October 2015 - Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 15 Oct '15

15 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T23:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== -- This commit summary was generated @2015-10-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 15 Oct '15

15 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't need to store talloc ctx anymore Arran Cudbard-Bell@2015-10-15T21:13:29Z Files modified: * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66ddc09ee87f033d2c74… ====== Use TLS consistently in log messages Arran Cudbard-Bell@2015-10-15T21:07:49Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2c1e74bc2b98abb3e23… ====== Strip out the old file based VP caching code We'll write a replacement for rlm_cache before 3.2 is released - promise! Arran Cudbard-Bell@2015-10-15T18:06:01Z Files modified: * src/include/tls-h * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44ecfa782aeaf740708f… ====== Fix double free Closes #1325 Arran Cudbard-Bell@2015-10-15T14:19:06Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3791bef77d49d1ec3cba… ====== Better EAP TLS macro names Arran Cudbard-Bell@2015-10-15T05:58:37Z Files modified: * src/include/tls-h * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c68e96340ec4eb6f6988… ====== Additional minor eap_tls cleanups Arran Cudbard-Bell@2015-10-15T03:11:31Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e8b8fcecbe285869c19… ====== tls_extract is redundant as the record_plus callback function memcpys the input data to OpenSSL's input buffer. Arran Cudbard-Bell@2015-10-15T03:11:31Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd7432d0b8743be249a1… ====== More minor eap tls cleanups. Arran Cudbard-Bell@2015-10-15T03:11:31Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f45b1c22703bb885e29… ====== Remove FR_TLS_LENGTH_INCLUDED It was a really stupid idea to use this as a status. It's not a status, it's a flag, a flag that's available from the flags field. Arran Cudbard-Bell@2015-10-15T03:11:31Z Files modified: * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c050597c0b7589714c7e… ====== Extend the note on PEAPv0 Arran Cudbard-Bell@2015-10-15T03:11:31Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3ce6022694d58b9d0a8… ====== eaptls_verify has a check for data_len > message_len so this code is redundant Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39ea232bcecd082bafe8… ====== Remove redundant checks from eaptls_extract Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79128003e703c18e91fc… ====== Don't use status to determine if we need to use a different data offset It's completely redundant... We have access to the flags Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60ee08a9eedab9079393… ====== Add additional sanity checks to eaptls_verify Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdd180766b59807a48e6… ====== Fixup some eap_tls function documentation Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee8760e9f6987bbb2845… ====== Rename some eap tls variables Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be18224ab1bb90ecd6fb… ====== Rename some eap_tls structures Arran Cudbard-Bell@2015-10-15T03:11:30Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7d76b1ddaace921a9b7… ====== -- This commit summary was generated @2015-10-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 14 Oct '15

14 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Set to current time. Fixes #1319 Alan T. DeKok@2015-10-14T19:50:53Z Files modified: * raddb/mods-config/sql/main/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/030b511ede08233b65e3… ====== Make fr_pair_list_copy_by_num() work like ...move...() Alan T. DeKok@2015-10-14T16:27:49Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a5a9fc618ea91b7cdde… ====== Better fix for EAP loops. Fixes #1311 Alan T. DeKok@2015-10-14T16:27:49Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9db409d0fce071961680… ====== Port fix from v3.1.x Alan T. DeKok@2015-10-14T16:27:49Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f2f83128e64df51deb6… ====== Merge pull request #1323 from jpereira/fix/home-server-name Bug fix - When coa_server aren't specified, create the home_server with same name of client section. Alan DeKok@2015-10-14T15:24:50Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9dee1bc7e0e1da489b76… ====== Bugfix - avoid empty home_server sections When coa_server aren't specified, we should create the home_server with same name of client section. Jorge Pereira@2015-10-14T07:28:36Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/198c4ac2386776cca3a9… ====== Merge pull request #1322 from jpereira/fix/prevent1 be 'NOT NULL' to prevent SEGV Alan DeKok@2015-10-14T15:24:09Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52338b335b615c38c71f… ====== cf_pair_dup(): be 'NOT NULL' to prevent SEGV Jorge Pereira@2015-10-14T06:52:33Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98102f50149b7487fece… ====== -- This commit summary was generated @2015-10-15T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 14 Oct '15

14 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Set to current time. Fixes #1319 Alan T. DeKok@2015-10-14T19:51:10Z Files modified: * raddb/mods-config/sql/main/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26e462008e0002e93df4… ====== Make fr_pair_list_copy_by_num() work like ...move...() Manual merge of 3a5a9 Alan T. DeKok@2015-10-14T16:33:18Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ee5556a08b7f0e23d2d… ====== Better fix for EAP loops. Fixes #1311 Alan T. DeKok@2015-10-14T16:31:41Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fe9c68969712b5d51ff… ====== Bugfix - avoid empty home_server sections When coa_server aren't specified, we should create the home_server with same name of client section. Jorge Pereira (via Alan T. DeKok)@2015-10-14T15:26:26Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9512feaf534cff0fd20… ====== -- This commit summary was generated @2015-10-15T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

