Freeradius-Devel

Download

freeradius-devel@lists.freeradius.org

July 2017

6 participants
46 discussions

rlm_sql_oracle: OCI_COMMIT_ON_SUCCESS
by George Chelidze 08 Aug '17

08 Aug '17

Hi guys, rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c: status = OCIStmtExecute(conn->ctx, conn->query, conn->error, 1, 0, NULL, NULL, OCI_COMMIT_ON_SUCCESS); Any reason for having OCI_COMMIT_ON_SUCCESS in OCIStmtExecute() call? The problem is that any module (rlm_sqlippool is a good candidate) relying on rlm_sql and using the concept of database transactions will have no chance to rollback, neither it can provide any guarantee for data consistency. Kind regards, George Chelidze

2 2

Commit report for v4.0.x branch
by announce＠freeradius.org 31 Jul '17

31 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZffitAAoJEH0Oec13Yh7N924H/14HVnLkaL0gb0uDHl5UQSOh ++dLd+vL/KMO9saeRW1xGCzH1Abe+TugeG9v9blNPxYwm39Haqo9OWyoRTxaso3b hKYGXiGwn12Ktd3fQPREa6jdSQK+lwtb+WEF5McdFedaH2Mp5vChxLUlS6E0RsBt 0H6GVRTBhyLSyfzKrX+3i/DFzNrh3f6mhuTpp1z9dZXD7xitUoxXA+lMQe+peVI8 NN/1L4mk2MNGDD/8RwGxGCSswA1UkGrZJyGYy4fdvicukTuCl/r1n5PzI16z8FZ+ zWB4Afm69V06b99T4uoipkKNeU2cdU/RYt/gVS+tMYRAuuPod+w/ymwBXkEgIi8= =5fIT -----END PGP SIGNATURE----- more documentation Alan T. DeKok@2017-07-30T15:18:04Z Files modified: * raddb/mods-available/radius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db87421fc952341acf06… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZffQaAAoJEH0Oec13Yh7Nnd8H/jVjctoTEBrY3gMDZqGkkf+X Pb1QLO7LSNW6zvUqR43WcNdn/VGzDZu3tNZcUxrlG3DSGFJIbQYOKydiDcNai5WC BMBLGg5oY1ReMB0Rr/vUPdlFLV4iJWCZHUzt4Z8/dsCiYdqwpNM8Gblf7mAV20UI lVPfqIEq63+zGWj2uycgPVXi10kerFwsP499Q3cKW6kJ6gylID+sDEtaZoLe5kzB movX0e/6+WDgm2LZIYIx2kKdIHJmMFme2OS5ZngFRQebYXYllU/1B6G7l75aPbiV IDWKN3kTNr2DpgQUDL0VcadNpDVBocaJbe9e2umccJQ/jXKt/EimKJeEgQ2IIOQ= =UUru -----END PGP SIGNATURE----- add more notes on TODO's Alan T. DeKok@2017-07-30T14:58:29Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a2d5b264eef6d441e35… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZffKHAAoJEH0Oec13Yh7NAgIH/2IUoRjBRywxvlLOIhu7e0lo r0IRWeg23PoWuLlxBG+iqNfv9QkSeD4ylqfsqy6JyZpdSVL0oWBgGWqc+VXeBX73 KSN94M3OKsuka75vilv3bjmlnOUsA3IUI0Iz5+0mxP5+zhwdsr+mPnJ1V06kvbCg rqR1RG0Jls5G5tSPaoT8byZXhHuVgForlUdsx/ybofZKoeLIw7KQ8/oIwzCfoVfy sLUJQqgYdPxOFE6kR+V3GI7V/IJwldOy0ONWlhwC0h/PzE3erlUOili03k0mt71H +YzzGbH+ycpwfBo/il5ZpQEV9Zts7rxyehKPOxlHaXVAxEJzvR+pWqeEUU4IzFs= =79uv -----END PGP SIGNATURE----- Add 'replicate' flag. This allows the module to send packets and not expect responses Alan T. DeKok@2017-07-30T14:51:50Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42c419f3d75b1fa1dc44… ====== -- This commit summary was generated @2017-07-31T00:00:37Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 31 Jul '17

31 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-07-31T00:00:18Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 30 Jul '17

30 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZfK1mAAoJEH0Oec13Yh7NoLIH/2vun+PSeyXj+6kdJu79CXki 2rDCJDhQuqxTofrj4MOU3MlHaNJ9E76X8fsQqZni2YuWsJ9YeCm8lMYiN75DDT/1 WD5JYRit+L2EMwfSy2MEMfTYVDHAYe7lE37/V3xEeKK6IDfdqStb8MOW1zEtJY93 V4lpNgNo+GhJTOQdUIRIZiZfqOD4rhzqU6iea4qZvezpvGElCTU0I2B25SYECohb kZScO0XN+cZIrFQkVQ15LYsier9o7KKwzPCzcsFgv+QW1qbHRDvrnF2OblPgxiLC rmJkQpSauRsEwFgiznZARS7uC5rwzybgaxOmAFBA7sgmNL9o+dZKcEWOa3jHBAk= =CEpJ -----END PGP SIGNATURE----- implement packet retransmissions Alan T. DeKok@2017-07-29T15:44:32Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius_udp.c * src/modules/rlm_radius/track.c * src/modules/rlm_radius/track.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a268910dbd6d157be132… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZfJauAAoJEH0Oec13Yh7NorkH+gOTNeLREpyvCgGh39zbkHGD 3ywKuqbNR4r7B/Nt6V8aD10TzROeavRXhbxZLeSTN7787lC7R1aG6v1A0dJsIE8M Yv+LBHJhHRNprJTn2Q4ORKLvokhYkhfI5tLX/bx+HIymQjz9nez3VsApgvYgcilk 4FgrtMiUmZYsUBNDl4q3HlLacrknl2boXWBCi22peGNaiLz4CGrteDo3knjSN87U phTIagWce7zuCDGetka5t2sRODnWT88BaMexhqfTJeqUG3095vcuBgu7YswY2P// o2dpLofxRqyxvF4C4VjfbKxBBXOpnl7cHF/LO1Pr63FRTkmOC0/tDQOBkwO7nYE= =HSbz -----END PGP SIGNATURE----- rename fields to be clearer Alan T. DeKok@2017-07-29T14:07:35Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7cfe4dd007d6ebca79b2… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZe7BHAAoJEH0Oec13Yh7NmQMH/1+GSkkXbdWVlGtjs9l9GlJL AiSPLIId1nmGhQPa0GA8L8bFsSyyKXyULh84S69okSlSN7XF697tpRGExybBWEq2 Cakj+0Pnlz9GzL1PJduDsyloh8Gx7BKCpoNTCFg4KfUOfmPy+FfmTEIJJJlZqhgX 2LAlE36W4TP9uDOiuSl9HRDuiAZV6YohKbJJyhwH8Y9VWpfzPyvaGRA31s0ef9Vr ZCdUssS1mZI6KKa6Z/FoWuVQnTGEeY1j/Hu8wcRKO+Cxr0cv1SSG6PcW0QuZZLlw zgCTzwVcZljJT7IQCIp3LUhPXT3iYQ8F219Pl9xOlcy75KJbKfqsDo49xqBiiGA= =ocd8 -----END PGP SIGNATURE----- rename configuration items Alan T. DeKok@2017-07-28T21:44:34Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f69a0014230faf89189… ====== -- This commit summary was generated @2017-07-30T00:00:30Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 30 Jul '17

