Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Allow TLSv1.1 and TLSv1.2. | Linus Nordberg | 2016-02-25 | 1 | -1/+2 |
| | | | | | This should in theory allow for later versions of TLS too but let's verify that when the time comes. | ||||
* | Mention radsecproxy-hash(1) in radsecproxy.1. | Linus Nordberg | 2015-09-17 | 1 | -3/+2 |
| | |||||
* | Merge branch 'docu' | Linus Nordberg | 2015-01-22 | 2 | -2/+15 |
|\ | |||||
| * | Revamp the documentation of a request+response being proxied. | Linus Nordberg | 2015-01-22 | 1 | -9/+7 |
| | | |||||
| * | Add comments on functions. | Linus Nordberg | 2015-01-16 | 1 | -0/+3 |
| | | |||||
| * | Add more overview to develdoc and correct a factual error. | Linus Nordberg | 2015-01-16 | 1 | -2/+14 |
| | | |||||
* | | Install radsecproxy.conf.5 unconditionally. | Linus Nordberg | 2015-01-19 | 2 | -1/+3 |
| | | | | | | | | Keep regeneration of it dependent on configure finding docbook2x-man(1). | ||||
* | | Refer to RFC6614 instead of the old draft. | Linus Nordberg | 2015-01-19 | 1 | -2/+2 |
| | | |||||
* | | ChangeLog for the four security patches. | Linus Nordberg | 2015-01-16 | 1 | -0/+4 |
| | | |||||
* | | Fix heap overflow in raddtlsget(), radtcpget() and radtlsget(). | Linus Nordberg | 2015-01-16 | 3 | -0/+12 |
| | | | | | | | | Patch by Stephen Röttger. | ||||
* | | Fix null pointer dereference in decttl(). | Linus Nordberg | 2015-01-16 | 1 | -0/+3 |
| | | | | | | | | Patch by Stephen Röttger. | ||||
* | | Fix use-after-free in _internal_removeserversubrealms(). | Linus Nordberg | 2015-01-16 | 1 | -2/+5 |
| | | | | | | | | Patch by Stephen Röttger. | ||||
* | | Fix use-after-free in hash_extract(). | Linus Nordberg | 2015-01-16 | 2 | -1/+4 |
|/ | | | | Patch by Stephen Röttger. | ||||
* | Fix some issues showing when DEBUG is defined. | Linus Nordberg | 2015-01-16 | 4 | -8/+7 |
| | |||||
* | Remove 'compile', generated by Automake. | Linus Nordberg | 2015-01-16 | 3 | -143/+2 |
| | | | | Patch by Christian Hesse. | ||||
* | Update copyright notice. | Linus Nordberg | 2015-01-16 | 1 | -1/+1 |
| | |||||
* | When CHAP-Password, copy Request Authenticator to CHAP-Challenge. | Linus Nordberg | 2015-01-16 | 3 | -0/+27 |
| | |||||
* | Be consistent with naming of attribute defines. | Linus Nordberg | 2015-01-16 | 2 | -2/+2 |
| | |||||
* | Have rewriteIn for servers use the correct config section. | Linus Nordberg | 2015-01-14 | 2 | -3/+11 |
| | |||||
* | Have radmsg_copy_attrs() return error in all error cases. | Linus Nordberg | 2013-09-06 | 1 | -4/+2 |
| | | | | Also when copying of the first attribute fails. | ||||
* | Add ChangeLog entry for -53. | Linus Nordberg | 2013-09-06 | 1 | -1/+6 |
| | |||||
* | Make a _copy_ of the attributes when copying them. | Linus Nordberg | 2013-09-06 | 1 | -1/+1 |
| | | | | | | Doh! Closes RADSECPROXY-53. | ||||
* | ChangeLog updates bc 1.6.3 is tagged. | Linus Nordberg | 2013-09-05 | 1 | -3/+5 |
| | |||||
* | Keep Proxy-State attributes in all replies to clients. | Linus Nordberg | 2013-09-05 | 6 | -16/+102 |
| | | | | Closes RADSECPROXY-52. | ||||
* | Remove generated files (auto tools). | Linus Nordberg | 2013-09-04 | 6 | -5462/+0 |
| | | | | | | | | | Some of these were revived in 4c163b1e bc they were supposedly not generated when running autogen.sh. That's not the case (any more) so let's avoid checking in generated files. Note that these files will be included in tar balls made from make dist. | ||||
* | Update ChangeLog with two older bug fixes. | Linus Nordberg | 2013-08-27 | 1 | -0/+4 |
| | |||||
* | Improve warning message when failing to resolve a dynamic server config. | Linus Nordberg | 2013-08-27 | 1 | -2/+2 |
| | |||||
* | Don't mention a version number in ChangeLog in the master branch. | Linus Nordberg | 2013-08-27 | 1 | -1/+2 |
| | |||||
* | Time out on TLS clients not closing the connection properly. | Linus Nordberg | 2013-08-26 | 2 | -1/+3 |
