ocserv

GitLab/ocserv

Fork 0

mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-09 07:42:03 +08:00

Commit Graph

Select branches

Hide Pull Requests

coverity

feature_PAM_Framed-IP-Address

master

ocserv_0_10_x

ocserv_0_11_x

ocserv_0_2_x

ocserv_0_3_x

ocserv_0_8_x

ocserv_0_9_x

set-dependency-scanning-config-1

set-sast-config-1

tmp-INTEGER_OVERFLOW

tmp-abnormal-exit-fix

tmp-cgroups-v2

tmp-crypt

tmp-disable-tests

tmp-fix-249

tmp-fix-744

tmp-fix-745

tmp-fix-pam-guard-check

tmp-fix-tls13

tmp-freebsd

tmp-hardening

tmp-icmp-ping

tmp-improve-ip-net-allocation

tmp-include2

tmp-ip_route_sanity_check

tmp-meson

tmp-ocpasswd

tmp-remove-auto-generated

tmp-requirements-first

tmp-simplify-radius

tmp-test-581

tmp-test-simplification

tmp-triage-policies-update

tmp-typedef-struct

tmp-user-scripts

0.12.6

1.0.0

1.0.1

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

1.3.0

1.4.0

1.4.1

1.4.2

1.5.0

ocserv_0_0_1

ocserv_0_0_2

ocserv_0_10_0

ocserv_0_10_1

ocserv_0_10_10

ocserv_0_10_11

ocserv_0_10_12

ocserv_0_10_2

ocserv_0_10_3

ocserv_0_10_4

ocserv_0_10_5

ocserv_0_10_6

ocserv_0_10_7

ocserv_0_10_8

ocserv_0_10_9

ocserv_0_11_0

ocserv_0_11_1

ocserv_0_11_10

ocserv_0_11_11

ocserv_0_11_12

ocserv_0_11_2

ocserv_0_11_3

ocserv_0_11_4

ocserv_0_11_5

ocserv_0_11_6

ocserv_0_11_7

ocserv_0_11_8

ocserv_0_11_9

ocserv_0_12_0

ocserv_0_12_1

ocserv_0_12_2

ocserv_0_12_3

ocserv_0_12_4

ocserv_0_12_5

ocserv_0_12_6

ocserv_0_1_0

ocserv_0_1_1

ocserv_0_1_2

ocserv_0_1_3

ocserv_0_1_4

ocserv_0_1_5

ocserv_0_1_6

ocserv_0_1_7

ocserv_0_2_0

ocserv_0_2_1

ocserv_0_2_2

ocserv_0_2_3

ocserv_0_2_4

ocserv_0_3_0

ocserv_0_3_1

ocserv_0_3_2

ocserv_0_3_3

ocserv_0_3_4

ocserv_0_3_5

ocserv_0_3_6

ocserv_0_8_0

ocserv_0_8_1

ocserv_0_8_2

ocserv_0_8_3

ocserv_0_8_4

ocserv_0_8_5

ocserv_0_8_5_1

ocserv_0_8_6

ocserv_0_8_7

ocserv_0_8_8

ocserv_0_8_9

ocserv_0_9_0

ocserv_0_9_0_1

ocserv_0_9_1

ocserv_0_9_2

465d3ce383 Merge branch 'tmp-framed-ipv6' into 'master' Nikos Mavrogiannopoulos 2026-05-01 20:21:09 +00:00
dda2015aa4 meson: nftables is preferred unless iptables is explicitly requested Nikos Mavrogiannopoulos 2026-05-01 16:18:35 +02:00
c41b6d52de Merge branch 'tmp-CID-645850' into 'master' Nikos Mavrogiannopoulos 2026-05-01 19:26:45 +00:00
c0b282576e Fix new Coverity Scan defect Dimitri Papadopoulos OrfanosandNikos Mavrogiannopoulos 2026-05-01 22:26:45 +03:00
e7d79e232d radius-auth: fix Framed-IPv6-Prefix routes being silently dropped Nikos Mavrogiannopoulos 2026-05-01 16:29:08 +02:00
ac5ee6a10b Merge branch 'type-limits-warning' into 'master' Nikos Mavrogiannopoulos 2026-05-01 14:12:10 +00:00
86972b7200 Fix compiler warning when PAM/RADIUS are disabled Grigory Trenin 2026-04-27 11:58:08 -04:00
4334978fd6 Merge branch 'tunnel-all-dns' into 'master' Nikos Mavrogiannopoulos 2026-04-27 03:54:29 +00:00
a79e2f1cd5 Respect tunnel-all-dns in per-user/group config Grigory Trenin 2026-04-23 15:49:15 -04:00
54e3244b45 tests: fix radius failures with radcli 1.5.0 Nikos Mavrogiannopoulos 2026-04-25 18:52:37 +02:00
5148c723cb tests: fix flaky radius tests by waiting for server readiness Nikos Mavrogiannopoulos 2026-04-25 17:19:46 +02:00
5137ba4309 ai: add AI policy Nikos Mavrogiannopoulos 2026-04-12 16:04:53 +02:00