30 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-07-30T00:00:08Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 29 Jul '17

29 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZe315AAoJEH0Oec13Yh7NX3QH/1fjgL6CQrEE9vBYi2sHUzp4 Zd35b/t7mGwOOrRq8BxD/MIkPA/uJxX4ce2rOhlWeGeS0NGfDPkHQ5S2ay7lrByk Q+FF25/Sj6X2Tf+Zi8sLWwntetGmfzGONkn7+4wDnIX9WvnIwCn+WZEpboo6PJay 1TZp+XVkOk6FNPnK+tUrtJ1U4xYh/Y+0bbWo/Vd6TZzapOK0LttKd0MjfHSE6V5t 8tRFqPabImdznfA2uxpRGDZGAuISgkNeNGuMjMbbzOBlkVlDzwr06b3pw+hODR5A AtmRLivAAnA7xHId/zWSRXGtAyzDtx5PoghgAIQEweMtPZ9I4hyhaWzTc6Zt5Wo= =uKJH -----END PGP SIGNATURE----- sample config for RADIUS module Alan T. DeKok@2017-07-28T18:07:43Z Files modified: * raddb/mods-available/radius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a1f67c87fee7d42e352… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZe3z9AAoJEH0Oec13Yh7Nq1AH+wRx1JlirBi8iwFCc/5i1zCb 7zO+CCnqgidbhPTfzpaCI+fkzx9g7fKD/dsMzENPTUbfI63tR21CYSzzd/W4bty+ OJXKux7c46m23sgZ8wHH599oFO15/u+Y5de/DgA7ItMjoOhan/guygJoa/ZfLKfZ BF8kcfVqJPnykqaaTLVE3iVv4z5n1RcMQcScNwamDtt+NYvOE120G2xyrFcm1X92 yrCsscL/69eES6zJBWrWbiDhDCMJguDbkQd8PkcdY7PS1N5SSGqJPij7ZgORrFdI E7FRlfFfsImQaHEGdUA9WDrQB0eG54G95nrXZ54ddxKaYf8sH64HQaHM5xRcvpk= =HUCy -----END PGP SIGNATURE----- add support for 'type = Access-Request' Alan T. DeKok@2017-07-28T18:05:41Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39b4f4f8ab3d7f0c9ae2… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZe3tOAAoJEH0Oec13Yh7NBWUH/0ENiipxHSnXXAld/+3uvrfE EwCqidrlcD1VuBJjNx9PkYTh/TB4jeju1ZbWzRluZCf0JkZ4irsUjXvlnXU3aT2M G7VbDXj04iQOE2TJwKopXOJhhH3KJzt31dEVq15PfhR97aXMIhLHtwbNaHf40MiF 37lis6o5+Dsxm9I/Tr6Xk39YrfuJTFrzODfGKfqQYLqsSS/CMLa2glanHRxS2glw N7YNdHiPSVCSU9Sar7wlHZzR6/rPOEsH839ndo+erGyIP/9BgW3Si1XvTITfVa19 OcrEKcM98+7vVV8idymRVPmvEjMQtGmnrGkisMRpFhnWJY3eO3ckhOF+yDudBKA= =pjUG -----END PGP SIGNATURE----- use correct offsets for non-void types Alan T. DeKok@2017-07-28T17:58:31Z Files modified: * src/main/cf_parse.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ecc013ac634a08bebdad… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZe2wmAAoJEH0Oec13Yh7NXPsH/3EvgDPU4idyy2Co4I50avM/ MDo4bGNzKsxXYKVCi0DMMHi2DTNgPaTWmKYMgd00+SRlEeF+Ij6nr1MijCPK95TW F7h81zfKAROOXzPSsAdmJHx686uSrLySsK2ePsgtD0mFZcPAMW6LhPAuXD7JkED5 CNU7HPDWgl+hozU8zoPRJ7Zjxcs/J1qKOsLltHdxvSE9Z5/G0CUru84qf50nv0Pd 4bSelDhUAbz6p8Im3iWycrftXUHK1iy//SnVvgOQ/1iyvv/Dir2OY0+On/P9WMJX 7IFt+AVhsqWqTMPzIKRTwRMkaB0TdmDIJeUGDY9yWZBRf3L8g8E+dFb0L2N4jvg= =f9fJ -----END PGP SIGNATURE----- notes on what to do for finishing the module Alan T. DeKok@2017-07-28T16:53:46Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8df5c8552c186f44fad… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZe0bzAAoJEH0Oec13Yh7N/VUIAI0LbHstvlaW3v6az5xuug3H RaajQNnyPaeg3BefNec5D+Cz6Ib+IGenLxC931StYvC2OS4teaN8lCpsXhTNUNJB QPp6EY2QgSbHGfe/YIVxHJZN9SXTZt5lZ7InxGbHkg5r6UpkM6MDJXNG6leAAgJ5 rzVsBE+7XVVib6+kiL8xq7lVeOUByGM4y0QYUl3SXaBXjyPRR5Dhh8b2GTSpUOm4 fJtGLrjPEkMuRnLuZVFseQmjwLiFjaobAk8TaYNNJXUhajWv/y9oRX5xA7i6BHNr aVtPhlIG9Y1uGFP3huhePdXpso9yrAJhzUgFq86jcldUXOwSyEGfIQwe6jAn0NU= =1mph -----END PGP SIGNATURE----- insert localized message into the local queue Alan T. DeKok@2017-07-28T14:15:07Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff6de50fbe78710e85f8… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZez2KAAoJEH0Oec13Yh7N3i0H/AuLyYPgRXP5w9+AQbiMDSo9 8ezBvoVvD2Bk5FKehEmV9XaxDbYwija3tEGBFcG/ggPIS5RAoXYthxBKSZERaL9n GvofVRgd7nbTx4C4aQtTcOVWV/mxIbPoRpLdZqNobnf7y2pAli7s4oKLkf2FkVnM VE4iQm7/PCsTEEUvydKoofoiEuzG8TlgSnXYmqSdLKgyCUrQBs1ecsjvHyVORs/J T7bR4pEnZC68R/XgzQvzEvaj+9rXZszCt7dmbSCUU0Pc+8rWMxgZG8ebXyF1bbWX eXCi/kD2by1ek/2/yPoEmxp0P8Mfthfz9yBq4O2BAeK7bv8a+KVbmB4lfXC4lus= =09Gv -----END PGP SIGNATURE----- increment 'i' when we use it, not at the end of the loop which means if we 'continue' after running a callback, it will still increment 'i' Alan T. DeKok@2017-07-28T13:35:06Z Files modified: * src/main/cf_parse.