summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Require libnettle unconditionally.openssl11Linus Nordberg2016-09-136-57/+5
|
* Use libnettle instead of libcrypto (from openssl) for MD5 and HMAC(MD5).Linus Nordberg2016-09-133-137/+75
| | | | | | | | | The HMAC_ and EVP_MD_ API:s changed in OpenSSL 1.1 in a way that made it unfeasable to support both older and newer OpenSSL. Radsecproxy already depends on libnettle for Fticks. Moving away from libcrypto makes it easier to add support for other TLS libraries than OpenSSL.
* EVP_MD_CTX and HMAC_CTX are now pointers.Linus Nordberg2016-09-012-106/+106
| | | | | | | NOTE: pwdcrypt(), msmppencrypt(), msmppdecrypt(), _checkmsgauth(), _validauth() _createmessageauth() and _radsign() all become slightly more expensive since we're now allocating and freeing an EVP_MD_CTX or HMAC_CTX on each invocation.
* Remove openssl thread lock handling.Linus Nordberg2016-08-311-25/+0
| | | | | openssl-1.1 uses a new threading API which makes manual locking wrt openssl not necessary.
* ASN1_STRING_data() -> ASN1_STRING_get0_data().Linus Nordberg2016-08-311-3/+3
| | | | | ASN1_STRING_data was deprecated in openssl-1.1, see https://www.openssl.org/docs/manmaster/crypto/ASN1_STRING_data.html
* Don't call ERR_remove_thread_state().Linus Nordberg2016-08-313-7/+0
| | | | | Not needed as of openssl-1.1, see https://www.openssl.org/docs/man1.1.0/crypto/ERR_remove_thread_state.html
* Use ERR_remove_thread_state() instead of ERR_remove_state().Linus Nordberg2016-08-313-7/+7
|
* Stop accessing ssl->rbio directly.Linus Nordberg2016-08-311-5/+5
|
* Fix spelling.Linus Nordberg2016-03-231-4/+4
| | | | Pointed out by Faidon Liambotis.
* Add changes from 1.6.7.Linus Nordberg2016-03-141-1/+9
|
* Add info about license change to ChangeLog.Linus Nordberg2016-03-111-1/+7
|
* Fix the html target.Linus Nordberg2016-03-091-5/+6
| | | | | List the three .html files. Add targets for building .html from .1 and .5.
* #include <string.h> for memcpy() and strcmp().Linus Nordberg2016-03-092-0/+2
|
* Use DTLS_method() for new SSL context if it exists.Linus Nordberg2016-03-061-0/+5
| | | | | Effectively turning on support for DTLS 1.2 when OpenSSL version 1.0.2 or higher.
* Use TLS_method() for new SSL context if it exists.Linus Nordberg2016-03-061-1/+7
|
* Allow TLSv1.1 and TLSv1.2.Linus Nordberg2016-02-251-1/+2
| | | | | This should in theory allow for later versions of TLS too but let's verify that when the time comes.
* Mention radsecproxy-hash(1) in radsecproxy.1.Linus Nordberg2015-09-171-3/+2
|
* Merge branch 'docu'Linus Nordberg2015-01-222-2/+15
|\
| * Revamp the documentation of a request+response being proxied.Linus Nordberg2015-01-221-9/+7
| |
| * Add comments on functions.Linus Nordberg2015-01-161-0/+3
| |
| * Add more overview to develdoc and correct a factual error.Linus Nordberg2015-01-161-2/+14
| |
* | Install radsecproxy.conf.5 unconditionally.Linus Nordberg2015-01-192-1/+3
| | | | | | | | Keep regeneration of it dependent on configure finding docbook2x-man(1).
* | Refer to RFC6614 instead of the old draft.Linus Nordberg2015-01-191-2/+2
| |
* | ChangeLog for the four security patches.Linus Nordberg2015-01-161-0/+4
| |
* | Fix heap overflow in raddtlsget(), radtcpget() and radtlsget().Linus Nordberg2015-01-163-0/+12
| | | | | | | | Patch by Stephen Röttger.
