GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 00:37:00 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
03b71ca57f314a67140e41e600377b104738df42
ocserv/src
History
Zhiyuan Wan 3bc39e40c0 seccomp: allow essential syscalls on 32-bit platform. 
This fix ocserv auth issue on armv7 platform.
Not tested with other 32-bit platforms, be careful.

Solves issue #474

Signed-off-by: Zhiyuan Wan <h@iloli.bid>
2022-11-24 15:18:10 +08:00
..
acct
syslog: LOG_AUTH is not a priority
2020-06-27 15:36:58 +02:00
auth
Merge branch 'groovyfengx-master-patch-69245' into 'master'
2022-03-02 08:48:55 +00:00
ccan
Revert previous typo fixes to CCAN and PCL
2021-12-23 10:04:29 +01:00
common
Changed logging level to reduce noise.
2021-03-01 10:42:43 -07:00
http-parser
Typos found by codespell
2021-10-09 17:57:11 +02:00
inih
inih: updated to latest version
2020-10-18 21:05:05 +02:00
occtl
maxmind: ensure that asprintf is checked
2021-11-13 08:45:14 +01:00
ocpasswd
lgtm: ignore unuseful warnings
2021-11-13 08:41:30 +01:00
pcl
Revert previous typo fixes to CCAN and PCL
2021-12-23 10:04:29 +01:00
protobuf/protobuf-c
Reverted recursive make in src/
2016-12-13 15:37:07 +01:00
sup-config
Added client-bypass-protocol config option
2021-05-18 07:15:43 +00:00
auth-unix.c
syslog: LOG_AUTH is not a priority
2020-06-27 15:36:58 +02:00
auth-unix.h
Only include grouplist functions when they are needed
2015-07-01 20:59:54 +02:00
common-config.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
common.mk
Replaced the configuration parser with inih parser
2018-01-23 21:07:18 +01:00
config-kkdcp.c
split KKDCP config line parsing from config.c
2015-05-28 15:53:26 +02:00
config-ports.c
Fixed incorrect pointer arithmetic on configuration error
2020-02-29 19:43:57 +01:00
config.c
Allow HTTP headers to be configurable
2022-07-02 04:02:56 +00:00
ctl.proto
Modify ocserv-sm to permit it to scale up to the number of CPUs. This permits a higher rate of client connections and prevents TLS signing from becoming a bottleneck for clients connecting.
2020-08-26 09:46:04 -06:00
defs.h
Log changes to reduce logging noise
2020-12-03 10:58:22 +01:00
gettime.h
Add reporting of RX latency
2020-05-26 18:14:36 -06:00
html.c
Make escape_url() percent-escape fewer characters and escape ' ' as '+'
2018-01-13 13:11:33 -08:00
html.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
http-heads.gperf
worker-http: added support for anyconnect DTLS1.2 ciphersuites
2019-01-10 13:02:40 +01:00
icmp-ping.c
gnutls_rnd(): always check its return value
2020-11-19 22:20:19 +01:00
icmp-ping.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
ip-lease.c
Do not assign the same local and remote IPs
2021-10-31 17:18:42 +01:00
ip-lease.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
ip-util.c
Replaced redundant checked with asserts
2020-12-12 22:47:43 +01:00
ip-util.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
ipc.proto
Added client-bypass-protocol config option
2021-05-18 07:15:43 +00:00
isolate.c
Improve const char declarations
2021-12-17 10:26:17 +01:00
isolate.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
kkdcp_asn1_tab.c
kkdcp.asn: use GeneralString for KerberosString to follow RFC1510
2015-02-27 15:01:20 +01:00
kkdcp.asn
kkdcp.asn: use GeneralString for KerberosString to follow RFC1510
2015-02-27 15:01:20 +01:00
log.c
log: simplified logging process
2021-06-12 21:42:51 +02:00
lzs.c
Fix repeated words in comments
2021-11-18 06:21:14 +01:00
lzs.h
headers: added header guards
2020-12-09 15:46:12 +01:00
main-auth.c
Modify ocserv-sm to permit it to scale up to the number of CPUs. This permits a higher rate of client connections and prevents TLS signing from becoming a bottleneck for clients connecting.
2020-08-26 09:46:04 -06:00
main-ban.c
Avoid localtime() in favor of localtime_r()
2020-12-09 15:01:39 +01:00
main-ban.h
Don't apply BanIP checks to clients on the same subnet.
