libradsec.git
12 years agoAdd support for 'make check' and a dummy test.
Linus Nordberg [Tue, 27 Sep 2011 08:18:21 +0000 (10:18 +0200)]
Add support for 'make check' and a dummy test.

12 years agoMakefile.am formatting and removal of spurious variable.
Linus Nordberg [Tue, 27 Sep 2011 08:13:37 +0000 (10:13 +0200)]
Makefile.am formatting and removal of spurious variable.

12 years agoPrepare for building tests.
Linus Nordberg [Tue, 27 Sep 2011 08:11:35 +0000 (10:11 +0200)]
Prepare for building tests.

Move main() out of radsecproxy.c.
Build a static library and link a main.c with it.

12 years agoStop keeping generated files under source control.
Linus Nordberg [Tue, 27 Sep 2011 08:03:00 +0000 (10:03 +0200)]
Stop keeping generated files under source control.

12 years agoCosmetics.
Linus Nordberg [Mon, 26 Sep 2011 14:57:01 +0000 (16:57 +0200)]
Cosmetics.

12 years agoMake radsecproxy.h self-sustaining.
Linus Nordberg [Mon, 26 Sep 2011 14:55:11 +0000 (16:55 +0200)]
Make radsecproxy.h self-sustaining.

12 years agoPrepend static functions with underscore.
Linus Nordberg [Mon, 26 Sep 2011 14:03:58 +0000 (16:03 +0200)]
Prepend static functions with underscore.

12 years agoNew config.guess, config.sub.
Linus Nordberg [Mon, 26 Sep 2011 14:03:19 +0000 (16:03 +0200)]
New config.guess, config.sub.

12 years agoCompile with -Werror.
Linus Nordberg [Mon, 26 Sep 2011 14:00:10 +0000 (16:00 +0200)]
Compile with -Werror.

12 years agoFormatting changes.
Linus Nordberg [Sun, 3 Jul 2011 11:03:37 +0000 (13:03 +0200)]
Formatting changes.

12 years agoDon't print a pointer when trying to print a string.
Linus Nordberg [Sun, 3 Jul 2011 11:02:32 +0000 (13:02 +0200)]
Don't print a pointer when trying to print a string.

12 years agoFix typos, spelling and whitespace in tools/naptr-eduroam.sh.
Linus Nordberg [Fri, 1 Jul 2011 12:51:20 +0000 (14:51 +0200)]
Fix typos, spelling and whitespace in tools/naptr-eduroam.sh.

Also, change `test' to '['.

12 years ago(tools/naptr-eduroam.sh): Use /bin/sh rather than bash.
Linus Nordberg [Tue, 31 May 2011 12:36:31 +0000 (14:36 +0200)]
(tools/naptr-eduroam.sh): Use /bin/sh rather than bash.

Not all systems have bash (esp. not in /bin) and some people argue
that /bin/sh should be less unsafe due to less code, lower complexity
and being around for longer time.

Fixes:
- /bin/sh builtin echo doesn't have `-e' -- use /bin/echo
- /bin/sh builtin test ([) doesn't understand `==' -- use `='

12 years agoReindent tools/naptr-eduroam.sh.
Linus Nordberg [Tue, 31 May 2011 12:25:14 +0000 (14:25 +0200)]
Reindent tools/naptr-eduroam.sh.

13 years agoHash full MAC even for VendorHashed and VendorKeyHashed.
Linus Nordberg [Tue, 5 Apr 2011 13:53:58 +0000 (15:53 +0200)]
Hash full MAC even for VendorHashed and VendorKeyHashed.

Comment on VendorKeyHashed, from source:
We are hashing the first nine octets too for easier correlation
between vendor-key-hashed and fully-key-hashed log records.  This
opens up for a known plaintext attack on the key but the consequences
of that is considered outweighed by the convenience gained.

13 years agoProduce full length F-Tick MAC hashes for FullyHashed and FullyKeyHashed.
Linus Nordberg [Tue, 5 Apr 2011 13:50:59 +0000 (15:50 +0200)]
Produce full length F-Tick MAC hashes for FullyHashed and FullyKeyHashed.

We produced 62 octets rather than 64.

