ocserv

GitLab/ocserv

Fork 0

mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-09 07:42:03 +08:00

Commit Graph

Select branches

Hide Pull Requests

coverity

feature_PAM_Framed-IP-Address

master

ocserv_0_10_x

ocserv_0_11_x

ocserv_0_2_x

ocserv_0_3_x

ocserv_0_8_x

ocserv_0_9_x

set-dependency-scanning-config-1

set-sast-config-1

tmp-INTEGER_OVERFLOW

tmp-abnormal-exit-fix

tmp-cgroups-v2

tmp-crypt

tmp-disable-tests

tmp-fix-249

tmp-fix-744

tmp-fix-745

tmp-fix-pam-guard-check

tmp-fix-tls13

tmp-freebsd

tmp-hardening

tmp-icmp-ping

tmp-improve-ip-net-allocation

tmp-include2

tmp-ip_route_sanity_check

tmp-meson

tmp-ocpasswd

tmp-remove-auto-generated

tmp-requirements-first

tmp-simplify-radius

tmp-test-581

tmp-test-simplification

tmp-triage-policies-update

tmp-typedef-struct

tmp-user-scripts

0.12.6

1.0.0

1.0.1

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

1.3.0

1.4.0

1.4.1

1.4.2

1.5.0

ocserv_0_0_1

ocserv_0_0_2

ocserv_0_10_0

ocserv_0_10_1

ocserv_0_10_10

ocserv_0_10_11

ocserv_0_10_12

ocserv_0_10_2

ocserv_0_10_3

ocserv_0_10_4

ocserv_0_10_5

ocserv_0_10_6

ocserv_0_10_7

ocserv_0_10_8

ocserv_0_10_9

ocserv_0_11_0

ocserv_0_11_1

ocserv_0_11_10

ocserv_0_11_11

ocserv_0_11_12

ocserv_0_11_2

ocserv_0_11_3

ocserv_0_11_4

ocserv_0_11_5

ocserv_0_11_6

ocserv_0_11_7

ocserv_0_11_8

ocserv_0_11_9

ocserv_0_12_0

ocserv_0_12_1

ocserv_0_12_2

ocserv_0_12_3

ocserv_0_12_4

ocserv_0_12_5

ocserv_0_12_6

ocserv_0_1_0

ocserv_0_1_1

ocserv_0_1_2

ocserv_0_1_3

ocserv_0_1_4

ocserv_0_1_5

ocserv_0_1_6

ocserv_0_1_7

ocserv_0_2_0

ocserv_0_2_1

ocserv_0_2_2

ocserv_0_2_3

ocserv_0_2_4

ocserv_0_3_0

ocserv_0_3_1

ocserv_0_3_2

ocserv_0_3_3

ocserv_0_3_4

ocserv_0_3_5

ocserv_0_3_6

ocserv_0_8_0

ocserv_0_8_1

ocserv_0_8_2

ocserv_0_8_3

ocserv_0_8_4

ocserv_0_8_5

ocserv_0_8_5_1

ocserv_0_8_6

ocserv_0_8_7

ocserv_0_8_8

ocserv_0_8_9

ocserv_0_9_0

ocserv_0_9_0_1

ocserv_0_9_1

ocserv_0_9_2

c5c921528d worker: reject client MTU below MIN_MTU to prevent unsigned underflow Nikos Mavrogiannopoulos 2026-05-15 07:38:28 +02:00
77097440eb worker: fix heap buffer overflow in webvpncontext= cookie decoding Nikos Mavrogiannopoulos 2026-05-16 12:05:03 +02:00
8aa1022696 tests: add reproducer for oversized webvpncontext=/webvpn= cookie overflow Nikos Mavrogiannopoulos 2026-05-16 11:52:09 +02:00
235882cebf doc update Nikos Mavrogiannopoulos 2026-06-07 08:27:25 +02:00
bd97e44234 Merge branch 'fix-cached-group-select' into 'master' Nikos Mavrogiannopoulos 2026-06-07 06:24:15 +00:00
d72074e9eb Fix cached group-select handling Mikhail Chodorenko 2026-05-25 19:31:03 +02:00
117ed17d82 Merge branch 'tmp-729' into 'master' Nikos Mavrogiannopoulos 2026-06-06 15:16:33 +00:00
a2ec3bba9c Consistent include files and directives Dimitri Papadopoulos 2026-05-25 14:55:42 +02:00
b23c939d29 contrib: added protocols for requirements management Nikos Mavrogiannopoulos 2026-06-06 12:16:11 +02:00
14b5295e8f ocserv-core-dev: added root-cause-analysis protocol from promptkit Nikos Mavrogiannopoulos 2026-06-06 12:05:55 +02:00
29cf2c93fb Handle RADIUS Access-Challenge State as bytes Dimitri Papadopoulos 2026-05-19 18:47:40 +02:00
