Sam Hartman [Thu, 2 Apr 2015 14:25:38 +0000 (10:25 -0400)]
Rebuild for wheezy-backports.
Sam Hartman [Tue, 7 Oct 2014 11:46:20 +0000 (07:46 -0400)]
Fix typos
Sam Hartman [Tue, 7 Oct 2014 11:27:41 +0000 (07:27 -0400)]
Include license for radsecproxy/radsecproxy.h, Thanks Thorsten Alteholz
Sam Hartman [Sun, 24 Aug 2014 21:47:31 +0000 (17:47 -0400)]
Add bmulti-arch lines
Sam Hartman [Sun, 24 Aug 2014 17:28:49 +0000 (13:28 -0400)]
Remove redundant patch
Sam Hartman [Sun, 24 Aug 2014 17:23:34 +0000 (13:23 -0400)]
parallel
Sam Hartman [Sun, 24 Aug 2014 17:20:54 +0000 (13:20 -0400)]
DH compat level 9
multiarch install
Add misc:depends
Sam Hartman [Sat, 23 Aug 2014 23:18:58 +0000 (19:18 -0400)]
Fix dependencies and homepage
Sam Hartman [Sat, 23 Aug 2014 23:12:03 +0000 (19:12 -0400)]
Update vcs-git
Sam Hartman [Sat, 23 Aug 2014 23:11:22 +0000 (19:11 -0400)]
enable dh-autoreconf
Sam Hartman [Sat, 23 Aug 2014 23:08:36 +0000 (19:08 -0400)]
Single debian patch
Sam Hartman [Sat, 23 Aug 2014 23:08:16 +0000 (19:08 -0400)]
git build-package
Sam Hartman [Sat, 23 Aug 2014 23:07:03 +0000 (19:07 -0400)]
0.0.5-1
Sam Hartman [Thu, 6 Mar 2014 13:31:58 +0000 (08:31 -0500)]
move debian directory up
Sam Hartman [Thu, 6 Mar 2014 13:30:39 +0000 (08:30 -0500)]
Merge remote-tracking branch 'origin/master' into debian
In particular update root of tree
Sam Hartman [Thu, 13 Feb 2014 15:37:09 +0000 (10:37 -0500)]
Update copyright
Sam Hartman [Wed, 12 Feb 2014 02:17:19 +0000 (21:17 -0500)]
Merge tag 'libradsec-0.0.5' into debian
libradsec-0.0.5
Conflicts:
lib/conf.c
lib/radius/Makefile.am
Linus Nordberg [Wed, 5 Feb 2014 10:10:02 +0000 (11:10 +0100)]
Move lib to the root.
Linus Nordberg [Wed, 5 Feb 2014 09:55:34 +0000 (10:55 +0100)]
Move .gitignore to lib/ in preparation for moving lib to the root.
Linus Nordberg [Mon, 3 Feb 2014 13:31:29 +0000 (14:31 +0100)]
Ready for libradsec-0.0.5.
Linus Nordberg [Mon, 3 Feb 2014 12:56:38 +0000 (13:56 +0100)]
Add PRNG improvements to CHANGES.
Linus Nordberg [Fri, 20 Dec 2013 18:18:35 +0000 (19:18 +0100)]
Update documentation with info on multithread protection.
Linus Nordberg [Fri, 20 Dec 2013 17:38:48 +0000 (18:38 +0100)]
Detect POSIX threads at configure time and use them for OpenSSL.
Linus Nordberg [Thu, 19 Dec 2013 14:37:58 +0000 (15:37 +0100)]
Don't use deprecated 'INCLUDES' variable in Makefile.am files.
Linus Nordberg [Wed, 18 Dec 2013 19:37:56 +0000 (20:37 +0100)]
Remove unused code.
Linus Nordberg [Wed, 18 Dec 2013 19:37:44 +0000 (20:37 +0100)]
Improve initialisation of OpenSSL PRNG.
Basic idea taken from Tor.
Linus Nordberg [Wed, 18 Dec 2013 19:38:49 +0000 (20:38 +0100)]
Bump version number.
Linus Nordberg [Wed, 18 Dec 2013 12:26:54 +0000 (13:26 +0100)]
Distribute new CHANGES file.
Linus Nordberg [Wed, 18 Dec 2013 12:16:40 +0000 (13:16 +0100)]
Update documentation and configure.ac for libradsec-0.0.4.
Linus Nordberg [Wed, 18 Dec 2013 12:05:59 +0000 (13:05 +0100)]
Clarify README.
Linus Nordberg [Mon, 18 Nov 2013 16:28:54 +0000 (17:28 +0100)]
Add a debug printout when dropping an incoming response message.
Also, terminate another debug message with \n.