eapol test tests
by Arran Cudbard-Bell 14 Oct '15

14 Oct '15

After the marshmellow incident, I thought it might be a good idea to properly integrate eapol_test into Travis CIT. Travis now builds eapol_test on each CIT run (only takes ~10s), and uses it to execute test files in src/tests/eapol_test. We'll see how stable this arrangement is, we may need to switch to stable releases of the hostapd repo if CIT keeps failing. The idea is that we detect interop issues as early as possible, and ensure the version of eapol_test is compatible with the OpenSSL ABI for the version installed by Travis (we wouldn't get that if eapol_test were compiled and bundled with the server source). I've expanded the eapol_test, test suite, to include: * eap-gtc * eap-leap * eap-ttls-chap * eap-ttls-client-eap-tls (tls in eap in diameter in tls in eap in radius, with certs) * eap-ttls-client-eap-mschapv2 * peap-eap-gtc. The complete list is: * eap-gtc * eap-leap * eap-md5 * eap-pwd * eap-mschapv2 * eap-tls * eap-ttls-chap * eap-ttls-client-eap-mschapv2 * eap-ttls-client-eap-tls * eap-ttls-eap-mschapv2 * eap-ttls-mschapv2 * eap-ttls-pap * peap-client-mschapv2 * peap-eap-gtc * peap-mschapv2 Any other bizarre EAP types in use that i've missed? Planning to add eap-sim as well, once the compilation errors in wpa_supplicant/eapol_test builds with EAP sim support (get compilation errors currently). Also discovered the reason why we support including the length flag in each TLS record fragment. Apparently PEAPv0 with mutual auth sends all the client certificate fragments with the L flag set. Or at least that's what the wpa_supplicant implementation does, and i'm assuming that was based off of the observed behaviour of the Windows supplicant. -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

3 3

Commit report for v3.1.x branch
by announce＠freeradius.org 13 Oct '15

13 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add Lantronix dictionary Ryan Steinmetz (via Arran Cudbard-Bell)@2015-10-13T23:55:54Z Files modified: * share/dictionary * share/dictionary.lantronix Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb78927d40434a81b94b… ====== Notes on IKEv2 and TNC Alan T. DeKok@2015-10-13T21:54:58Z Files modified: * raddb/README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81610545faf214d44627… ====== Removed old and unused EAP types. They don't exist in the default config. IKEv2 doesn't follow RFC 5106. TNC uses an old library which is apparently unsupported. Less code is good. Alan T. DeKok@2015-10-13T21:01:07Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ikev2/.gitignore * src/modules/rlm_eap/types/rlm_eap_ikev2/all.mk.in * src/modules/rlm_eap/types/rlm_eap_ikev2/configure * src/modules/rlm_eap/types/rlm_eap_ikev2/configure.ac * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.c * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.h * src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.c * src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.h * src/modules/rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c * src/modules/rlm_eap/types/rlm_eap_tnc/.gitignore * src/modules/rlm_eap/types/rlm_eap_tnc/all.mk.in * src/modules/rlm_eap/types/rlm_eap_tnc/configure * src/modules/rlm_eap/types/rlm_eap_tnc/configure.ac * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62710f01a290faa89300… ====== Use LOCAL libraries Alan T. DeKok@2015-10-13T21:01:07Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2381b203ce1178304c3… ====== Use local libraries and binaries in all cases Arran Cudbard-Bell@2015-10-13T20:10:57Z Files modified: * Make.inc.in * Makefile * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b58d158c24e18f251b5… ====== Emit a more helpful message if the supplicant sends us an EAP-Failure Arran Cudbard-Bell@2015-10-13T20:10:56Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cad5ba1d49fdf75ddc29… ====== Add test for eap-ttls-eap-gtc Arran Cudbard-Bell@2015-10-13T18:18:16Z Files modified: * src/tests/eapol_test/eap-ttls-eap-gtc.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87cb99d49b93256d9789… ====== Change RELINK to LOCAL Which makes it easier to understand what's going on Alan T. DeKok@2015-10-13T17:58:09Z Files modified: * scripts/libtool.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc67f39ea9eba293f515… ====== Link local libraries to local libraries Alan T. DeKok@2015-10-13T17:55:45Z Files modified: * scripts/libtool.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de0703e5ff3d0eb47d9b… ====== Use local modules, not installed ones Alan T. DeKok@2015-10-13T17:42:03Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a79b4fbfc3ffa0afcc4… ====== Have consistent output for test failures Alan T. DeKok@2015-10-13T17:42:03Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/358192b591e7625a6755… ====== Fix indentation issues in EAP-PWD Arran Cudbard-Bell@2015-10-13T17:21:33Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de5ec5d10a529d4f0e70… ====== Typo Arran Cudbard-Bell@2015-10-13T05:15:46Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/configure * src/modules/rlm_eap/types/rlm_eap_pwd/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a00d3f7f8f1fc7dce1f… ====== Fix tests for TTLS/PEAP mutual authentication OpenSSL/wpa_supplicant won't send the client certificate unless we set the VERIFY_PEER flag Arran Cudbard-Bell@2015-10-13T05:15:45Z Files modified: * src/tests/eapol_test/config/servers.conf * src/tests/eapol_test/eap-ttls-chap.conf * src/tests/eapol_test/eap-ttls-client-eap-mschapv2.conf * src/tests/eapol_test/eap-ttls-client-eap-tls.conf * src/tests/eapol_test/peap-client-mschapv2.conf * src/tests/eapol_test/peap-eap-gtc.