summaryrefslogtreecommitdiff
path: root/dtls.c
Commit message (Collapse)AuthorAgeFilesLines
* Don't mix up pre- and post-handshake verification of DTLS clients.Linus Nordberg2012-10-221-1/+3
| | | | | | | | | | | | | Commit db965c9b addressed TLS clients only. When verifying DTLS clients, don't consider config blocks with CA settings ('tls') which differ from the one used for verifying the certificate chain. Original issue reported and analysed by Ralf Paffrath. DTLS being vulnerable reported by Raphael Geisser. Addresses issue RADSECPROXY-43, CVE-2012-4523.
* Add client and server config options IPv4Only and IPv6Only.Linus Nordberg2012-04-171-1/+3
| | | | | | Related to RADSECPROXY-37. TODO: Add documentation.
* Change default shared secret for TLS and DTLS.Linus Nordberg2012-04-111-1/+1
| | | | | We change from "mysecret" to "radsec" as per draft-ietf-radext-radsec-12.txt section 2.3 (4).
* Make radsecproxy.h self-sustaining.Linus Nordberg2011-09-261-1/+0
|
* Add Emacs local variable for stroustrup style.linus2010-03-231-0/+4
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@530 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* Reindent and remove trailing whitespace.linus2010-03-081-24/+24
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@517 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* rewriting code for hosts,ports,resolving,builds but needs testingvenaas2009-01-271-11/+13
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@462 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* renamed struct queue to gqueue due to solaris defining queuevenaas2009-01-071-7/+7
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@452 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* split out code that is needed only when tls or dtls is usedvenaas2008-12-221-3/+4
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@445 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* allowing build with only specific transportsvenaas2008-12-191-0/+6
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@444 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* cleaning up codevenaas2008-12-191-3/+17
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@443 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* cleaning up codevenaas2008-12-191-7/+40
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@442 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* cleaning up codevenaas2008-12-181-2/+13
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@441 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* some code improvemetns, more efficiently removing outstanding requests when ↵venaas2008-09-241-1/+0
| | | | | | removing client, also taking care of dynamic servers, need to look into server removal git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@399 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* make clientwr not try to connect (left to reader), changed some timing ↵venaas2008-09-231-5/+16
| | | | | | stuff, issue with statusserver and connection down..., added optional cacheexpiry option for tls blocks git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@398 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* trying to avoid some silly compiler warningsvenaas2008-09-171-1/+1
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@390 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* better logging, fixed bug with crash when removing clientvenaas2008-09-171-12/+13
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@387 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* cleaning up codevenaas2008-09-171-6/+5
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@383 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* moved more stuff from rqout to rqvenaas2008-09-161-2/+0
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@382 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* renamed some stuff, added client state for received rqs etcvenaas2008-09-161-7/+15
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@379 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* changing to use a separate client structure for each udp clientvenaas2008-09-141-1/+0
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@378 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* allow %hex notation for strings in gconfigvenaas2008-09-131-2/+4
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@376 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* various code improvementsvenaas2008-09-111-2/+1
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@375 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* fixed bug with multiple status server sent, some dtls fixesvenaas2008-08-221-165/+247
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@358 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* made dtls server do proper certificate matchingvenaas2008-08-211-45/+77
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@356 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* restructuring codevenaas2008-08-211-0/+42
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@351 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* separated tcpvenaas2008-08-211-1/+0
| | | | git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@348 e88ac4ed-0b26-0410-9574-a7f39faa03bf
* separated dtls into a separate filevenaas2008-08-211-0/+473
git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@347 e88ac4ed-0b26-0410-9574-a7f39faa03bf
generated by cgit v1.1 at 2024-12-26 20:00:48 +0000