GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-06 22:32:05 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
ocserv/src
T
History
Dimitri PapadopoulosandNikos Mavrogiannopoulos 3206e11665 Use network address as IPv6 lease start 
IPv6 address leases were starting at the network address + 1, following
the IPv4 convention where the network address is reserved. However,
IPv6 doesn't have such a restriction, and that behaviour is inconsistent
with IPv6 standards.

Use the IPv6 network address as the server-side tunnel address instead
of network address + 1, as described in REQ-MAIN-NET-006. This fix is
particularly important for point-to-point /127 networks with only 2
addresses. It also prevents a client with ipv6-subnet-prefix < 128 from
being leased the first subnet, which contained the server address.

This changes the server-side address of every IPv6 deployment; the
existing tests are updated accordingly.

Resolves: #714
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
2026-09-29 22:12:55 +02:00
..
acct
radius: standardize on radcli library
2026-09-20 14:37:49 +02:00
auth
Erase the PAM password buffer after each conversation round and scrub both fixed credential buffers before releasing the PAM handle.
2026-09-26 22:59:47 +02:00
ccan
Add LICENSE files of bundled sotware
2026-05-23 16:16:35 +02:00
common
Consistent include files and directives
2026-06-06 15:23:54 +02:00
gnulib
Modify the header file for C99 compatibility
2025-04-02 09:07:32 +02:00
inih
config: do not silently truncate long [vhost:NAME] names
2026-09-26 23:24:20 +02:00
llhttp
Merge branch 'tmp-LICENSE' into 'master'
2026-05-30 21:36:22 +00:00
occtl
Fix Coverity Scan defect
2026-07-12 21:13:27 +02:00
ocpasswd
Consistent include files and directives
2026-06-06 15:23:54 +02:00
pcl
Add LICENSE files of bundled sotware
2026-05-23 16:16:35 +02:00
protobuf
Add LICENSE files of bundled sotware
2026-05-23 16:16:35 +02:00
sup-config
sup-config/file: reject path-traversal in username/groupname
2026-06-17 06:04:49 +02:00
auth-unix.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
auth-unix.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
cfg.proto
tests: add regression test for pam_auth_deinit coroutine safety
2026-06-06 08:12:13 +02:00
common-config.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
common.mk
Switch from http-parser to llhttp
2024-04-28 13:37:19 +02:00
config-kkdcp.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
config-ports.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
config.c
config: do not silently truncate long [vhost:NAME] names
2026-09-26 23:24:20 +02:00
ctl.proto
protobuf: use 64-bit signed integers for timestamp fields
2026-04-14 13:59:05 -04:00
defs.h
occtl: add terminate commands for session cookie invalidation
2026-03-15 17:05:29 +03:00
gettime.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
html.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
html.h
Updated code to follow with kernel coding style
2024-12-01 17:01:05 +01:00
http-heads.gperf
http-heads: generate as C file to avoid issue with coverage
2026-03-20 20:47:35 +01:00
http-heads.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
icmp-ping.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
icmp-ping.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
ip-lease.c
Use network address as IPv6 lease start
2026-09-29 22:12:55 +02:00
ip-lease.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
ip-util.c
ip-util: reject routes with characters outside address/prefix syntax
2026-07-28 08:00:06 +02:00
ip-util.h
Updated code to follow with kernel coding style
2024-12-01 17:01:05 +01:00
ipc.proto
Fix inflated RADIUS Acct-Session-Time across reconnects
2026-07-12 13:55:59 +02:00
isolate.c
Merge branch 'tmp-include' into 'master'
2026-06-14 09:35:13 +03:00
isolate.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
kkdcp.asn
kkdcp.asn: use GeneralString for KerberosString to follow RFC1510
2015-02-27 15:01:20 +01:00
log.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
log.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
lzs.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
lzs.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-auth.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-ban.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-ban.h
config: restructure per-vhost configuration for clarity and maintainability
2026-04-22 20:29:15 +02:00
main-ctl-unix.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-ctl.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-limits.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-limits.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-log.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-proc.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-sec-mod-cmd.c