Linus Nordberg [Mon, 18 Nov 2013 16:27:23 +0000 (17:27 +0100)]
Avoid leaking memory when receiving a bad response.
A badly authenticated response message or one that didn't decode or
decrypt correctly was never freed. If caller didn't pass pkt_out, any
response was leaked as well.
As a bonus, the code is now readable too.
Linus Nordberg [Mon, 18 Nov 2013 15:34:21 +0000 (16:34 +0100)]
Stop rs_request_send() from leaking RSE_TIMEOUT_CONN and RSE_TIMEOUT_IO.
If sending or receiving time out, pop the error off the stack before
continuing the loop. Push a new error, RS_TIMEOUT, before timing out
for real.
Addresses LIBRADSEC-3.
Linus Nordberg [Mon, 18 Nov 2013 14:30:00 +0000 (15:30 +0100)]
Disable/delete events in the timeout callback.
Without this, the sequence
(1) send (successfully)
(2) receive (timeout)
(3) resend (successfully)
will have the read event from (2) trigger a read in (3) and the
response is lost.
Addresses LIBRADSEC-3.
Linus Nordberg [Fri, 15 Nov 2013 14:20:18 +0000 (15:20 +0100)]
Make sure that configure without --enable-tls works.
Also, --disable-tls, --enable-tls and --enable-tls=no.
Closes LIBRADSEC-2.
Linus Nordberg [Thu, 3 Oct 2013 19:16:53 +0000 (21:16 +0200)]
Merge branch 'libradsec' of git.nordu.net:radsecproxy into libradsec
# Please enter a commit message to explain why this merge is necessary,
# especially if it merges an updated upstream into a topic branch.
#
# Lines starting with '#' will be ignored, and an empty message aborts
# the commit.
Linus Nordberg [Thu, 3 Oct 2013 19:13:54 +0000 (21:13 +0200)]
Implement disable_hostname_check config option.
Patch by Sam Hartman.
Sam Hartman [Thu, 3 Oct 2013 14:57:57 +0000 (10:57 -0400)]
Add disable_hostname_check option
Sam Hartman [Thu, 3 Oct 2013 14:54:46 +0000 (10:54 -0400)]
Implement disable_hostname_check config option
Linus Nordberg [Tue, 1 Oct 2013 17:18:50 +0000 (17:18 +0000)]
Enable TLS by default, configure time.
Sam Hartman [Mon, 30 Sep 2013 17:23:27 +0000 (13:23 -0400)]
debian/rules: enable tls psk remove freeradius cruft
Sam Hartman [Mon, 30 Sep 2013 17:19:11 +0000 (13:19 -0400)]
merge misresolve
Sam Hartman [Mon, 30 Sep 2013 17:10:16 +0000 (13:10 -0400)]
autoreconf
Sam Hartman [Mon, 30 Sep 2013 17:07:09 +0000 (13:07 -0400)]
Document changes
Sam Hartman [Mon, 30 Sep 2013 12:16:09 +0000 (08:16 -0400)]
Merge branch 'moonshot' into debian
Conflicts:
lib/Makefile.am
lib/build-aux/config.guess
lib/build-aux/config.sub
lib/build-aux/depcomp
lib/build-aux/ltmain.sh
lib/build-aux/missing
lib/m4/libtool.m4
lib/m4/ltoptions.m4
lib/m4/ltversion.m4
lib/m4/lt~obsolete.m4
lib/radsec.c
lib/radsecproxy/tlscommon.c
lib/tls.c
Sam Hartman [Mon, 30 Sep 2013 12:11:11 +0000 (08:11 -0400)]
Enable tls for rpm builds
Sam Hartman [Mon, 30 Sep 2013 12:09:48 +0000 (08:09 -0400)]
Keep empty m4 directory
Sam Hartman [Mon, 30 Sep 2013 12:09:13 +0000 (08:09 -0400)]
Merge remote-tracking branch 'origin/libradsec' into moonshot
Conflicts:
lib/Makefile.am
lib/configure.ac
lib/libradsec.spec.in
lib/radius/Makefile.am
lib/radsec.c
lib/radsecproxy/tlscommon.c
lib/tcp.c
lib/tls.c
Linus Nordberg [Fri, 17 May 2013 08:53:36 +0000 (10:53 +0200)]
Have the library depend on radsec.sym.
Linus Nordberg [Fri, 17 May 2013 08:50:11 +0000 (10:50 +0200)]
Merge branch 'libradsec-add-avp-2' into libradsec
Conflicts:
lib/Makefile.am
Linus Nordberg [Fri, 17 May 2013 08:44:11 +0000 (10:44 +0200)]
Don't provide bogus info in an error.
Linus Nordberg [Fri, 17 May 2013 08:41:50 +0000 (10:41 +0200)]
Move PSK example configuration to a separate file.