0dafa7b005 tests: add regression test for pam_auth_deinit coroutine safety Nikos Mavrogiannopoulos 2026-05-26 12:42:22 +02:00
bdb69162b4 pam: cleanup PAM session if user aborts during conversation Nikos Mavrogiannopoulos 2026-05-24 22:50:40 +02:00
74ec165316 pam: increase coroutine stack to 8 MB and add guard page Nikos Mavrogiannopoulos 2026-05-23 19:17:31 +02:00
0b11fdc5bf Merge branch 'tmp-fix-691' into 'master' Nikos Mavrogiannopoulos 2026-06-05 12:50:03 +00:00
f906b9cfbc ocserv.8.md: document that pid-file is available in config Nikos Mavrogiannopoulos 2026-06-03 19:53:21 +02:00
0f5c628048 config: add syslog-facility option to allow routing logs independently Nikos Mavrogiannopoulos 2026-05-31 19:09:09 +02:00
708f42a455 CONTRIBUTING.md/AGENTS.md: require tests to be self-diagnosing Nikos Mavrogiannopoulos 2026-05-31 22:33:44 +02:00
e01968060b ocserv: exit with error code on error Nikos Mavrogiannopoulos 2026-05-31 20:41:22 +02:00
35f7de5089 CI: test FreeBSD on Cirrus tmp-freebsd Dimitri Papadopoulos 2026-05-24 15:29:00 +02:00
1d381c8c9b Merge branch 'tmp-which' into 'master' Dimitri Papadopoulos Orfanos 2026-05-31 19:05:28 +03:00
34be9e368e tests: which → command -v Dimitri Papadopoulos 2026-05-31 14:17:33 +02:00
0e74eeffcc .triage-policies.yml: apply the wontfix label if closing automatically [ci skip] Nikos Mavrogiannopoulos 2026-05-31 13:11:14 +02:00
86fe12e989 .gitlab-ci.yml: removed unnecessary jobs from schedules [ci skip] Nikos Mavrogiannopoulos 2026-05-31 00:14:30 +02:00
f0406217eb .gitlab-ci.yml: run and print debugging information [ci skip] Nikos Mavrogiannopoulos 2026-05-31 00:07:26 +02:00
7bf968617b .gitlab-ci.yml: do not depend our schedules on the coverity job Nikos Mavrogiannopoulos 2026-05-30 23:42:06 +02:00
9e46c9714e Merge branch 'tmp-LICENSE' into 'master' Nikos Mavrogiannopoulos 2026-05-30 21:36:22 +00:00
ce350a17e5 Merge branch 'tmp-llhttp' into 'master' Nikos Mavrogiannopoulos 2026-05-30 21:28:00 +00:00
bcc9d3bff7 .triage-policies.yml: close stale and unassigned issues Nikos Mavrogiannopoulos 2026-05-23 17:27:40 +02:00
0727bdbe1f worker: detect and handle errors in socket from main Nikos Mavrogiannopoulos 2026-05-24 22:06:48 +02:00
30f33ac9d1 tun_write/read were made macros in linux for write and read Nikos Mavrogiannopoulos 2026-05-24 20:25:49 +02:00
2be9af605b tlslib: simplified by requiring gnutls 3.3.5 Nikos Mavrogiannopoulos 2026-05-23 23:33:56 +02:00
d3372cbcb4 worker: drain TUN in a burst loop to avoid per-packet epoll_wait() Nikos Mavrogiannopoulos 2026-05-23 18:50:26 +02:00
f5231eab10 CONTRIBUTING.md: added rule on patches Nikos Mavrogiannopoulos 2026-05-26 13:06:50 +02:00
f8ab3518f7 Merge branch 'tmp-733' into 'master' Dimitri Papadopoulos Orfanos 2026-05-24 20:49:23 +03:00
d51e5b55c4 Avoid infinite loop in BSD TUN fallback Dimitri Papadopoulos 2026-05-19 14:50:41 +02:00
8faa35d67a Merge branch 'tmp-736' into 'master' Nikos MavrogiannopoulosandDimitri Papadopoulos 2026-05-24 11:24:14 +00:00
0eb7313bca Merge branch 'tmp-736' into 'master' Nikos Mavrogiannopoulos 2026-05-24 11:24:14 +00:00
4b216473d5 Fix calculation of avg_auth_time across sec-mod instances Dimitri Papadopoulos 2026-05-20 18:27:47 +02:00
efd41d300f Merge branch 'tmp-711' into 'master' Nikos Mavrogiannopoulos 2026-05-24 09:22:08 +00:00
