GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 08:46:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,346 Commits 19 Branches 88 Tags
ocserv_0_8_5
Commit Graph

1346 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nikos Mavrogiannopoulos
442ea48f2b released 0.8.5 ocserv_0_8_5 2014-10-03 20:32:51 +02:00
Nikos Mavrogiannopoulos
9118736555 eliminated last uses of force_close() 2014-10-02 09:37:21 +02:00
Nikos Mavrogiannopoulos
ef7fb7d594 Revert "use force_close() on server to avoid descriptor leaks" 
This reverts commit f622f6696c.
 2014-10-02 09:36:22 +02:00
Nikos Mavrogiannopoulos
3a455f4178 listen-file -> listen-clear-file 2014-09-28 09:06:14 +02:00
Nikos Mavrogiannopoulos
e2585b2f26 unix-conn-file -> listen-file 2014-09-26 08:54:41 +02:00
Nikos Mavrogiannopoulos
1cb35b8b09 use more reasonable names to open and close a session 2014-09-25 16:41:54 +02:00
Nikos Mavrogiannopoulos
4674508188 override the user's group prior to opening the group configuration file 
That prevented opening group configuration for users that had their
group in a certificate. Reported by Norbert Paschedag.
 2014-09-25 12:17:03 +02:00
Nikos Mavrogiannopoulos
bdcd27d13e optional-certificate was renamed to certificate[optional] 2014-09-25 10:36:46 +02:00
Nikos Mavrogiannopoulos
accdb24050 allow positive values to waitpid 2014-09-25 10:26:50 +02:00
Nikos Mavrogiannopoulos
f4de7e7757 increased the verbosity of shutdown messages 2014-09-25 10:04:00 +02:00
Nikos Mavrogiannopoulos
ba508b3d4d doc update 2014-09-24 13:13:12 +02:00
Nikos Mavrogiannopoulos
701559e4b0 Added self-tests for optional certificate authentication 2014-09-24 13:11:41 +02:00
Nikos Mavrogiannopoulos
365ca267d4 added new authentication mode optional-certificate 
That mode allows having only specific group of users that are required
to present a certificate.
 2014-09-24 12:41:31 +02:00
Nikos Mavrogiannopoulos
16cde4dc10 bumped version 2014-09-24 11:37:44 +02:00
Nikos Mavrogiannopoulos
93353f9ee6 doc update 2014-09-24 11:37:19 +02:00
Nikos Mavrogiannopoulos
67c76db309 replaced vasprintf() with correct variant 2014-09-24 11:36:30 +02:00
Nikos Mavrogiannopoulos
30bcf35576 Revert "license upgraded to GPLv3" 
This reverts commit 213f9a63ee.

Conflicts:
	configure.ac
 2014-09-24 11:34:15 +02:00
Nikos Mavrogiannopoulos
aeb0f1edd5 added test for unix socket operation 2014-09-24 11:33:25 +02:00
Nikos Mavrogiannopoulos
de486dbdfe Allow disabling the TCP port completely 2014-09-23 22:47:36 +02:00
Nikos Mavrogiannopoulos
f08612126d doc update 2014-09-23 22:40:37 +02:00
Nikos Mavrogiannopoulos
b479659836 do not allow the combination of AUTH_TYPE_CERTIFICATE and unix-conn-file 2014-09-23 22:33:37 +02:00
Nikos Mavrogiannopoulos
56bcfffed7 allow the group owner of the connection socket to access it 2014-09-23 16:42:30 +02:00
Nikos Mavrogiannopoulos
4ea5a56ace Allow the CSTP layer to operate without TLS 
That also introduces a unix domain socket under which connections to the
server can occur.
 2014-09-23 16:08:29 +02:00
Nikos Mavrogiannopoulos
ddcb609c5d corrected tun device closing order for BSD systems 2014-09-21 08:47:57 +02:00
Nikos Mavrogiannopoulos
f622f6696c use force_close() on server to avoid descriptor leaks 2014-09-21 01:40:36 +02:00
Nikos Mavrogiannopoulos
a8b32ed8f0 ensure that in all cases the tun fd is closed 2014-09-21 01:35:50 +02:00
Nikos Mavrogiannopoulos
0cd8002f0c when a UDP packet error occurs print the IP of the packet 2014-09-20 00:04:01 +02:00
Nikos Mavrogiannopoulos
552e7b24e7 fail when a tun device has no name 2014-09-19 21:29:30 +02:00
Nikos Mavrogiannopoulos
d5d27b2379 updated comment 2014-09-10 22:38:25 +02:00
Nikos Mavrogiannopoulos
88fb5ab33c reduced the severity of debug messages 2014-09-09 16:15:50 +02:00
Nikos Mavrogiannopoulos
0da35d20fa added more debugging messages in pam module 2014-09-09 14:13:30 +02:00
Nikos Mavrogiannopoulos
913274b44e pam messages made more specific 2014-09-09 13:48:39 +02:00
Nikos Mavrogiannopoulos
265e723cdb send the IPv6 netmask in a compatible with cisco servers way 2014-09-09 09:36:48 +02:00
Nikos Mavrogiannopoulos
06c02caa02 In IPv6 send the prefix instead of the netmask 
That allows vpnc-script in windows to apply the correct settings.
 2014-09-08 13:50:47 +02:00
Nikos Mavrogiannopoulos
aa6cacf041 TODO: updated 2014-09-04 16:55:37 +02:00
Nikos Mavrogiannopoulos
ab999fec4f doc update 2014-09-03 19:21:26 +02:00
Nikos Mavrogiannopoulos
1576a3195d modified rx test to an occtl test 2014-09-03 19:18:39 +02:00
Nikos Mavrogiannopoulos
c79eefcf9c Revert "print the per-user RX and TX bytes from occtl" 
This reverts commit ecd6e316a9.
 2014-09-03 19:15:08 +02:00
Nikos Mavrogiannopoulos
be50fb3ac1 updated full-test 2014-09-03 19:06:20 +02:00
Nikos Mavrogiannopoulos
9f42ae8da8 added test for RX data 2014-09-02 13:39:49 +02:00
Nikos Mavrogiannopoulos
ecd6e316a9 print the per-user RX and TX bytes from occtl 2014-09-02 11:44:03 +02:00
Nikos Mavrogiannopoulos
a40c5afcc8 sec-mod-auth: don't print misleading message on session control 2014-09-01 00:45:20 +02:00
Nikos Mavrogiannopoulos
898af172c2 full_test: requires building on debian due to gnutls symbol differences 2014-08-28 10:21:32 +02:00
Nikos Mavrogiannopoulos
186dcf5652 tests: added check for the DEFAULT group in test-pass-group-cert 2014-08-28 10:09:17 +02:00
Nikos Mavrogiannopoulos
abe6d2d190 when the default group is selected, don't treat it as no selection 2014-08-28 10:08:42 +02:00
Nikos Mavrogiannopoulos
b52c49f133 doc update 2014-08-28 09:58:51 +02:00
Nikos Mavrogiannopoulos
91c0566523 made the comparison for XML fiels case insensitive 
Suggested by sskaje, based on an issue with the Anyconnect iOS client.
 2014-08-28 09:26:27 +02:00
Nikos Mavrogiannopoulos
7c7f472f2b gnulib: added strcasestr 2014-08-28 09:21:49 +02:00
Nikos Mavrogiannopoulos
85e9e36e78 full-test: do not require --without-protobuf ocserv_0_8_4 2014-08-27 18:17:08 +02:00
Nikos Mavrogiannopoulos
36d49a524b bumped version 2014-08-27 18:10:38 +02:00