August 2017 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.0.x branch
by announce＠freeradius.org 11 Aug '17

11 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjdMtAAoJEH0Oec13Yh7NgRgIAIWjn5Dr+MNLv8FbTVCvHCmG yE8r1odmLpT/1qRIEaiQlZkp/5vzQLVpAXGS8dT0v3GhM4SQK3MKGAiwEXwr8GsT KYL27qKK8GnOZ5QZbWazdWEknGRCEbjgSg1VhKQZyd/B5AWp6lXiJB60M/YyAuTd 2MAjKYK5oQRemkc4RDWAK6t7vzENDnqJ5c+XwjrnN1aM0va4J3ty1kKf3m8FvrBv QxC6PNpnA9i5uZp1RRJlI+DoDcPik0e9egPhZtQAypbJQQjR6IJfRcCSelB+sA/f +PiG3nwiRizkXClmh1ky27V3t+FF2mWXyLTv6Qb4rZXJDT6X9DFQQv4K9QLsMqk= =RbV6 -----END PGP SIGNATURE----- added libjson-c3 Alan T. DeKok@2017-08-11T15:54:15Z Files modified: * debian/control Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa0f81175f2c3fd72ce2… ====== -- This commit summary was generated @2017-08-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 11 Aug '17

11 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjcicAAoJEH0Oec13Yh7NyKoH/2/VpULjuAuap1eh9UVWNSht 6I2XeHu3Am2DhDjw8bAucwLnvAbtAVlGV2kZbBRkmEvaCv7UUh4n4ZyfRMyYNmZZ IgzXPK2UIsa4RcYU1NFYcGEwv/S2889xdn4Ta9Ycg7jjiP2GO2Ifx26dIVgTdlyF JGN+9I/W4pJrk2vhQmd4R32xvdC1Dsk6V6fTLiZi9me5Iz0N1dc1Rk7atLh5wUBG q5a2uPdMtmSP/cFbfotblyZAhh/8gvhaW6z2uW6QYQec4mehX+zSdqyuJQO4A1Pb b7041PFWd6vRzxYNG5K64wsZNX4bP+lJwYoLbZTOoVDoLqySqidABQA5v+CozB4= =egXP -----END PGP SIGNATURE----- better scan fixes Alan T. DeKok@2017-08-11T15:09:11Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5849075b791ba1ea7411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjcQ6AAoJEH0Oec13Yh7NwfIH/1V+h3xzo2kZQD/Q4il/zN3T gTJg3yCrb4zr7oXx+LJXJSgofMUGIxAYPwu/ofLQlc+P8trGW5thisaLyIDWQChp e3CCFQcuKrS8mtP8WnNjlKNulmckSFPa3g0GDAfkLWt/faLhBphIOTdej5+0jPDh Bl6co/BYwXT8DG3XEvqxIOTt96HwQVUWlrx/KDcqFBAdSHYcIVTnFL6644dQSnX3 FL+HUFEQCx/RaRldjnmbwL5a0XbnvXG2Iz3ve5fj42iH39Ex0zxGdEJRXUp4oEtl xthcFMTnMbX0IyYHS8ACyQ6W4Q6w4+V4BZ7YJAZpQNBDtGvM3Z0qBIjd/7riVgE= =6Qg5 -----END PGP SIGNATURE----- remove old todo's Alan T. DeKok@2017-08-11T14:50:30Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/afb62e9ad13239fe8cae… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjcIMAAoJEH0Oec13Yh7NA/4H/2gpir945sTYIfNE92Z3MRfx RY3lEuX1rvFeLKAEIHQ9t2O8jhxXWQs3gEUg4vE251y/O/o8K8NZj8vKKehEXugp ydvpCSqd8+1tMW9ewHpQ0252Som7wcLfdQr7zHHAQK2gb/o6PVYW34o07G7Wuzbk LrE2df32gBOjv9JGr0LJ9hBqEX4GyRGEvaqzQ3CRkxFtfBzCYmVHy4JMEhuRMA5u FKXpWpoylYj8kqPVdXdwyfRRSRPSLYASa9oCt3yDveK7om42G21wbrPGqD7ZqltM J5EB2ogfiMHEjQ9mch+q61sLPPBZJcqe6GPmYYg9Tuk1dn6G0LvhBvHJmUHIVaE= =hNC+ -----END PGP SIGNATURE----- scan fixes Alan T. DeKok@2017-08-11T14:41:13Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd51606d5fbc07de1d2b… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjb+TAAoJEH0Oec13Yh7NfpwIAIn08hsOFUCSsQo4zSo7hWGL