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a1f9268726f74dfb6c1… ====== Fix TLS mutual auth with PEAPv0 Looks like this is the reason we handle the length included flag being included in all TLS record fragments Arran Cudbard-Bell@2015-10-13T05:15:45Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a81824b96865a38ad08… ====== Add tests for LEAP and EAP-GTC Arran Cudbard-Bell@2015-10-13T05:15:45Z Files modified: * src/tests/eapol_test/all.mk * src/tests/eapol_test/config/.gitignore * src/tests/eapol_test/config/servers.conf * src/tests/eapol_test/eap-gtc.conf * src/tests/eapol_test/eap-leap.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8fee1d1bd6a1e9daf3ee… ====== Only link in methods for which the modules were built Arran Cudbard-Bell@2015-10-13T05:15:45Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/all.mk.in * src/tests/eapol_test/all.mk * src/tests/eapol_test/config/methods-enabled/gtc * src/tests/eapol_test/config/methods-enabled/leap * src/tests/eapol_test/config/methods-enabled/md5 * src/tests/eapol_test/config/methods-enabled/mschapv2 * src/tests/eapol_test/config/methods-enabled/peap * src/tests/eapol_test/config/methods-enabled/pwd * src/tests/eapol_test/config/methods-enabled/tls * src/tests/eapol_test/config/methods-enabled/ttls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3ab610225d5f4660040… ====== Add additional EAP methods to the list that use TLS Arran Cudbard-Bell@2015-10-13T05:15:45Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a8c86493f8147f2149e… ====== Ensure certificates are generated before attempting to start the EAP test server Arran Cudbard-Bell@2015-10-12T21:13:52Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08f1182acbc57e9d4318… ====== Fix typo Arran Cudbard-Bell@2015-10-12T21:13:29Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/configure * src/modules/rlm_eap/types/rlm_eap_pwd/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f200345a4f1538baa419… ====== Try libnl3 (it's in the whitelist) Arran Cudbard-Bell@2015-10-12T20:49:06Z Files modified: * .travis.yml * scripts/travis/eapol_test/config_linux Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28b6792cf05fc145218c… ====== One package per line Arran Cudbard-Bell@2015-10-12T20:48:43Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77b56161d3092ab5efbe… ====== wpa supplicant needs libnl Arran Cudbard-Bell@2015-10-12T20:37:23Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0c0ba7166b78ef420dc… ====== Travis OpenSSL too old for pwd Arran Cudbard-Bell@2015-10-12T19:11:20Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64880d1c9a8bbd77f0d2… ====== Don't load eap-pwd type if we didn't build eap-pwd Arran Cudbard-Bell@2015-10-12T18:16:20Z Files modified: * src/tests/eapol_test/all.mk * src/tests/eapol_test/config/methods-available/gtc * src/tests/eapol_test/config/methods-available/leap * src/tests/eapol_test/config/methods-available/md5 * src/tests/eapol_test/config/methods-available/mschapv2 * src/tests/eapol_test/config/methods-available/peap * src/tests/eapol_test/config/methods-available/pwd * src/tests/eapol_test/config/methods-available/tls * src/tests/eapol_test/config/methods-available/ttls * src/tests/eapol_test/config/methods-enabled/gtc * src/tests/eapol_test/config/methods-enabled/leap * src/tests/eapol_test/config/methods-enabled/md5 * src/tests/eapol_test/config/methods-enabled/mschapv2 * src/tests/eapol_test/config/methods-enabled/peap * src/tests/eapol_test/config/methods-enabled/pwd * src/tests/eapol_test/config/methods-enabled/tls * src/tests/eapol_test/config/methods-enabled/ttls * src/tests/eapol_test/config/servers.conf * src/tests/eapol_test/virtual_servers.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/136be53e765a4a0007bf… ====== Remove pwd tests if we didn't build the eap type Arran Cudbard-Bell@2015-10-12T06:55:35Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcccd46a8621a63fca4c… ====== Check for EC_GROUP_get_confactor too Arran Cudbard-Bell@2015-10-12T06:39:44Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/configure * src/modules/rlm_eap/types/rlm_eap_pwd/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/490e6e7c2db371dcc755… ====== Don't include top level Make.inc, it seems to break things Arran Cudbard-Bell@2015-10-12T06:39:44Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/014092ef6b33e3763abd… ====== Build eapol_test under travis (maybe) Arran Cudbard-Bell@2015-10-12T06:39:44Z Files modified: * scripts/travis/eapol_test-build.sh * scripts/travis/eapol_test/.gitignore * scripts/travis/eapol_test/config_freebsd * scripts/travis/eapol_test/config_linux * scripts/travis/eapol_test/config_osx * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0c2782a733313194766… ====== Formatting Arran Cudbard-Bell@2015-10-12T06:14:10Z Files modified: * src/include/automask.