Nikos Mavrogiannopoulos 1483f51062 ciphersuite check is made dynamic ...

That would allow ocserv to be compiled with GnuTLS earlier than
3.2.7 but still use GCM if linked with a proper version.

2015-03-31 10:30:29 +02:00

..

acct

do not send IPv6 accounting with radius; there is a bug in freeradius-client

2015-03-02 13:19:00 +01:00

auth

radius: eliminate dead variable

2015-02-27 13:50:01 +01:00

ccan

Added talloc.

2014-05-06 16:22:50 +02:00

http-parser

Updated the included http-parser

2014-03-11 13:19:06 +01:00

pcl

Do not need the multi-threaded version of PCL.

2013-07-02 01:48:22 +02:00

protobuf/protobuf-c

updated to protobuf 1.0.1

2014-08-25 21:54:59 +02:00

sup-config

Separated accounting from authentication.

2015-02-23 15:19:44 +01:00

cfg.h

avoid warnings on type of the parameter used for the allocation pool

2015-03-02 16:23:12 +01:00

common.c

ensure that sendmsg and recvmsg don't get interrupted

2015-03-15 11:25:09 +01:00

common.h

sanitize IP addresses provided by occtl

2015-02-26 16:15:40 +01:00

config.c

config: simplified comparison

2015-03-12 09:12:47 +01:00

cookies.c

when opening a session forward the received cookie to sec-module

2015-02-12 21:44:32 +01:00

cookies.h

eliminate double books for session expiration

2015-02-09 11:25:48 +01:00

ctl.h

occtl: added ability to list banned, and unban IPs

2015-02-26 14:33:38 +01:00

ctl.proto

removed unused variables and structures

2015-02-26 21:15:17 +01:00

gettime.h

use CLOCK_REALTIME_COARSE if available.

2013-11-09 09:26:26 +01:00

html.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

html.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

http-heads.gperf

renamed X-Support-SPNEGO to X-Support-HTTP-Auth

2015-02-20 12:28:36 +01:00

icmp-ping.c

icmp-ping: explicitly specify type

2015-03-12 09:12:47 +01:00

icmp-ping.h

always assign the first network address as PtP address

2015-02-11 10:27:30 +01:00

ip-lease.c

avoid using the IPv4 network address as tun address, and simplify valid address checking

2015-02-16 23:00:59 +01:00

ip-lease.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

ipc.proto

receive SM_CMD_AUTH_BAN_IP_REPLY asynchronously to prevent race conditions

2015-03-23 11:13:26 +01:00

kkdcp_asn1_tab.c

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

kkdcp.asn

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

log.c

When sending BAN IP messages to main receive a reply on whether further actions should continue

2015-02-25 20:08:51 +01:00

lzs.c

Stop using 1ULL as the base value to be shifted in LZS GET_BITS()

2015-03-01 09:46:43 +01:00

lzs.h

updated copyright information in LZS code

2015-01-16 11:17:52 +01:00

main-auth.c

worker: when receiving auth_cookie_reply from main update the SID

2015-03-16 15:47:23 +01:00

main-ban.c

updated log message

2015-02-27 22:40:26 +01:00

main-ban.h

sanitize IP addresses provided by occtl

2015-02-26 16:15:40 +01:00

main-ctl-dbus.c

Update call parameters of str_init() for --with-dbus

2015-01-24 08:50:50 +01:00

main-ctl-unix.c

chroot_dir, occtl_socket_file and socket_file_prefix were moved to permanent config options

2015-03-03 11:50:48 +01:00

main-ctl.h

Added support for unix sockets for the occtl communication.

2014-05-07 13:54:58 +02:00

main-misc.c

chroot_dir, occtl_socket_file and socket_file_prefix were moved to permanent config options

2015-03-03 11:50:48 +01:00

main-resume.c

avoid using the IPv4 network address as tun address, and simplify valid address checking

2015-02-16 23:00:59 +01:00

main-sec-mod-cmd.c

reduce messages sent by main to sec-mod

2015-03-26 07:48:02 +01:00

main-user.c

use strlcpy() instead of snprintf() where it make sense

2014-12-14 19:24:14 +01:00

main.c

chroot_dir, occtl_socket_file and socket_file_prefix were moved to permanent config options

2015-03-03 11:50:48 +01:00

main.h

clear_cfg_file() -> clear_cfg()

