Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Update documentation with info on multithread protection. | Linus Nordberg | 2013-12-20 | 1 | -1/+6 |
| | |||||
* | Implement disable_hostname_check config option. | Linus Nordberg | 2013-10-03 | 1 | -0/+1 |
| | | | | Patch by Sam Hartman. | ||||
* | Merge branch 'libradsec-add-avp-2' into libradsec | Linus Nordberg | 2013-05-17 | 1 | -1/+11 |
|\ | | | | | | | | | Conflicts: lib/Makefile.am | ||||
| * | Add rs_packet_add_avp() and use it. | Linus Nordberg | 2013-05-08 | 1 | -1/+11 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | rs_packet_create_authn_request() now uses rs_packet_add_avp() instead of rs_packet_append_avp() which makes it possible to create a authentication packet without knowing the shared secret. Calling rs_packet_add_avp() on a packet is incompatible with using rs_packet_append_avp() on the same packet but since rs_packet_create_authn_request() adds attribute-value pairs for user name and password only if those arguments are supplied, code that doesn't use user name and password (i.e. mech_eap) should still be fine. | ||||
* | | Update copyright years. | Linus Nordberg | 2013-05-09 | 4 | -4/+8 |
|/ | |||||
* | Revive RSE_MAX. | Linus Nordberg | 2013-05-08 | 1 | -0/+1 |
| | | | | It's being used after all. | ||||
* | Remove an unused error code and unusued RSE_MAX. | Linus Nordberg | 2013-05-08 | 1 | -2/+0 |
| | | | | Also, remove unused file attr.c. | ||||
* | Revert "Add formal argument 'secret' to two public functions." | Linus Nordberg | 2013-05-08 | 2 | -12/+7 |
| | | | | | | | This reverts commit 09d1cff2418a900b587b2113f508984f2417cc11. Conflicts: lib/include/radsec/request.h | ||||
* | Improve documentation. | Linus Nordberg | 2013-01-29 | 1 | -8/+13 |
| | |||||
* | Rename rs_packet_flags members. | Linus Nordberg | 2013-01-24 | 1 | -3/+3 |
| | | | | | | | | | Uppercase to make them appear as the constants they are, as opposed to variables. Remove 'flag' suffix, typically used for variables. Spell out HEADER. | ||||
* | Whitespace. | Linus Nordberg | 2013-01-22 | 1 | -1/+1 |
| | |||||
* | Fix a doc comment. | Linus Nordberg | 2013-01-16 | 1 | -4/+5 |
| | |||||
* | Rename COPYING -> LICENSE. | Linus Nordberg | 2012-12-19 | 4 | -4/+4 |
| | | | | And distribute LICENSE and HACKING. | ||||
* | Add formal argument 'secret' to two public functions. | Linus Nordberg | 2012-12-17 | 2 | -5/+9 |
| | | | | | | | | | | The functions are rs_packet_create_authn_request() and rs_request_create_authn(). Attributes of type PW_USER_PASSWORD are supposed to be MD5 obfuscated (see vp2data_any()). NOTE: This is a non-backward compatible API change. | ||||
* | Merge libradsec-new-client. | Linus Nordberg | 2012-04-27 | 6 | -33/+320 |
|\ | |||||
| * | add rs_attr_display_name/rs_attr_parse_name | Luke Howard | 2011-11-14 | 1 | -4/+53 |
| | | |||||
| * | remove dictionary configuration parameter | Luke Howard | 2011-11-14 | 1 | -1/+0 |
| | | |||||
| * | remove rs_packet_frpkt | Luke Howard | 2011-11-14 | 1 | -3/+0 |
| | | |||||
| * | port new RADIUS library to Windows | Luke Howard | 2011-11-14 | 1 | -3/+13 |
| | | | | | | | | | | | | | | | | Conflicts: lib/configure.ac lib/include/radsec/radsec.h lib/radius/client.h | ||||
| * | remove rs_context_init_freeradius_dict | Luke Howard | 2011-11-14 | 1 | -14/+0 |
| | | |||||
| * | port to new RADIUS client library | Luke Howard | 2011-11-14 | 6 | -16/+263 |
| | | |||||
* | | Add an error code. | Linus Nordberg | 2012-04-26 | 1 | -0/+1 |
| | | | | | | | | Also add error text for missing RSE_CRED. | ||||
* | | Postpone resolving of DNS names of server. | Linus Nordberg | 2012-04-25 | 1 | -6/+3 |
| | | | | | | | | | | | | | | | | | | | | We used to resolve DNS names when reading configuration. We now do it in event_init_socket() and cache the result in the connection object. The imminent need for changing this is to keep host names around for X509 certificate verification (CNAME and subjectAltName). This will also help later when we implement server failover (and later, when people want to do more dynamic configuration, f.ex. NAPTR). | ||||
* | | Implement TLS-PSK. | Linus Nordberg | 2012-01-31 | 2 | -0/+9 |
| | | |||||
* | | Add TLS PSK configuration options. | Linus Nordberg | 2012-01-24 | 1 | -3/+6 |
|/ | |||||
* | Define RS_FREERADIUS_DICT and use it when missing "dictionary" in config. | Linus Nordberg | 2011-03-21 | 1 | -0/+6 |