6b74546a1b Merge branch 'tmp-pcl' into 'master' Nikos Mavrogiannopoulos 2026-05-24 09:21:42 +00:00
d91ace7c1d Always use the bundled PCL library Dimitri Papadopoulos 2026-05-23 17:33:56 +02:00
fff4d3f0cb .triage-policies.yml: close stale and unassigned issues tmp-triage-policies-update Nikos Mavrogiannopoulos 2026-05-23 17:27:40 +02:00
1b6e22246d Test proxy protocol parser with IPv6 packet Nikos Mavrogiannopoulos 2026-05-23 14:52:01 +00:00
ae021ecf58 Merge branch 'anyconnect-bye-packet' into 'master' Nikos Mavrogiannopoulos 2026-05-23 14:25:22 +00:00
cdfdc5b495 Add LICENSE files of bundled sotware Dimitri Papadopoulos 2026-05-23 15:23:18 +02:00
2ff4154159 Distinguish reason codes in AnyConnect BYE packets Grigory Trenin 2026-05-18 17:40:45 -04:00
e5894dba7d NEWS: doc update Nikos Mavrogiannopoulos 2026-05-23 07:43:46 +02:00
2dd5956317 dtls_send: fix hang and buffer overread on persistent GNUTLS_E_AGAIN Nikos Mavrogiannopoulos 2026-05-18 08:45:00 +02:00
d2b78d48ca tests: add live reproducer for cstp_send() hang on frozen peer (issue #638) Nikos Mavrogiannopoulos 2026-05-18 08:44:20 +02:00
35e3d15a11 cstp_send: fix worker hang and buffer overread on TLS send Nikos Mavrogiannopoulos 2026-05-18 08:29:33 +02:00
bb9bcd7461 main: remove cgroup support in favour of systemd resource controls Nikos Mavrogiannopoulos 2026-05-03 14:12:01 +02:00
25861ab602 Merge branch 'tmp-nettle4' into 'master' Nikos Mavrogiannopoulos 2026-05-21 06:35:54 +00:00
788b1a2b30 Merge branch 'tmp-fix-716' into 'master' Nikos Mavrogiannopoulos 2026-05-21 06:34:06 +00:00
d95d1ac53e Consistency for readability Dimitri Papadopoulos 2026-05-18 22:21:42 +02:00
550e9327cc Set sa before attempting to set sa->sin6_family Dimitri Papadopoulos 2026-05-18 22:17:53 +02:00
b97aa4d97f Build against GNU Nettle 4 Dimitri Papadopoulos 2026-05-18 21:53:53 +02:00
583f0c0be5 worker: fix ICMPv6 misclassification as data traffic affecting idle-timeout Nikos Mavrogiannopoulos 2026-05-16 18:18:06 +02:00
bf23e0d549 /svc handler: add the owasp headers for consistency Nikos Mavrogiannopoulos 2026-05-17 23:33:31 +02:00
e567f92e64 Removed unnecessary CA and certificate handlers Nikos Mavrogiannopoulos 2026-05-17 21:59:20 +02:00
2dfb9acec5 Updated instructions for AI agents reporting vulnerabilities Nikos Mavrogiannopoulos 2026-05-19 16:57:44 +02:00
e67582ba05 Merge branch 'tmp-nettle4' into 'master' Dimitri Papadopoulos Orfanos 2026-05-18 01:57:20 +03:00
0b47ea457d Merge branch 'tmp-uninitialised-handle' into 'master' Nikos Mavrogiannopoulos 2026-05-17 19:56:55 +00:00
d019cd1c84 Do not use uninitialised gnutls_x509_crt_t Dimitri Papadopoulos 2026-05-12 14:47:51 +02:00
23a08753e9 Do not use uninitialised pam_handle_t Dimitri Papadopoulos 2026-05-12 14:19:40 +02:00
825729868e Build against GNU Nettle 4 Dimitri Papadopoulos 2026-05-03 12:15:34 +02:00
6e658f00ae Merge branch 'tmp-NULL-dereference' into 'master' Nikos Mavrogiannopoulos 2026-05-16 20:20:49 +00:00
2e89f38e1e Avoid NULL dereference in case of memory exhaustion Dimitri Papadopoulos 2026-05-12 10:59:59 +02:00
01f2787ab6 worker: reject HTTP pipelining to prevent request confusion Nikos Mavrogiannopoulos 2026-05-14 09:29:34 +02:00
