radsecproxy.git
12 years agoUpdate copyright info. radsecproxy-1.5
Linus Nordberg [Thu, 29 Sep 2011 18:58:17 +0000 (20:58 +0200)]
Update copyright info.

12 years agoRemove unused code.
Linus Nordberg [Thu, 29 Sep 2011 13:48:17 +0000 (15:48 +0200)]
Remove unused code.

12 years agoAlways distribute radsecproxy-hash.1.
Linus Nordberg [Thu, 29 Sep 2011 11:30:02 +0000 (13:30 +0200)]
Always distribute radsecproxy-hash.1.

12 years agofticks_hashmac has moved.
Linus Nordberg [Thu, 29 Sep 2011 11:25:36 +0000 (13:25 +0200)]
fticks_hashmac has moved.

12 years agoAdd radsecproxy-hash.c.
Linus Nordberg [Thu, 29 Sep 2011 11:22:38 +0000 (13:22 +0200)]
Add radsecproxy-hash.c.

12 years agoTest hashing some more in t_fticks.
Linus Nordberg [Thu, 29 Sep 2011 09:23:06 +0000 (11:23 +0200)]
Test hashing some more in t_fticks.

12 years agocatgconf has changed name.
Linus Nordberg [Thu, 29 Sep 2011 09:22:54 +0000 (11:22 +0200)]
catgconf has changed name.

12 years agoBuild radsecproxy-hash.
Linus Nordberg [Thu, 29 Sep 2011 09:22:43 +0000 (11:22 +0200)]
Build radsecproxy-hash.

Reorganize Makefile.am and make specific CFLAGS general (AM_CFLAGS).

12 years agoAdd binary radsecproxy-hash.
Linus Nordberg [Thu, 29 Sep 2011 09:21:30 +0000 (11:21 +0200)]
Add binary radsecproxy-hash.

Split up fticks.c in order not to have to drag in too much of
radsecproxy in order to just hash a MAC.

12 years agoUpdate date in radsecproxy.1.
Linus Nordberg [Wed, 28 Sep 2011 17:33:00 +0000 (19:33 +0200)]
Update date in radsecproxy.1.

12 years agoEnable F-Ticks support in distcheck.
Linus Nordberg [Wed, 28 Sep 2011 17:01:06 +0000 (19:01 +0200)]
Enable F-Ticks support in distcheck.

12 years agoDon't test F-Ticks if we're not configured for supporting it.
Linus Nordberg [Wed, 28 Sep 2011 16:57:47 +0000 (18:57 +0200)]
Don't test F-Ticks if we're not configured for supporting it.

12 years agoPut two Autoconf files back since they're not installed by autoreconf -i.
Linus Nordberg [Wed, 28 Sep 2011 16:50:23 +0000 (18:50 +0200)]
Put two Autoconf files back since they're not installed by autoreconf -i.

Hmm, I wonder if it makes sense to have compile, config.{guess,sub},
install-sh, missing and depcomp under source control too?  It's not
that they're changing that often.

12 years agoDon't have generated file under source control.
Linus Nordberg [Wed, 28 Sep 2011 16:42:54 +0000 (18:42 +0200)]
Don't have generated file under source control.

12 years agoCosmetic.
Linus Nordberg [Wed, 28 Sep 2011 16:32:17 +0000 (18:32 +0200)]
Cosmetic.

12 years agoCorrect compiler and linker flags.
Linus Nordberg [Wed, 28 Sep 2011 16:31:46 +0000 (18:31 +0200)]
Correct compiler and linker flags.

We don't need LDFLAGS when building librsp sources.
s/catgconf/radsecproxy_conf/.

12 years agoPoint to ChangeLog in NEWS.
Linus Nordberg [Wed, 28 Sep 2011 12:35:03 +0000 (14:35 +0200)]
Point to ChangeLog in NEWS.