hb+oYXHyqPiCFr8C4TaBIZYEohelpMmbmUzHmMwN/M46wHVyzRJ9OEWUU/ushGXX YqAOnjlyvArtjQfh9jBmFky8Q/2l7zdYatcNJt+pnzOP6nQiWlUyrMePAJpPWWtY 9E9ekiDdo4Jb7lNYqe0kUEvfosQNb0lGDMUurXL1IP2nFCOnknpDds46ZVbxyuTV As2jwuV0vD8mViLbzaghzovP7hr+0esgP+vmEiwJk0vCemf5ZqVaYsIGtSeux+eU QuRr+SSMpk26azVhfvLOFlHeCOSqWfvTVfxDzHTaYo0XOb6D0t5AXrpN2cbgoRA= =A/gS -----END PGP SIGNATURE----- more DEBUG3 messages Alan T. DeKok@2017-08-11T14:30:36Z Files modified: * src/modules/proto_radius/proto_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6a97b5668b878f7ba3a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjb7tAAoJEH0Oec13Yh7NLmgH/RgNN4LyOsGSVEgJXOEg2V5z yieTfb1VW5+oyeyRD0myc0KgdI8YTYFPbG66Wt+eiYlp5nGpTVTevq6lqVAF/J0e zabazOMrny5ENg1WVpTRuCMCjcju6niOKkjUz3ujoRw1h2yCWbdasS3P+86Wjkta OyKMFsVeR7TrZM3HjR4Z5YvB2NB4BmOiBy0w+x3l3h4jpAZ3N+I5jrdsRGJvpBR4 YvG4xH0tx38nAJ+i1ncnx8wSYcxjUk6E8LajfqM+c9ktTatORzBkeGWXQ+sFQt7q R0koJzmvhlD8suSAUcYhV5LdECG/UtDuLgBHkxdK0V0wtSV71SnwBeP/kksuA8s= =YBsR -----END PGP SIGNATURE----- don't put timestamps into src_dst. It means that every packet is unique <sigh> Alan T. DeKok@2017-08-11T14:27:41Z Files modified: * src/modules/proto_radius/proto_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6ee930a5ab0e48311b2… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjbWgAAoJEH0Oec13Yh7NdO0H/jyjk9b7iG878MgHZi+W+xhc AG78K5BTOEuZxZMdMu4ROtt7cXgSoMvv2+xotfmAQEO803xyL5n9l0u3Ah6X759l 0LoNWffO6qHS7W/AUwVS1uq7MH9FqOhUFpq2C8boAZalf5RgUQU9EvX4nHUrU3se nynWpXpIc/XmhcNcbsMroFw4HS7cwR484NsmJRI1E542+3xGrwUoGwPDRws+DlkX iRUG0xXsaPgy1BqECgxg27BN48TKiPZxbU/jiQMdRFCD4ODfzgLwK4V1Os3DXdDX 29bXv7ah4BK0+zF5P39s87LigE6jYGXCWowHEJaOrI3UVecS/3p98OEbiKAv5eE= =KqrO -----END PGP SIGNATURE----- cleaner debug output Alan T. DeKok@2017-08-11T13:48:15Z Files modified: * src/lib/io/network.c * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f6a2593a27c59549007… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZja4LAAoJEH0Oec13Yh7NGYsH+wQQboaAytdsF/68CsB23f5H jXCmDXHJiWVsx9kJZXhBZytjwvXCU2CgrszDYv9ISoj3/h6wMaIu15C0JlgKC+QV 0UxInu6HGYi3ziGPJ3yur6qoaZTbjphdu7STrcksb/vcysGhnG8xq7Sf5Kc2AXey BAkEJhQxBL/0SmiTa61YPqBU/TSdv1v+GA4MgS4qCC5fOl6iMAxEFpe03Jst5qk/ nm1PkS0l1FWzbW6pklKF9QV3UUPPww6wN/x1D2KCiGxvYdYhkVof4CjPXCCU8ePb 1vhg8tjoC1LPE1vEtd0mEhQXDRQCCGG0/1lgdrr/OWu/CkFuACymkTX7EA61Mj4= =qi7k -----END PGP SIGNATURE----- allocate status_check rr when we open the socket not when we initialize the module Alan T. DeKok@2017-08-11T13:15:37Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1cc8af5fd29242560f3… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZja30AAoJEH0Oec13Yh7NUO0H/ivInNdRzfYaCqr8s1KzSShp +YzdLDZ1gVHmai5gxpYiwQ0y0gWsnYlmknnrnt3al03264CwMdA20o4HE9fqgu6r pAPMtEQ1IyemuJ23d7aXU/mAuOnnU3WeOfWakUkirn9BudKFuq6tGoMTAh/kNxDP cHLJbCOXn8cjQTpt7+X/d92NHxH2pnUkVwkVDaTtDE7jGzPQyA3TE2QzSWZhXVzr RFastwXUJlmy5MHiR0vjaANkDnZP6EHOpy6GoT/v/VgSPtWxZTDwpKl9u0NHntRN n7cxIJAw5OmeAR+pEHuCJCvzJzLGh4H8iiR1/Ei5POmIRl2fzfUWbSRXu10doCk= =WV95 -----END PGP SIGNATURE----- print out raw packets we send in debug3 Alan T. DeKok@2017-08-11T13:15:31Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d225ccfb445236b2ec5f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZja2vAAoJEH0Oec13Yh7NCiAH/2YHhsS6QLKonqXQtjDd5kJX QSs7zZrIUAsScFfhxP40wTUuRGSCuzlXwCfinxkhlbi8K4AX9sNGHdeKwyJwGnpk tDR20vU9JiuwjLi1RC/Zr7WFGHMP6/UL1e6uEQ1M17B5Mjs9t3jmMGnSXcpkCFH/ ofSpEGRn375d3/hL/0QvjAlbpAtYfjJTY2KCJPD3XG4cSx/y8HcKvhIrKTrACm7u KNBU9o4ZErFK9tbKF2YoYVD2Efta0xbj5YnpLWYmBICYBdbsjLY7x7j/0T7S1O0S uo8x6gvU857g6oXMArLu5XOZvNpl3EYwPqt5rFeptsbN+Fh+13sEG+dhurZpyVI= =7mTC -----END PGP SIGNATURE----- check the correct fields, so we encode the packet properly... Alan T. DeKok@2017-08-11T13:14:13Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b76a8fcc94e140e3dba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZja2aAAoJEH0Oec13Yh7N9vwH/Rl471HXfnJLN4F78kl1rTgd jZTDwhdLpW52XGv7KayfliluW0vdyuA9x45MVrcCGH/b9WX5QmoY2YdQ3j65cT81 UH0OVDXJpONsWm/OPOVb++IVBzzr7Rwc5n3rJCiQC7vDm7JyHCeRcVdcLPn1yaKr Vr34snGZMfxp8BBkwygsk5TuMs0NYlAlW5NSB+1EbA6e7FnH1lIr3t/mIqVJS/ZK G7f7W7oVeHf9KCQ+p7sm3ti9i+G2YXA0cgYSKvOVDgQMI//p8DQekk1O/XhVN4oG q7zwsAYBB3uneqT0/5yuzjVBcuJCnKz68ZqZIyhMDB0r+m8W4m/HNP4jqC47e5s= =tB4q -----END PGP SIGNATURE----- remove idle timeout if we're writing to the socket Alan T. DeKok@2017-08-11T13:13:51Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98ff53b7e878703b9830… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZja2BAAoJEH0Oec13Yh7NihEH/ApVI5V7bDoFK4pQbNcmvgBS OoSdv8lxjxonNNcfL9wEMyT60cXXAtWtgsfZWCjW2XnO+MnMxLjJc4UBk/HFSkJU zUZvgLsaYL5u+VebU2HkQ5JZz3JJmK+PMM1vYpLbbxBZEFHdBPsIA4H0vx8avEmk O9zRYX80ewc5L/dF7uyyedzMBdjygy/UT1iU1EEy/GGyOyAiNlF3jpEPiL9hOs9B 3JOPxemZE2bYVHDQ9JFX24Q6kmIaIYuhtPb++opECmkIi1BxyqGNL43BpappwzoT uup/Yzduz/JJey7MIDXIDsqKRGK96IsoVhYv1E1L56Gbyy4nh7op92VyOxc35HM= =9whp -----END PGP SIGNATURE----- added TIMER to debug messages so we know they're timeouts we should really register names associated with timers, and have the event list print this... Alan T. DeKok@2017-08-11T13:13:12Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3385f5f3a785c46f8062… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjaxCAAoJEH0Oec13Yh7NTWIIAIh8JZ3T3EDS2yKdkCLxo/4M 