e4c8d894db Fix typo [ci skip] Dimitri PapadopoulosandNikos Mavrogiannopoulos 2026-05-12 23:16:33 +02:00
aeaf5a0896 Merge branch 'tmp-seclog-trailing-newline' into 'master' Nikos Mavrogiannopoulos 2026-05-12 18:02:45 +00:00
5a81433f47 Log messages don't need a trailing \n Dimitri Papadopoulos 2026-05-11 20:01:28 +02:00
6c4a0aca93 Merge branch 'tmp-talloc_array' into 'master' Nikos Mavrogiannopoulos 2026-05-12 05:21:44 +00:00
923187aa4c Merge branch 'tmp-strerror' into 'master' Nikos Mavrogiannopoulos 2026-05-12 05:14:54 +00:00
0fad7f71ac talloc_size() → talloc_array() Dimitri Papadopoulos 2026-05-09 10:01:11 +02:00
bd5e1636dc Use strerror() and pass proper errno to it Dimitri Papadopoulos 2026-05-09 10:59:04 +02:00
3f37c8ea38 Merge branch 'tmp-protoc-c' into 'master' Dimitri Papadopoulos Orfanos 2026-05-11 20:18:28 +03:00
d090c79926 Merge branch 'tmp-fedora44-ubuntu26.04' into 'master' Dimitri Papadopoulos Orfanos 2026-05-11 20:17:30 +03:00
93c08b5c83 Merge branch 'pam-service' into 'master' Nikos Mavrogiannopoulos 2026-05-11 17:06:56 +00:00
6eb1cef514 This is a Bash script, not plain Bourne Dimitri Papadopoulos 2026-05-03 15:19:23 +02:00
c30bd5dca4 Address build warning Dimitri Papadopoulos 2026-05-03 15:14:42 +02:00
61f013ae3a pam: add 'service' sub-option to auth directive Grigory Trenin 2026-05-06 06:52:45 -04:00
ad52625e0e Fix new Clang error Dimitri Papadopoulos 2026-05-08 14:41:32 +02:00
174561dd66 CI: upgrade Fedora and Ubuntu Dimitri Papadopoulos 2026-05-08 14:36:11 +02:00
2548a27b51 Merge branch 'tmp-AF_INET' into 'master' Nikos Mavrogiannopoulos 2026-05-07 01:56:53 +00:00
eb886a7c67 Include <sys:socket.h> for AF_INET Dimitri Papadopoulos 2026-04-09 11:43:11 +02:00
026e3185c4 Run format meson during CI tmp-meson Dimitri Papadopoulos 2026-05-03 19:16:22 +02:00
f12f8733b1 Reformat meson_huild.txt manually Dimitri Papadopoulos 2026-05-03 18:54:16 +02:00
c22e5ce0bb worker: add per-worker memory limit via RLIMIT_DATA Nikos MavrogiannopoulosandDimitri Papadopoulos 2026-05-03 09:28:48 +02:00
22bbad4eb5 worker: add per-worker memory limit via RLIMIT_DATA Nikos Mavrogiannopoulos 2026-05-03 09:28:48 +02:00
4303a12f60 worker: harden HTTP request header size limits Nikos Mavrogiannopoulos 2026-05-02 19:44:01 +02:00
2ff1c3efcd main: transition cgroup support from v1 to v2 tmp-cgroups-v2 Nikos Mavrogiannopoulos 2026-05-03 14:12:01 +02:00
7efa74f8e8 protobuf files were removed from the repository Nikos Mavrogiannopoulos 2026-05-03 18:50:57 +02:00
8e0f7f460a Merge branch 'tmp-llhttp_cb' into 'master' Nikos Mavrogiannopoulos 2026-05-03 17:05:13 +00:00
3c99a3e2fd protobuf files were removed from the repository tmp-remove-auto-generated Nikos Mavrogiannopoulos 2026-05-03 18:50:57 +02:00
9cc845e9d3 llhttp callbacks should return -1 on error Dimitri Papadopoulos 2026-05-03 18:40:46 +02:00
8913ffadff doc: updated for nft/iptables dependencies Nikos Mavrogiannopoulos 2026-05-02 18:49:43 +02:00
4c85218f41 .gitignore: removed leftovers from autotools Nikos Mavrogiannopoulos 2026-05-02 17:17:52 +02:00
9c44e09356 ocserv-fw-nftables: replace ipcalc with pure-shell mask_to_prefix Nikos Mavrogiannopoulos 2026-05-01 16:52:48 +02:00
dcb1b8d24e Merge branch 'tmp-prefer-nft' into 'master' Nikos Mavrogiannopoulos 2026-05-02 15:09:43 +00:00

1 2 3 4 5 ...