Nikos Mavrogiannopoulos b6df22c8c3 Reload the certificates and private keys on SIGHUP ...

Until now this part of the configuration was static, but
there is the need to reload certificates and keys, e.g., on
renewal.

2016-01-26 12:51:05 +01:00

..

acct

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

auth

radius: more careful checks around the user_agent access

2016-01-17 23:18:24 +01:00

ccan

ccan: build as an included library

2015-11-11 14:03:55 +01:00

common

protocol buffers generated sources for ctl were moved to libipc

2015-12-08 13:53:06 +01:00

http-parser

Updated the included http-parser

2014-03-11 13:19:06 +01:00

occtl

occtl: updated copyright text

2016-01-21 11:18:58 +01:00

ocpasswd

ocpasswd: ensure there are no leaks

2015-11-10 13:49:41 +01:00

pcl

pcl: include headers for getpid and memcpy

2015-05-26 10:25:14 +02:00

protobuf

use an intermediate protobuf library for the included protobuf sources

2015-11-11 13:35:25 +01:00

sup-config

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

auth-unix.c

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

auth-unix.h

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

base64-helper.c

Added check for nettle < 3.0

2015-10-30 23:53:57 +01:00

base64-helper.h

use nettle's base64 implementation

2015-10-30 14:47:19 +01:00

common-config.h

Added configuration option 'restrict-user-to-ports'

2015-12-02 10:38:12 +01:00

common.mk

occtl and ocpasswd were moved into separate directories

2015-10-30 13:51:19 +01:00

config-kkdcp.c

split KKDCP config line parsing from config.c

2015-05-28 15:53:26 +02:00

config-ports.c

Enhanced configuration option 'restrict-user-to-ports'

2015-12-07 11:15:56 +01:00

config.c

ocserv: added the --test-config command line option

2016-01-19 10:27:58 +01:00

cookies.c

when opening a session forward the received cookie to sec-module

2015-02-12 21:44:32 +01:00

cookies.h

Added cookie key rotation

2015-11-17 08:33:38 +01:00

ctl.proto

occtl: print the restricted ports for the client

2015-12-08 14:14:27 +01:00

gettime.h

use CLOCK_REALTIME_COARSE if available.

2013-11-09 09:26:26 +01:00

html.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

html.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

http-heads.gperf

renamed X-Support-SPNEGO to X-Support-HTTP-Auth

2015-02-20 12:28:36 +01:00

icmp-ping.c

ping: check for ICMPv6 unreachable packets when in IPv6

2015-05-27 12:04:40 +02:00

icmp-ping.h

always assign the first network address as PtP address

2015-02-11 10:27:30 +01:00

ip-lease.c

Simplified per-user/group configuration handling

2015-11-26 18:29:14 +01:00

ip-lease.h

ipv6: introduced ipv6-subnet-prefix config option

2015-10-24 19:26:48 +02:00

ip-util.c

Introduced %{RI} macro for route-add/del-cmd to get route in CIDR format

2015-10-30 14:20:24 +01:00

ip-util.h

Introduced %{RI} macro for route-add/del-cmd to get route in CIDR format

2015-10-30 14:20:24 +01:00

ipc.proto

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00

kkdcp_asn1_tab.c

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

kkdcp.asn

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

log.c

Don't print any cookie data unless debug level is set to be over 8

2015-12-18 11:22:49 +01:00

lzs.c

Stop using 1ULL as the base value to be shifted in LZS GET_BITS()