2020-10-01 11:59:41 -06:00
main-ctl-unix.c
ctl_handler_init: fixed resource leaks
2021-04-01 17:09:25 +02:00
main-ctl.h
Added occtl command 'show events', as well as the corresponding command in main
2015-12-05 11:23:06 +01:00
main-proc.c
ocserv: renamed main_loop
2020-12-09 15:56:29 +01:00
main-sec-mod-cmd.c
Added client-bypass-protocol config option
2021-05-18 07:15:43 +00:00
main-user.c
Improve const char declarations
2021-12-17 10:26:17 +01:00
main-worker-cmd.c
Set disconnect reason when updating ban-ip
2020-11-06 13:16:32 -07:00
main.c
Fixing issue: Authentication requests from the same IP address are not load balanced among security modules
2022-02-28 16:00:13 +00:00
main.h
ocserv: renamed main_loop
2020-12-09 15:56:29 +01:00
Makefile.am
Makefile.am: cleanup
2020-12-14 21:20:22 +01:00
namespace.c
add basic namespace support for listen address
2020-07-13 18:11:30 +02:00
namespace.h
add basic namespace support for listen address
2020-07-13 18:11:30 +02:00
ocserv-fw
ocserv-fw should send all traffic to the device-specific forwarding chain
2017-01-09 15:45:22 -06:00
proc-search.c
proc_table_update_ip: corrected DTLS address comparison
2018-04-14 14:22:59 +02:00
proc-search.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
route-add.c
str_rep_tab: added explicit initializer
2022-02-15 10:34:18 +01:00
route-add.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
script-list.h
ocserv: renamed main_loop
2020-12-09 15:56:29 +01:00
sec-mod-acct.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
sec-mod-auth.c
Typos found by Visual Studio Code Checker
2021-12-22 19:21:02 +01:00
sec-mod-auth.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
sec-mod-cookies.c
Introduced the notion of virtual hosts
2018-03-06 20:42:31 +01:00
sec-mod-db.c
Typos found by codespell
2021-10-09 17:57:11 +02:00
sec-mod-resume.c
Ensure that unchecked function calls are for a reason and fix otherwise
2020-06-30 21:53:34 +02:00
sec-mod-resume.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
sec-mod-sup-config.c
Introduced the notion of virtual hosts
2018-03-06 20:42:31 +01:00
sec-mod-sup-config.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
sec-mod.c
load_keys: work around GnuTLS 3.7.3 regression
2022-02-10 16:05:35 +01:00
sec-mod.h
sec-mod: increased max groups to 128
2022-02-17 08:53:30 +01:00
setproctitle.c
Typos found by codespell
2021-10-09 17:57:11 +02:00
setproctitle.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
str.c
str_replace_str: ensure types match for comparison
2020-03-12 19:47:50 +01:00
str.h
str_rep_tab: added explicit initializer
2022-02-15 10:34:18 +01:00
subconfig.c
Add support for RFC6750 bearer tokens to ocserv
2020-03-09 21:48:04 +01:00
tlslib.c
Fix repeated words in comments
2021-11-18 06:21:14 +01:00
tlslib.h
Changed logging level to reduce noise.
2021-03-01 10:42:43 -07:00
tun.c
Base /dev/tunN iteration on max-clients for OSes that do not have the /dev/tun special control device
2022-03-16 22:47:29 +00:00
tun.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
valid-hostname.c
ocserv: check the hostname value received by the client for validity
2016-06-18 14:21:41 +02:00
vasprintf.c
replaced vasprintf() with correct variant
2014-09-24 11:36:30 +02:00
vasprintf.h
introduced str_append_printf()
2014-06-26 13:46:31 +02:00
version.inc.in
regenerate autogen'ed files when making a distribution.
2013-07-23 21:39:47 +02:00
vhost.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
vpn.h
Allow HTTP headers to be configurable
2022-07-02 04:02:56 +00:00
worker-auth.c
Typos found by codespell
2021-10-09 17:57:11 +02:00
worker-bandwidth.c
Reworked MTU discovery
2016-08-04 07:57:37 +02:00
worker-bandwidth.h
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
worker-http-handlers.c
Removed conditional code for OWASP headers
2021-05-12 11:56:09 -06:00
worker-http.c
Allow HTTP headers to be configurable
2022-07-02 04:02:56 +00:00
worker-kkdcp.c
libtasn1: use NULL instead of ASN1_TYPE_EMPTY
2022-02-10 15:31:39 +01:00
worker-latency.c
Add reporting of RX latency
2020-05-26 18:14:36 -06:00
worker-latency.h
Add reporting of RX latency
2020-05-26 18:14:36 -06:00
worker-misc.c
handle_commands_from_main: silence coverity
2020-11-26 14:38:03 +01:00
worker-privs.c
seccomp: allow essential syscalls on 32-bit platform.
2022-11-24 15:18:10 +08:00
worker-proxyproto.c
worker-proxyproto: corrected type of data_size to avoid warnings in comparisons
2020-03-12 19:47:50 +01:00
worker-resume.c
Introduced the notion of virtual hosts
2018-03-06 20:42:31 +01:00
worker-vpn.c
str_rep_tab: added explicit initializer
2022-02-15 10:34:18 +01:00
worker.c
libtasn1: use NULL instead of ASN1_TYPE_EMPTY
2022-02-10 15:31:39 +01:00
worker.h
Fix typo found by codespell
2021-11-13 13:17:51 +01:00