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04d6ebcbb68fa0e5d941… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZez2KAAoJEH0Oec13Yh7NqDwIAI5+EBx9rnEjJ2xn2REaP+b7 zLp1o5n9GVTc3akpGPVaed8UX7cCoKSzjszkf0PoVm0MIvcvF2wvaNh9Z4s92QRb L0Lx1BwFuiO4XVXa4IwcoYESIjSIGn4sYjCtyKZbvG+3PvOAfZN/VMfw4mytmLR9 7JyGgtF5bFbI2wX6AzGeVkOy5NUQYzjy7q273NrAwkA8nxXmudGHJBpbwyKwFvl8 9QPdZ2uaxMM4AyWnNB0tFVVYMgKP6asX5IgEh/paz8PDNtPa84OqzstBAxd7B185 ybk6QiE/8Cs23GzhFXyATA9ESxYo3ika5yjSErY9hdzZcp4Z2JC8Y+zMfw3djno= =r8mE -----END PGP SIGNATURE----- more assertions Alan T. DeKok@2017-07-28T13:35:06Z Files modified: * src/main/virtual_servers.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/988a1637a9bf72e8b338… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZez2KAAoJEH0Oec13Yh7NpiYH/2RekRnMwRYQUp7zVM1qcZ89 TaZwyvkm2dTkxHA8NvlOB35ImOenn4Bt3sSB9jOMKLJ+GtoHxxxuclUUqzpGxB6p rRaCa3GaAJSIhfeiydGUZ6g96Y2uTMH9silSNPaKE45Zc8LRwb1S0yE8OZePsYA1 VlUTs0OUNSbLyBUSNLWvkWbB6dIio+uVzPgZDWmvl9NbCg0knWbwZdwr++9WOjv/ lNVQsZ27BCdIGawqUQgrGZwBKOG5ozu3z7nURVUC2jMzcYiT6kUiZATTAErGawvj TIwA5iGuqaN/hS6J58nre43fvhOYVDV9Oucj3ESXZbz8QUhS2Jdx5ucWdh/m1eM= =rk3n -----END PGP SIGNATURE----- remove "namespace" parameter Alan T. DeKok@2017-07-28T13:35:06Z Files modified: * src/include/radiusd.h * src/main/radiusd.c * src/main/virtual_servers.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c76c91b96000540758dc… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZez2KAAoJEH0Oec13Yh7NcN8H/3laEVYomvGqumE8HbvU04yq onPDVM+bnDJfuL2cggY9uHIqV6sPEowu/bkqSZKg66Lp+o3Qr4bBpsMMJvgz0Pm1 odYJS4gmWLoIkbnQLhUozBGmu4DtZEW9N6E0Z4Yrg5Z7U/mprz2UOGccVr19qs3J f9FBWBEUpJCOJOR9T88e8qYGkixmVoBmmnDsaZto+WKJzirP54Tlxnk8xxy2M/kG ft7bHljX/9tkasQD9QP6vi2NioIlvlvCIBKu06A+kzyWha7mRoR01cs5g0nlyBNQ n/iLGbVGd9Tfx/gANw/qVxVrnXbzzKQnBbAd7e9L7ddMdxTpPXR5/ejB5ZDqeOE= =I2/G -----END PGP SIGNATURE----- assert that listeners are loaded, and they're not old-style Alan T. DeKok@2017-07-28T13:35:06Z Files modified: * src/main/virtual_servers.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/786c2322d735a768409a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZez2KAAoJEH0Oec13Yh7N4PwH/28KIm4xI+cE5qatdaGlCcHE 8TD4+uJ+0PlMW/+TYctTdpTvE/QxIle7sQnev69tJCnfIY3WhU1rP4eDD1w7xag2 0duXFuhz5VLjflL5tuhPDdCTa29JfQmyH3Oqu1MMXMClSyyA/v7IOWlCYdyEY6xF p1OH34XzeLyj93maYMdTAjSQA3jeQoQVwo6exlAQN4w/+ENNSs7AeR+214oTiCLP R5R0hryERBrB/9Oov30acJ9HVUSIjPt80cX5xbzKd6G6KmGKzSZYoajSOIeuL/vL HRbFasy+ka349CcSu8RQEGGVknNzvwSfG+uTj5LCuYxZNzKV4XMzS7QuxLDHiQc= =LE89 -----END PGP SIGNATURE----- typo Alan T. DeKok@2017-07-28T13:35:06Z Files modified: * src/lib/util/inet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2fc9ee2e6de0426b64bd… ====== Typo Arran Cudbard-Bell@2017-07-28T12:54:43Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/24781a1f83a8bfb74dd8… ====== Formatting Arran Cudbard-Bell@2017-07-28T12:54:43Z Files modified: * src/lib/util/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc3cf1d2f00c4390e30f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZepUwAAoJEH0Oec13Yh7Nc44IAKkb1Vtlq0FUaGOCC5l8UmB4 G/JrRaxCM8LwGPGaepkY1NkJblT7i+cKVKz/l0ieLeNp9odx/LTcZfFmQpbzUX7r MCiiYdZ/UGdwxp72x0lwjmfdBLPuJzawJK3er+VHpbUzKPIojn8UY28C7h+Zl7ed gAVkLLO49fqQC7fg3ltBOFWOFGMQocDG7t8vlZDTQHh8uqvKE/znwDip/hQRF3Dr v+k5uQg8lYLRLP6LM2agSUiTxRnyanMTFenWQgxWsfclHb7e8GFJlaPwzIldEq37 oSajJyunzXYOvfwKF3s6t2GwNAescwYuSUtsijBNEbuzKXLYfHPGa7FusLmEq68= =mu0Q -----END PGP SIGNATURE----- remove unused macro Alan T. DeKok@2017-07-28T01:36:45Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dbe4d1df1dc1bd8efb1e… ====== -- This commit summary was generated @2017-07-29T00:00:31Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 29 Jul '17

