Commit report for v4.0.x branch

announce at freeradius.org announce at freeradius.org
Sun Sep 24 02:00:02 CEST 2017


New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxpPOAAoJEH0Oec13Yh7Ni0QH+gPWAu7LmRJhx3891QjoocJm
 hC9fQfjYrUytLGKyQd68wRIbD6O1SELYUFQ/PL7Sa9TLJx5WIiih7XKiNqMIGkOX
 CLPSVebIabS7Gx6yobx1y7nCtAccRFtoPI7NE7QmH9gDTHMtOKHdcEcXD6M90jf+
 DaSaJzI01/17EpHtt9sV6vrW4kKuh1Zi7S+3pf7PSUGoBUPbJTmQ5X9gUGcSUCWi
 Tj8G5Rl9DWZsmCCttP4CyIEJRyd7dpxJwwNjz5SSkR58LpbR7ehhiG1IDt+EfWSB
 7iDNGI2HNxeKDRN+I7yeyNCBnGoYU09gxA1kHo9IrFM54YDuX+OYyuaDum81RZ8=
 =SQHo
 -----END PGP SIGNATURE-----

don't leak vp

Alan T. DeKok at 2017-09-23T17:03:07Z
Files modified:
	* src/lib/util/pair.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/25c8dfa30387d60fa6b374704bab801f9daf5179
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxl/XAAoJEH0Oec13Yh7NvY4H/RQQxrf+dKP8NahUT4eU1sWK
 WyaFqyxFaca/KpBPUmKlllnbmQfGPgsW19JyA8MUKHZ9wT21MyskC+Haa1eYSSr6
 tXgujykI8NKCazwPBXpR2b+SEdRUd1/mXestQ91uYPvuH6+i9qsJL/mnLqFYNn/u
 aQjsuRTV+BNT32rwp5EKfefRu7Ia8d8E3hPKnI7y5bCFB/SO2p89H/52KZURALgM
 RCfY2zlhbbouf4857hmeWTtkTepopPpT6Ht1MMLQfdTdBjNeVs76DsAk+zWfEJ4b
 sSSAGzt6htfrgdY/zuZDjsRcdhTBwkSBMcYPhbcHQrdOLc8mm1s2A3JBTLcgRX4=
 =RFkx
 -----END PGP SIGNATURE-----

EAP-FAST-Crypto-Binding is 'octets'

until such time as eap_fast_decode_pair() decodes STRUCT types

Alan T. DeKok at 2017-09-23T13:20:57Z
Files modified:
	* share/dictionary.freeradius.internal

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/389122b580320b6f8becf590d924c08e35c157be
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxl8iAAoJEH0Oec13Yh7N65sH/iCA+h7H5rcoe987AzadUno8
 1T6ig3c4GcypgsAzBLpa7EyWBUwO6O2YiBCKhIs4zIdBBv1wjFmfDY42WbrDysOw
 OAZd4tl5OCjJnUr/Be9pdbtkPxYv7Djxsk4/gBq7Zc4SQ2l6XdAl8N1qGrkZoB8d
 JINY5uSixiACHnCA00iEcYX0WuQ04wWZFLblx+JAxD9gn/YIv51Nur66vjDqJLIw
 n1l07085ShKftj5kOGmRZKy+jKM9Je5fg8ZQcSWGsAKlutVOq0nW8hD0DLSwXqgu
 5XLN+yGWEQRIXp1C/TNdDScvhWuOKvRtQ45x81DWyTvIEAMKOEKt9I8uS7NAjbM=
 =S1mt
 -----END PGP SIGNATURE-----

it helps to add the VPs to the cursor

Alan T. DeKok at 2017-09-23T13:18:19Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_fast/eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3835d80ce81fc607e66246c09a52fed5eb380378
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxls7AAoJEH0Oec13Yh7Npq8IAIPHz6RuA+kkVCsraNppmWGT
 SNTtfirjN3cKCdxVyvuds9ngsRpRkHfln+F19cURcNQMaG8wn1UcZ85nK8cK2JPZ
 9aZPw9ui82HrvpkqY7oh1KsA6SW2S4Vfzf4Agz39pwpghCeZejcONzsMRlsa4ORk
 Eij9fsIMjJjQWUpFkLFr3lzJKHfcxx4dkV8MbG5F7dzWwAHERDpREF4ejSCRDA4t
 jy537whXf8x4St2yP5pARsOAMSfTMtQdQrPZuNiY6H8qRqsGVn7qoxDh9tHAIHdh
 2TFiZpmKneqzVAb1XIigJ2nFt6AOxLu8hg84Bx/+jsE81gSnhI10JcJ9m5eGIfE=
 =WOaj
 -----END PGP SIGNATURE-----