3TiA4ZBMub49UFK5BPHy8KWlGA109ZsA9lm10JMq0sM9bcBSnWd14WwvRzl3nNE5 ZjM80KYbwgM5h/Z695kKZD+pVU+OZ7l88KD+yj46FrgtN6AuFlfAoYzEMi+GW6/Z IcTCHB5qeox6feMCCAIHVrGqdO6C0ee0DMIc+1+Klw56+l6cdJSO2qlpX+Kw7bdF 3lx4FoON0xoEAwRdrAym7Noms/4gFnJH0Ga4ueVX+2AJ2Upn/hXlh6d7Q7843bbb o3nEDFkGcngfP12dQYCYEGA3nD4oL2Z7Y+iiLEUlzInWP4WzqdMTsNcR4yK5Ugs= =SNZK -----END PGP SIGNATURE----- move status_check to correct place Alan T. DeKok@2017-08-11T13:08:13Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/076e432ea44b5ece8fd3… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjaniAAoJEH0Oec13Yh7NlR8H/i1eSTrUYysEHWE8IQHyrmuQ 8+N4h2nLwOPY6AKHoY6T93cexhoVIRaekdxt9bdGhzzz64mh8laPRcU1KvRe09s5 m7k6HhMm9GDkbi/RehxIH/LuaeIEZj0nLDN545PUsPbIb+FOtJMopiSA5TYP/8gP BmSAnj4l1Pnj9LCLSrfEaS9dBtiqV+MQ5BMPEs5+pwgloeHtOA4IodfWbrXgpNKe TJsXjgmkgieq7ldNxQNgvV5CvDTVpGADbPjegiINRTFWELzpHoExl6kXY8jyLjmj 1JjviqfxFCYD4ZYE+0WeoZLucoIiCvGlu1x2MfgfSJiXV3tLOIdPWu59XY6X4kQ= =Fj0y -----END PGP SIGNATURE----- print raw hex data in debug3 Alan T. DeKok@2017-08-11T12:58:05Z Files modified: * src/modules/proto_radius/proto_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/274bcf530b7b0662196f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjamdAAoJEH0Oec13Yh7NTNoH+gK+cjEFxa+cfGoF7qH7zVAC 8Wrli24xbuKJW3B4M9CoNE227f2gKGkeVfE4KcNsk3qZI3hLapf9L4pTFsmIOORX Dq6UmTa0QQNP/AN56FOcQF1l8aDbD+f7UoEPLiSZI19zru8CykpUrSU2P5jOH807 /g/hyL8jngZp2iX3MWxcZffPMpnC0Wm0odjXqvQ3ODBh1HDyPmkow1u1YlExWxAj wLA26v4PEDQbFb6B+NhIxxkppfHqGPhPF7VMo5Xd84+2r+p+qNmm9sI0fKLejjop DdSjF/lFZNURGEUQ5RvBD1WlbvP5lpvFH+WVqDjuUXkNi0avzmHBUNItclvlbQk= =m2YJ -----END PGP SIGNATURE----- added new fr_radius_print_hex() which prints raw buffers Alan T. DeKok@2017-08-11T12:56:49Z Files modified: * src/protocols/radius/base.c * src/protocols/radius/packet.c * src/protocols/radius/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fe7df0e8e0d0c437cfe… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjaYXAAoJEH0Oec13Yh7NYjYIAIFha/8QdoL8eTW8AdpBBtj2 B1YV7deu78aCH4OzMeietDnU0ixWK23Rwm1YXHUDnDrKUOClLvVQDrnxYi2k5Jn1 Xc+1cpMj9ZtK1nCkxZLm1ZJbIPjwVwtJKc70aBU/vCdhv4thWBAMGhfQ7k8dx42v KkbOLPWRj7Zq9CQOtQm1AjhYg76oB+9bnZTWcWSS4J1hjQpHCVSVX3xiXRjNcXG5 IKb9V/IwFc83mMlBjTZKBkrad6EVWzjDa7WC0jWGoJDooUR+dTuC7MJ4N8g4K0Q+ z8afsr6PitRjGQDl2r3MfCYWZW8yRgZ7yp5hLzuTEde84jniRBIykmQRPxV6iJQ= =RHLf -----END PGP SIGNATURE----- rename fr_radius_print_hex to fr_radius_packet_print_hex Alan T. DeKok@2017-08-11T12:41:48Z Files modified: * src/main/radsniff.c * src/main/radsnmp.c * src/protocols/radius/packet.c * src/protocols/radius/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2023ba53ea7590bca2f5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjaV2AAoJEH0Oec13Yh7NgPsH/j5q5nkeKL3M/DhvQUGeaoJj