12 years agoReorganise EXTRA_DIST.
Linus Nordberg [Wed, 28 Sep 2011 12:34:48 +0000 (14:34 +0200)]
Reorganise EXTRA_DIST.

12 years agoFix last merge which broke configure.ac.
Linus Nordberg [Wed, 28 Sep 2011 12:22:46 +0000 (14:22 +0200)]
Fix last merge which broke configure.ac.

Also, remove generated configure.

12 years agoMerge with master. Conflicts:
Linus Nordberg [Wed, 28 Sep 2011 11:10:12 +0000 (13:10 +0200)]
Merge with master.  Conflicts:
  ChangeLog
  README
  config.guess
  config.sub
  configure
  configure.ac

12 years agoRename binary catgconf --> radsecproxy-conf.
Linus Nordberg [Wed, 28 Sep 2011 10:56:09 +0000 (12:56 +0200)]
Rename binary catgconf --> radsecproxy-conf.

12 years agoAdd 1.5-dev notes and reverse the order of the entries in the file.
Linus Nordberg [Wed, 28 Sep 2011 10:53:58 +0000 (12:53 +0200)]
Add 1.5-dev notes and reverse the order of the entries in the file.

12 years agoList catgconf header files too.
Linus Nordberg [Wed, 28 Sep 2011 10:37:49 +0000 (12:37 +0200)]
List catgconf header files too.

12 years agoUndo cc56affa -- header files should go into SOURCES.
Linus Nordberg [Wed, 28 Sep 2011 10:34:54 +0000 (12:34 +0200)]
Undo cc56affa -- header files should go into SOURCES.

If not for anything else but to get distributed.

12 years agoPass necessary compiler and linker flags.
Linus Nordberg [Tue, 27 Sep 2011 17:50:13 +0000 (19:50 +0200)]
Pass necessary compiler and linker flags.

All the source files compiled into the library needs all flags too.

12 years agoHandle configuration with F-Ticks enabled but w/o FTicksMac.
Linus Nordberg [Tue, 27 Sep 2011 17:48:52 +0000 (19:48 +0200)]
Handle configuration with F-Ticks enabled but w/o FTicksMac.

12 years agoAdd F-Ticks documentation to radsecproxy.conf.5.
Linus Nordberg [Tue, 27 Sep 2011 17:48:12 +0000 (19:48 +0200)]
Add F-Ticks documentation to radsecproxy.conf.5.

12 years agoUpdate example config to correctly reflect default values for F-Ticks config.
Linus Nordberg [Tue, 27 Sep 2011 17:44:25 +0000 (19:44 +0200)]
Update example config to correctly reflect default values for F-Ticks config.

12 years agoCast to avoid warning.
Linus Nordberg [Tue, 27 Sep 2011 17:43:59 +0000 (19:43 +0200)]
Cast to avoid warning.

12 years agoSanitise MAC address before hashing it.
Linus Nordberg [Tue, 27 Sep 2011 16:03:12 +0000 (18:03 +0200)]
Sanitise MAC address before hashing it.

Almost closes RADSECPROXY-16.

12 years agoAdd --enable-fticks to configure.
Linus Nordberg [Tue, 27 Sep 2011 15:04:49 +0000 (17:04 +0200)]
Add --enable-fticks to configure.

12 years agoFormatting.
Linus Nordberg [Tue, 27 Sep 2011 13:02:40 +0000 (15:02 +0200)]
Formatting.

12 years agoDon't list header files in _SOURCES.
Linus Nordberg [Tue, 27 Sep 2011 13:02:24 +0000 (15:02 +0200)]
Don't list header files in _SOURCES.

Dependencies will work anyway.

12 years agoAdd support for 'make check' and a dummy test.
Linus Nordberg [Tue, 27 Sep 2011 08:18:21 +0000 (10:18 +0200)]
Add support for 'make check' and a dummy test.

12 years agoMakefile.am formatting and removal of spurious variable.
Linus Nordberg [Tue, 27 Sep 2011 08:13:37 +0000 (10:13 +0200)]
Makefile.am formatting and removal of spurious variable.

