radsecproxy.git/ChangeLog, branch proxy-state

Update ChangeLog with two older bug fixes.

2013-08-27T11:35:51+00:00

Don't mention a version number in ChangeLog in the master branch.

2013-08-27T11:20:28+00:00

Time out on TLS clients not closing the connection properly.

2013-08-26T15:02:07+00:00

Patch by Fabian Mauchle.

When timing out while reading from a TLS server, shutdown the socket properly.

2013-08-26T14:52:40+00:00

Also signal the "client writer" (clientwr()).
Together, this should result in TLS connections being cleaned up properly.

Patch by Fabian Mauchle.

Don't free struct clsrvconf members rewritein and rewriteout.

2013-08-26T13:37:15+00:00

They are pointers into static struct hash *rewriteconfs and should
live forever.

Patch by Fabian Mauchle.

Update ChangeLog with the last three bug fixes/ehancements.

2013-08-26T13:04:28+00:00

Also, in a lame attempt att giving credit for last commit where I
failed at doing that:

  4920ff44 is a patch from Fabian Mauchle.

Update ChangeLog entry for 1.6.2 with correct CVE id.

2012-11-01T08:02:42+00:00

1.6.2 is already released but correct ChangeLog info is good.

Mention CVE number in ChangeLog.

2012-10-25T11:46:00+00:00

radsecproxy-1.6.2

2012-10-25T11:21:57+00:00

Don't mix up pre- and post-handshake verification of DTLS clients.

2012-10-22T16:13:45+00:00

Commit db965c9b addressed TLS clients only.

When verifying DTLS clients, don't consider config blocks with CA
settings ('tls') which differ from the one used for verifying the
certificate chain.

Original issue reported and analysed by Ralf Paffrath. DTLS being
vulnerable reported by Raphael Geisser.

Addresses issue RADSECPROXY-43, CVE-2012-4523.