Commit Graph

3587 Commits

Author SHA1 Message Date
Dimitri Papadopoulos
f28669bf60 Remove spaces
* Remove trailing spaces at end-of-line
* Remove blank lines at end-of-file

Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>
2022-11-28 11:22:33 +01:00
Nikos Mavrogiannopoulos
03b71ca57f doc update [ci skip]
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-11-26 16:25:21 +01:00
Nikos Mavrogiannopoulos
1f5bd46ef1 Merge branch 'master' into 'master'
seccomp: allow essential syscalls in 32-bit arm platform

See merge request openconnect/ocserv!298
2022-11-26 15:22:54 +00:00
Zhiyuan Wan
3bc39e40c0 seccomp: allow essential syscalls on 32-bit platform.
This fix ocserv auth issue on armv7 platform.
Not tested with other 32-bit platforms, be careful.

Solves issue #474

Signed-off-by: Zhiyuan Wan <h@iloli.bid>
2022-11-24 15:18:10 +08:00
Nikos Mavrogiannopoulos
15fe120292 ocserv.8: Align example with the default ocserv configuration for certificates
Relates: #468

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-10-23 20:29:44 +02:00
Nikos Mavrogiannopoulos
a299300e67 seccomp: allow setitimer
This enables ocserv on musl/alpine.

Resolves #455

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-10-09 20:12:13 +02:00
Dimitri Papadopoulos
d034f0d95a Fix codespell false positive
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2022-10-09 20:11:29 +02:00
Feng Xie
f1afd357e4 Merge branch 'taramallesh-master-patch-65583' into 'master'
Allow HTTP headers to be  configurable

See merge request openconnect/ocserv!293
2022-07-02 04:02:57 +00:00
Tara Mallesh
cfe2ea06d9 Allow HTTP headers to be configurable 2022-07-02 04:02:56 +00:00
Nikos Mavrogiannopoulos
413edf38bf Makefile.am: LICENSE -> COPYING
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-06-02 08:51:20 +02:00
Nikos Mavrogiannopoulos
95b521d58e Added detailed licensing information in README.md
This keeps COPYING as the main licensing file.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-06-01 16:00:39 +02:00
Nikos Mavrogiannopoulos
1c17846ea5 Merge branch 'tun-iteration-fix-issue-443' into 'master'
Base /dev/tunN iteration on max-clients

Closes #443

See merge request openconnect/ocserv!291
2022-03-17 07:44:26 +00:00
Marc West
e0a2fa4c3c Base /dev/tunN iteration on max-clients for OSes that do not have the /dev/tun special control device 2022-03-16 22:47:29 +00:00
Nikos Mavrogiannopoulos
7114104b8c Merge branch 'taramallesh-master-patch-01031' into 'master'
Add Pragma and Cache-control HTTP headers.

See merge request openconnect/ocserv!290
2022-03-15 08:36:22 +00:00
Tara Mallesh
73307e2dac Update worker-http.c 2022-03-14 05:25:11 +00:00
Tara Mallesh
058c63303f Update test-owasp-headers with Pragma and Cache-control checks 2022-03-09 17:48:51 +00:00
Tara Mallesh
c60c7cad98 Fix typo to remove extra closing bracket 2022-03-07 21:16:11 +00:00
Tara Mallesh
49a03419e8 Add Pragma and Cache-control HTTP headers. 2022-03-07 19:57:46 +00:00
Nikos Mavrogiannopoulos
a1bd01169f Merge branch 'groovyfengx-master-patch-69245' into 'master'
Fixing memory leak in OpenID Connect auth module

See merge request openconnect/ocserv!289
2022-03-02 08:48:55 +00:00
Feng Xie
030163fbbe Fixing memory leak in OpenConnect auth module 2022-03-01 22:28:47 +00:00
Nikos Mavrogiannopoulos
3d19078be6 Merge branch 'groovyfengx-master-patch-58049' into 'master'
Fixing issue: Authentication requests from the same IP address are not load balanced among security modules

Closes #444

See merge request openconnect/ocserv!288
2022-03-01 20:26:44 +00:00
Nikos Mavrogiannopoulos
43dbe741c7 Merge branch 'groovyfengx-master-patch-44853' into 'master'
Fixing memory deallocation issue in auth

See merge request openconnect/ocserv!287
2022-03-01 20:25:01 +00:00
Feng Xie
4ec99609ca Fixing issue: Authentication requests from the same IP address are not load balanced among security modules 2022-02-28 16:00:13 +00:00
Feng Xie
765472bd2c Fixing memory deallocation issue in auth. 2022-02-28 15:54:18 +00:00
Nikos Mavrogiannopoulos
8b00d198d9 released 1.1.6
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
1.1.6
2022-02-17 09:21:36 +01:00
Nikos Mavrogiannopoulos
eb6d1c0aef sec-mod: increased max groups to 128
Relates to #219