13 years agoDon't smash buffer on stack.
Linus Nordberg [Tue, 5 Apr 2011 13:26:53 +0000 (15:26 +0200)]
Don't smash buffer on stack.

(format_hash): Don't write past OUT_LEN.  Duh!

13 years agoAdd test lost in 480942e6 back.
Linus Nordberg [Tue, 5 Apr 2011 13:22:45 +0000 (15:22 +0200)]
Add test lost in 480942e6 back.

13 years agoDo F-Ticks reporting only for Access-Accept and Access-Reject.
Linus Nordberg [Tue, 5 Apr 2011 09:24:10 +0000 (11:24 +0200)]
Do F-Ticks reporting only for Access-Accept and Access-Reject.

13 years agoDon't crash in F-Ticks logging if we don't find User-Name.
Linus Nordberg [Tue, 5 Apr 2011 09:15:56 +0000 (11:15 +0200)]
Don't crash in F-Ticks logging if we don't find User-Name.

13 years agoLog MAC as "undisclosed" for config FTicksMac Static.
Linus Nordberg [Tue, 5 Apr 2011 08:33:50 +0000 (10:33 +0200)]
Log MAC as "undisclosed" for config FTicksMac Static.

Also, log empty string if no Calling-Station-Id attribute is found.

13 years agoDo save vendor part of MAC for FTicksMac VendorHashed and VendorKeyHashed.
Linus Nordberg [Tue, 5 Apr 2011 07:49:47 +0000 (09:49 +0200)]
Do save vendor part of MAC for FTicksMac VendorHashed and VendorKeyHashed.

13 years agoMove configure_fticks to fticks.c.
Linus Nordberg [Mon, 4 Apr 2011 14:21:20 +0000 (16:21 +0200)]
Move configure_fticks to fticks.c.

13 years agoMove F-Ticks logging to fticks.c.
Linus Nordberg [Mon, 4 Apr 2011 14:15:22 +0000 (16:15 +0200)]
Move F-Ticks logging to fticks.c.

13 years agoAdd placeholders for F-Ticks config documentation.
Linus Nordberg [Mon, 4 Apr 2011 13:46:54 +0000 (15:46 +0200)]
Add placeholders for F-Ticks config documentation.

13 years agoFinish docu cosmetics.
Linus Nordberg [Mon, 4 Apr 2011 13:43:17 +0000 (15:43 +0200)]
Finish docu cosmetics.

(radsecproxy.conf.5.xml): Capitalize first letter of all references to
basic options.  This convention might help as a hint in block config
by showing when a basic option is being overridden.

13 years agoConfig cosmetics.
Linus Nordberg [Mon, 4 Apr 2011 13:37:57 +0000 (15:37 +0200)]
Config cosmetics.

Use capital initial letter for basic options, both in documentation
and example config.

13 years agoFormating changes to docbook source for radsecproxy.conf(5).
Linus Nordberg [Mon, 4 Apr 2011 13:24:31 +0000 (15:24 +0200)]
Formating changes to docbook source for radsecproxy.conf(5).

13 years agoAdd F-Ticks logging support.
Linus Nordberg [Mon, 4 Apr 2011 12:54:55 +0000 (14:54 +0200)]
Add F-Ticks logging support.

13 years ago(radsecproxy.conf-example) Fix a typo.
Linus Nordberg [Mon, 4 Apr 2011 12:54:09 +0000 (14:54 +0200)]
(radsecproxy.conf-example) Fix a typo.

13 years agoUpdate LICENSE to include NORDUnet.
Linus Nordberg [Mon, 4 Apr 2011 12:53:42 +0000 (14:53 +0200)]
Update LICENSE to include NORDUnet.

13 years agoRegenerate configure and build files.
Linus Nordberg [Mon, 4 Apr 2011 12:53:25 +0000 (14:53 +0200)]
Regenerate configure and build files.

13 years agoAdd fticks.c and fticks.h to the build.
Linus Nordberg [Mon, 4 Apr 2011 12:52:57 +0000 (14:52 +0200)]
Add fticks.c and fticks.h to the build.

13 years agoRemove dashes from all options F-Ticks.* for consistency.
Linus Nordberg [Mon, 4 Apr 2011 11:35:31 +0000 (13:35 +0200)]
Remove dashes from all options F-Ticks.* for consistency.

