavrogiannopoulos
5138a39116 Added a draft design document 2015-11-10 13:49:56 +01:00
Nikos Mavrogiannopoulos
e8484a2aea .gitlab-ci.yml: compile and run make check with libasan 2015-11-10 13:49:46 +01:00
Nikos Mavrogiannopoulos
1782dcb264 tests: ensure there are no leaks in ban-ips 2015-11-10 13:49:43 +01:00
Nikos Mavrogiannopoulos
14faa4f100 ocpasswd: ensure there are no leaks 2015-11-10 13:49:41 +01:00
Nikos Mavrogiannopoulos
d2dd7f124f tests: added unit test for IPv4 and IPv6 address banning 2015-11-10 13:49:36 +01:00
Nikos Mavrogiannopoulos
532b751d9d tests: check whether max-same-clients is considered in per-user-config 2015-11-10 13:49:32 +01:00
Nikos Mavrogiannopoulos
bc0131301e tests: provide a correct route in radius test/fixes ipv6 ping issue 2015-11-10 13:49:22 +01:00
Nikos Mavrogiannopoulos
f73b6328d0 more files to ignore 2015-11-10 13:49:19 +01:00
Nikos Mavrogiannopoulos
5ab5c87d59 tests: added check for setting user-specific configuration options (DPD, Keepalive)
That also checks whether the 'expose-iroutes' option is working as expected.
2015-11-10 13:49:16 +01:00
Nikos Mavrogiannopoulos
0b8f4beb8b Added user-specific configuration options dpd, mobile-dpd, keepalive, max-same-clients 2015-11-10 13:49:13 +01:00
Nikos Mavrogiannopoulos
598e7ea9a2 corrected usage of human_addr2() 2015-11-10 13:49:11 +01:00
Nikos Mavrogiannopoulos
87cdfdb4b7 bumped version 2015-11-10 13:48:48 +01:00
Nikos Mavrogiannopoulos
1dff40e1c4 treat a /64 block of IPv6 addresses as a single address
That is, for banning purposes. Note that this is absurd but
that's the current best practice for IPv6.
2015-11-10 13:48:46 +01:00
Nikos Mavrogiannopoulos
e42ecb6619 tests: corrected header in ipv6-prefix 2015-11-10 13:48:39 +01:00
Nikos Mavrogiannopoulos
9c78257455 for the default IPv6 address, ensure we don't use the network address
The former seems to confuse the linux kernel.
2015-11-10 13:48:24 +01:00
Nikos Mavrogiannopoulos
aed34ebd62 ip banning: entries hold in raw IP format rather than textual 2015-11-10 13:47:51 +01:00
Nikos Mavrogiannopoulos
518d8679d1 tests: use debian:testing for tests 2015-11-01 17:31:43 +01:00