855966cd95 ai: add AI guidance, personas Nikos Mavrogiannopoulos 2026-04-12 16:04:53 +02:00
a65f2c22a2 protobuf source files are generated during release Nikos Mavrogiannopoulos 2026-04-23 19:21:24 +02:00
58a67f14f3 config: extend vhost_inherit_static_config to cover vhost-scoped fields Nikos Mavrogiannopoulos 2026-04-23 08:42:00 +02:00
112afa683c config: treat expose-iroutes as a normal configuration option Nikos Mavrogiannopoulos 2026-04-18 23:04:06 +02:00
836e6f0785 config: fix scope annotation and vhost guards for global-only options Nikos Mavrogiannopoulos 2026-04-17 12:05:23 +02:00
139ff827d9 config: restructure per-vhost configuration for clarity and maintainability Nikos Mavrogiannopoulos 2026-04-16 10:07:57 +02:00
1228688fb2 Merge branch 'tmp-rfc1123' into 'master' Nikos Mavrogiannopoulos 2026-04-22 11:20:05 +00:00
caacc92c28 Merge branch 'doc-user-config' into 'master' Nikos Mavrogiannopoulos 2026-04-21 18:58:01 +00:00
745d7883be design.md: include auth state in the diagram Nikos Mavrogiannopoulos 2026-04-21 19:19:32 +02:00
56055a2ed0 Merge branch 'udp-desync' into 'master' Nikos Mavrogiannopoulos 2026-04-21 16:42:35 +00:00
eddd29f59b Do not forward UDP until client is authenticated Grigory Trenin 2026-04-16 21:01:57 -04:00
50c59cd53b doc: clarify reload behavior for per-user/group configs Grigory Trenin 2026-04-19 09:08:07 -04:00
a9f42c892c valid_hostname: enhance to cover RFC 1123 requirements Nikos Mavrogiannopoulos 2026-04-18 15:49:02 +02:00
0f7640bcea Merge branch 'tmp-claude' into 'master' Nikos Mavrogiannopoulos 2026-04-18 13:43:36 +00:00
c0e3aa6c5c Merge branch 'tmp-disable-adaptive-rate-limit' into 'master' Nikos Mavrogiannopoulos 2026-04-18 13:32:07 +00:00
c4767470eb RFC 952 prohibits trailing hyphen, not only leading hyphen Dimitri Papadopoulos 2026-04-17 19:55:29 +02:00
99650ec7cb Add check to disable adaptive rate limiting Dimitri Papadopoulos 2026-04-17 21:42:02 +02:00
da90b76b07 bumped versions Nikos Mavrogiannopoulos 2026-04-17 00:08:22 +02:00
c520accb84 Released 1.4.2 1.4.2 Nikos Mavrogiannopoulos 2026-04-16 23:27:50 +02:00
537e171664 worker-auth: require exact session_id length in cookie auth reply Nikos Mavrogiannopoulos 2026-04-16 23:05:34 +02:00
5d0a4dadc4 NEWS: documented updates Nikos Mavrogiannopoulos 2026-04-16 22:53:37 +02:00
bc961061d1 worker: fix PP2_SUBTYPE_SSL_CN parsed as top-level TLV instead of sub-TLV Nikos Mavrogiannopoulos 2026-04-11 20:45:41 +02:00
a0504dd5a7 main: bound-check sec-mod message length before allocation Nikos Mavrogiannopoulos 2026-04-11 20:13:38 +02:00
8355aa080e sec-mod: call sec_auth_user_deinit on all entries at teardown Nikos Mavrogiannopoulos 2026-04-11 20:13:19 +02:00
b37a2dd0de sec-mod: guard against NULL orig_remote_ip in auth init HMAC Nikos Mavrogiannopoulos 2026-04-11 20:13:06 +02:00
22a0c2d54c sec-mod: bound-check cli_addr.len before memcpy in TLS session store Nikos Mavrogiannopoulos 2026-04-11 20:12:53 +02:00
0db69e24f9 worker-tun: eliminate strict-aliasing UB in tun_write() Nikos Mavrogiannopoulos 2026-04-11 18:22:07 +02:00
175867ce71 worker-http: fix unsigned comparison with <= 0 in header_value_check() Nikos Mavrogiannopoulos 2026-04-11 18:21:57 +02:00
f2795a10a9 worker-auth: guard against NULL msg->msg in recv_auth_reply() Nikos Mavrogiannopoulos 2026-04-11 18:21:50 +02:00