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4ddd60b85a761f419d8… ====== Split out eapol_test tests into a separate directory with its own EAP virtual server Arran Cudbard-Bell@2015-10-12T02:05:07Z Files modified: * Makefile * raddb/mods-available/eap * src/tests/Makefile * src/tests/all.mk * src/tests/eap-md5.conf * src/tests/eap-mschapv2.conf * src/tests/eap-pwd.conf * src/tests/eap-tls.conf * src/tests/eap-ttls-eap-mschapv2.conf * src/tests/eap-ttls-mschapv2.conf * src/tests/eap-ttls-pap.conf * src/tests/eapol_test/all.mk * src/tests/eapol_test/eap-md5.conf * src/tests/eapol_test/eap-mschapv2.conf * src/tests/eapol_test/eap-pwd.conf * src/tests/eapol_test/eap-tls.conf * src/tests/eapol_test/eap-ttls-eap-mschapv2.conf * src/tests/eapol_test/eap-ttls-mschapv2.conf * src/tests/eapol_test/eap-ttls-pap.conf * src/tests/eapol_test/peap-client-mschapv2.conf * src/tests/eapol_test/peap-mschapv2.conf * src/tests/eapol_test/virtual_servers.conf * src/tests/peap-client-mschapv2.conf * src/tests/peap-mschapv2.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd1c04f2b6f613652ffb… ====== Cache ssl_session Alan T. DeKok@2015-10-12T00:37:37Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411c900b85ef63995ee1… ====== Ignore invalid write_p Alan T. DeKok@2015-10-11T23:14:40Z Files modified: * src/main/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/402aca382f451e56f30c… ====== signed / unsigned Alan T. DeKok@2015-10-11T23:13:13Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c32eb56f992c8ce43a0… ====== configure checks for SSL_get_client_random() Alan T. DeKok@2015-10-11T20:06:18Z Files modified: * configure * configure.ac * src/include/autoconf.h.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed4ff68cba6d3659d4e0… ====== Wrappers and portability fixes for newer OpenSSL. Which no longer exposes the internal fields of SSL* Manual merge of commit 4f3441b6 Alan T. DeKok@2015-10-11T20:05:50Z Files modified: * src/include/tls-h * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0f85f9e723a7ff50c39… ====== Use public APIs in recent versions of OpenSSL. Alan T. DeKok@2015-10-11T19:56:41Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1425c1c70f4cf76cb885… ====== c/p error Arran Cudbard-Bell@2015-10-09T23:44:43Z Files modified: * src/modules/rlm_json/json.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c32ffb04ee39f1d95e6… ====== Print json-c version in modules which use it Arran Cudbard-Bell@2015-10-09T22:49:40Z Files modified: * src/modules/rlm_json/rlm_json.c * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5086ad06732263e6cb49… ====== Doxygen Arran Cudbard-Bell@2015-10-09T22:47:52Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c631f3466378bf170002… ====== Ensure json-c version is only printed once Arran Cudbard-Bell@2015-10-09T22:46:55Z Files modified: * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_json/json.c * src/modules/rlm_json/json.h * src/modules/rlm_json/json_missing.c * src/modules/rlm_json/json_missing.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ae827447d360c9dc115… ====== Formatting Arran Cudbard-Bell@2015-10-09T22:46:31Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f60cd5328d8909e1f3c… ====== Ignore callbacks for pseudo content types. Fixes EAP-TTLS MSCHAPv2 (and possibly others) with OpenSSL 1.0.2 Arran Cudbard-Bell@2015-10-09T22:34:42Z Files modified: * src/main/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/372ee2a7700c01849638… ====== Make it clear whether we're sending or receiving ssl data Arran Cudbard-Bell@2015-10-09T22:34:42Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c31e4f43cc49191761c4… ====== Formatting Arran Cudbard-Bell@2015-10-09T22:34:42Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0948253c5d5f129cd90c… ====== Doxygen Arran Cudbard-Bell@2015-10-09T22:34:42Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eccacf569d4cab1e4152… ====== Move test vectors into a vector folder Arran Cudbard-Bell@2015-10-09T22:34:42Z Files modified: * src/tests/comp128-1vectors * src/tests/comp128-2vectors * src/tests/comp128-3vectors * src/tests/eapcrypto-01/eapcrypto-out.txt * src/tests/eapmd5-01/client.gdb * src/tests/eapmd5-01/client.sh * src/tests/eapmd5-01/req.txt * src/tests/eapsim-02/check.gdb * src/tests/eapsim-02/client.sh * src/tests/eapsim-02/eapsim-in.txt * src/tests/eapsim-02/eapsim-out.txt * src/tests/eapsim-02/req.txt * src/tests/eapsim-03/check.gdb * src/tests/eapsim-03/client.sh * src/tests/eapsim-03/eapsim-cooked.txt * src/tests/eapsim-03/eapsim-in.txt * src/tests/eapsim-03/eapsim-out.txt * src/tests/eapsim-03/eapsim-sanitize.sed * src/tests/eapsim-03/radiusd-example.txt * src/tests/eapsim-03/users-example.txt * src/tests/eapsim-04/client.sh * src/tests/eapsim-04/eapsim-cooked.txt * src/tests/eapsim-04/eapsim-in.txt * src/tests/eapsim-04/myvectors.txt * src/tests/eapsim-04/users.txt * src/tests/eapsim-05/check.gdb * src/tests/eapsim-05/client.sh * src/tests/eapsim-05/description.txt * src/tests/eapsim-05/eapsim-cooked.txt * src/tests/eapsim-05/eapsim-in.txt * src/tests/eapsim-05/eapsim-out.txt * src/tests/eapsim-05/eapsim-raw.txt * src/tests/eapsim-05/eapsim-sanitize.sed * src/tests/eapsim-06/check.gdb * src/tests/eapsim-06/client.sh * src/tests/eapsim-06/description.txt * src/tests/eapsim-06/eapsim-cooked.txt * src/tests/eapsim-06/eapsim-in.txt * src/tests/eapsim-06/eapsim-out.txt * src/tests/eapsim-06/eapsim-raw.txt * src/tests/eapsim-06/simtriplets.dat * src/tests/fips186-02/description.txt * src/tests/fips186-02/fips186-2.txt * src/tests/hmac-md5-01/digest1.txt * src/tests/hmac-sha1-01/digest1.txt * src/tests/vectors/comp128-1vectors * src/tests/vectors/comp128-2vectors * src/tests/vectors/comp128-3vectors * src/tests/vectors/eapcrypto-01/eapcrypto-out.txt * src/tests/vectors/eapmd5-01/client.gdb * src/tests/vectors/eapmd5-01/client.sh * src/tests/vectors/eapmd5-01/req.txt * src/tests/vectors/eapsim-02/check.gdb * src/tests/vectors/eapsim-02/client.sh * src/tests/vectors/eapsim-02/eapsim-in.txt * src/tests/vectors/eapsim-02/eapsim-out.txt * src/tests/vectors/eapsim-02/req.txt * src/tests/vectors/eapsim-03/check.gdb * src/tests/vectors/eapsim-03/client.sh * src/tests/vectors/eapsim-03/eapsim-cooked.txt * src/tests/vectors/eapsim-03/eapsim-in.txt * src/tests/vectors/eapsim-03/eapsim-out.txt * src/tests/vectors/eapsim-03/eapsim-sanitize.sed * src/tests/vectors/eapsim-03/radiusd-example.txt * src/tests/vectors/eapsim-03/users-example.txt * src/tests/vectors/eapsim-04/client.sh * src/tests/vectors/eapsim-04/eapsim-cooked.txt * src/tests/vectors/eapsim-04/eapsim-in.txt * src/tests/vectors/eapsim-04/myvectors.txt * src/tests/vectors/eapsim-04/users.txt * src/tests/vectors/eapsim-05/check.gdb * src/tests/vectors/eapsim-05/client.sh * src/tests/vectors/eapsim-05/description.txt * src/tests/vectors/eapsim-05/eapsim-cooked.txt * src/tests/vectors/eapsim-05/eapsim-in.txt * src/tests/vectors/eapsim-05/eapsim-out.txt * src/tests/vectors/eapsim-05/eapsim-raw.txt * src/tests/vectors/eapsim-05/eapsim-sanitize.sed * src/tests/vectors/eapsim-06/check.gdb * src/tests/vectors/eapsim-06/client.sh * src/tests/vectors/eapsim-06/description.txt * src/tests/vectors/eapsim-06/eapsim-cooked.txt * src/tests/vectors/eapsim-06/eapsim-in.txt * src/tests/vectors/eapsim-06/eapsim-out.txt * src/tests/vectors/eapsim-06/eapsim-raw.txt * src/tests/vectors/eapsim-06/simtriplets.dat * src/tests/vectors/fips186-02/description.txt * src/tests/vectors/fips186-02/fips186-2.txt * src/tests/vectors/hmac-md5-01/digest1.txt * src/tests/vectors/hmac-sha1-01/digest1.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4e1b84f9130734fe8c78… ====== Enabling global logging and not doing logging is surprising Alan T. DeKok@2015-10-09T15:04:31Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2670ee4b414e5519eded… ====== Adding #ifdef DEBUG_MAP for map_dump() Jorge Pereira (via Arran Cudbard-Bell)@2015-10-09T02:36:14Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06f49af176821c58d58e… ====== Fix xlat Arran Cudbard-Bell@2015-10-09T02:35:11Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ef2b92f079c8c6ab536… ====== Revert "Set BEQUEATH_DETACH should Close #1308" This reverts commit e245495fe6efa9105d6a0c614ae942f797898e3b. Arran Cudbard-Bell@2015-10-09T01:53:40Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e64cee5432c8c4fccd34… ====== Fix issue where field nas_type would not be accessible via the %{client:} xlat, for clients loaded from SQL. Jorge Pereira (via Arran Cudbard-Bell)@2015-10-09T01:52:37Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c34c748f4d93f8dc84a4… ====== Fix returning counters in redis_ippool Arran Cudbard-Bell@2015-10-08T21:47:22Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/663c2818069d00580e15… ====== Merge pull request #1313 from hzhongmj/arista Add Arista-User-Priv-Level, Arista-User-Role and Arista-CVP-Role Alan DeKok@2015-10-08T16:22:41Z Files modified: * share/dictionary.arista Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/238bde45e8c86418ba01… ====== Add Arista-User-Priv-Level, Arista-User-Role and Arista-CVP-Role Hua Zhong@2015-10-08T08:43:45Z Files modified: * share/dictionary.arista Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ac5453af7aa9b882ffbe… ====== CID #1325789 Arran Cudbard-Bell@2015-10-08T01:16:17Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f64664544cba268e1e8e… ====== Set BEQUEATH_DETACH should Close #1308 Arran Cudbard-Bell@2015-10-07T22:27:53Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e245495fe6efa9105d6a… ====== Remove unused variable Alan T. DeKok@2015-10-07T19:15:52Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b192c30d15abda60424… ====== Merge pull request #1309 from mcnewton/deb31a update debian radius user to freerad for control socket config Alan DeKok@2015-10-07T19:13:47Z Files modified: * debian/patches/radiusd-to-freeradius.diff Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/847d6dab766e6d74e5ed… ====== update debian radius user to freerad for control socket config Matthew Newton@2015-10-07T13:06:03Z Files modified: * debian/patches/radiusd-to-freeradius.diff Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f544b6f7cd2d578a4496… ====== Allow virtual home servers to process EAP. Fixes #1311 Alan T. DeKok@2015-10-07T16:58:44Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab5775a662f9efb23b3a… ====== Fix example Alan T. DeKok@2015-10-07T16:53:02Z Files modified: * raddb/sites-available/virtual.example.com Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1846bce3a8ad5597633… ====== Add "verify" target for laziness Alan T. DeKok@2015-10-07T16:53:01Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e91f4ec503d6995b64a8… ====== More test fixes Arran Cudbard-Bell@2015-10-07T05:50:24Z Files modified: * src/main/modules.c * src/tests/Makefile * src/tests/config/test.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4409488854e1b1957fb5… ====== Add dummy virtual server for unittest Arran Cudbard-Bell@2015-10-07T05:02:43Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1f64533642e54e5bc3d… ====== Fix tests on macs running in rootless mode Die Apple die... Arran Cudbard-Bell@2015-10-07T05:02:43Z Files modified: * Make.inc.in * Makefile * src/main/modules.c * src/main/radiusd.c * src/main/radwho.