JHu5xlW1a4R69VDVzFuU9lVGHvjoS6VV19bz/gAIBKBWqiEtaEM+fjNpDdZrxu/H l3bNl755qLE5wPef/vhk3cucHIarwEgjukrM714hwmjGtBdOWztbDmHrlLbkMfA3 7U5XzGi/NibTCddaii8cMFid1wG26kWcmRkL3UxE93DkQf4xnhWfZOZVRSberOLC xQVSIZ5QKHr5irCtEFBgskbzC9O2SzZ28mt2cdI6RDpmrah7HslHswoOgpb9DXRm fOpP+sPrLsV6gH5xH2k/DYt5/on8W613CjFBqtR9vLGgVElHYU2ZiQ9d4AyMDMc= =Zgi7 -----END PGP SIGNATURE----- don't print TACACS+ packets as RADIUS... they're not. Alan T. DeKok@2017-08-11T12:39:05Z Files modified: * src/modules/proto_tacacs/tacacs.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/633e92f20bf00a4a88a5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjWO+AAoJEH0Oec13Yh7NTykH/2wsUxk939QoAvxn6cK7DDkv 9186aphkb2X+EhsDncDoisPR4bNU8ycHYoOK3UTypaNxSuWim+/bQvKqr0AgcfcY l6OAvGOoFCsPnvpoV6jf5pSJy4hsvWexSk8+rd/mOMZcGAc2ztbHrjbhfJ4sgw02 VSPIIhDfJdZqU896DktkJngZbmXhIHveaL88/3frWn1AVuJfItwa/EoG/MYJq9Ty IqQzGxEpouU5kuodQx+bcI42W5vr7vTXoxEC3M+/MXmCyiPqNjNCO6xMIBC0XAj7 JOq/nOhjzKyl7mXh3O+ruRTxnAxDXcuEZh6FwGM5tu1Yi86Qy5wh5va5ht02kqU= =EgNW -----END PGP SIGNATURE----- rename ev to idle_ev for clarity Alan T. DeKok@2017-08-11T07:58:48Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5597f4322ad53eba7538… ====== -- This commit summary was generated @2017-08-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 10 Aug '17

10 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjIrNAAoJEH0Oec13Yh7NzsEH/AkrMAZ6miq/FaSHjG6Zf5ec 5vKSAEC8JHSd0QdbMcMan3vkLEv4zo/P/xxRLYpbuf6gwH+UBtnzlXCjvYEbS9Jz iPB7DmaMYlNWpNgU0seWKKWE1MRh11b/upjcIQiaePPCfR0utZB1IsJ6ugdMl6L2 6CLcQxdSZzwlAP7s5QTNlOpsic+mO3GMHwi+ZBf2yO/buBeAnbzsrEtNfvnIIc1S dbdVKdyNYz3suqdNyfxK6qsT5ffHhliVe69A/swUmkRitULngdvJ6RZmufQrtxXe EngnNw0grEuCTZUwGBX/cwF4RoVDiwgwvhHsc702pyYIgqbnXRdWRUHhtH4QFdU= =K/nk -----END PGP SIGNATURE----- clang scan issues Alan T. DeKok@2017-08-10T16:33:13Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/03a103501c1c4dc90167… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjImnAAoJEH0Oec13Yh7Na4wIAI6e74uW7EJ0j/3yWUSTaRj4 5aIpDizjcttImzCT8eM2U3tx2OHq+tue9mLwbEyNZipXmkD4Yjj9Z3f0vd+f8tRp mY4lAz0g8M71xbAwvCGOgDz5GbrFOo+A4xQaAc5F2wInfaFTv7fipT39gvRac9bd xuUWdxxjP9yf96frKPIvM5HS73QGhf6ZOcEA1RXbm7iHc6f3/t5X6HjYbNMka8PM FGAEmzyGpRcBZGFs4IOVET4cZuqZNt89XC8jAVqhPVelotseVYXYVDPcFsjBAEQ6 5C64LL+307DIGzXdXhYgjA/pzwIBV1cTXJrmRzcJKEdINTcbphIdI9kEuWL4dlU= =8Vtl -----END PGP SIGNATURE----- remove unnecessary assertion Alan T. DeKok@2017-08-10T16:28:16Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48e018fad107f1507921… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjIOoAAoJEH0Oec13Yh7N5UsIAIDKxRwqefIleiycG5NQLaZ+ Hk/cHtbAm1Rl4MEsmi9ZC4ri1eXpoXb/fVBLrjcUPWQTuCV9UKqhHP3Nb/VnYs9q Ni9NNhL8HEFY+B2wHOaZ8JCMwMIq9Oaf90FUNhV0L72+yNuS13oTgu6HlCo3Bi2H 8Fa88iy24YqkVB5rxae/Yle40nZT/0xevBJuzXV2HIkd058QaYWN1JN4t38ESygl qkCgQ3rtaYN0zXfPUT0yaFd0o1DfW7xAZxS3O6oMsse39E+CmGn27TBbnqP4coy/ sK6OamAb9BFiMqcQ189sTaHQjT6onOTFTI++Bc7rs30LEhuHyHPrTBQapBz84kU= =cFrd -----END PGP SIGNATURE----- stupid scan fixes... again Alan T. DeKok@2017-08-10T16:02:38Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c6b73b845dfef39ed647… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjIFNAAoJEH0Oec13Yh7NTHkIAIupjzHzSi3ALJedAEHYDCV7 zKN2XmI4Ssyb0EWHdGOENtcSU0pCQ0Ki+jUja1S3RrOwNiNoA2AfGg65lxZVt5cZ lChpo2a1HzT8OFnGL+ZOvXqALARTuvPc66h1jfF+RhLzo0qGl/6cOsdJMlePxF8R Fz2c2aPlbygaP905IM6jPJMWYOz3Q8EmCSNyKViFz23pdjDazrdD3kL7ESKB9VtQ 6pvELy+M1KzTh5WDQ4BeeNF+ipgxajlUdVPOmlToLIdOLWhNJD+NxskKIABPffJT MiMF5zg5eiM1i0tlDlwqXT/g2WryiBmc6sBUAyvLxctdud2ZI9lcx8KSNU5yACg= =5sJa -----END PGP SIGNATURE----- update Event-Timestamp in Status-Server messages Alan T. DeKok@2017-08-10T15:52:45Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69e9d9bfc48f6a5407b9… ====== Remove duplicate setting of attr Check there’s a reply packet? Arran Cudbard-Bell@2017-08-10T13:28:24Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21da31c2b24acc18f48c… ====== Temporarily mark signal interval as unused Arran Cudbard-Bell@2017-08-10T13:04:30Z Files modified: * src/lib/io/channel.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52e876749c936ae2c3dc… ====== Disable failing test until there’s time to root cause Arran Cudbard-Bell@2017-08-10T12:03:33Z Files modified: * src/tests/modules/pap/pbkfd2_passlib.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8f50bbfdd118676320e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjEG8AAoJEH0Oec13Yh7NKbYH/ia5V4Q+c+jlMkRO8XkP669k sxGUQgQf9bv5V9oplHWqD0LY7Nk/dNw+cJaypSqJSEg5DCs6pjA1iCbgHEvugHDk aEjB+jn6GcRwPUzvT/gTh31eEjTBmF9RfZcHspCxGcar2qQgAWKd4pQhukkd6Tap kzFK8U2JlNnM6aGPdxPFnQH8NCC9RQAME9diZ3yoXrE78XKuhE+f6ATrEHmdiKtl POwTNGe6kV7zaAkQOXLvdY4vOsNT0ReJi295OhE9tLojU6h4RNS3yfMWI/5Dhtf0 w+/FPSAPADI9VDYYeuDiyuJm5WlAmSiRzbr5WjlQAXsCJUAmM5Vz99d3/ZM5RHk= =0dbs -----END PGP SIGNATURE----- notes on Acct-Delay-Time and retransmits Alan T. DeKok@2017-08-10T11:21:32Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6173e42ff8cd81346114… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjEE2AAoJEH0Oec13Yh7NMJoIAJPnCpNZkTbtWuZVi6ow4EJ1 IyV2IPgv+I9nWP0+uZSXH6gZ8+M7I5q1pRCSqce3PhMxhg4lFmlMAVvnzw6Psxck ggOHAqWTS1vUFP4cEuT+S9LZpV5fi+Nsc+Bphu8bHaaLcDbgK0IIXRf7CtqStNI3 WMmNRBEVfiOi5baKwupk5smC4j/b/mb3WilPr8SheSJdA7FhuWMvxrR9URyNMgDH