4c9e97fe2d worker-auth: document intentional protobuf message lifetime for user_config Nikos Mavrogiannopoulos 2026-04-11 18:21:43 +02:00
1acf13f0bd proxy-proto: fix TLV parsing loop skipping data pointer advance Nikos Mavrogiannopoulos 2026-04-11 18:17:50 +02:00
071762674e proxy-proto: fix our_addr_len set to IPv4 size for IPv6 connections Nikos Mavrogiannopoulos 2026-04-11 18:17:28 +02:00
8e6d81a83a worker: validate session_id length from IPC reply before memcpy Nikos Mavrogiannopoulos 2026-04-11 18:17:18 +02:00
464463c594 worker: limit HTTP request body to 256 KB to prevent memory exhaustion Nikos Mavrogiannopoulos 2026-04-11 18:16:02 +02:00
76a17dadac Merge branch 'del_build-aux' into 'master' Nikos Mavrogiannopoulos 2026-04-15 06:48:04 +00:00
3af9edaa8e build: remove obsolete build-aux directory Grigory Trenin 2026-04-14 16:40:59 -04:00
d3eceef085 Merge branch '64bit-timestamps' into 'master' Nikos Mavrogiannopoulos 2026-04-14 19:03:05 +00:00
468335a7cf Merge branch 'vhosts-no-udp' into 'master' Nikos Mavrogiannopoulos 2026-04-14 19:02:03 +00:00
cde58c22be protobuf: use 64-bit signed integers for timestamp fields Grigory Trenin 2026-03-05 16:32:38 -05:00
db125634b8 Allow using no-udp option in vhosts Grigory Trenin 2026-04-14 13:26:32 -04:00
4a0a087996 config: align default values with sample.config Nikos Mavrogiannopoulos 2026-04-13 22:07:30 +02:00
611eb00527 config: add scope annotations and validation script Nikos Mavrogiannopoulos 2026-04-12 10:19:40 +02:00
62a5f72864 DPD time: corrected duplicate assignment and set value for mobile-dpd Nikos Mavrogiannopoulos 2026-04-12 22:15:21 +02:00
0096ebcc2b config: convert warn_on_vhost to error_on_vhost Nikos Mavrogiannopoulos 2026-04-12 10:09:04 +02:00
05cf33adb7 tests: added tests for multiple ocpasswd options Nikos Mavrogiannopoulos 2026-04-13 22:33:03 +02:00
dcbf30d15a tests: added tests for multiple ocpasswd options tmp-ocpasswd Nikos Mavrogiannopoulos 2026-04-13 22:33:03 +02:00
24d924f65c Merge branch 'tmp-typos' into 'master' Nikos Mavrogiannopoulos 2026-04-10 04:31:08 +00:00
db50c02cbd Merge branch 'tmp-radius-group-separator' into 'master' Nikos Mavrogiannopoulos 2026-04-10 04:29:39 +00:00
78e6a28ff5 Merge branch 'bugfix/vhosts' into 'master' Nikos Mavrogiannopoulos 2026-04-10 04:28:52 +00:00
bf12b9fe9c Fix global option inheritance for virtual hosts Grigory Trenin 2026-03-04 18:35:50 -05:00
21eed65a60 Fix typos Dimitri Papadopoulos 2026-04-09 21:39:00 +02:00
89a40dde31 tests: add radius-multi-group-comma test for group-separator=comma Nikos Mavrogiannopoulos 2026-04-03 13:37:29 +02:00
828fca691e radius: add group-separator option for OU= Class attributes Nikos Mavrogiannopoulos 2026-04-03 13:37:29 +02:00
ab23290899 .gitignore: added .cache Nikos Mavrogiannopoulos 2026-04-03 13:40:03 +02:00
95c8207e07 auth/plain: use real passwd salt for timing normalisation and clear on deinit Nikos Mavrogiannopoulos 2026-04-06 21:10:47 +02:00
2e81af318e strsep: removed conditional code for strsep Nikos Mavrogiannopoulos 2026-04-06 21:02:04 +02:00
85b4d19f0a tests: check that empty password with correct OTP fails when password is set Nikos Mavrogiannopoulos 2026-04-03 13:58:18 +02:00
ebb34f6787 auth/plain: fix password retry and prevent username enumeration via timing Nikos Mavrogiannopoulos 2026-04-03 13:04:23 +02:00