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea7cf55c77cf5e02968c… ====== Formatting Arran Cudbard-Bell@2015-10-07T05:02:43Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a17bfc6d94cbe8ddcf13… ====== name2 might not exist. Don't use it for debugging if so Alan T. DeKok@2015-10-06T21:19:23Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7da36eb2eba6160e4197… ====== Merge pull request #1304 from mcnewton/build31x always apply debian patches even when only building arch binaries Arran Cudbard-Bell@2015-10-06T15:08:08Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1aa89aab7c08257139c1… ====== always apply debian patches even when only building arch binaries bug found by Fajar A. Nugraha Matthew Newton@2015-10-06T14:56:57Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc84284e3fc5daed7459… ====== Don't load naked authorize, authenticate etc.. sections Require at least one virtual server Arran Cudbard-Bell@2015-10-06T04:56:50Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/889de8623e54a256c51c… ====== Drop support for -i and -p flags in radiusd In v3.2.0 we're dropping support for listen sections outside of virtual servers. We now support multiple protocols, and these arguments don't make sense in that context. If users require this functionality it can be replicated using the $ENV{} config syntax and setting appropriate environmental variables. Arran Cudbard-Bell@2015-10-06T03:55:09Z Files modified: * man/man8/radiusd.8 * src/include/radiusd.h * src/main/listen.c * src/main/process.c * src/main/radiusd.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76ded731a4a7c87f5e37… ====== s/spawn_flag/spawn_workers/g Arran Cudbard-Bell@2015-10-06T03:55:09Z Files modified: * src/main/listen.c * src/main/process.c * src/main/radiusd.c * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c0a36999628204afa62… ====== Formatting Arran Cudbard-Bell@2015-10-06T03:55:09Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b308fe2adaf8b15dd420… ====== NAS-Port should be 32bits Arran Cudbard-Bell@2015-10-05T16:17:40Z Files modified: * src/main/auth.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/33303b6aceb3ec19278d… ====== Check for smb_ctrl Alan T. DeKok@2015-10-05T15:30:16Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99deae7b9e070b06fc32… ====== Fix old compiler warnings Alan T. DeKok@2015-10-05T15:27:59Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da0bb07f7468aabea84a… ====== Correct MSCHAP-Error format for MSCAHPv1 Always log meaningful messages for all errors Arran Cudbard-Bell@2015-10-05T07:56:55Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e682d40fac48d99e7837… ====== Cleanup chap code a little Arran Cudbard-Bell@2015-10-05T03:46:49Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c336327d4cf057a4c04a… ====== Reduce calls to snprintf and fr_rand Arran Cudbard-Bell@2015-10-05T03:46:13Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49cdd9322bcd3bcf0da8… ====== Always include V and M in failure messages This also fixes an off by one error that caused failure messages not to be returned Arran Cudbard-Bell@2015-10-05T00:56:29Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5648c5838951bf5ad503… ====== Formatting Arran Cudbard-Bell@2015-10-05T00:55:52Z Files modified: * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5c0d104ab6454babf47… ====== Adding 'coa' list in 'debug_all' policy Jorge Pereira (via Alan T. DeKok)@2015-10-04T16:12:47Z Files modified: * raddb/policy.d/debug Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a1343674bad1e692be44… ====== Check for, and fix, misconfigurations. Fixes #1292 If there's no group membership query, don't do group handling. And warn the user that the configuration is broken. Alan T. DeKok@2015-10-03T15:15:11Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45dcf72ed3624324b5c0… ====== More debug fixups Arran Cudbard-Bell@2015-10-03T04:19:04Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26dbeba06180e7b67c91… ====== CID #1325457 Arran Cudbard-Bell@2015-10-03T03:57:29Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ae3c1eb45ea8040f921… ====== Copy md5 contexts correctly Fixes MPPE key encryption, and a number of other RADIUS related encryption and signing functions Arran Cudbard-Bell@2015-10-03T03:54:54Z Files modified: * src/include/md5.h * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/05dfd647fb04768e2265… ====== More natural for low to be on the right Arran Cudbard-Bell@2015-10-02T21:35:51Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/baaff5587e9d543e7c93… ====== Check if we got group_da Arran Cudbard-Bell@2015-10-02T21:32:38Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/53b934b7aae517e96d23… ====== Merge pull request #1296 from herwinw/compile_128bit Compile 128bit Arran Cudbard-Bell@2015-10-02T21:31:23Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e19481bdaf915bfe1e32… ====== Use method to create uint128_t Simple typecasting won't work if the destination is a struct. Herwin Weststrate@2015-10-02T20:58:28Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f723930e5b1fddcac98… ====== Use method for lshift instead of << Because << doesn't work for compilers that don't support 128 bit integers Herwin Weststrate@2015-10-02T19:58:22Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e5e0b133066e265f5a3… ====== Use long notation to initalization of structures Sure, the shorter notation looks neat, but that doesn't help much if it generates compile errors. Herwin Weststrate@2015-10-02T19:56:28Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8b18b8fc7238cdb262f… ====== Use tabs for indention All of the file was tabs, execept these few lines Herwin Weststrate@2015-10-02T19:43:06Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3aa8f6ff35922fe01531… ====== Fixed prototypes of methods Herwin Weststrate@2015-10-02T19:41:48Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e73c40007e4d46b182d8… ====== Say what's unknown Arran