12 years agoPrepare for building tests.
Linus Nordberg [Tue, 27 Sep 2011 08:11:35 +0000 (10:11 +0200)]
Prepare for building tests.

Move main() out of radsecproxy.c.
Build a static library and link a main.c with it.

12 years agoStop keeping generated files under source control.
Linus Nordberg [Tue, 27 Sep 2011 08:03:00 +0000 (10:03 +0200)]
Stop keeping generated files under source control.

12 years agoCosmetics.
Linus Nordberg [Mon, 26 Sep 2011 14:57:01 +0000 (16:57 +0200)]
Cosmetics.

12 years agoMake radsecproxy.h self-sustaining.
Linus Nordberg [Mon, 26 Sep 2011 14:55:11 +0000 (16:55 +0200)]
Make radsecproxy.h self-sustaining.

12 years agoPrepend static functions with underscore.
Linus Nordberg [Mon, 26 Sep 2011 14:03:58 +0000 (16:03 +0200)]
Prepend static functions with underscore.

12 years agoNew config.guess, config.sub.
Linus Nordberg [Mon, 26 Sep 2011 14:03:19 +0000 (16:03 +0200)]
New config.guess, config.sub.

12 years agoCompile with -Werror.
Linus Nordberg [Mon, 26 Sep 2011 14:00:10 +0000 (16:00 +0200)]
Compile with -Werror.

12 years agoReady for radsecproxy-1.4.3. radsecproxy-1.4.3
Linus Nordberg [Fri, 22 Jul 2011 11:29:41 +0000 (13:29 +0200)]
Ready for radsecproxy-1.4.3.

12 years agoRegenerate auto* stuff.
Linus Nordberg [Thu, 21 Jul 2011 11:09:47 +0000 (13:09 +0200)]
Regenerate auto* stuff.

12 years agoradsecproxy-1.4.3-rc0.
Linus Nordberg [Thu, 21 Jul 2011 11:08:01 +0000 (13:08 +0200)]
radsecproxy-1.4.3-rc0.

12 years agoDocument the default value used for the 'secret' option.
Linus Nordberg [Tue, 19 Jul 2011 13:21:14 +0000 (15:21 +0200)]
Document the default value used for the 'secret' option.

And mention that it's going to change.

12 years agoAdd a bit more info to README about building for BSD's.
Linus Nordberg [Tue, 19 Jul 2011 12:57:18 +0000 (14:57 +0200)]
Add a bit more info to README about building for BSD's.

12 years agoAdd changelog entry for b2d6.
Linus Nordberg [Sun, 3 Jul 2011 11:15:21 +0000 (13:15 +0200)]
Add changelog entry for b2d6.

12 years agoVersion is radsecproxy-1.4.3-dev.
Linus Nordberg [Sun, 3 Jul 2011 11:12:09 +0000 (13:12 +0200)]
Version is radsecproxy-1.4.3-dev.

12 years agoDon't print a pointer when trying to print a string.
Linus Nordberg [Sun, 3 Jul 2011 11:02:32 +0000 (13:02 +0200)]
Don't print a pointer when trying to print a string.

12 years agoFormatting changes.
Linus Nordberg [Sun, 3 Jul 2011 11:03:37 +0000 (13:03 +0200)]
Formatting changes.

12 years agoDon't print a pointer when trying to print a string.
Linus Nordberg [Sun, 3 Jul 2011 11:02:32 +0000 (13:02 +0200)]
Don't print a pointer when trying to print a string.

12 years agoFix typos, spelling and whitespace in tools/naptr-eduroam.sh.
Linus Nordberg [Fri, 1 Jul 2011 12:51:20 +0000 (14:51 +0200)]
Fix typos, spelling and whitespace in tools/naptr-eduroam.sh.

Also, change `test' to '['.