Pm7SedXQjnmcxdy4BVSbt6NUEYakGpMGHeWpQtBDJX2BCMnhz8T3//7+wW2yNgiE EZ1GqkZCq6d6ndgPUWt4dSyrHQMHtWB6jTthPv6bLUu2yJDYpGKY9GIiPOiuXsk= =7l42 -----END PGP SIGNATURE----- Status-Server checks have unique timeout handlers so we can re-create and re-sign the packets each time. Alan T. DeKok@2017-08-10T11:18:42Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1316424cd65574da8ec5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjEENAAoJEH0Oec13Yh7Nn4cH/iOiFE61zCJuIM8NJgBsSAj8 lg6qw8OZIG1Xvw4cmy/UE6QEKO0JczwyM5EfOXj0DMdoqpJMMdpA2Pusx/xxLc9n Fr0z5EmsklNhd2mIuzQo3B38cx8RRBqmOr9h6IZ3k8oalRFjLTd7GJXmZM/qexF/ sjIfsne11/2cG+PHFaNsDjiUrxmh6OhK+3RWfd5kMpvBvGYSReMNUzpChBDIT68G bW+V3yIPrsXKcPr4ex/GzttHmc3Rzxn+HSMas4d8/GKcXoXHArvQNL+4Aj7+Yv4t 1uAJrGgzxX12W8VtuyS0Ume92sdlYhHFHcvC54vxUIRwrcqr97EL7+C4MLfTDuk= =jEEv -----END PGP SIGNATURE----- remove Status-Server checks on connection error We probably also want to stop all packet retransmissions, timers, etc. But it's not (yet) clear exactly what to do Alan T. DeKok@2017-08-10T11:17:57Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9f516c7f4051bb7c4f3… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjCvAAAoJEH0Oec13Yh7NK4YH/24RL5UA4MqqxQ8GQeqp8B5k KtrJ2sT8rsvMmYi/A1wn2MqhfpXVIOkvtD7loMIRnvLzy094K6eiFdQHyXBHVStW qWvCMeKkHcUia4Ch21SBgNDejZcU0xy5TWmFIBUIRu4wbZhJ1HLwvwE7ij5vY2vt cZONBYwkQIkMJ4KoGNFydLiEQaPf+lGhXN/881UxADC98sPrJwwrMrp5AyQZCOu6 wTWBQZC1wklChbTTnqshEqVkPiO1kIrdw34AyAYhcjNrMNU058CCh+2iPI20B5L0 c5mJtAzan+lhHZJAhmEr493TjCuP3Et99zLu8S/WBk62QNhwbXLmImzXtwNPprc= =zgi5 -----END PGP SIGNATURE----- lots of little tweaks to get Status-Server checks working It doesn't yet send the packets, but it does create them, their contents, and clean up the associated timers correctly. Alan T. DeKok@2017-08-10T09:47:10Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7773f3ae76608604572e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjCWDAAoJEH0Oec13Yh7Nw0QH/jPpaYQ4mOzAl50gPXyTcUCc jzV2rU/6pr+UneSpNbg1J4rCQoWG67NSevSTa+9kUlLurXgy/5GqXPLbBS6Hse96 buW2X3kS56J+kOzSZUirQy4AWAIZ/rtg00m6tZkolxSehaW3cD/XGGHpVwQ1OP/R +V+Hnqlj5oZbk1KfzLXOu04jBCzFSXye9lh0+SdUKqs8X0LLEGebHeAbnDoNklvI 73rZXyM69futCm2ehnBn5FDe7J/i5xrKJB/nu1UZwbRb2PXgtQzz6ekyJB/peXbd QVRe4alpc91rd9eKKjl/9fk+o/ZZBreN+3m71pcw/SfH/2dp09lC7oECpyzlUUU= =53Qw -----END PGP SIGNATURE----- most recent notes Alan T. DeKok@2017-08-10T09:21:02Z Files modified: * src/modules/rlm_radius/TODO.