2015-03-01 09:46:43 +01:00

lzs.h

updated copyright information in LZS code

2015-01-16 11:17:52 +01:00

main-auth.c

main: introduced main-worker-cmd.c

2016-01-11 13:09:34 +01:00

main-ban.c

correctly print the IP of addresses added to ban list

2015-12-23 19:33:14 +02:00

main-ban.h

correctly print the IP of addresses added to ban list

2015-12-23 19:33:14 +02:00

main-ctl-unix.c

occtl: print the restricted ports for the client

2015-12-08 14:14:27 +01:00

main-ctl.h

Added occtl command 'show events', as well as the corresponding command in main

2015-12-05 11:23:06 +01:00

main-proc.c

moved proc creation and deinitialization at main-proc.c

2016-01-11 13:05:55 +01:00

main-sec-mod-cmd.c

moved run_sec_mod() to main-sec-mod-cmd.c

2016-01-11 13:07:15 +01:00

main-user.c

Add default case for 'restrict-user-to-ports' switch

2016-01-25 11:13:27 +01:00

main-worker-cmd.c

main: introduced main-worker-cmd.c

2016-01-11 13:09:34 +01:00

main.c

Reload the certificates and private keys on SIGHUP

2016-01-26 12:51:05 +01:00

main.h

main.h: corrected typo in comment

2016-01-25 11:23:16 +01:00

Makefile.am

main: introduced main-worker-cmd.c

2016-01-11 13:09:34 +01:00

ocserv-args.def

Reload the certificates and private keys on SIGHUP

2016-01-26 12:51:05 +01:00

ocserv-fw

ocserv-fw: removed unneeded variable

2015-12-07 14:20:00 +01:00

proc-search.c

Added failure codes for proc_table_add()

2015-02-10 18:36:40 +01:00

proc-search.h

Added failure codes for proc_table_add()

2015-02-10 18:36:40 +01:00

route-add.c

Simplified per-user/group configuration handling

2015-11-26 18:29:14 +01:00

route-add.h

A failure to apply iroutes is propagated and login is denied

2015-11-16 17:22:45 +01:00

script-list.h

Master process was converted to use libev

2015-12-05 11:18:09 +01:00

sec-mod-acct.h

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00

sec-mod-auth.c

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

sec-mod-auth.h

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00

sec-mod-db.c

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

sec-mod-resume.c

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-resume.h

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-sup-config.c

print information on the config backend used

2015-05-19 18:04:30 +02:00

sec-mod-sup-config.h

separated permanent configuration options from the reloaded ones

2015-03-02 13:18:52 +01:00

sec-mod.c

Reload the certificates and private keys on SIGHUP

2016-01-26 12:51:05 +01:00

sec-mod.h

radius: send user agent information as Connect-Info on accounting start

2016-01-18 11:55:16 +01:00

setproctitle.c

setproctitle: overwrite argv and argc

2015-08-31 16:35:19 +02:00

setproctitle.h

updated license information and authors

2013-11-05 19:38:30 +01:00

str.c

str: explicitly deinitialize temporary value, instead of relying on talloc

2015-10-30 14:42:52 +01:00

str.h

Introduced %{RI} macro for route-add/del-cmd to get route in CIDR format

2015-10-30 14:20:24 +01:00

subconfig.c

eliminated double null check

2015-12-01 11:46:30 +01:00

tlslib.c

Reload the certificates and private keys on SIGHUP

2016-01-26 12:51:05 +01:00

tlslib.h

Reload the certificates and private keys on SIGHUP

2016-01-26 12:51:05 +01:00

tun.c

ipv6: introduced ipv6-subnet-prefix config option

2015-10-24 19:26:48 +02:00

tun.h

Handle OpenBSD's additional tun header

2015-02-14 14:22:00 +01:00

vasprintf.c

replaced vasprintf() with correct variant

2014-09-24 11:36:30 +02:00

vasprintf.h

introduced str_append_printf()

2014-06-26 13:46:31 +02:00

version.inc.in

regenerate autogen'ed files when making a distribution.

2013-07-23 21:39:47 +02:00

vpn.h

Don't print any cookie data unless debug level is set to be over 8

2015-12-18 11:22:49 +01:00

worker-auth.c

radius: more careful checks around the user_agent access

2016-01-17 23:18:24 +01:00

worker-bandwidth.c

Revert "license upgraded to GPLv3"

2014-09-24 11:34:15 +02:00

worker-bandwidth.h

reduce the calls to gettime().

2013-11-09 09:26:42 +01:00

worker-http-handlers.c

Prior to sending profile files, perform cookie authentication

2015-12-22 00:20:39 +02:00

worker-http.c

Updated support for chacha20-poly1305

2016-01-13 11:44:19 +01:00

worker-kkdcp.c

added informational message on KKDCP request processing

2015-09-04 15:53:17 +02:00

worker-misc.c

main: allow multiple clients in control channel (occtl)

2015-12-05 11:23:01 +01:00

worker-privs.c

cstp_send_file: use system calls instead of libc for open/read

2015-11-11 16:06:16 +01:00

worker-proxyproto.c

proxyproto: use force_read_timeout() to ensure reconstruction of packets

2016-01-19 13:55:56 +01:00

worker-resume.c

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

worker-vpn.c

tlslib: abstracted the recv_packet functions

2016-01-19 14:33:03 +01:00

worker.h

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00