13 years agoAdd configuration of client fticksVISINST.
Linus Nordberg [Mon, 4 Apr 2011 11:32:04 +0000 (13:32 +0200)]
Add configuration of client fticksVISINST.

13 years agoFormatting changes.
Linus Nordberg [Mon, 4 Apr 2011 11:09:30 +0000 (13:09 +0200)]
Formatting changes.

13 years agoAdd configuration options for F-Ticks logging.
Linus Nordberg [Fri, 1 Apr 2011 18:42:49 +0000 (20:42 +0200)]
Add configuration options for F-Ticks logging.

13 years agoRegenerate configure and aclocal.m4.
Linus Nordberg [Fri, 1 Apr 2011 18:39:03 +0000 (20:39 +0200)]
Regenerate configure and aclocal.m4.

13 years agoFormatting changes.
Linus Nordberg [Thu, 31 Mar 2011 23:43:27 +0000 (01:43 +0200)]
Formatting changes.

13 years agoUpdate copyright notices.
Linus Nordberg [Thu, 31 Mar 2011 17:18:18 +0000 (19:18 +0200)]
Update copyright notices.

13 years agoVersion 1.5-dev.
Linus Nordberg [Thu, 31 Mar 2011 16:52:00 +0000 (18:52 +0200)]
Version 1.5-dev.

13 years agoFix a typo in an error string.
Linus Nordberg [Thu, 3 Mar 2011 09:43:09 +0000 (10:43 +0100)]
Fix a typo in an error string.

13 years agoReady for radsecproxy-1.4.2. radsecproxy-1.4.2
Linus Nordberg [Tue, 23 Nov 2010 14:37:20 +0000 (15:37 +0100)]
Ready for radsecproxy-1.4.2.

13 years agoImprove SSL version identification.
Linus Nordberg [Fri, 19 Nov 2010 11:02:46 +0000 (12:02 +0100)]
Improve SSL version identification.

Use a runtime check rather than a compile time check, patch
contributed by Faidon Liambotis.

Include development and beta versions in the checks (the status
nibble).

13 years agoReleng, version is radsecproxy-1.4-dev.
Linus Nordberg [Thu, 18 Nov 2010 13:10:52 +0000 (14:10 +0100)]
Releng, version is radsecproxy-1.4-dev.

13 years agoDon't disable ssl caching for 0.9.8p and later in the 0.9.x series of OpenSSL.
Linus Nordberg [Thu, 18 Nov 2010 12:19:34 +0000 (13:19 +0100)]
Don't disable ssl caching for 0.9.8p and later in the 0.9.x series of OpenSSL.
Follow up to RADSECPROXY-14.

13 years agoGet ready for radsecproxy-1.4.1. radsecproxy-1.4.1
Linus Nordberg [Wed, 17 Nov 2010 18:38:13 +0000 (19:38 +0100)]
Get ready for radsecproxy-1.4.1.

13 years agoDisable OpenSSL session caching if OpenSSL version < 1.0.0b.
Linus Nordberg [Wed, 17 Nov 2010 18:07:50 +0000 (19:07 +0100)]
Disable OpenSSL session caching if OpenSSL version < 1.0.0b.
(Closes RADSECPROXY-14.)

13 years ago"Thou shalt not follow the NULL pointer, for chaos and madness await
Linus Nordberg [Mon, 15 Nov 2010 13:47:19 +0000 (14:47 +0100)]
"Thou shalt not follow the NULL pointer, for chaos and madness await
thee at its end."

13 years ago* ChangeLog: Fix typo.
Linus Nordberg [Sat, 12 Jun 2010 00:11:39 +0000 (02:11 +0200)]
* ChangeLog: Fix typo.

13 years ago* configure.ac: Update version. radsecproxy-1.4
Linus Nordberg [Fri, 11 Jun 2010 23:42:29 +0000 (01:42 +0200)]
* configure.ac: Update version.

13 years ago* NEWS: New file, for make dist. Shouldn't be needed since `AUTOMAKE_OPTIONS = forei...
Linus Nordberg [Fri, 11 Jun 2010 23:38:42 +0000 (01:38 +0200)]
* NEWS: New file, for make dist.  Shouldn't be needed since `AUTOMAKE_OPTIONS = foreign' IMO.