Cudbard-Bell@2015-10-02T19:28:50Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c4025a90e677c222bb2… ====== Reword SASL explanations Arran Cudbard-Bell@2015-10-02T19:28:50Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55ec208d2736a4b7749f… ====== Merge pull request #1295 from mcnewton/lintian31x tidy up a load of lintian warnings Alan DeKok@2015-10-02T18:50:29Z Files modified: * debian/freeradius-common.lintian-overrides * debian/freeradius-config.lintian-overrides * debian/freeradius-dhcp.lintian-overrides * debian/freeradius-iodbc.lintian-overrides * debian/freeradius-krb5.lintian-overrides * debian/freeradius-ldap.lintian-overrides * debian/freeradius-memcached.lintian-overrides * debian/freeradius-mysql.lintian-overrides * debian/freeradius-postgresql.lintian-overrides * debian/freeradius-redis.lintian-overrides * debian/freeradius-rest.lintian-overrides * debian/freeradius-utils.lintian-overrides * debian/freeradius-yubikey.lintian-overrides * debian/freeradius.lintian-overrides * debian/libfreeradius3.lintian-overrides * man/man1/radclient.1 * man/man1/radwho.1 * man/man5/radrelay.conf.5 * man/man5/rlm_digest.5 * man/man8/radcrypt.8 * man/man8/radiusd.8 * man/man8/radsqlrelay.8 * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b407d81e5eb690f6d2c1… ====== tidy up a load of lintian warnings Matthew Newton@2015-10-02T17:34:12Z Files modified: * debian/freeradius-common.lintian-overrides * debian/freeradius-config.lintian-overrides * debian/freeradius-dhcp.lintian-overrides * debian/freeradius-iodbc.lintian-overrides * debian/freeradius-krb5.lintian-overrides * debian/freeradius-ldap.lintian-overrides * debian/freeradius-memcached.lintian-overrides * debian/freeradius-mysql.lintian-overrides * debian/freeradius-postgresql.lintian-overrides * debian/freeradius-redis.lintian-overrides * debian/freeradius-rest.lintian-overrides * debian/freeradius-utils.lintian-overrides * debian/freeradius-yubikey.lintian-overrides * debian/freeradius.lintian-overrides * debian/libfreeradius3.lintian-overrides * man/man1/radclient.1 * man/man1/radwho.1 * man/man5/radrelay.conf.5 * man/man5/rlm_digest.5 * man/man8/radcrypt.8 * man/man8/radiusd.8 * man/man8/radsqlrelay.8 * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0de82a2311c9207ce76b… ====== Build without EVP_H Alan T. DeKok@2015-10-02T16:43:36Z Files modified: * src/lib/md4.c * src/lib/md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/481711eaef7b956be0e5… ====== -- This commit summary was generated @2015-10-14T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 13 Oct '15

13 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add Lantronix dictionary Ryan Steinmetz (via Arran Cudbard-Bell)@2015-10-13T23:56:01Z Files modified: * share/dictionary * share/dictionary.lantronix Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f79769ef578bcb768f2… ====== Intermediate variable to avoid compiler warning Alan T. DeKok@2015-10-13T18:48:08Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1070f98a50ed92b0041… ====== Change RELINK to LOCAL Which makes it easier to understand what's going on Alan T. DeKok@2015-10-13T18:16:59Z Files modified: * scripts/libtool.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6386b179d1a10c33f1b… ====== Link local libraries to local libraries Alan T. DeKok@2015-10-13T18:16:58Z Files modified: * scripts/libtool.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4643c0a401a657fef8ad… ====== Pass PRLIBS in ADD_RELINK_RULE.la too Closes #1176 Arran Cudbard-Bell (via Alan T. DeKok)@2015-10-13T18:16:55Z Files modified: * scripts/libtool.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c837582bada32d5f4188… ====== Clean up debug output Alan T. DeKok@2015-10-13T17:29:53Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e41e9473dd6b6c399462… ====== Don't build EAP-PWD if we're building without OpenSSL Arran Cudbard-Bell@2015-10-13T05:16:22Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/all.mk.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdeef499b7c0ba061a26… ====== Add additional EAP methods to the list that use TLS Arran Cudbard-Bell@2015-10-13T05:16:22Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5654cc18961f9ab6c007… ====== -- This commit summary was generated @2015-10-14T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 12 Oct '15

12 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== typo Alan T. DeKok@2015-10-12T00:35:32Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fad0fb7f1f4b80bb2b0… ====== -- This commit summary was generated @2015-10-13T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 12 Oct '15

12 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Only link in methods for which the modules were built Arran Cudbard-Bell@2015-10-12T23:52:42Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/all.mk.in * src/tests/eapol_test/all.mk * src/tests/eapol_test/config/methods-enabled/gtc * src/tests/eapol_test/config/methods-enabled/leap * src/tests/eapol_test/config/methods-enabled/md5 * src/tests/eapol_test/config/methods-enabled/mschapv2 * src/tests/eapol_test/config/methods-enabled/peap * src/tests/eapol_test/config/methods-enabled/pwd * src/tests/eapol_test/config/methods-enabled/tls * src/tests/eapol_test/config/methods-enabled/ttls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a19145549febfca58d9a… ====== Add additional EAP methods to the list that use TLS Arran Cudbard-Bell@2015-10-12T22:54:42Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9658d8eab99d9afa9c2c… ====== Ensure certificates are generated before attempting to start the EAP test server Arran Cudbard-Bell@2015-10-12T21:13:52Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08f1182acbc57e9d4318… ====== Fix