Linus Nordberg [Wed, 15 May 2013 13:44:52 +0000 (15:44 +0200)]
Fix typo.
Linus Nordberg [Wed, 15 May 2013 09:57:09 +0000 (11:57 +0200)]
Don't crash on reading invalid messages.
Also, invoke disconnected callback and close connection in error
cases.
Linus Nordberg [Thu, 9 May 2013 07:50:11 +0000 (09:50 +0200)]
Whitespace changes in license headers.
Linus Nordberg [Thu, 9 May 2013 07:49:37 +0000 (09:49 +0200)]
Update copyright years.
Linus Nordberg [Thu, 9 May 2013 07:32:31 +0000 (09:32 +0200)]
Include stdlib.h everywhere we call (m|c)alloc.
Linus Nordberg [Thu, 9 May 2013 06:59:00 +0000 (08:59 +0200)]
Use malloc+memcpy rather than calloc+strcpy in rs_strdup.
For effiency (but triggered by calloc needing unistd.h on Darwin).
Linus Nordberg [Wed, 8 May 2013 21:10:11 +0000 (23:10 +0200)]
Revert "Bump library interface revision."
So there were two things wrong with that commit.
1. Library interface revision should be bumped only immediately before
a public release.
2. Given the changes in the library, it should change to 0:1:0 since
the interface didn't change (including not being extended).
This reverts commit
b9e967b3cde6af41cd0e863e9ff073897019625a.
Conflicts:
lib/Makefile.am
Linus Nordberg [Wed, 8 May 2013 21:03:51 +0000 (23:03 +0200)]
Export rs_packet_add_avp() and set library revision.
Correct library revision is 1:0:1, given that the last "released"
library was 0:0:0. (The current 1:0:0 is wrong.)
Linus Nordberg [Wed, 8 May 2013 20:42:00 +0000 (22:42 +0200)]
Clarify and reformat comments on how to use Libtool's -version-info.
Linus Nordberg [Wed, 8 May 2013 20:18:27 +0000 (22:18 +0200)]
Pass make distcheck.
Linus Nordberg [Wed, 8 May 2013 20:17:32 +0000 (22:17 +0200)]
Don't include tests in SUBIDRS after all.
It requires a running radius server. That's not a nice thing to
require for something like distcheck.
Linus Nordberg [Wed, 8 May 2013 19:42:17 +0000 (21:42 +0200)]
Initial RPM packaging
Adapted from
commit
8ff4e9ab2308fc6ee1e9b140d85ba45eff5287ce
Author: Sam hartman <hartmans@painless-security.com>
Date: Mon Oct 10 15:25:11 2011 +0100
Conflicts:
lib/Makefile.am
lib/configure.ac
Linus Nordberg [Wed, 8 May 2013 19:17:54 +0000 (21:17 +0200)]
Add a few bits to README.
Linus Nordberg [Wed, 8 May 2013 18:28:17 +0000 (20:28 +0200)]
Exit tests with number of failures.
Now 'make check' really fails when a test fails.
Linus Nordberg [Wed, 8 May 2013 18:23:06 +0000 (20:23 +0200)]
Add 'tests' to SUBDIRS to make 'make check' work.
Linus Nordberg [Wed, 8 May 2013 18:21:18 +0000 (20:21 +0200)]
Constify the MD5 implementation.
Linus Nordberg [Wed, 8 May 2013 15:08:14 +0000 (17:08 +0200)]
Add rs_packet_add_avp() and use it.
rs_packet_create_authn_request() now uses rs_packet_add_avp() instead
of rs_packet_append_avp() which makes it possible to create a
authentication packet without knowing the shared secret.
Calling rs_packet_add_avp() on a packet is incompatible with using
rs_packet_append_avp() on the same packet but since
rs_packet_create_authn_request() adds attribute-value pairs for user
name and password only if those arguments are supplied, code that
doesn't use user name and password (i.e. mech_eap) should still be
fine.
Linus Nordberg [Wed, 8 May 2013 15:10:10 +0000 (17:10 +0200)]
Push an error on the error stack when returning !RSE_OK.
Linus Nordberg [Wed, 8 May 2013 15:05:57 +0000 (17:05 +0200)]
Revive RSE_MAX.
It's being used after all.
Linus Nordberg [Wed, 8 May 2013 13:00:00 +0000 (15:00 +0200)]
Add an assert in error handling code.
Linus Nordberg [Wed, 8 May 2013 10:00:00 +0000 (12:00 +0200)]
Remove an unused error code and unusued RSE_MAX.
Also, remove unused file attr.c.
Linus Nordberg [Mon, 6 May 2013 10:01:00 +0000 (12:01 +0200)]
Follow API change in tests.