13 years ago* README: Add known build issues.
Linus Nordberg [Fri, 11 Jun 2010 23:37:06 +0000 (01:37 +0200)]
* README: Add known build issues.

13 years ago* Makefile.in: Regenerate.
Linus Nordberg [Fri, 11 Jun 2010 23:28:24 +0000 (01:28 +0200)]
* Makefile.in: Regenerate.

13 years ago* Makefile.am: Include THANKS.
Linus Nordberg [Fri, 11 Jun 2010 23:28:16 +0000 (01:28 +0200)]
* Makefile.am: Include THANKS.

13 years ago* ChangeLog: Fix version number and date.
Linus Nordberg [Fri, 11 Jun 2010 22:52:02 +0000 (00:52 +0200)]
* ChangeLog: Fix version number and date.

13 years ago* README: Correct version number and fix date.
Linus Nordberg [Fri, 11 Jun 2010 22:51:45 +0000 (00:51 +0200)]
* README: Correct version number and fix date.

13 years agoRegenerate Auto* files, partly because of changes to configure.ac and
Linus Nordberg [Fri, 11 Jun 2010 22:45:09 +0000 (00:45 +0200)]
Regenerate Auto* files, partly because of changes to configure.ac and
Makefile.am and partly because of newer Auto* suite.

13 years ago* configure.ac: Check for docbook2x-man.
Linus Nordberg [Fri, 11 Jun 2010 22:44:29 +0000 (00:44 +0200)]
* configure.ac: Check for docbook2x-man.
* Makefile.am: Build radsecproxy.conf.5 only if docbook2x-man exists.

13 years agoRemove packaging/{portage,rpm}. They're ancient and don't receive any
Linus Nordberg [Fri, 11 Jun 2010 21:32:24 +0000 (23:32 +0200)]
Remove packaging/{portage,rpm}.  They're ancient and don't receive any
love no more.

13 years ago* README: Improve initial paragraph. Thanks to Stig Venaas.
Linus Nordberg [Fri, 11 Jun 2010 21:10:33 +0000 (23:10 +0200)]
* README: Improve initial paragraph.  Thanks to Stig Venaas.

13 years agoAlphabetize on first name instead.
Linus Nordberg [Fri, 11 Jun 2010 20:50:50 +0000 (22:50 +0200)]
Alphabetize on first name instead.

13 years agoSplit README into README and THANKS.
Linus Nordberg [Fri, 11 Jun 2010 15:30:58 +0000 (17:30 +0200)]
Split README into README and THANKS.
Rewrite AUTHORS.

13 years ago* README: Update version number and date. FIXME: This file should
Linus Nordberg [Thu, 10 Jun 2010 12:54:19 +0000 (14:54 +0200)]
* README: Update version number and date.  FIXME: This file should
probably be rewritten.

13 years ago* develdoc.txt: Language nitpicking fixes.
Linus Nordberg [Thu, 10 Jun 2010 12:49:18 +0000 (14:49 +0200)]
* develdoc.txt: Language nitpicking fixes.

13 years ago* ChangeLog: Restructure and add note about incompatible change in log levels.
Linus Nordberg [Wed, 9 Jun 2010 20:34:16 +0000 (22:34 +0200)]
* ChangeLog: Restructure and add note about incompatible change in log levels.

13 years ago* radsecproxy.conf-example: Fix typo.
Linus Nordberg [Thu, 3 Jun 2010 13:17:03 +0000 (15:17 +0200)]
* radsecproxy.conf-example: Fix typo.

13 years ago* radsecproxy.conf-example: Update for new log level.
Linus Nordberg [Thu, 3 Jun 2010 13:16:36 +0000 (15:16 +0200)]
* radsecproxy.conf-example: Update for new log level.

13 years ago* README: Correct number of debug levels.
Linus Nordberg [Wed, 2 Jun 2010 18:50:26 +0000 (20:50 +0200)]
* README: Correct number of debug levels.
* radsecproxy.c (getmainconfig): Take new log level into account.
(getargs): Ditto.
Patch by Kolbjørn Barmen.

13 years ago* ChangeLog: Mention new log level.
Linus Nordberg [Tue, 1 Jun 2010 15:54:15 +0000 (17:54 +0200)]
* ChangeLog: Mention new log level.