29 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-07-29T00:00:19Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 28 Jul '17

28 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZek6RAAoJEH0Oec13Yh7NRPAIAJWBmKdZ7HGJDTfLQjeGU68f 9V6pCButidfoTXlKKe+M4M9HflVClqy6rVjKrdHFmVfV42AC6Xo3gFS+67oN7U6Y jnsPp40ckweD07c/TL1X8un7hr6cOBRT6SCttP/fBBibNjg57o9rohOkokNkH/ZU dovIAeuiVnFjbhyN8Rc+PIME3YWD3kxiKm+S9ZNqeucI2vpKpRmSrqD8vTqHfa+I 55MZjnQE6/X6WfNihlH8V+q7G+ih/gU/EbjBOsgdag9JWUwY8U4XCGlfXOdo/hyl CLXayyy6Gfx+PQcqb3BQof0wW/4ZVsIDuLuln3K9m8HrWspyPPaao02CHCg+SU4= =VnXH -----END PGP SIGNATURE----- return "no data" Alan T. DeKok@2017-07-27T20:35:26Z Files modified: * src/modules/proto_radius/proto_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f431424b77f357f5d37… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZek5PAAoJEH0Oec13Yh7NLTMIAJtdOy96rEB1Fb2N0Og0538V OylmZ746jRE0HRTPeM3PhdsZz3eUWamVXuUgSWuy0WSK8XAjgReCT5VsKTCBCAz+ dQ3brt9EnlQYCwJE9zOQ9qPkvYPkCxLovpH7qopPXfKefGuvLpAIJcqWLop27+1n jSUUSBL7PyTkErutlJJqFRBjwlpTuMm4XplyltiZit+ZngAgmYNYSAaSUYf/yUYY aOZW4bvZtljzslM0I5E3dlKxr2j+h+WmkdocWjzj29jXx8YLg+SxBZvZb8WvV0Pg e1IAB4shDJ3PX7MpuF/s7DIRjLNnUs1ulcfiYvmQsGtAuqaECUgidVJy0Iu142w= =exyx -----END PGP SIGNATURE----- descriptive messages on timeouts Alan T. DeKok@2017-07-27T20:34:23Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ba467b4d03a3ea8a201… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZek4gAAoJEH0Oec13Yh7N2/YH/0CTQYEfdtk6ykGiCiOFIdE2 MhgtcWYdpTkUS09wBPeJDJ7DL+8FnY5jNBPpkJOciURlZQ/wjfd5y+KgWDUdOD39 bofsYQ6LuSY0bbCAw5tMkVrPWuzGj2K44uym/2UlNNCtVjiyOU+xRLmE+jLb3asD bdo4FbGlInOfJ5I2Ubv6P3WjosbwnZ07XhiqutnxpIWSAuecGBKPX/cMNGbVmCfZ /+zmNB/M/ln0RQ/C+tYMS6gOoYzui4iKRkoxEPYEsNXBzFBqtUDG4NxlFroY26Tp n8wv/3DV7eQbBc7zlqxrVGfNLrLaI4IdZai/SQOr45HTVszBSUu73MI0mzNWt2Y= =8mQ4 -----END PGP SIGNATURE----- APP may not have set NAK Alan T. DeKok@2017-07-27T20:33:29Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd7e70a25512c7567277… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekaaAAoJEH0Oec13Yh7N6GsIAJY4rU9eCiTlAtsQ+4mCNJir fyU0zABNPCtE55J4/RqdUbbgybBEToZ4OPUpO5GOxIM9eMvL8T1imxzYPF2UAYmc op9dSj3cQuF/ZCUUzttnywdzjlze2WJc0fIJz6wPfoUhTUgKD31vThCEkOLygZVx N3qqlU+UNuGcP0C8i4MrpCdEyoolF1KYmX1T+dC21UIS/ZjjcvkbamNScMxWYhMj Vz0zeehdyHDzb/+/DhztImAYHCEMFgev12ghnS7dovVlDlYFy0DMZaT6YNKTJpp7 qqieXRSGKx4rFDsxrZNJtpleKEevdgtukbYM6TEXOTMudnp1FXWz+54DfghDPvc= =1XQZ -----END PGP SIGNATURE----- comments go at the END of lines Alan T. DeKok@2017-07-27T20:01:24Z Files modified: * src/lib/util/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d919d75a47450413c84… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCTAAoJEH0Oec13Yh7NQNUIAI0g85xz3/HZV8bVIqCbW3sw nnKhdku9Sf15IsjwJES7K8u/jDLVmRaquiVV0/ApQhF0jEc0DgN+1XWjU9ztbcH3 CA/jvJOUbETWe+0wcV5WkHnWW6B+5RpcrotJH1UoKvoO4owR6cjNxtXR+Ed2iqdE rWF6e/Kr91DjT927EwqcEEdAkz3A/OyWKPwmFCfKWnQE3TEgYMfMb+Wzie0k7zhS gW3u+o2xT7Y+8QcjsY7PPiw/SfzQOFNPt5pvi/BaFLb1ROu2h5cVlI6HSToUgoEy jSisRrK5yVtL/TsfCRjKHLCvep+rS+TcoA2bWMVl37pTJcnWuegYOV1R55zK0s0= =KZ06 -----END PGP SIGNATURE----- set connection in udp link Alan T. DeKok@2017-07-27T19:35:47Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31e241729c93de447000… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCTAAoJEH0Oec13Yh7NKdwH/j6HpIga+mfI1mP6PQvZCiTT Lb/pzV7DTrDaECYMjFjP75D9GOwcGchQmNR027tVbWvFjMyMoyKbhJTelvg7AE5c Csx7xq2TQ6WfePG5prSXneMbUNbKbL4pKGIBOtT73qiTQU9yNfxG39pD2xRnTe5N K5IhzyVrq0pUSsEvGO1uklfOdvjl/t5m1XiLwcsN3jI72CvdLTJQnRvRUNWFsJt5 zYudt9emhptMY9EnWQY0ITnCtECzvKUOviGhUzFLKoTR61z9Sm2Gw2BJwAkzNifX GlKVEU3sEVk9Vt3gS+kfj/PARnfkb5wtUzV2BbGaO41xt1IkOGeyo8Jy0azESQY= =lYpc -----END PGP SIGNATURE----- reset was_sleeping when we're not sleeping Alan T. DeKok@2017-07-27T19:35:47Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0bf3717a6b647ac63e88… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCTAAoJEH0Oec13Yh7N20IIAKCibbjfJSqq2hRkkd+gP8Ip pNxT98+GcPasZIwKccJShzgorePavcTLH+uASUnEsmTZ1xDEB2TGQEeybUdnRoXD teOCCpousEXu3ZrSVZjrCD5R+KSWk14UyDjvOi9UEYMjHlS/I84z64wN8DVGwVZb hbGAS6tm0hVOcIvBdyyoRt2eKI4G00pP3CcoE/hV7Q5oTCK9yIGMTkhJQ+OCvYQC bwd2XihD8omap9ZSyYMih+Jur3nxicbsYnvI1gmBX4mt62Zs0+YmxrSoF3uGOdrL MZE6dUGUINHXWxOGjanYqLSjvDzrOFcm5jEdeIEtjZWs3bM7GdvvhTQglN5CJRo= =WJPH -----END PGP SIGNATURE----- fix debug code Alan T. DeKok@2017-07-27T19:35:47Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47c79804015bfd2a32eb… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCTAAoJEH0Oec13Yh7NhykH/292tX2X61ZBGX8z2tQ5fggc Xcq5tOe2NFe1IyB5i4hnTYjQwD6ONyOocajUxMfV33uHGF9TkrzRuePfRpkvYcJS