Nikos Mavrogiannopoulos 010257c6a2 Simplified cookie handling ...

This change set eliminates the need for cryptographically authenticated
cookies and relies on sec-module providing accurate information on
the SID provided by the client.

2016-02-23 15:31:17 +01:00

..

acct

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

auth

radius: more careful checks around the user_agent access

2016-01-17 23:18:24 +01:00

ccan

ccan: build as an included library

2015-11-11 14:03:55 +01:00

common

Simplified cookie handling

2016-02-23 15:31:17 +01:00

http-parser

Updated the included http-parser

2014-03-11 13:19:06 +01:00

occtl

allow compilation with included protobuf

2016-02-22 14:07:36 +01:00

ocpasswd

Allow compilation with local libopts

2016-02-22 14:12:42 +01:00

pcl

pcl: include headers for getpid and memcpy

2015-05-26 10:25:14 +02:00

protobuf

use an intermediate protobuf library for the included protobuf sources

2015-11-11 13:35:25 +01:00

sup-config

sup-config/file: Addressed issue with ipv4-network not reading prefix

2016-02-23 14:47:41 +01:00

auth-unix.c

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

auth-unix.h

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

base64-helper.c

Added check for nettle < 3.0

2015-10-30 23:53:57 +01:00

base64-helper.h

use nettle's base64 implementation

2015-10-30 14:47:19 +01:00

common-config.h

Added configuration option 'restrict-user-to-ports'

2015-12-02 10:38:12 +01:00

common.mk

Allow compilation with local libopts

2016-02-22 14:12:42 +01:00

config-kkdcp.c

split KKDCP config line parsing from config.c

2015-05-28 15:53:26 +02:00

config-ports.c

Enhanced configuration option 'restrict-user-to-ports'

2015-12-07 11:15:56 +01:00

config.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

ctl.proto

occtl: print the restricted ports for the client

2015-12-08 14:14:27 +01:00

gettime.h

use CLOCK_REALTIME_COARSE if available.

2013-11-09 09:26:26 +01:00

html.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

html.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

http-heads.gperf

renamed X-Support-SPNEGO to X-Support-HTTP-Auth

2015-02-20 12:28:36 +01:00

icmp-ping.c

replaced select() calls will poll() calls

2016-01-28 13:53:08 +01:00

icmp-ping.h

always assign the first network address as PtP address

2015-02-11 10:27:30 +01:00

ip-lease.c

ip-lease: do not attempt to calculate more than FIXED_IPS predictable IPs per user

2016-01-27 14:03:14 +01:00

ip-lease.h

ipv6: introduced ipv6-subnet-prefix config option

2015-10-24 19:26:48 +02:00

ip-util.c

moved human_addr2() to ip-util.c

2016-02-19 09:56:21 +01:00

ip-util.h

moved human_addr2() to ip-util.c

2016-02-19 09:56:21 +01:00

ipc.proto

Simplified cookie handling

2016-02-23 15:31:17 +01:00

kkdcp_asn1_tab.c

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

kkdcp.asn

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

log.c

moved human_addr2() to ip-util.c

2016-02-19 09:56:21 +01:00

lzs.c

Stop using 1ULL as the base value to be shifted in LZS GET_BITS()

2015-03-01 09:46:43 +01:00

lzs.h

updated copyright information in LZS code

2015-01-16 11:17:52 +01:00

main-auth.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

main-ban.c

main: fixed IP unbanning

2016-01-27 14:36:39 +01:00

main-ban.h

correctly print the IP of addresses added to ban list

2015-12-23 19:33:14 +02:00

main-ctl-unix.c

Use 32-bit length variable for transferring between occtl and ocserv

2016-01-28 13:53:21 +01:00

main-ctl.h

Added occtl command 'show events', as well as the corresponding command in main

2015-12-05 11:23:06 +01:00

main-proc.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

main-sec-mod-cmd.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

main-user.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

main-worker-cmd.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

main.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

main.h

Simplified cookie handling

2016-02-23 15:31:17 +01:00

Makefile.am

Simplified cookie handling

2016-02-23 15:31:17 +01:00

ocserv-args.def

Simplified cookie handling

2016-02-23 15:31:17 +01:00

ocserv-fw

ocserv-fw: removed unneeded variable

2015-12-07 14:20:00 +01:00

proc-search.c

Renamed proc_search_ip() to proc_search_single_ip()

2016-02-21 13:25:02 +01:00

proc-search.h

Renamed proc_search_ip() to proc_search_single_ip()

2016-02-21 13:25:02 +01:00

route-add.c

Simplified per-user/group configuration handling

2015-11-26 18:29:14 +01:00

route-add.h

A failure to apply iroutes is propagated and login is denied

2015-11-16 17:22:45 +01:00

script-list.h

main: ensure we call ev_child_stop() on child cleanup handlers

2016-01-27 10:54:00 +01:00

sec-mod-acct.h

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00

sec-mod-auth.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

sec-mod-auth.h

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00

sec-mod-db.c

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

sec-mod-resume.c

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-resume.h

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-sup-config.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

sec-mod-sup-config.h

separated permanent configuration options from the reloaded ones

2015-03-02 13:18:52 +01:00

sec-mod.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

sec-mod.h

Simplified cookie handling

2016-02-23 15:31:17 +01:00

setproctitle.c

setproctitle: overwrite argv and argc

2015-08-31 16:35:19 +02:00

setproctitle.h

updated license information and authors

2013-11-05 19:38:30 +01:00

str.c

str: explicitly deinitialize temporary value, instead of relying on talloc

2015-10-30 14:42:52 +01:00

str.h

Introduced %{RI} macro for route-add/del-cmd to get route in CIDR format

2015-10-30 14:20:24 +01:00

subconfig.c

eliminated double null check

2015-12-01 11:46:30 +01:00

tlslib.c

tlslib: don't use GNUTLS_X509_CRT_LIST_SORT; it is buggy

2016-02-18 16:50:42 +01:00

tlslib.h

Reload the certificates and private keys on SIGHUP

2016-01-26 12:51:05 +01:00

tun.c

remove unused variables

2016-02-23 14:54:10 +01:00

tun.h

Handle OpenBSD's additional tun header

2015-02-14 14:22:00 +01:00

vasprintf.c

replaced vasprintf() with correct variant

2014-09-24 11:36:30 +02:00

vasprintf.h

introduced str_append_printf()

2014-06-26 13:46:31 +02:00

version.inc.in

regenerate autogen'ed files when making a distribution.

2013-07-23 21:39:47 +02:00

vpn.h

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker-auth.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker-bandwidth.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

worker-bandwidth.h

reduce the calls to gettime().

2013-11-09 09:26:42 +01:00

worker-http-handlers.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker-http.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker-kkdcp.c

added informational message on KKDCP request processing

2015-09-04 15:53:17 +02:00

worker-misc.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker-privs.c

replaced select() calls will poll() calls

2016-01-28 13:53:08 +01:00

worker-proxyproto.c

proxyproto: use force_read_timeout() to ensure reconstruction of packets

2016-01-19 13:55:56 +01:00

worker-resume.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker-vpn.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

worker.h

Simplified cookie handling

2016-02-23 15:31:17 +01:00