typo Arran Cudbard-Bell@2015-10-12T21:13:29Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/configure * src/modules/rlm_eap/types/rlm_eap_pwd/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f200345a4f1538baa419… ====== Try libnl3 (it's in the whitelist) Arran Cudbard-Bell@2015-10-12T20:49:06Z Files modified: * .travis.yml * scripts/travis/eapol_test/config_linux Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28b6792cf05fc145218c… ====== One package per line Arran Cudbard-Bell@2015-10-12T20:48:43Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77b56161d3092ab5efbe… ====== wpa supplicant needs libnl Arran Cudbard-Bell@2015-10-12T20:37:23Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0c0ba7166b78ef420dc… ====== Travis OpenSSL too old for pwd Arran Cudbard-Bell@2015-10-12T19:11:20Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64880d1c9a8bbd77f0d2… ====== Don't load eap-pwd type if we didn't build eap-pwd Arran Cudbard-Bell@2015-10-12T18:16:20Z Files modified: * src/tests/eapol_test/all.mk * src/tests/eapol_test/config/methods-available/gtc * src/tests/eapol_test/config/methods-available/leap * src/tests/eapol_test/config/methods-available/md5 * src/tests/eapol_test/config/methods-available/mschapv2 * src/tests/eapol_test/config/methods-available/peap * src/tests/eapol_test/config/methods-available/pwd * src/tests/eapol_test/config/methods-available/tls * src/tests/eapol_test/config/methods-available/ttls * src/tests/eapol_test/config/methods-enabled/gtc * src/tests/eapol_test/config/methods-enabled/leap * src/tests/eapol_test/config/methods-enabled/md5 * src/tests/eapol_test/config/methods-enabled/mschapv2 * src/tests/eapol_test/config/methods-enabled/peap * src/tests/eapol_test/config/methods-enabled/pwd * src/tests/eapol_test/config/methods-enabled/tls * src/tests/eapol_test/config/methods-enabled/ttls * src/tests/eapol_test/config/servers.conf * src/tests/eapol_test/virtual_servers.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/136be53e765a4a0007bf… ====== Remove pwd tests if we didn't build the eap type Arran Cudbard-Bell@2015-10-12T06:55:35Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcccd46a8621a63fca4c… ====== Check for EC_GROUP_get_confactor too Arran Cudbard-Bell@2015-10-12T06:39:44Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/configure * src/modules/rlm_eap/types/rlm_eap_pwd/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/490e6e7c2db371dcc755… ====== Don't include top level Make.inc, it seems to break things Arran Cudbard-Bell@2015-10-12T06:39:44Z Files modified: * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/014092ef6b33e3763abd… ====== Build eapol_test under travis (maybe) Arran Cudbard-Bell@2015-10-12T06:39:44Z Files modified: * scripts/travis/eapol_test-build.sh * scripts/travis/eapol_test/.gitignore * scripts/travis/eapol_test/config_freebsd * scripts/travis/eapol_test/config_linux * scripts/travis/eapol_test/config_osx * src/tests/eapol_test/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0c2782a733313194766… ====== Formatting Arran Cudbard-Bell@2015-10-12T06:14:10Z Files modified: * src/include/automask.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4ddd60b85a761f419d8… ====== Split out eapol_test tests into a separate directory with its own EAP virtual server Arran Cudbard-Bell@2015-10-12T02:05:07Z Files modified: * Makefile * raddb/mods-available/eap * src/tests/Makefile * src/tests/all.mk * src/tests/eap-md5.conf * src/tests/eap-mschapv2.conf * src/tests/eap-pwd.conf * src/tests/eap-tls.conf * src/tests/eap-ttls-eap-mschapv2.conf * src/tests/eap-ttls-mschapv2.conf * src/tests/eap-ttls-pap.conf * src/tests/eapol_test/all.mk * src/tests/eapol_test/eap-md5.conf * src/tests/eapol_test/eap-mschapv2.conf * src/tests/eapol_test/eap-pwd.conf * src/tests/eapol_test/eap-tls.conf * src/tests/eapol_test/eap-ttls-eap-mschapv2.conf * src/tests/eapol_test/eap-ttls-mschapv2.conf * src/tests/eapol_test/eap-ttls-pap.conf * src/tests/eapol_test/peap-client-mschapv2.conf * src/tests/eapol_test/peap-mschapv2.conf * src/tests/eapol_test/virtual_servers.conf * src/tests/peap-client-mschapv2.conf * src/tests/peap-mschapv2.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd1c04f2b6f613652ffb… ====== Cache ssl_session Alan T. DeKok@2015-10-12T00:37:37Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411c900b85ef63995ee1… ====== -- This commit summary was generated @2015-10-13T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 11 Oct '15

11 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ignore invalid write_p Alan T. DeKok@2015-10-11T23:14:40Z Files modified: * src/main/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/402aca382f451e56f30c… ====== signed / unsigned Alan T. DeKok@2015-10-11T23:13:13Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c32eb56f992c8ce43a0… ====== configure checks for SSL_get_client_random() Alan T. DeKok@2015-10-11T20:06:18Z Files modified: * configure * configure.ac * src/include/autoconf.h.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed4ff68cba6d3659d4e0… ====== Wrappers and portability fixes for newer OpenSSL. Which no longer exposes the internal fields of SSL* Manual merge of commit 4f3441b6 Alan T. DeKok@2015-10-11T20:05:50Z Files modified: * src/include/tls-h * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0f85f9e723a7ff50c39… ====== Use public APIs in recent versions of OpenSSL. Alan T. DeKok@2015-10-11T19:56:41Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1425c1c70f4cf76cb885… ====== -- This commit summary was generated @2015-10-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0