13 years ago* LICENSE: Update years.
Linus Nordberg [Tue, 1 Jun 2010 11:11:25 +0000 (13:11 +0200)]
* LICENSE: Update years.

13 years ago* ChangeLog: Update date and version. Reformulate last entry.
Linus Nordberg [Tue, 1 Jun 2010 10:31:28 +0000 (12:31 +0200)]
* ChangeLog: Update date and version.  Reformulate last entry.

13 years ago* Makefile.in: Regenerate.
Linus Nordberg [Tue, 1 Jun 2010 10:31:02 +0000 (12:31 +0200)]
* Makefile.in: Regenerate.

13 years ago* Makefile.am (EXTRA_DIST): Add LICENSE.
Linus Nordberg [Tue, 1 Jun 2010 10:30:52 +0000 (12:30 +0200)]
* Makefile.am (EXTRA_DIST): Add LICENSE.

13 years ago* Makefile.in: Regenerate.
Linus Nordberg [Tue, 1 Jun 2010 08:38:31 +0000 (10:38 +0200)]
* Makefile.in: Regenerate.

13 years ago* Makefile.am: Put man page files in `dist_man_MANS' and it's built by
Linus Nordberg [Tue, 1 Jun 2010 08:38:22 +0000 (10:38 +0200)]
* Makefile.am: Put man page files in `dist_man_MANS' and it's built by
target 'all' as well as included in 'dist'.

13 years ago* radsecproxy.conf.5: Remove since it's generated from
Linus Nordberg [Tue, 1 Jun 2010 07:58:40 +0000 (09:58 +0200)]
* radsecproxy.conf.5: Remove since it's generated from
radsecproxy.conf.5.xml (make target 'man').

13 years agoReflect new debug level in man pages and comments in source.
Linus Nordberg [Tue, 1 Jun 2010 07:58:13 +0000 (09:58 +0200)]
Reflect new debug level in man pages and comments in source.

Author: Kolbjørn Barmen <kolbjorn.barmen@uninett.no>
Date:   Tue Jun 1 09:52:17 2010 +0300

13 years agoAdded DBG_NOTICE to the access accept/reject and accounting,
Linus Nordberg [Tue, 1 Jun 2010 07:51:32 +0000 (09:51 +0200)]
Added DBG_NOTICE to the access accept/reject and accounting,
statisticly interesting information.

Author: Kolbjørn Barmen <kolbjorn.barmen@uninett.no>
Date:   Tue Jun 1 09:41:02 2010 +0300

13 years agoBump version.
Linus Nordberg [Mon, 31 May 2010 08:52:10 +0000 (10:52 +0200)]
Bump version.

13 years agoAdd log level DBG_NOTICE.
Linus Nordberg [Mon, 31 May 2010 08:43:03 +0000 (10:43 +0200)]
Add log level DBG_NOTICE.

13 years ago* configure: Regenerate.
Linus Nordberg [Mon, 31 May 2010 08:42:39 +0000 (10:42 +0200)]
* configure: Regenerate.

13 years agoReady for 1.4-beta2. radsecproxy-1.4-beta2
Linus Nordberg [Fri, 28 May 2010 14:49:25 +0000 (16:49 +0200)]
Ready for 1.4-beta2.

13 years ago* radsecproxy.c (createpidfile): Don't use r uninitialized. radsecproxy-1.4-beta1
Linus Nordberg [Fri, 28 May 2010 14:10:08 +0000 (16:10 +0200)]
* radsecproxy.c (createpidfile): Don't use r uninitialized.

13 years ago* radsecproxy.c (createpidfile): Treat pid_t as long, avoiding compiler warnings...
Linus Nordberg [Fri, 28 May 2010 14:08:12 +0000 (16:08 +0200)]
* radsecproxy.c (createpidfile): Treat pid_t as long, avoiding compiler warnings on Solaris.

13 years agoPrint a better version string than "$Rev$".
Linus Nordberg [Fri, 28 May 2010 13:54:02 +0000 (15:54 +0200)]
Print a better version string than "$Rev$".