use decoded len, not len from all of the packet

Alan T. DeKok at 2017-09-23T13:01:40Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_fast/eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/311757b85afeb2cc1dbb88d2f33c618f408aa9db
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxle8AAoJEH0Oec13Yh7NVrQH+wQcVy2xfuwHktNYNfVAI7Fj
 T9akhT5z44LostpMAmEnZsIm1cXz7v/dcNRM2LnnSVkSLGapdoXjgCX5viqzH6kL
 yZZoNF/u30qbDqT3tz5TYT5LTECtxsd2tL7DYHe2gK3/dJMFIUHflQsXKgVBg1et
 8NcZkAa/klWBMPOfSVW1EWC66VO5dpW51C3TBCcSiytP8/KP+LgFuisYo1H456Df
 FaEynEOD6nFoq8tvuCvla4VRmE3XdxOJcsq60+lhu0UZHyZmc66R+2+Ow5vUhfD3
 JQR8ECSrkgeis46XGlJWvreccu9BoTF+uGTyCUJmJs0qp3kiL25gRsR6sX/hSjs=
 =OQAm
 -----END PGP SIGNATURE-----

suppress bad error for EAP-FAST

instead of printing a message saying to ignore it

Alan T. DeKok at 2017-09-23T12:46:47Z
Files modified:
	* src/modules/rlm_eap/lib/base/eap_tls.c
	* src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f8d60f1dbd768355e2176e91cdbd144e8c8dd258
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxlLJAAoJEH0Oec13Yh7Nv50H/3NBZHnFNLbz4LeJ4AcDAkIP
 VFAvnrS+iA0odeaKwb9Q6BGBEGIvKJ4EfTzRPzbQv9RtVV3aRR6Dunc254VXLDBz
 bUwbygyfAUnLZBurcbM2fNvssqvqLYx6B4B+pXVwVdda5jiBMP+M5t+PnS1wefZr
 3DWl1MmsEFsyGpIn0bMG9E2mQM3EmORiEP3NIvooX6KfuR/KZEHzSPP32Mt00bhd
 MLojMl16M20TXCyQT1rOPss0n/xggbDOXrR+36wY+sp4YUS/g8B0FcAlS/AF6b3/
 dMWyu1BTrRae5vanQmhyrnmHRZaBzjQGdxFVlFvXEsudi4dhR3C1c/oyJ7BvKSo=
 =+z2v
 -----END PGP SIGNATURE-----

tls_max_version cannot be less than 1.0

Alan T. DeKok at 2017-09-23T12:25:38Z
Files modified:
	* src/main/tls/ctx.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/394c407bf088cae0562ec15e57cc7a14f73b8ac6
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxlIZAAoJEH0Oec13Yh7NRjIH/i3FQUcDhnNZczyl4oYkL+SO
 BHDYS3J52c/L2MfhpB20Ls8OxYfElmF516xmPAbFOk5LWp5Vt11ZKQEEYdE2z9tj
 iMoFyGyVj3Pscd/qsZVsKutMLSKudUXtYn/fqRChdKi2qfy4IoEcPcvUc6xRHTZE
 qAHX7uhJe4h6msg6kVN9k6Nf8mqYDHlqDmEtkMSuxhadsdKvMS5nzRHhqueNaUTL
 XB3g3ZUQySf7E4gHkyorgY9Qnv/0uCFltqXQOg39UHufq1jIGpYon5reTOs9J9hZ
 ckzIs0TRBYQYIcV57J1pLNyhG6B35HL6kSYP5mDUxfvQuWQLnLf5oP2bUXPgTGM=
 =/eBi
 -----END PGP SIGNATURE-----

tls: some more casting to float

Signed-off-by: Isaac Boukris <iboukris at gmail.com>

Isaac Boukris (via Alan T. DeKok)@2017-09-23T12:22:49Z
Files modified:
	* src/main/tls/ctx.c
	* src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ab29ac3fce8f8c9bccb2480c0c7d4c6c8a510bc9
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxb70AAoJEH0Oec13Yh7N13oH/30dL4M+kt+dC9RK6M8Q8PKs
 hVtLyFKTn1KM4l5sBQujGqy6lpeynOHO6q3vvoVxiytwB2V2HrRf03pqkwzWL6uJ
 WkUcmRFpP21RFj3SLeoPPJhd2n9xmf96NDFFGOLQ2x99kXkqTAS6tBRe8hKvsM6b
 GXyepIUmJmjxx/ddspjNo0DfOaKk8Y46ehpNpCKUuoX7Mzd22lKMPSqUh6iWUZrX
 3U0zn46lz6JpPUUmPVrKiYLpcmSCEva46TU+8fAwWtMoK7EUivQpPSbqYKITHnhC
 QIEzmZTrbw2QrMcAGFZQgv7rZXwvtwNK/3B8L53QfXHYmOqeNRoskVmgd/v1DZw=
 =/kBl
 -----END PGP SIGNATURE-----

use v4 API

Alan T. DeKok at 2017-09-23T01:54:57Z
Files modified:
	* src/modules/rlm_mschap/rlm_mschap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9f6cb21b41bae4698537992780e883d6dcc47df9
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxb6VAAoJEH0Oec13Yh7NPU8H/305UTIc3cECtmrjoGF+KAl/
 LqktV9Sl7+0C7N1N5PDEkvFY/cMxBUkeRMJ1Sveye6veken2z7F/gCpSY9Wu0+sg
 OL+b1zy8EhWzrLeJfP32umbuPFuT6Tf3jAoQRenHug1cpejeSNITn3xH4WNokAxp
 bRAYnsrZqagS3vdwA2Jyf9NjSYkC6HkuCVcLMkf2CR66cKJhUldG/Ee+7qu7wXPZ
 E2QqLr5+OX+9OiET0E7i297Y1LPUltfiQqZoCw1c+e4Ts20L8LoZ05BZivAt+9Yv
 8HV3Zpp+F5wjStYyZi3v7+PvNdvfDt4f3Ix+DmnDedoSPm/fbCsKFgLnRWz0J/E=
 =d9Aj
 -----END PGP SIGNATURE-----