| | |||||
* | API AND CONFIG CHANGE: rs_context_create() doesn't take DICT any more. | Linus Nordberg | 2011-03-21 | 2 | -10/+30 |
| | | | | | | | Use rs_context_create() to read FreeRADIUS dictionary, possibly by taking dict file from configuration file. CONFIG CHANGE: s/config/realm/g. | ||||
* | Remove struct rs_attr and all use of it. | Linus Nordberg | 2011-03-14 | 2 | -23/+1 |
| | | | | | | | A new API for attributes will be added once we've decided how to deal with RADIUS packets internally. For now, removing the half baked wrapping seems more sensible than trying to free rs_attr objects and their VALUE_PAIR's. | ||||
* | Remove unused resp_msg from struct request. | Linus Nordberg | 2011-03-14 | 1 | -1/+0 |
| | |||||
* | Add rs_request_get_reqmsg() and update documentation. | Linus Nordberg | 2011-03-14 | 1 | -8/+13 |
| | |||||
* | Add Doxygen documentation for public API. | Linus Nordberg | 2011-03-13 | 2 | -7/+162 |
| | |||||
* | Add RSE_DISCO. | Linus Nordberg | 2011-03-09 | 1 | -0/+1 |
| | |||||
* | Rename and move around a few helper functions. | Linus Nordberg | 2011-03-09 | 1 | -11/+4 |
| | |||||
* | Update rs_err_msg() prototype. | Linus Nordberg | 2011-03-08 | 1 | -2/+2 |
| | | | | | Also, rename enum rs_err_code to not collide with the function named the same. | ||||
* | Timeout implemented in request objects, supported by TCP. | Linus Nordberg | 2011-03-08 | 2 | -3/+7 |
| | | | | TODO: UDP. | ||||
* | Clean up struct rs_error somewhat. | Linus Nordberg | 2011-03-08 | 1 | -1/+0 |
| | | | | More to be done here! | ||||
* | Move verification of response packets up to a level where it makes sense. | Linus Nordberg | 2011-03-07 | 1 | -6/+8 |
| | | | | | | | | | | | | | | | | | | | | | Replace the user_dispatch_flag on connections with conn_user_dispatch_p(). Remove the 'original' member from packet and instead have an upper layer verify. Rename packet valid_flag --> received_flag to reflect that we don't verify. Move _close_conn() --> conn_close(). Move packet flags into a single unsigned int, for portability. (_read_packet): Don't verify packet. (rs_conn_receive_packet): Don't touch PKT_OUT if there isn't a packet. (rs_conn_receive_packet): Verify packet using packet_verify_response(). | ||||
* | request: Save callers user_data and do invoke callers callbacks. | Linus Nordberg | 2011-03-06 | 1 | -0/+1 |
| | |||||
* | UDP w/o bufferevents, part 1. | Linus Nordberg | 2011-03-06 | 1 | -3/+10 |
| | | | | Sending, no retransmitting and no receiving. | ||||
* | Don't free config object until we destroy the context. | Linus Nordberg | 2011-03-06 | 1 | -0/+2 |
| | |||||
* | Be consistent with naming of formal arguments. | Linus Nordberg | 2011-03-02 | 1 | -1/+1 |
| | |||||
* | Error handling cleanup 3. | Linus Nordberg | 2011-03-01 | 1 | -1/+2 |
| | | | | Split timeout errors in connecting and I/O. | ||||
* | Error handling cleanup | Linus Nordberg | 2011-03-01 | 1 | -1/+0 |
| | | | | | Remove RSE_SOME_ERROR. rs_tls_init: Push SSL error stack on libradsec error stack. | ||||
* | Add RSE_INVAL. | Linus Nordberg | 2011-03-01 | 1 | -0/+1 |
| | |||||
* | Remove last trace of server and client in API. | Linus Nordberg | 2011-02-28 | 1 | -5/+5 |
| | |||||
* | Rename relevant functions to reflect authn as opposed to authz. | Linus Nordberg | 2011-02-28 | 2 | -8/+11 |
| | | | | Also add a "bare" create request function. | ||||
* | API changes: rs_client* --> rs_peer. | Linus Nordberg | 2011-02-28 | 1 | -7/+7 |
| | | | | | Move peer (former server) things to new file peer.c. Update examples. | ||||
* | Cosmetic header file changes. | Linus Nordberg | 2011-02-28 | 2 | -29/+43 |
| | |||||
* | API change. Have the request object create its own request message. | Linus Nordberg | 2011-02-25 | 2 | -4/+4 |
| | |||||
* | Get rid of loopbreak as a mean for signalling successful packet handling. | Linus Nordberg | 2011-02-25 | 1 | -0/+2 |
| | | | | | | | | | | | | | In blocking mode, breaking the event loop with loopbreak will probably be needed for exceptions like timeout so we shouldn't use it for breaking the loop and signalling success. In the user callbaks used in blocking mode (_rcb and _wcb), disable read and write events on the event buffer. This will stop the loop. Also, set a flag in the packet struct to signal success. In the "low level callbacks" (_read_cb and _write_cb), enable read or write, accordingly. |