HE8iHm5chZEN2EV/z6ZDAa+ROnwIrCx9lIfRR9Tp1z/UGii+qqjNfh7gkGkyFeEI sxY9+dR+lUT9mszgrz0mnnW9yQC+/SHO3aa9BAd2uDbSzTwlftg8eQUnKvh6+LKw dBhrBF0ELsejN+7jYjebio7rhAsKF1uWvliMAQEQewQ1Abq93cFIdwQXLdcl/RCh 8ZbKzeH46ymBKWCOWqhtqnr4xhIsi7aVgb3gNiMIbl9bTvOOIbXcGC+ORA31V0w= =MQ7x -----END PGP SIGNATURE----- enforce max_request_time once per second Alan T. DeKok@2017-07-27T19:35:47Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db7da976d892d44aff06… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCTAAoJEH0Oec13Yh7NZjIH/0FOg0WY52dmzXM7OCxQ57nN ZsiE6IEMBDCtkgiputLLy6Dg9I/CLx/Ctzuq6vsOazSj+rjdS89+aW+OELhz4qkL OSyj3qvXn9eFNHZjX+CBNlP+2oKdzkUoPrh0nWXqlgXQll6txJDTyHgGCIc7qxQ8 okyhQgI9l45fDLtqc7t3KC+uk0kSgI+8pTsel9O9bEm4GJ1pixy+RnSCUWEE7lxT QPJCoz3flwSDCFi2EDK9h//BQDNkxKrr37gOcwTzng3rXz9YGs1F0NAaNiRg7PWn gjy7pfLXlVvGLcUk75rWmYcNGS55g6jC9PnSFABy0TpmOVrEseoYrjU3bFFnvZk= =FCUB -----END PGP SIGNATURE----- more cleanups on exit case, and track num_active Alan T. DeKok@2017-07-27T19:35:47Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a1c170989ae9a6235a19… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCTAAoJEH0Oec13Yh7Nk+0H/0rG5lW12BUzVL65AZ/bztL/ 6LSzOkyUcYHIqxudNj2EGD9T7kGkPxYoCTOtinZWynWbgT5HniCEtZXb748q3gKw Fc6J1Q5aspXZCZqfMeymVesFb60z4nGmUO3YMB4p8IMO4tMmmyxOCFsh6PfIKtS4 fj+RsHMynAiRwV9tYRYnfZGDCMNjqY6puFCMyrFPahQThE5Ocv2a5DoYVl0Hn6fF 40AVIy+4bPdDi702Tgl5EG3cTEDOg6UQdATE48Ke3oMeHlXGps7nh+r8wrgHdUEi Lq3g/VXhpwqFtIyuOiOQbyBC+ZdXRZOjyQjYrSL7PS0xrqOWhg2WGO70UEvOG5Q= =uqp5 -----END PGP SIGNATURE----- simplify loop over dlist Alan T. DeKok@2017-07-27T19:35:47Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ff7264ca8e61c366770… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCSAAoJEH0Oec13Yh7NcZgH/2DW//oderqaft2wiTL70fCQ ogZKbC0QSJSiVNO5XWrS4xJ62YVvrIySL1EI4embM1PLRwrDwgvTtbT0SY0koHNQ QeeuaL2dXKFpVBxV4XrJmBUQvSPaaciZPmnBEl2hAMhlsneTeClXxdWsQ3U6x3CV b8XfecmxP5i1nZyVSfON1Fd6VlCpogZBFKpTer7GDVL4iGh0ntMl/rz7yS88x0m0 TiXCxZ8VZV2kYVI31x26WPIHv+ZmT1rj38lD3k3K7DsZ6kGD1mTsJ9Zst8Qdku1u 0m8wOSwJnhlk5XFuW1SXqRyyf2gHp4knYqp++zHonUItBrCw9RuugxLjMATHFc4= =o4oG -----END PGP SIGNATURE----- resume the time tracking so that it's removed from the right lists Alan T. DeKok@2017-07-27T19:35:46Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be1252537804a9afad5e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCSAAoJEH0Oec13Yh7NkjUH/3sTS62XZcIfV3j+p6hM1xnt fk56QW0gSgQprYCKDMtzQzEiWfOD8RLYIbGSKzaeWuhtUomOngjBmfCFG3qyXGGw 5IrGCFg8jFEUHh2EqoMqhHwzy8QaY/XmYKCNrsODAQES2yY79jDpexn+yoHUdJi7 h2eYvualuF3Bxy5VKIzf3f6bgBUYugpyCBYelxPGULaN3XWFj7jD87D5qVRBiOLQ i4uhDOl2Mtoiw8zbwXfSQxBNubxO4GkkD3fTfqY6rdDU6SrjJceuc0QDJjeoh5qh BRjUMH4mNJlrws7C5mMcHmyuppOO126Ho2QTXtRW2knwK9PK/wmsb+HgVcRdCbs= =af7Q -----END PGP SIGNATURE----- suppress multiple sleeping signals. If we're running single-threaded. then the network && worker are in the same event list. So the worker sending a signal saying "I'm sleeping" will cause the event loop to get run again, including the worker pre-handler, which signals the event loop that it's sleeping. It's best to remove infinite loops. Alan T. DeKok@2017-07-27T19:35:46Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f5af24c10ded2bad702… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZekCSAAoJEH0Oec13Yh7Nx6UH/3kueYYx+MaXB1CvaeIi7S4b aWTglXkf5YLhMIqJJ6Df+yfbcEYMEPvZ0YKnrmzk9y+AmVD5jvZYj1RTyy+b2xli tYXoWRFIp1VUz5i4F6dvaeJzc8mB5pK7paRG0wG49oorli8klqs1EOZ0V6OvESn3 gySsIQBrbd9Kqw6bt/q4loaR4UfSH0ndk9iX/7jhM8rgZ2HUDNn1lb3IPlSEN0vH 0VB0cHTbVmqdv9KYHaTKEGdQoVEyEBbgfaau4X8a4hnFfMyZ3SfmS7Ce1b7H4E0m SKoku63sRYu09RfBhVCsfr1pkrWXD21atCRnjDV0Yo+hOWjyMun47JmAZNHqWMQ= =xHqa -----END PGP SIGNATURE----- use the allocated ID, not a hard-coded 0 Alan T. DeKok@2017-07-27T19:35:46Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8fa0712436620e3600b8… ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJZej+5AAoJEP+k1YKfttfKzAwP/iJ9zzHsra6sZaHbsFuFr9X+ ntTlWSSN/SPnzhkjZrmBluaQEwB1/F+ICZn69wLrF+hbdpvqexTaCP+/hnX2Bo9H O9gpPQWge77WOJM7Upr7DgH4NBAV3X3MIJ3zC3Km3WU+D+NBslwUpH+AniH/6atJ dXOk0YV1kjqStj6ZqIDsUnvI9C1+C+oEIPGmzUd2eel/ZuH6REM4d/2yHVDm2tSQ 5cV93yVBTHjzJE7dJinlQM8cmsRuIq9EEoZ6SG9IM+Sg2jGztxzJXiXYXn/DyhN4 zbSzuMm9tkY71kFGoQc3cPAnUeO76V1D64xLsEp0AvC8cBGeEijDKWLtmMwcZ2YG qQanBXRwVMKefaqaU46oTB2iDqE+IP2j+wnNDMcORigAU3iJ9Qg2j7s7V/EIGcEq 0fyRw36fmvavkUsvleUhZnB676WJBFsIg8Lvprqmkj3nMBos6XF1M7IuVA7GtpT4 Hvke/99T3OCEDnzpxLpxE0CwvxsDz5FrJFHGHs6OlGLdunvYKuy/qgyL8yCS3BM2 SL0cjriuTrEwYey7mmTW66uyd7eKhHpF45Ycpl+d41ycX5Tz3S8/3N4GFNFZ8NiL 6pMSvOQLHUIhWAkNx9UoK9v0hYKEyTjRDxF+cFnUFdyGxtyQalK8EBZ0H4Ylqlgm xrr4SUPbyfWMCCzC8hgc =8gkz -----END PGP SIGNATURE----- Support passlib's alt-64 We already did the work to make padding bytes optional in a previous commit Arran Cudbard-Bell@2017-07-27T19:32:08Z Files modified: * src/lib/util/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c5f23f8958c9ad18c403… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZefEvAAoJEH0Oec13Yh7NMvsH/3XpYpyf2ODEcU3HD/chtRIw WRCzA5hhENC/rKQ4f9IThwIXKmbOXoUy9FpKCOpbvDk7nK3RHdxuTYvlv6qmCs+W 8YIP5OjQYmGOW8Fpzqav3FYttEKPHic4jngEOahZsAi1ho6rXmecKyeY72PmKTxI MTGJI2JLbLQXIG/361/BZbmQHDoDEfujP9amzq4pDeYQbkMvf0iNiIOER5EsPRUW FOekMMYpQgDQhIxbKw6OUhgVs0wCRaWUgnlwtkArlZ+v8HGJNAYQHX9hpA2Uv395 PTJRL6uZJWcd+/3Ms2qPcVs6EcIpwyLANjISbacnAnY5GTRBN/iDSrB6JjKVraQ= =dr9+ -----END PGP SIGNATURE----- notes on 'todo's Alan T. DeKok@2017-07-27T13:56:58Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa12b6a30629bca26059… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZefDhAAoJEH0Oec13Yh7NfgsH/i/NJV9B/xdUh8b9/tHhNS4F avl449PdYdh1kl5zCTh0fodI1LU12xSteN81bidjcQvPHysBUjeiWC3fjsEruKac lnj8J2jB5fNYPd1b7hxmiar1jWv27MeHt4KSzCUPEQK9jdhhiyfegi5wbpycs7ZQ tJPW1sQMoHMYpojcylbRKATYR/rXxDthcELckphyycC+tQJjSgowMfZfEBuh8cgr 9GjR0aSO/YSrXY7yH5eHdSY6Q93zrpeYx4PwO1njyhwgZW7VVuCZKAJK4AivbJJX wIEDuKicbLAfee6vjRP6h9CS052OijUe2rTbYbl0UoWZ06fX5GzHXsSBCnK+ZEc= =2SZ8 -----END PGP SIGNATURE----- just make authenticate actions the same as authorize Alan T. DeKok@2017-07-27T13:55:36Z Files modified: * src/main/unlang_compile.c * src/main/virtual_servers.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/406ace62ee294c8b9d6c… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZefB3AAoJEH0Oec13Yh7NuYAH/2kvLyTD5qbMFD7671kFQNWR KOmtbwTKsYOdW9l8fudbN0CuQFwCAAyVgq0CS6IypHbqd3cA+iAoNpzmmq78a3t/ xXTEMLINGtQCVQSgTY5BLuMLH3jGnHZ5mfXohlyNtaFeotEwJeBVFd6Pj+1ohXaL 7SK7Fp88Kfn3KlyUw2i/bUBU+hXZRU86UEz4g8+wDUJbi9fg2gBQJrJAzqB0aFlj fv9gX2NJAIS9aRvF3XM7hDbLE7jS0cVV9RnK6R3MsxihJWc+Xm7N79XGJUD6pP+F LVKnvWiTtt3C5TXqGIkf7tXfUvXLClSUO+C+w4Ul5fuBSne1Z4XGXBPy/Gb12Yw= =Na6o -----END PGP SIGNATURE----- fix authenticate hacks the thing in "authenticate" are no longer bare modules. They are now always subsections Alan T. DeKok@2017-07-27T13:53:37Z Files modified: * src/main/unlang_compile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7af2886f2074debecb82… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZee4wAAoJEH0Oec13Yh7N8Z0H/1OUWeh/fgpM9vBe8DCB8P21 p3ewQ+uPKblIH/viF3PJ86Hm0WYAB2ciBcQTsLCkEeelUB6lHiJEJ/6Z2/fAnE/L d9WfXf8eh/WBAS1zM/ecfQjHeqEn07/0p0X/mywD4d7Xr4bXBC6CXHqTxImVG6Qq bdjcz64oXqowL1qshfrYn9MWFHhfJ9kq2SKSTjyT58lrvqlqJAaqVJn6IgKSl0ME KSuFj+d6duFeYlMS8eP4wiKLcbqLR/XMraOQnu5vTahEycZ7spEGIXXRnLKqJaua GDky44g+3BKpryo9jLAzcB5YwFrV+8dKDcVRrzJDDQY9U2cpQL82lxmPT4dyzc4= =bEPy -----END PGP SIGNATURE----- OK is higher priority than NOOP Alan T. DeKok@2017-07-27T13:44:09Z Files modified: * src/main/unlang_compile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8f6399cb7251660a89c3… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeerNAAoJEH0Oec13Yh7NIjEIAJlYlLBJpvF5zEqNTYBsJw50 fhmC9M6MGOQ6kE144wXHgK5tBP2cRcvpkqVHOA9fldd6aHFJi81rTYDp6TCVk3BG ICAOJfNLmqTC2m3m29CJ2j7Yi5H0CcXnQR4gIuGB9g7l0lizN0TSI9qgPkcWdfNB FJ3crkEGFre8rIdURPnQ/AxJt6SyHwK5SNRvkLLnOdhnINw37P6R3KUdo40PryJI ajiMjOdFIZWKIPWSFH6nVStjFsTHW/c+7v1+1YMCZWzLShj4oUVSpmGe0FpiMNX4 jyQmUVYuGSCgqFw160RevSub38LECpXSe3+wNitSaq5bmKSh5AK5bfzymffgLZE= =VMfO -----END PGP SIGNATURE----- clear pending flags as necessary Alan T. DeKok@2017-07-27T13:29:43Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f66f6eb3bec44af6a4ae… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeefzAAoJEH0Oec13Yh7NO9wH/RML7hkbfDVyAJyCAWJ1Ym+6 66xSjZS+uf/eHnINnVTUmKtZrp0SrXs0TVGiC3Lr8Bgiv33ax5l8IWcmLF0HmwGU InZOm9OiS4RI5p98mOGAWtYvZJzYCLKMF2mynz/wVa3wOd9mR+JZUs75uddJ53J3 ogdusCPISsOxOilJwVYYD95dPpqLFfEnDaTR85fuUfqhFhT17zdRQg9XMuFi2EW5 bWISwY6wUZuPRAeVeemWvMSPNrPXzjd773FEWwW5Pcgb0GomNzG2tnv7dNIfTi68 M897b8VmfRmho3d0/KNwjpINccJ0yWqu076BSB/xioyZXwwGaN3kudOizXd8QvQ= =vA14 -----END PGP SIGNATURE----- fix assertion Alan T. DeKok@2017-07-27T13:17:33Z Files modified: * src/lib/io/time.