12 years ago(tools/naptr-eduroam.sh): Use /bin/sh rather than bash.
Linus Nordberg [Tue, 31 May 2011 12:36:31 +0000 (14:36 +0200)]
(tools/naptr-eduroam.sh): Use /bin/sh rather than bash.

Not all systems have bash (esp. not in /bin) and some people argue
that /bin/sh should be less unsafe due to less code, lower complexity
and being around for longer time.

Fixes:
- /bin/sh builtin echo doesn't have `-e' -- use /bin/echo
- /bin/sh builtin test ([) doesn't understand `==' -- use `='

12 years agoReindent tools/naptr-eduroam.sh.
Linus Nordberg [Tue, 31 May 2011 12:25:14 +0000 (14:25 +0200)]
Reindent tools/naptr-eduroam.sh.

13 years agoHash full MAC even for VendorHashed and VendorKeyHashed.
Linus Nordberg [Tue, 5 Apr 2011 13:53:58 +0000 (15:53 +0200)]
Hash full MAC even for VendorHashed and VendorKeyHashed.

Comment on VendorKeyHashed, from source:
We are hashing the first nine octets too for easier correlation
between vendor-key-hashed and fully-key-hashed log records.  This
opens up for a known plaintext attack on the key but the consequences
of that is considered outweighed by the convenience gained.

13 years agoProduce full length F-Tick MAC hashes for FullyHashed and FullyKeyHashed.
Linus Nordberg [Tue, 5 Apr 2011 13:50:59 +0000 (15:50 +0200)]
Produce full length F-Tick MAC hashes for FullyHashed and FullyKeyHashed.

We produced 62 octets rather than 64.

13 years agoDon't smash buffer on stack.
Linus Nordberg [Tue, 5 Apr 2011 13:26:53 +0000 (15:26 +0200)]
Don't smash buffer on stack.

(format_hash): Don't write past OUT_LEN.  Duh!

13 years agoAdd test lost in 480942e6 back.
Linus Nordberg [Tue, 5 Apr 2011 13:22:45 +0000 (15:22 +0200)]
Add test lost in 480942e6 back.

13 years agoDo F-Ticks reporting only for Access-Accept and Access-Reject.
Linus Nordberg [Tue, 5 Apr 2011 09:24:10 +0000 (11:24 +0200)]
Do F-Ticks reporting only for Access-Accept and Access-Reject.

13 years agoDon't crash in F-Ticks logging if we don't find User-Name.
Linus Nordberg [Tue, 5 Apr 2011 09:15:56 +0000 (11:15 +0200)]
Don't crash in F-Ticks logging if we don't find User-Name.

13 years agoLog MAC as "undisclosed" for config FTicksMac Static.
Linus Nordberg [Tue, 5 Apr 2011 08:33:50 +0000 (10:33 +0200)]
Log MAC as "undisclosed" for config FTicksMac Static.

Also, log empty string if no Calling-Station-Id attribute is found.

13 years agoDo save vendor part of MAC for FTicksMac VendorHashed and VendorKeyHashed.
Linus Nordberg [Tue, 5 Apr 2011 07:49:47 +0000 (09:49 +0200)]
Do save vendor part of MAC for FTicksMac VendorHashed and VendorKeyHashed.

13 years agoMove configure_fticks to fticks.c.
Linus Nordberg [Mon, 4 Apr 2011 14:21:20 +0000 (16:21 +0200)]
Move configure_fticks to fticks.c.

13 years agoMove F-Ticks logging to fticks.c.
Linus Nordberg [Mon, 4 Apr 2011 14:15:22 +0000 (16:15 +0200)]
Move F-Ticks logging to fticks.c.

13 years agoAdd placeholders for F-Ticks config documentation.
Linus Nordberg [Mon, 4 Apr 2011 13:46:54 +0000 (15:46 +0200)]
Add placeholders for F-Ticks config documentation.

13 years agoFinish docu cosmetics.
Linus Nordberg [Mon, 4 Apr 2011 13:43:17 +0000 (15:43 +0200)]
Finish docu cosmetics.