2015-03-02 13:18:58 +01:00

Makefile.am

added option to completely disable compression support

2015-03-01 09:50:24 +01:00

occtl-args.def

doc update

2015-03-06 13:56:25 +01:00

occtl-cache.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

occtl-dbus.c

occtl: corrected sending of dbus msgs

2015-01-24 10:18:41 +01:00

occtl-ip-cache.c

occtl: added cache and completion for IP addresses

2015-02-26 16:27:19 +01:00

occtl-nl.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

occtl-pager.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

occtl-time.c

occtl: pretty print expiration time in bans

2015-02-26 21:07:51 +01:00

occtl-unix.c

occtl-unix: removed dead code

2015-02-27 13:58:44 +01:00

occtl.c

occtl: unban -> unban ip

2015-02-27 08:52:50 +01:00

occtl.h

occtl: pretty print expiration time in bans

2015-02-26 21:07:51 +01:00

ocpasswd-args.def

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

ocpasswd.c

ocpasswd: attempt to use sha2crypt only in glibc

2015-01-19 14:46:37 +01:00

ocserv-args.def

doc update

2015-03-06 13:56:25 +01:00

proc-search.c

Added failure codes for proc_table_add()

2015-02-10 18:36:40 +01:00

proc-search.h

Added failure codes for proc_table_add()

2015-02-10 18:36:40 +01:00

route-add.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

route-add.h

updated license information and authors

2013-11-05 19:38:30 +01:00

script-list.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

sec-mod-acct.h

removed server-name config option

2015-02-26 11:00:07 +01:00

sec-mod-auth.c

reduce messages sent by main to sec-mod

2015-03-26 07:48:02 +01:00

sec-mod-auth.h

removed server-name config option

2015-02-26 11:00:07 +01:00

sec-mod-db.c

Separated accounting from authentication.

2015-02-23 15:19:44 +01:00

sec-mod-sup-config.c

separated permanent configuration options from the reloaded ones

2015-03-02 13:18:52 +01:00

sec-mod-sup-config.h

separated permanent configuration options from the reloaded ones

2015-03-02 13:18:52 +01:00

sec-mod.c

sec-mod: do not impose timeouts on reads from main

2015-03-31 10:13:13 +02:00

sec-mod.h

receive SM_CMD_AUTH_BAN_IP_REPLY asynchronously to prevent race conditions

2015-03-23 11:13:26 +01:00

setproctitle.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

setproctitle.h

updated license information and authors

2013-11-05 19:38:30 +01:00

str.c

initialize str to null

2014-06-27 09:08:31 +02:00

str.h

introduced str_append_printf()

2014-06-26 13:46:31 +02:00

subconfig.c

avoid warnings on type of the parameter used for the allocation pool

2015-03-02 16:23:12 +01:00

system.c

removed support for linux namespaces; they don't provide any advantage over seccomp

2015-02-26 13:23:51 +01:00

system.h

removed support for linux namespaces; they don't provide any advantage over seccomp

2015-02-26 13:23:51 +01:00

tlslib.c

ciphersuite check is made dynamic

2015-03-31 10:30:29 +02:00

tlslib.h

simplified FATAL_ERR_CMD()

2014-10-05 14:47:21 +02:00

tun.c

separated permanent configuration options from the reloaded ones

2015-03-02 13:18:52 +01:00

tun.h

Handle OpenBSD's additional tun header

2015-02-14 14:22:00 +01:00

vasprintf.c

replaced vasprintf() with correct variant

2014-09-24 11:36:30 +02:00

vasprintf.h

introduced str_append_printf()

2014-06-26 13:46:31 +02:00

version.inc.in

regenerate autogen'ed files when making a distribution.

2013-07-23 21:39:47 +02:00

vpn.h

chroot_dir, occtl_socket_file and socket_file_prefix were moved to permanent config options

2015-03-03 11:50:48 +01:00

worker-auth.c

worker: when receiving auth_cookie_reply from main update the SID

2015-03-16 15:47:23 +01:00

worker-bandwidth.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

worker-bandwidth.h

reduce the calls to gettime().

2013-11-09 09:26:42 +01:00

worker-extras.c

Moved HTTP parts of worker to worker-http.c

2015-01-16 10:56:35 +01:00

worker-http.c

ciphersuite check is made dynamic

2015-03-31 10:30:29 +02:00

worker-kkdcp.c

kkdcp: fixes in post handler

2015-02-27 14:10:44 +01:00

worker-misc.c

always check tmsg for null prior to freeing it

2015-03-02 16:28:22 +01:00

worker-privs.c

seccomp: allow _newselect since it is called in x86 instead of select

2015-01-30 00:41:26 +01:00

worker-resume.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

worker-vpn.c

worker: don't use getsockopt(TCP_MAXSEG) on unix sockets

2015-03-17 12:30:10 +01:00

worker.h

ciphersuite check is made dynamic

2015-03-31 10:30:29 +02:00