Linus Nordberg [Mon, 6 May 2013 10:00:00 +0000 (12:00 +0200)]
Revert "Add formal argument 'secret' to two public functions."
This reverts commit
09d1cff2418a900b587b2113f508984f2417cc11.
Conflicts:
lib/include/radsec/request.h
Sam Hartman [Wed, 8 May 2013 11:54:26 +0000 (07:54 -0400)]
Increase soname because of API bump when moving to networkradius.
Sam Hartman [Wed, 19 Sep 2012 00:50:12 +0000 (20:50 -0400)]
Add and fix RADIUS attributes (
4b9e4cb1,
e4b6e972).
Fix capitalization in abfab dictionary
Update to IETF RADIUS attributes
draft-ietf-abfab-gss-eap has been approved; include IANA-issued
standard radius attributes for Moonshot.
Fix capitalization in abfab dictionary
Linus Nordberg [Tue, 7 May 2013 08:09:53 +0000 (10:09 +0200)]
Build include before building '.'
Patch by Sam Hartman (
ff1af013 in moonshot).
Linus Nordberg [Mon, 6 May 2013 18:30:47 +0000 (20:30 +0200)]
Use CUnit for tests.
cgreen didn't seem properly maintained. CUnit seems to be widely used.
Linus Nordberg [Mon, 6 May 2013 12:45:33 +0000 (14:45 +0200)]
Bump library interface revision.
Commit
edf4c047 claimed it did this but didn't really do it.
Should really have been done as part of bumping the library version
(0.0.2.dev in configure.ac).
Linus Nordberg [Mon, 6 May 2013 12:35:12 +0000 (14:35 +0200)]
Bump version to 0.0.4.dev to keep ahead of moonshot.
Sam Hartman [Mon, 29 Apr 2013 19:05:11 +0000 (15:05 -0400)]
Don't include radius.h in sources as it is built
Sam hartman [Fri, 26 Apr 2013 21:27:34 +0000 (22:27 +0100)]
Centos packaging updates
Sam Hartman [Wed, 27 Apr 2011 16:11:34 +0000 (12:11 -0400)]
Don't depend on radsecproxy includes from parent directory
This ends up being a problem both for Debian and RPM packaging.
Linus Nordberg [Tue, 29 Jan 2013 14:27:26 +0000 (15:27 +0100)]
Improve documentation.
Linus Nordberg [Mon, 28 Jan 2013 15:22:14 +0000 (16:22 +0100)]
Remove dead code.
Linus Nordberg [Fri, 25 Jan 2013 08:58:26 +0000 (09:58 +0100)]
Update HACKING with a rough road map.
Linus Nordberg [Thu, 24 Jan 2013 16:33:08 +0000 (17:33 +0100)]
Add PSK example in examples/client.conf.
Linus Nordberg [Thu, 24 Jan 2013 16:32:18 +0000 (17:32 +0100)]
Do the test for PSK properly.
Fixes
823ea9ba.
Linus Nordberg [Thu, 24 Jan 2013 16:31:49 +0000 (17:31 +0100)]
Add two helper functions to conn.[ch].
Linus Nordberg [Thu, 24 Jan 2013 16:22:14 +0000 (17:22 +0100)]
Order functions properly in conn.c.
Linus Nordberg [Thu, 24 Jan 2013 15:51:36 +0000 (16:51 +0100)]
Don't verify server certificate if we're using PSK.
Linus Nordberg [Thu, 24 Jan 2013 11:44:19 +0000 (12:44 +0100)]
Add missing key files to demoCA.
Linus Nordberg [Thu, 24 Jan 2013 07:32:23 +0000 (08:32 +0100)]
Rename rs_packet_flags members.
Uppercase to make them appear as the constants they are, as opposed to
variables.
Remove 'flag' suffix, typically used for variables.
Spell out HEADER.
Linus Nordberg [Wed, 23 Jan 2013 17:26:12 +0000 (18:26 +0100)]
New demo CA for tests.
Update examples config file accordingly.
Linus Nordberg [Wed, 23 Jan 2013 15:18:26 +0000 (16:18 +0100)]
Handle case where config hasn't yet been read better.
Don't segfault is a good start.
Linus Nordberg [Wed, 23 Jan 2013 11:21:06 +0000 (12:21 +0100)]
Add some info on usage modes.
Linus Nordberg [Tue, 22 Jan 2013 14:52:09 +0000 (15:52 +0100)]
Add docstrings and a comment.
Linus Nordberg [Tue, 22 Jan 2013 14:46:11 +0000 (15:46 +0100)]
Remove unnecessary #includes.
Linus Nordberg [Tue, 22 Jan 2013 14:45:47 +0000 (15:45 +0100)]
Whitespace.