| | | | | Patch by Fabian Mauchle. | ||||
* | When timing out while reading from a TLS server, shutdown the socket properly. | Linus Nordberg | 2013-08-26 | 2 | -0/+11 |
| | | | | | | | Also signal the "client writer" (clientwr()). Together, this should result in TLS connections being cleaned up properly. Patch by Fabian Mauchle. | ||||
* | Don't wait for _writable_ when _reading_ an SSL socket. | Linus Nordberg | 2013-08-26 | 1 | -10/+11 |
| | | | | | | | Also, don't select() at all if SSL_pending() says there's data to read. Patch by Fabian Mauchle. | ||||
* | Don't free struct clsrvconf members rewritein and rewriteout. | Linus Nordberg | 2013-08-26 | 2 | -2/+4 |
| | | | | | | | They are pointers into static struct hash *rewriteconfs and should live forever. Patch by Fabian Mauchle. | ||||
* | Update ChangeLog with the last three bug fixes/ehancements. | Linus Nordberg | 2013-08-26 | 1 | -0/+11 |
| | | | | | | | Also, in a lame attempt att giving credit for last commit where I failed at doing that: 4920ff44 is a patch from Fabian Mauchle. | ||||
* | Purge the duplication cache once per received packet. | Linus Nordberg | 2013-08-26 | 1 | -0/+17 |
| | |||||
* | Add Fabian Mauchle to AUTHORS. | Linus Nordberg | 2013-08-26 | 1 | -0/+1 |
| | |||||
* | Return free memory more aggressively.pthread_create_attr | Linus Nordberg | 2013-08-26 | 2 | -1/+10 |
| | | | | | | | Have free(3) call sbrk(2) when there's 4 MB to free (default on Linux seems to be 128). Patch by Fabian Mauchle. | ||||
* | Create threads with a 32 KB stack rather than what happens to be the default. | Linus Nordberg | 2013-08-26 | 6 | -16/+23 |
| | | | | | | On Linux, the default stack size is typically 8 MB. Patch by Fabian Mauchle. | ||||
* | Honour escaped slashes in regular expressions.RADSECPROXY-51 | Linus Nordberg | 2013-05-31 | 1 | -1/+3 |
| | | | | Closes RADSECPROXY-51. | ||||
* | Verify a single hash/hmac in the tests, not two. | Linus Nordberg | 2013-05-06 | 1 | -6/+5 |
| | |||||
* | Add Simon Lundström to AUTHORS. | Linus Nordberg | 2013-04-23 | 1 | -0/+1 |
| | |||||
* | Fix a help string in radsecproxy-hash(1) (-h). | Linus Nordberg | 2013-04-23 | 1 | -1/+1 |
| | | | | Spotted by Simon Lundström. | ||||
* | Make radsecproxy-hash(1) not print the hash four times. | Linus Nordberg | 2013-04-23 | 1 | -2/+2 |
| | | | | Bug found by Simon Lundström and jocar. | ||||
* | Improve the documentation for the fticks_hashmac() interface. | Linus Nordberg | 2013-04-23 | 1 | -1/+18 |
| | | | | | | | That interface is a bit surprising. radsecproxy-hash(1) was indeed bitten by it. Also, make _format_hash() behave consistently even when out_len < 3. | ||||
* | s/NULL/NUL/1 in a comment. | Linus Nordberg | 2013-04-23 | 1 | -1/+1 |
| | |||||
* | Add c-file-style to C source files missing it. | Linus Nordberg | 2013-04-23 | 5 | -0/+20 |
| | |||||
* | Fix typo. | Linus Nordberg | 2012-12-18 | 1 | -1/+1 |
| | |||||
* | Adjust copyright lines to reflect git (svn) history of each and every file. | Linus Nordberg | 2012-11-12 | 36 | -69/+48 |
| | | | | | | The LICENSE file still aims to reflect a summary of all files. The LICENSE file was changed to not include year 2006 since there was no evidence in git (svn) of any contributions from that year. | ||||
* | Update ChangeLog entry for 1.6.2 with correct CVE id. | Linus Nordberg | 2012-11-01 | 1 | -1/+2 |
| | | | | 1.6.2 is already released but correct ChangeLog info is good. | ||||
* | Merge branch 'licensing-nogpl' | Linus Nordberg | 2012-10-30 | 38 | -261/+118 |
|\ | | | | | | | | | Conflicts: configure.ac | ||||
| * | Formatting changes.licensing-nogpl | Linus Nordberg | 2012-09-25 | 37 | -74/+74 |
| | | | | | | | | | | | | | | | | | | And, actually, a typo in catgconf.c. Cherry-picked b712a6bf from branch 'licensing'. Conflicts: LICENSE |