(radsecproxy.conf.5.xml): Capitalize first letter of all references to
basic options.  This convention might help as a hint in block config
by showing when a basic option is being overridden.

13 years agoConfig cosmetics.
Linus Nordberg [Mon, 4 Apr 2011 13:37:57 +0000 (15:37 +0200)]
Config cosmetics.

Use capital initial letter for basic options, both in documentation
and example config.

13 years agoFormating changes to docbook source for radsecproxy.conf(5).
Linus Nordberg [Mon, 4 Apr 2011 13:24:31 +0000 (15:24 +0200)]
Formating changes to docbook source for radsecproxy.conf(5).

13 years agoAdd F-Ticks logging support.
Linus Nordberg [Mon, 4 Apr 2011 12:54:55 +0000 (14:54 +0200)]
Add F-Ticks logging support.

13 years ago(radsecproxy.conf-example) Fix a typo.
Linus Nordberg [Mon, 4 Apr 2011 12:54:09 +0000 (14:54 +0200)]
(radsecproxy.conf-example) Fix a typo.

13 years agoUpdate LICENSE to include NORDUnet.
Linus Nordberg [Mon, 4 Apr 2011 12:53:42 +0000 (14:53 +0200)]
Update LICENSE to include NORDUnet.

13 years agoRegenerate configure and build files.
Linus Nordberg [Mon, 4 Apr 2011 12:53:25 +0000 (14:53 +0200)]
Regenerate configure and build files.

13 years agoAdd fticks.c and fticks.h to the build.
Linus Nordberg [Mon, 4 Apr 2011 12:52:57 +0000 (14:52 +0200)]
Add fticks.c and fticks.h to the build.

13 years agoRemove dashes from all options F-Ticks.* for consistency.
Linus Nordberg [Mon, 4 Apr 2011 11:35:31 +0000 (13:35 +0200)]
Remove dashes from all options F-Ticks.* for consistency.

13 years agoAdd configuration of client fticksVISINST.
Linus Nordberg [Mon, 4 Apr 2011 11:32:04 +0000 (13:32 +0200)]
Add configuration of client fticksVISINST.

13 years agoFormatting changes.
Linus Nordberg [Mon, 4 Apr 2011 11:09:30 +0000 (13:09 +0200)]
Formatting changes.

13 years agoAdd configuration options for F-Ticks logging.
Linus Nordberg [Fri, 1 Apr 2011 18:42:49 +0000 (20:42 +0200)]
Add configuration options for F-Ticks logging.

13 years agoRegenerate configure and aclocal.m4.
Linus Nordberg [Fri, 1 Apr 2011 18:39:03 +0000 (20:39 +0200)]
Regenerate configure and aclocal.m4.

13 years agoFormatting changes.
Linus Nordberg [Thu, 31 Mar 2011 23:43:27 +0000 (01:43 +0200)]
Formatting changes.

13 years agoUpdate copyright notices.
Linus Nordberg [Thu, 31 Mar 2011 17:18:18 +0000 (19:18 +0200)]
Update copyright notices.

13 years agoVersion 1.5-dev.
Linus Nordberg [Thu, 31 Mar 2011 16:52:00 +0000 (18:52 +0200)]
Version 1.5-dev.

13 years agoFix a typo in an error string.
Linus Nordberg [Thu, 3 Mar 2011 09:43:09 +0000 (10:43 +0100)]
Fix a typo in an error string.

13 years agoReady for radsecproxy-1.4.2. radsecproxy-1.4.2
Linus Nordberg [Tue, 23 Nov 2010 14:37:20 +0000 (15:37 +0100)]
Ready for radsecproxy-1.4.2.

13 years agoImprove SSL version identification.
Linus Nordberg [Fri, 19 Nov 2010 11:02:46 +0000 (12:02 +0100)]
Improve SSL version identification.