13 years ago* Makefile.am: Compile with -fno-strict-aliasing to avoid the warnings
Linus Nordberg [Fri, 28 May 2010 13:43:01 +0000 (15:43 +0200)]
* Makefile.am: Compile with -fno-strict-aliasing to avoid the warnings
for the casts (RADSECPROXY-8).
* Makefile.in: Regenerate.

13 years agoCreate tools/ directory and move shell scripts there.
Linus Nordberg [Fri, 28 May 2010 13:32:31 +0000 (15:32 +0200)]
Create tools/ directory and move shell scripts there.

13 years ago* Makefile.am: Build HTML version of radsecproxy.conf.5.
Linus Nordberg [Fri, 28 May 2010 13:21:45 +0000 (15:21 +0200)]
* Makefile.am: Build HTML version of radsecproxy.conf.5.
* Makefile.in: Regenerate.

13 years ago* debug.c (debugerrno): New function.
Linus Nordberg [Fri, 28 May 2010 12:58:08 +0000 (14:58 +0200)]
* debug.c (debugerrno): New function.
(debugerrnox): New function.
* radsecproxy.c: Use debugerrno() and debugerrnox() when appropriate.

13 years ago* radsecproxy.c (extractattr): Add vendor_flag argument and enforce look-mom-no-warnings
Linus Nordberg [Thu, 27 May 2010 10:50:15 +0000 (12:50 +0200)]
* radsecproxy.c (extractattr): Add vendor_flag argument and enforce
three fields (vendor, name, value) when set.

13 years ago* radsecproxy.c (pwdencrypt): Fix bug with User-Password's of a length
Linus Nordberg [Wed, 26 May 2010 19:57:58 +0000 (21:57 +0200)]
* radsecproxy.c (pwdencrypt): Fix bug with User-Password's of a length
greater than 16 octets.  Spotted by Timothy, hunted down by Ralf
Paffrath and verified by Stig Venaas.
(pwdencrypt, pwddecrypt): Collapse into one new function -- pwdcrypt().
(pwdrecrypt): Use new pwdcrypt().

13 years ago* radsecproxy.conf-example: Add LoopPrevention in a server block.
Linus Nordberg [Wed, 26 May 2010 07:11:34 +0000 (09:11 +0200)]
* radsecproxy.conf-example: Add LoopPrevention in a server block.

13 years ago* radsecproxy.conf.5.xml: Add addVendorAttribute.
Linus Nordberg [Wed, 26 May 2010 07:10:09 +0000 (09:10 +0200)]
* radsecproxy.conf.5.xml: Add addVendorAttribute.

13 years ago* radsecproxy.conf.5.xml: s/of the form/on the form/g.
Linus Nordberg [Wed, 26 May 2010 07:00:56 +0000 (09:00 +0200)]
* radsecproxy.conf.5.xml: s/of the form/on the form/g.

13 years ago* radsecproxy.conf-example: Sanitize and verify rewrite examples.
Linus Nordberg [Tue, 25 May 2010 21:05:51 +0000 (23:05 +0200)]
* radsecproxy.conf-example: Sanitize and verify rewrite examples.

13 years ago* radsecproxy.c (extractattr): Bug! When s is changed, update len. This might actua...
Linus Nordberg [Tue, 25 May 2010 20:55:04 +0000 (22:55 +0200)]
* radsecproxy.c (extractattr): Bug!  When s is changed, update len.  This might actually work now!

13 years ago* radsecproxy.c (extractattr): Fix bug where 'name' part was lost (in
Linus Nordberg [Tue, 25 May 2010 20:35:18 +0000 (22:35 +0200)]
* radsecproxy.c (extractattr): Fix bug where 'name' part was lost (in
fact, 'val' was used for name).

13 years ago* radsecproxy.c (addrewrite): Add some detail to error printouts.
Linus Nordberg [Tue, 25 May 2010 20:24:45 +0000 (22:24 +0200)]
* radsecproxy.c (addrewrite): Add some detail to error printouts.

13 years ago* radsecproxy.c (makevendortlv): Free attr when it's been copied.
Linus Nordberg [Tue, 25 May 2010 11:28:06 +0000 (13:28 +0200)]
* radsecproxy.c (makevendortlv): Free attr when it's been copied.
(addvendorattr): Free attr if makevendortlv() fails.
(addttlattr): Don't free attr, now that this is done by makevendortlv().