* | Fix null pointer dereference in decttl().Linus Nordberg2015-01-161-0/+3
| | | | | | | | Patch by Stephen Röttger.
* | Fix use-after-free in _internal_removeserversubrealms().Linus Nordberg2015-01-161-2/+5
| | | | | | | | Patch by Stephen Röttger.
* | Fix use-after-free in hash_extract().Linus Nordberg2015-01-162-1/+4
|/ | | | Patch by Stephen Röttger.
* Fix some issues showing when DEBUG is defined.Linus Nordberg2015-01-164-8/+7
|
* Remove 'compile', generated by Automake.Linus Nordberg2015-01-163-143/+2
| | | | Patch by Christian Hesse.
* Update copyright notice.Linus Nordberg2015-01-161-1/+1
|
* When CHAP-Password, copy Request Authenticator to CHAP-Challenge.Linus Nordberg2015-01-163-0/+27
|
* Be consistent with naming of attribute defines.Linus Nordberg2015-01-162-2/+2
|
* Have rewriteIn for servers use the correct config section.Linus Nordberg2015-01-142-3/+11
|
* Have radmsg_copy_attrs() return error in all error cases.Linus Nordberg2013-09-061-4/+2
| | | | Also when copying of the first attribute fails.
* Add ChangeLog entry for -53.Linus Nordberg2013-09-061-1/+6
|
* Make a _copy_ of the attributes when copying them.Linus Nordberg2013-09-061-1/+1
| | | | | | Doh! Closes RADSECPROXY-53.
* ChangeLog updates bc 1.6.3 is tagged.Linus Nordberg2013-09-051-3/+5
|
* Keep Proxy-State attributes in all replies to clients.Linus Nordberg2013-09-056-16/+102
| | | | Closes RADSECPROXY-52.
* Remove generated files (auto tools).Linus Nordberg2013-09-046-5462/+0
| | | | | | | | | Some of these were revived in 4c163b1e bc they were supposedly not generated when running autogen.sh. That's not the case (any more) so let's avoid checking in generated files. Note that these files will be included in tar balls made from make dist.
* Update ChangeLog with two older bug fixes.Linus Nordberg2013-08-271-0/+4
|
* Improve warning message when failing to resolve a dynamic server config.Linus Nordberg2013-08-271-2/+2
|
* Don't mention a version number in ChangeLog in the master branch.Linus Nordberg2013-08-271-1/+2
|
* Time out on TLS clients not closing the connection properly.Linus Nordberg2013-08-262-1/+3
| | | | Patch by Fabian Mauchle.
* When timing out while reading from a TLS server, shutdown the socket properly.Linus Nordberg2013-08-262-0/+11
| | | | | | | Also signal the "client writer" (clientwr()). Together, this should result in TLS connections being cleaned up properly. Patch by Fabian Mauchle.
* Don't wait for _writable_ when _reading_ an SSL socket.Linus Nordberg2013-08-261-10/+11
| | | | | | | Also, don't select() at all if SSL_pending() says there's data to read. Patch by Fabian Mauchle.
* Don't free struct clsrvconf members rewritein and rewriteout.Linus Nordberg2013-08-262-2/+4
| | | | | | | They are pointers into static struct hash *rewriteconfs and should live forever. Patch by Fabian Mauchle.
* Update ChangeLog with the last three bug fixes/ehancements.Linus Nordberg2013-08-261-0/+11
| | | | | | | Also, in a lame attempt att giving credit for last commit where I failed at doing that: 4920ff44 is a patch from Fabian Mauchle.
* Purge the duplication cache once per received packet.Linus Nordberg2013-08-261-0/+17
|
* Add Fabian Mauchle to AUTHORS.Linus Nordberg2013-08-261-0/+1
|
generated by cgit v1.1 at 2024-12-27 11:25:50 +0000