Use a runtime check rather than a compile time check, patch
contributed by Faidon Liambotis.

Include development and beta versions in the checks (the status
nibble).

13 years agoReleng, version is radsecproxy-1.4-dev.
Linus Nordberg [Thu, 18 Nov 2010 13:10:52 +0000 (14:10 +0100)]
Releng, version is radsecproxy-1.4-dev.

13 years agoDon't disable ssl caching for 0.9.8p and later in the 0.9.x series of OpenSSL.
Linus Nordberg [Thu, 18 Nov 2010 12:19:34 +0000 (13:19 +0100)]
Don't disable ssl caching for 0.9.8p and later in the 0.9.x series of OpenSSL.
Follow up to RADSECPROXY-14.

13 years agoGet ready for radsecproxy-1.4.1. radsecproxy-1.4.1
Linus Nordberg [Wed, 17 Nov 2010 18:38:13 +0000 (19:38 +0100)]
Get ready for radsecproxy-1.4.1.

13 years agoDisable OpenSSL session caching if OpenSSL version < 1.0.0b.
Linus Nordberg [Wed, 17 Nov 2010 18:07:50 +0000 (19:07 +0100)]
Disable OpenSSL session caching if OpenSSL version < 1.0.0b.
(Closes RADSECPROXY-14.)

13 years ago"Thou shalt not follow the NULL pointer, for chaos and madness await
Linus Nordberg [Mon, 15 Nov 2010 13:47:19 +0000 (14:47 +0100)]
"Thou shalt not follow the NULL pointer, for chaos and madness await
thee at its end."

13 years ago* ChangeLog: Fix typo.
Linus Nordberg [Sat, 12 Jun 2010 00:11:39 +0000 (02:11 +0200)]
* ChangeLog: Fix typo.

13 years ago* configure.ac: Update version. radsecproxy-1.4
Linus Nordberg [Fri, 11 Jun 2010 23:42:29 +0000 (01:42 +0200)]
* configure.ac: Update version.

13 years ago* NEWS: New file, for make dist. Shouldn't be needed since `AUTOMAKE_OPTIONS = forei...
Linus Nordberg [Fri, 11 Jun 2010 23:38:42 +0000 (01:38 +0200)]
* NEWS: New file, for make dist.  Shouldn't be needed since `AUTOMAKE_OPTIONS = foreign' IMO.

13 years ago* README: Add known build issues.
Linus Nordberg [Fri, 11 Jun 2010 23:37:06 +0000 (01:37 +0200)]
* README: Add known build issues.

13 years ago* Makefile.in: Regenerate.
Linus Nordberg [Fri, 11 Jun 2010 23:28:24 +0000 (01:28 +0200)]
* Makefile.in: Regenerate.

13 years ago* Makefile.am: Include THANKS.
Linus Nordberg [Fri, 11 Jun 2010 23:28:16 +0000 (01:28 +0200)]
* Makefile.am: Include THANKS.

13 years ago* ChangeLog: Fix version number and date.
Linus Nordberg [Fri, 11 Jun 2010 22:52:02 +0000 (00:52 +0200)]
* ChangeLog: Fix version number and date.

13 years ago* README: Correct version number and fix date.
Linus Nordberg [Fri, 11 Jun 2010 22:51:45 +0000 (00:51 +0200)]
* README: Correct version number and fix date.

13 years agoRegenerate Auto* files, partly because of changes to configure.ac and
Linus Nordberg [Fri, 11 Jun 2010 22:45:09 +0000 (00:45 +0200)]
Regenerate Auto* files, partly because of changes to configure.ac and
Makefile.am and partly because of newer Auto* suite.

13 years ago* configure.ac: Check for docbook2x-man.
Linus Nordberg [Fri, 11 Jun 2010 22:44:29 +0000 (00:44 +0200)]
* configure.ac: Check for docbook2x-man.
* Makefile.am: Build radsecproxy.conf.5 only if docbook2x-man exists.