Fix inflated RADIUS Acct-Session-Time across reconnects
2026-07-12 13:55:59 +02:00
main-user.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
main-worker-cmd.c
main: validate AUTH_COOKIE_REQ cookie length before use
2026-07-28 08:00:06 +02:00
main.c
tlslib, worker: remove dead code orphaned by the listen-clear-file removal
2026-07-28 08:00:06 +02:00
main.h
proc_to_zombie: removed dead definition
2026-08-02 17:26:34 +02:00
meson.build
Always use the bundled PCL library
2026-05-23 17:43:36 +02:00
namespace.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
namespace.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
ocserv-fw-iptables
Added ocserv-fw for nftables
2026-03-29 16:55:12 +02:00
ocserv-fw-nftables
ocserv-fw-nftables: replace ipcalc with pure-shell mask_to_prefix
2026-05-02 17:21:38 +02:00
proc-search.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
proc-search.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
route-add.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
route-add.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
script-list.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod-acct.h
sec-mod: send accounting stop on server shutdown
2026-09-18 20:27:35 +03:00
sec-mod-auth.c
sec-mod: send accounting stop on server shutdown
2026-09-18 20:27:35 +03:00
sec-mod-auth.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod-cookies.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod-db.c
sec-mod: send accounting stop on server shutdown
2026-09-18 20:27:35 +03:00
sec-mod-resume.c
sec-mod, worker: harden TLS resumption cache against empty session data
2026-07-28 08:07:07 +02:00
sec-mod-resume.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod-sup-config.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod-sup-config.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
sec-mod.h
sec-mod: send accounting stop on server shutdown
2026-09-18 20:27:35 +03:00
setproctitle.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
setproctitle.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
str.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
str.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
subconfig.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
tlslib.c
certificate validation: do not use LOG_ERR when logging a missing optional certificate
2026-08-15 15:19:11 +02:00
tlslib.h
tlslib, worker: remove dead code orphaned by the listen-clear-file removal
2026-07-28 08:00:06 +02:00
tun.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
tun.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
valid-hostname.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
vasprintf.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
vasprintf.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
version.inc.in
regenerate autogen'ed files when making a distribution.
2013-07-23 21:39:47 +02:00
vhost.h
config: do not silently truncate long [vhost:NAME] names
2026-09-26 23:24:20 +02:00
vpn.h
Merge branch 'tmp-include' into 'master'
2026-06-14 09:35:13 +03:00
worker-auth.c
tlslib, worker: remove dead code orphaned by the listen-clear-file removal
2026-07-28 08:00:06 +02:00
worker-bandwidth.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-bandwidth.h
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-http-handlers.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-http.c
tlslib, worker: remove dead code orphaned by the listen-clear-file removal
2026-07-28 08:00:06 +02:00
worker-kkdcp.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-latency.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-latency.h
Updated code to follow with kernel coding style
2024-12-01 17:01:05 +01:00
worker-log.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-misc.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-privs.c
worker-privs: allow munmap/mremap/madvise for isolated workers
2026-07-20 16:43:23 +03:00
worker-proxyproto.c
tlslib, worker: remove dead code orphaned by the listen-clear-file removal
2026-07-28 08:00:06 +02:00
worker-resume.c
sec-mod, worker: harden TLS resumption cache against empty session data
2026-07-28 08:07:07 +02:00
worker-svc.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker-tun.c
Merge branch 'tmp-include' into 'master'
2026-06-14 09:35:13 +03:00
worker-tun.h
tun_write/read were made macros in linux for write and read
2026-05-30 22:49:07 +02:00
worker-vpn.c
Fixed regression with CISCO Anyconnect clients and TLS 1.3
2026-08-12 20:58:32 +02:00
worker.c
Consistent include files and directives
2026-06-06 15:23:54 +02:00
worker.h
Merge branch 'tmp-include' into 'master'
2026-06-14 09:35:13 +03:00