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb38f048c3c7cd649ea9… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEbBAABCAAGBQJZeeXNAAoJEH0Oec13Yh7NmxQH92rh6B5rRdphsNW6wVdpXHu5 EihQT54Q5TDQWD/LDEoC8H4TrPEHQp3Y/tC9px6XVCwvJl6tcj9Rh7mHW2kh8iyG kYSmy8OJWeYP0SYEifl8K37yyGTkBHi50uAFQW8sZefPiKlLkhjGAQdlVCVTESDY 2lJxfbISyJzovLfqkunyFK46zNXtU10n+1CuFqWlCPejXQYBofDAkLY3MOrhK7c2 cLVlx/QqShzMrsF6U99HqVsojNmyfhW2gz6PD/eksO83L7l3pnI8/tky5mbZa6ha F0DSvaaAoSigZI13ONJNu2hxoKL+bDoIVvlFMszP9QmNi6gLQT0g5QYtLqTfzg== =YY86 -----END PGP SIGNATURE----- move assert to run-time check Alan T. DeKok@2017-07-27T13:08:23Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4c26646660cc9068d3d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeeXCAAoJEH0Oec13Yh7N7EIH/ing8Hu9REj7EzebfCQVaxhy QNV5LN5XWxJT5/rpHE6EIbux1knUGmi2EF6vIbQ+Q6DnYL1R4sftRnaMxZbyVh9o llna6aTvaU6beXEAgPfSZSPVsE4peHBSwpCsAGIMfvP4H7YBLbV6tofdp/AMrJYD 73lq/OnFHk4J0dkJ7n6vdElpmRatE1laxxu1d9Xxa8Dw5K2f/1D0QD4Bun2RuTlT 8I2+Dfvj04UqLKxOMdx9bZeeP/W90VdGpEBcNG0kSeBK2/Lj1fkTjQHZdVSmTM/H g6O9au4Vaf7MTGa5Ei6bUCP3AWvvn9laMLeUXFDaH/+0yTc1ZXQJphBE/kVmyhY= =5qUM -----END PGP SIGNATURE----- check for allowed packets Alan T. DeKok@2017-07-27T13:08:07Z Files modified: * src/modules/proto_radius/proto_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78eac445cde629c81bf0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeeWvAAoJEH0Oec13Yh7NWTMH/30woyEE5Cz5VzUrRHfW1fK+ Vm/rtbuP9Oq3IB/OsuSzf2YHjMZvpsXClZqWrUcZ/63pSFiWDcg2ekX9iSrt6cwk 3URwBywVUVeBjuwwoUYRumYOyOuh7PjvdAqFDKiFP4A315yQhgV+BzFeYBk7VnFL NfGB2sv3uO6tFz6+1RITqlnwLYjR5SDuTBkN5feR+R+SBU8w1Rh2yvuJiPTLLAk+ LiY8g65iF44/iADfoZimCoZXVBjtSc90mdo6rcE+NKAXBBHXdbgUCrVlMI+mMCVz Jgl28suIxN1GR3IRJX0/9+cCHL299uaf8bnrV59zEN5AhO+fND3e/odcpeQawUU= =PGu0 -----END PGP SIGNATURE----- doxygen Alan T. DeKok@2017-07-27T13:07:54Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8549f3d11396f565a11c… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeUr7AAoJEH0Oec13Yh7NDhAH/1EVTRW6S6D7/71LQOlxVSTc l/CnAkz+U8j0Xi3j7qm6LbILIeiBDrYtwmlRe1Y4/UtR9JkprD5Ux+3DvwOTljcx hjZqkMNbvik+WEdhBgJrio1dWmgv6P7F+XQYQwT+wUvFqUGqL9EhaeCudCQ125rK Y1Ig9p2UD1GIuIWqYmPXc2e/mIL97N+47VQfcYmQq3Sx6uzT6OReNGBR2dbq8bV3 Wvt0Gd3IXgMtzkM2F0/V4/nsRQAw3V9oC604eeWY+GyO/io4aIMFh/ExzMX50PS1 HOvlWqAnuxgvv4xS+sWpL4mxDqUMgak6tVkwYPu/1ZvhTNeaXCpaiUUC9irF+W0= =HvyC -----END PGP SIGNATURE----- signing packets would be a good idea... Alan T. DeKok@2017-07-27T02:07:50Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29d0a23885469485329c… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeUkYAAoJEH0Oec13Yh7NQx4H/Arevcbvk/3W0KaxgBhR8ihf BJfjjs8nyGpzTeXDK9keED4FR45s3kBkq1IYWuv5M3SB6bPO9gj1n5lSihxr+c8Y VoCeEfw9SCpGcwweDaINktYqMD7mzHksQ903jX3ZoENPwOQb7YxFRC5JUqWx/JrB VOayaKFXPOmNfaPLUJe/Gq6J/9McGAxWrvsuCoRdMUhJ2QaPnHxfN7wo/qsdR9bt FSvI8VavuKkXEUdUWf9Q2WT3vc2XNA+5MhakqEws+13dqhktXr0t0ti1Yuezj6Bp qq3q/Vy1wi7by7BlspqI/FUKby3k+SRq4AinVHKC648qKMCmLtk4unPWK20qQJM= =N/gh -----END PGP SIGNATURE----- initialize queues Alan T. DeKok@2017-07-27T01:59:43Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/675af2c7769fbb57706b… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeUj3AAoJEH0Oec13Yh7NsPYH/13zCo10TMpwVuh1aKzNCXlh DYcM66beVJqP3SLyjGgJWOI/BxN+ogV6ka9ioToFzPdXAyCQDlF5vdeo25uWqg2j NLHYx1CPRI3a/xW6EskqrrKRmZtbrCVi8HLxCdqjWJQa/gQLOhm+oTB5w4afbSxR +sKQT7WUv18S4pe7BmYGP2YuFCf2WD0sbj+4G0dViM5/5nv3WHtxIEsK62cbrn4s RP4+x3dbQKJpVBIW4mFUSQ/tIr5RR+h4XA7kQocHYECNQZJHcdDxXTawAq3FTHcn MXSKygB5lVLpi4O3DwXvTXXVZiq9OrVIXl0rQylD9Fy0393lzzXbRcZYNyer4y4= =O3dR -----END PGP SIGNATURE----- increment num_free when adding to the free list Alan T. DeKok@2017-07-27T01:59:10Z Files modified: * src/modules/rlm_radius/track.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c42a48c83feed162e8b6… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeUjfAAoJEH0Oec13Yh7NKUwIAIzTMZNrRZevccj935UWBn5q K+X1yEYnwiI6ccK+W9NTycoic9cgKe2cNJ3A9S1BklUp0VelVAvhatpuAIDXeGko tt+EcDBdQ7Kb2v1IQ2+xgckPS3RxF5dnk8CIJVokkhxpkuWlhbIAJQXvVKYB1wRP RhYRQJJXfJwyiyWBFQHovV2Fdy+wWnL8Hk5cZHmV4AbgxTTs+6nY4TyDTC6hKFAJ KaF2pQ4Rytt9m/aegQDsF6CE6f0LQ9AO/Ui4W16FgJx5UkO6NvusLiOc3k9bYL0L +E5NF9rrmwaO/oQbeIuNPdmHLRgp8VbanHAFo0xbqMPcUPxvhJO6EMF4hkZlCcw= =Veik -----END PGP SIGNATURE----- -Wunused Alan T. DeKok@2017-07-27T01:58:51Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcedf6bfebcc720ceabc… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZeS8UAAoJEH0Oec13Yh7N6QwH/jEQE/sjAcQs7yMZvLu6jm4Y RSimqkTFkJJwfq1r4V97jIPWXOTm3UtvfqjUQ8RIWDxzCfP+LEoS9fiVT9x43amV NnvIO5Ysexibg7bytbGb/BKlv2L86OTphIEKO/jfCEV+pTy71XreSgJzzrUVu0ae RaikAvWIHJWPqnC1kw3LxJ0SbUyi/gsGmYQzu81AEx/Lhia1mQpftjutDUdbsJJH wwqfaPIKGQEcnoI+r3WDRI7cqWBqmQl7/mKH8aQn63/VGWcChRLI3mLlf4NP1Wdu Bwrj+SLgehgnxuWUV990CcTLPDF9D+o5GPijajIsRe/mk7aoLwqYwjNfhS4sfFA= =WU8O -----END PGP SIGNATURE----- make ldap optional... Alan T. DeKok@2017-07-27T00:08:46Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7b267c7afc05c84233a2… ====== -- This commit summary was generated @2017-07-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 28 Jul '17