c45e3467bb tests: check for the case where a password is incorrectly entered Nikos Mavrogiannopoulos 2026-04-03 12:28:35 +02:00
9840050511 .gitlab-ci.yml: increased jobs Nikos Mavrogiannopoulos 2026-04-02 23:15:54 +02:00
b25a1e7d81 tests: check for IPv6 handling issue Nikos Mavrogiannopoulos 2026-04-02 22:46:31 +02:00
107c12a5b6 if_address_init: correctly handle local IPv6 addresses Nikos Mavrogiannopoulos 2026-04-02 22:39:47 +02:00
3db9ecd259 tests: fixed flaky condition in disconnect-user Nikos Mavrogiannopoulos 2026-03-29 21:13:23 +02:00
fd3235784f tests: gssapi tests were moved to a specific testsuite Nikos Mavrogiannopoulos 2026-03-29 17:31:13 +02:00
233aa02236 tests: do not run the firewall tests in i386/Debian Nikos Mavrogiannopoulos 2026-03-29 17:27:54 +02:00
3026f46d1b cipher-tests: skip if legacy DTLS is disabled Nikos Mavrogiannopoulos 2026-03-29 17:21:50 +02:00
0ba0c091af tests: initialize worker_st using = {0} Nikos Mavrogiannopoulos 2026-03-29 17:09:09 +02:00
979ccc711d .gitlab-ci.yml: updated to Ubuntu 24.04 and Fedora 43 Nikos Mavrogiannopoulos 2026-03-29 17:00:09 +02:00
271b8b9303 tests: added tests for ocserv setting fw rules Nikos Mavrogiannopoulos 2026-03-08 20:46:21 +01:00
bb4e91c58a ocserv-fw: allow override using environment var Nikos Mavrogiannopoulos 2026-03-08 22:23:03 +01:00
598bcf405e Added ocserv-fw for nftables Nikos Mavrogiannopoulos 2026-03-08 16:20:04 +01:00
e21359716b test-script-multi-user: simplified Nikos Mavrogiannopoulos 2026-03-22 22:37:59 +01:00
e5eb5d6de7 .lcovrc: exclude from coverage bundled 3rd party projects and tests Nikos Mavrogiannopoulos 2026-03-22 14:59:06 +01:00
0a2dc40251 occtl: fix trailing comma in JSON array for show sessions valid/all Nikos Mavrogiannopoulos 2026-03-22 08:36:32 +01:00
efa28e1492 worker: flush coverage data on exit Nikos Mavrogiannopoulos 2026-03-22 00:39:04 +01:00
790f97d1cb tests: enable parallelization Nikos Mavrogiannopoulos 2026-03-21 21:28:55 +01:00
c223f51c91 occtl.8.md: document available commands Nikos Mavrogiannopoulos 2026-03-21 21:20:09 +01:00
1b8f7f8ede tests: introduced helper to have uniform termination of client and server Nikos Mavrogiannopoulos 2026-03-21 17:16:47 +01:00
13a8007280 occtl: test commands Nikos Mavrogiannopoulos 2026-03-21 14:23:23 +01:00
b76aa3b506 tests: run the compression tests also with data that are compressible Nikos Mavrogiannopoulos 2026-03-21 13:02:08 +01:00
e05fc9852b tests: added test for PAM accounting Nikos Mavrogiannopoulos 2026-03-21 12:50:54 +01:00
a33370ad93 tests: introduced test to check the bandwidth restrictions Nikos Mavrogiannopoulos 2026-03-21 11:49:35 +01:00
41b9016db1 meson: autogenerate AUTHORS Nikos Mavrogiannopoulos 2026-03-21 07:34:19 +01:00
b5e631f6f4 .gitlab-ci.yml: added distcheck job Nikos Mavrogiannopoulos 2026-03-20 08:55:46 +01:00
bdf4df9756 test-camouflage: improve termination of client connection Nikos Mavrogiannopoulos 2026-03-20 07:37:42 +01:00
763f98a93e dist-script: generate kkdcp_asn1_tab.c and fail if necessary files missing Nikos Mavrogiannopoulos 2026-03-19 23:51:37 +01:00
a7df5240f1 http-heads: generate as C file to avoid issue with coverage Nikos Mavrogiannopoulos 2026-03-19 23:18:45 +01:00
97ad7e479a tests: explicitly specify the path (srcdir vs builddir) of config files Nikos Mavrogiannopoulos 2026-03-17 19:37:34 +01:00

1 2 3 4 5 ...