EAP-FAST: Fix EAP-FAST-MSCHAPv2 in anonymous tunnel (v3.0.x)

According to RFC 5422, in anonymous FAST tunnel the mschapv2
challenge is generated differently, from the phase1 exchange.
While the eap-fast module takes care to save internally the
peer-challenge to use, no one cares to read it before doing
the mschap check, causing it to fail.
Fix this by checking for PW_MS_CHAP_PEER_CHALLENGE and using it.

Signed-off-by: Isaac Boukris <iboukris at gmail.com>

Isaac Boukris (via Alan T. DeKok)@2017-09-23T01:53:22Z
Files modified:
	* src/modules/rlm_mschap/rlm_mschap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/cad37197ad75459fa03f8e2f98aa882c841a4835
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxb0vAAoJEH0Oec13Yh7NngwH/1/57QfU+/+dsz8uuNsYY88l
 MAzZ9WMI9IewMkdS2Eqo1QX7eLTIz0tBjM+cIehSdAqJ5ETyNZAP6T+ylsOr5/PF
 7NNDfIDfxIfWsX+YH5oMIZGe/5QJ1Auf6N3T7qy6flRAI+zvMLQKoc2S77zo49C8
 3phWbMT/7RT70/ZIEjrY8rAG4G/SbZFTHW9g7CyiDanlAXw+yJ5cabUJyFuiAoa8
 xktiuVKnvv6fHTrkVmtaE78wp7wjhkL2TNS0Oim/0BgvjNhmoiPgCmQvXt5QIimR
 iajW6VQ+Bru6hNi2hpckCRVSQDFVOpxONfzHycigZQtHij6IXXvw4Ut5VbOSFgs=
 =2TDo
 -----END PGP SIGNATURE-----

recurse on decode TLVs, instead of !TLV

and decode the contents of the TLV, instead of TLV itself

Alan T. DeKok at 2017-09-23T01:46:49Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_fast/eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f82cf68e92ea037e25d9641beae37d4388b6dbff
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxb0FAAoJEH0Oec13Yh7NMdUH+QHTqxSsLwh0zOKxBq1/fpbI
 2c9Ehkzz0Z8yPBaw1Gk12tS3puEU+eGce/I1gdoccwaFlcKl+Rn77leGeLV0Jyw2
 Nj+3b6rJHpWq0fyKY+LbmsyteCbmZ109StYEcr5OMuB7WvX/Juxvrh5gpOOIPx53
 RTyiy0boXvGdZJP+SpeEFgoGHCMsrukXem5c4/EuVfBlL1TBqWE7pr7cVT33pLhV
 71rQew1F+HJDYQqjDhWRtc/YNTp7oHwfVaDVb9V5AAQSrYx0+xrR8zU44reBZ+E2
 0oRIi1ELbv0DwWRf/a2h+/5Dur4G/Eqbv/2v3JcpMjaKwZkzHimZME/oKaLa3ro=
 =4GLe
 -----END PGP SIGNATURE-----

cast to float

Alan T. DeKok at 2017-09-23T01:46:41Z
Files modified:
	* src/main/tls/ctx.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/27ab3ca7684f1662b3fb829e71e73db1eb6798f8
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxSViAAoJEH0Oec13Yh7NDcEH/0udxJmWQGa/uBh0yT26un1E
 AtV7O0klo7dtiU2KGRnLYwYKa5B0WchYo1sGx9KtSXbARNYOZJpt4eMBquZ1MSNl
 Pi6trLTo+68OFFnGyuc5lwpMqwdaO6rudijMnkUl9PKrjzGgYaB2vVQfMoacBRGT
 9iiN8cnHDo6bYU4EFT2R4UDRhOgkxaobc0q0uwo8itMwH1P3rMuF5CGKLUhWGfK7
 hCbM4h+Mz0kfgFHrxgWFaHywemlwwdZo4Ok2cO16u+LoOP67VvXZBT8EJgizeg75
 kmAVwuVYMe2mtlQH9r9iTFHIYhMERTNUkk58rWZRaOtMjGahz8HlwyJuKd1+mfo=
 =zve/
 -----END PGP SIGNATURE-----

note on todo

Alan T. DeKok at 2017-09-22T14:59:42Z
Files modified:
	* src/lib/io/worker.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9078ef154096090aaaf3fb6d6abdcb130bb6eeb4
====== 
-- 
This commit summary was generated @2017-09-24T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).


More information about the Freeradius-Devel mailing list