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-17 08:53:30 +01:00
Nikos Mavrogiannopoulos
1b826069eb str_rep_tab: added explicit initializer
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-15 10:34:18 +01:00
Nikos Mavrogiannopoulos
53b08d2433 forward_udp_to_owner: sanity check of session_id_size
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-15 10:33:45 +01:00
Nikos Mavrogiannopoulos
cdcc5eda4d doc update
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-11 11:41:58 +01:00
Nikos Mavrogiannopoulos
93e62b93ac Merge branch 'tmp-fix-f36-issues' into 'master'
Updates to fix operation in fedora 36

See merge request openconnect/ocserv!285
2022-02-10 15:28:23 +00:00
Nikos Mavrogiannopoulos
c1030512a7 load_keys: work around GnuTLS 3.7.3 regression
GnuTLS 3.7.3 introduces a backwards incompatible change and
GNUTLS_E_PKCS11_PIN_ERROR is returned when an encrypted
file is loaded.

Reported at https://gitlab.com/gnutls/gnutls/-/issues/1321

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-10 16:05:35 +01:00
Nikos Mavrogiannopoulos
94af87c7a2 libtasn1: use NULL instead of ASN1_TYPE_EMPTY
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-10 15:31:39 +01:00
Nikos Mavrogiannopoulos
a2fbdabf5e seccomp: allow futex()
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-10 15:03:23 +01:00
Nikos Mavrogiannopoulos
ed4ec0a3cb NEWS: doc update
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-05 10:20:26 +01:00
Nikos Mavrogiannopoulos
44ec3c60ed sample.config: document the local subnet exemption from ban.
Relates: #441

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2022-02-05 10:20:26 +01:00
Nikos Mavrogiannopoulos
f65bb80e9a Merge branch 'Openconnect' into 'master'
Openconnect → OpenConnect

See merge request openconnect/ocserv!282
2022-01-27 10:35:55 +00:00
Nikos Mavrogiannopoulos
3a5dd582eb Merge branch 'master' into 'master'
Make compatible with AnyConnect client on Windows ARM64

See merge request openconnect/ocserv!284
2022-01-27 10:23:28 +00:00
David Madole
bfeab649c8 Make compatible with AnyConnect client on Windows ARM64 2022-01-26 01:46:57 +00:00
Dimitri Papadopoulos
feffac374a Openconnect → OpenConnect
Spell OpenConnect products consistently.

This will modify the README file, but not the online documentation.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-27 12:48:20 +01:00
Nikos Mavrogiannopoulos
dcd08a6639 Merge branch 'makefile_silent_recipe' into 'master'
Silence the codespell recipe in Makefile

See merge request openconnect/ocserv!281
2021-12-23 14:34:56 +00:00
Dimitri Papadopoulos
2cec6c92d1 Silence the codespell recipe in Makefile
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 11:52:17 +01:00
Nikos Mavrogiannopoulos
5b7e35cbc1 Merge branch 'codespell' into 'master'
Add codespell configuration file

See merge request openconnect/ocserv!275
2021-12-23 09:46:41 +00:00
Dimitri Papadopoulos
c009134915 Add codespell CI runner
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:30 +01:00
Dimitri Papadopoulos
44bb12bb1a Revert previous typo fixes to CCAN and PCL
Revert !271 / 81df79a9 and !276 / 3a92062b.

These are vendored files that need to be fixed upstream.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:29 +01:00
Dimitri Papadopoulos
e51acb8c3e Fix more typos
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:29 +01:00
Dimitri Papadopoulos
172d91328d Add codespell configuration file
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2021-12-23 10:04:29 +01:00
Nikos Mavrogiannopoulos
ace958c31f Merge branch 'tmp-fedora35' into 'master'
fedora: updated to 35

See merge request openconnect/ocserv!279
2021-12-22 21:57:19 +00:00
Nikos Mavrogiannopoulos
cd2ad0c66f radiusd.conf: set libdir through autoconf
It should depend on the system tested.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-12-22 22:28:06 +01:00
Nikos Mavrogiannopoulos
db505b373c Merge branch 'visual_studio_spell_checker' into 'master'
Typos found by Visual Studio Code Checker

See merge request openconnect/ocserv!276
2021-12-22 18:41:17 +00:00
Nikos Mavrogiannopoulos
cffd7d23b3 fedora: updated to 35
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2021-12-22 19:38:16 +01:00