28 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-07-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 27 Jul '17

27 Jul '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #2029 from candlerb/candlerb/samba Convert freeradius LDAP schema to Samba4/AD format Arran Cudbard-Bell (via GitHub)@2017-07-26T15:31:06Z Files modified: * doc/schemas/ldap/samba/README.txt * doc/schemas/ldap/samba/freeradius-attrs.ldif * doc/schemas/ldap/samba/freeradius-classes.ldif * doc/schemas/ldap/samba/freeradius-clients-attrs.ldif * doc/schemas/ldap/samba/freeradius-clients-classes.ldif * doc/schemas/ldap/samba/freeradius-user.ldif * scripts/ldap/schema_to_samba.py Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/110cc74c0ff1199f1931… ====== Convert freeradius LDAP schema to Samba4/AD format Brian Candler@2017-07-26T13:57:06Z Files modified: * doc/schemas/ldap/samba/README.txt * doc/schemas/ldap/samba/freeradius-attrs.ldif * doc/schemas/ldap/samba/freeradius-classes.ldif * doc/schemas/ldap/samba/freeradius-clients-attrs.ldif * doc/schemas/ldap/samba/freeradius-clients-classes.ldif * doc/schemas/ldap/samba/freeradius-user.ldif * scripts/ldap/schema_to_samba.py Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9002cbdf63f68994b49… ====== -- This commit summary was generated @2017-07-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0