ocserv

acct

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

auth

radius (challenge-response): add MAX_CHALLENGES macro as a limit of password requests

2019-06-24 17:26:27 +03:00

ccan

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

common

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

http-parser

http-parser: updated to latest version

2019-09-26 23:25:41 +02:00

inih

inih: updated to latest version

2020-02-07 22:43:51 +01:00

occtl

maxmind: added license

2019-12-12 14:59:53 +01:00

ocpasswd

ocpasswd: address memory leaks

2019-07-01 21:34:03 +02:00

pcl

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

protobuf/protobuf-c

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

sup-config

ocserv: added support for per-user split-dns directive

2019-11-17 11:06:47 +01:00

auth-unix.c

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

auth-unix.h

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

common-config.h

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

common.mk

Replaced the configuration parser with inih parser

2018-01-23 21:07:18 +01:00

config-kkdcp.c

split KKDCP config line parsing from config.c

2015-05-28 15:53:26 +02:00

config-ports.c

Enhanced configuration option 'restrict-user-to-ports'

2015-12-07 11:15:56 +01:00

config.c

config: avoid crash on invalid entries

2020-02-07 22:43:51 +01:00

ctl.proto

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

defs.h

main/sec-mod: handle sec-mod reload via synchronous communication

2018-04-15 09:25:55 +02:00

gettime.h

use CLOCK_REALTIME_COARSE if available.

2013-11-09 09:26:26 +01:00

html.c

Make escape_url() percent-escape fewer characters and escape ' ' as '+'

2018-01-13 13:11:33 -08:00

html.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

http-heads.gperf

worker-http: added support for anyconnect DTLS1.2 ciphersuites

2019-01-10 13:02:40 +01:00

icmp-ping.c

use casts to avoid various clang warnings under BSD systems

2018-03-10 17:56:12 +01:00

icmp-ping.h

always assign the first network address as PtP address

2015-02-11 10:27:30 +01:00

ip-lease.c

steal_ip_leases: reorg to avoid null pointer dereference

2020-02-25 08:25:24 +01:00

ip-lease.h

ipv6: introduced ipv6-subnet-prefix config option

2015-10-24 19:26:48 +02:00

ip-util.c

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

ip-util.h

Bound negotited MTU between RFC 791 defined minumum and configured maximum.

2020-02-19 15:26:55 -07:00

ipc.proto

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

kkdcp_asn1_tab.c

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

kkdcp.asn

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

log.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

lzs.c

lzs: updated from openconnect source code

2018-04-15 20:53:17 +02:00

lzs.h

updated copyright information in LZS code

2015-01-16 11:17:52 +01:00

main-auth.c

check_multiple_users: do not account disconnected ones

2019-12-16 21:30:24 +01:00

main-ban.c

Ban score should always increase.

2020-02-15 21:12:19 +01:00

main-ban.h

correctly print the IP of addresses added to ban list

2015-12-23 19:33:14 +02:00

main-ctl-unix.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

main-ctl.h

Added occtl command 'show events', as well as the corresponding command in main

2015-12-05 11:23:06 +01:00

main-proc.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

main-sec-mod-cmd.c

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

main-user.c

use casts to avoid various clang warnings under BSD systems

2018-03-10 17:56:12 +01:00

main-worker-cmd.c

CMD_BAN_IP should not use the IP address provided by worker process as it is not verified.

2020-02-27 12:18:09 -07:00

main.c

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

main.h

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

Makefile.am

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

ocserv-fw

ocserv-fw should send all traffic to the device-specific forwarding chain

2017-01-09 15:45:22 -06:00

proc-search.c

proc_table_update_ip: corrected DTLS address comparison

2018-04-14 14:22:59 +02:00

proc-search.h

Hash the peer's DTLS IP separately from its CSTP IP

2018-02-22 08:25:18 -08:00

route-add.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

route-add.h

A failure to apply iroutes is propagated and login is denied

2015-11-16 17:22:45 +01:00

script-list.h

remove_proc: remove script watcher from libev list

2019-07-01 15:04:18 +02:00

sec-mod-acct.h

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

sec-mod-auth.c

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

sec-mod-auth.h

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

sec-mod-cookies.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

sec-mod-db.c

Perform quicker cleanup of sessions which their user explicitly disconnected

2019-07-01 21:57:08 +02:00

sec-mod-resume.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

sec-mod-resume.h

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-sup-config.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

sec-mod-sup-config.h

ocserv: warn when conflicting supplemental config options are specified

2016-04-01 15:32:27 +02:00

sec-mod.c

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

sec-mod.h

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

setproctitle.c

setproctitle: fixed compilation issue in Linux systems without prctl

2016-04-15 14:22:47 +02:00

setproctitle.h

updated license information and authors

2013-11-05 19:38:30 +01:00

str.c

Fix the bug of "ocserv-worker: segfault at 0 ip b76d6747 sp bf851c70", https://gitlab.com/openconnect/ocserv/issues/197

2019-02-17 08:12:42 +00:00

str.h

radius: replace experimental Group-Name with Class attribute

2016-04-01 15:33:11 +02:00

subconfig.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

tlslib.c

main: create a sec-mod socket file independent of pid

2018-05-11 22:04:28 +02:00

tlslib.h

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

tun.c

FreeBSD tun(4)

2019-10-02 14:00:26 +00:00

tun.h

FreeBSD tun(4)

2019-10-02 14:00:26 +00:00

valid-hostname.c

ocserv: check the hostname value received by the client for validity

2016-06-18 14:21:41 +02:00

vasprintf.c

replaced vasprintf() with correct variant

2014-09-24 11:36:30 +02:00

vasprintf.h

introduced str_append_printf()

2014-06-26 13:46:31 +02:00

version.inc.in

regenerate autogen'ed files when making a distribution.

2013-07-23 21:39:47 +02:00

vhost.h

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

vpn.h

Add udp-listen-host option for DTLS

2019-09-30 09:01:55 +08:00

worker-auth.c

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

worker-bandwidth.c

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

worker-bandwidth.h

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

worker-http-handlers.c

tlslib: eliminated unneeded code for GnuTLS >= 3.3.0

2018-04-14 14:23:09 +02:00

worker-http.c

Adapt UA detection for newer AnyConnect versions

2019-12-02 17:17:21 +01:00

worker-kkdcp.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

worker-misc.c

use casts to avoid various clang warnings under BSD systems

2018-03-10 17:56:12 +01:00

worker-privs.c

seccomp: allow openat()

2019-12-16 21:30:37 +01:00

worker-proxyproto.c

ocserv: addressed gcc9 warnings

2019-09-26 23:25:14 +02:00

worker-resume.c

Introduced the notion of virtual hosts

2018-03-06 20:42:31 +01:00

worker-vpn.c

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00

worker.h

Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.

2020-02-28 11:20:30 -07:00