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8b1fee0a85e2dd58a27e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjCRUAAoJEH0Oec13Yh7NDosH/3S+rVtlTcoHawloDB3GzUjP FCP5C+VW2u9ClK3JJuBsgKnXP74bIZA0JVgypXQ2mwBRg1v8vigUrZlyArWfBVKp daf+zB/9aSYQmv3pkyAjphwpHlhORvGh5KGZiPp1hCoeuzZSChzT2Hb6tc5eO/26 6uyDK0LjnXR60uRx9G9kUfjghPEGs0Q2FCa4UFkGXNJk+voAa5cyu8DTj8DbDBYn ZqSnuzx9DuiNduwjpYd18Dyi7cSnkqVwP3K0HrSj3JKRoH/NRwhxB21SUClMME68 e5pJ7HjM5EZhkDixVMZZQMQqs4m9GFYGl+4rgsi2CxQQ9ChcZWNRuNcauUpug4Y= =drnF -----END PGP SIGNATURE----- it doesn't make sense to replicate and have status checks Alan T. DeKok@2017-08-10T09:15:53Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ca8d859fb346b93a6f78… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjCGmAAoJEH0Oec13Yh7NnJkIAKI1ti6u9I3SSsWaXKbNxHJ/ eHvM6dVGRxFVcuueVOZJcFlGpQe1JfnBK1+/VPdf1CHlY2v64uiVpoyS/eFRQ768 jw0o1PHCmimSL+S0ZWh82Vk3/4hk/30P9yQHO535Bor1Q6Pw5ljmXCSJnaV6uJhB DxCoL4/F9DWbYBRYeHkjxUVqKGksBsqjBNwRm1/42YOc/zZigvQpAzTZwBaWrlUi W1SVV2pf8mfk5H67UEPpAju3RnZ7O3RFhoDae2Cl+46NF53MpfZwHtN1JqwIIHKJ 8pzkAc8Nd6aoZyqgtipR3cHeI5VbQ4PHB1RUF0ejDlUZZXXCLsjxbqo+3gCNzR8= =4Gs4 -----END PGP SIGNATURE----- Status-Server require Message-Authenticator, too and not Proxy-State Alan T. DeKok@2017-08-10T09:04:31Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09b492bd871c5da6febc… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjCD7AAoJEH0Oec13Yh7NABEH+gMQU95nAc4x/mQEqBnQW2FX weCyAa42MuhHNJdyHs/Y9LIU8Hdj36ZOKuY3VYtXrsM/aMnJtj4BghHwyGhXZre1 gPhJ5wlWiTui6Ebz8kGnRlvtoyRgIJiHWeA7w3T3y5O/hr2OyaMEW/oyjJVFo6Gv t0SjZBvcXLEI5Lw5Rqk55lcI23ODkgiqQrgNhJ/xCko+rrYNa25L5N8FEJUDjKKr LHgO3/vRVG5evrd/+noy5I2on0MLnxLJJFz3pkqdPrlonJwPDscsEftoPND+enYJ huoQSJCJSlnxNkzrTL69apbLPNhHI/lvjdiOCKDzMoVEm76ZNcBgiGG1/0hvVb8= =InOj -----END PGP SIGNATURE----- remove retransmit timers when a connection closes Alan T. DeKok@2017-08-10T09:01:44Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8105fb51c8efa4acfc42… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjBxMAAoJEH0Oec13Yh7NygUH/A1e/2YIBXktaX3aM2gXvXB/ aWBbwGNrTBjZqyeuXhc7Y7FZQcL4bGzihTICa4V5G6xTtl0WgTSzRlZ27jMToPTc yngOoQbmy8jGUhvKtLP2wR2EA9VbXwB0bRaRCGPRtuiIogVSqJlgWzp9wTBeCSon w5ZXfatiwLisHa4thFSwj/XEBvRnVTQ9SPrlg7nOuFW+I1fhve2fL/mqUJdrLOol iA0/f7ZATwAn8OpTQfstpASVZAqNDdVIRbFBPTHHjFAT/5iYqtm45rSeKuEpOGlm cmiRxdd4GDyTY1N3bA0FV1ejp48ebdDsIvPGh/yiGG8xq4g83egdgqE3QSRnI9Q= =gOMA -----END PGP SIGNATURE----- start of Status-Server checks Alan T. DeKok@2017-08-10T08:41:38Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de0b8bbce2308478003a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZjAQWAAoJEH0Oec13Yh7NTvAH/2kMGrt8517rqsZfDnzLmrcO 0bLzzBv71sZRnXEUyHI8Y556AkLp20/jrstjCkZk9r+f0xqRUkPAD5JaHKhInuUJ qPnWD8A0V4C6kGgmGoDA0rkDLiKv/4CdRMB0iDxW4snvsLms/+OUWahOnO+AcQgC V6HEUhhYEr3Oz8jItt7zXfmfIQrjYr5R0fh+raoClFIY/mSX0UPyBeqzxO3qADpO OBir1Y0Fteo3XfLS+oBeAnRfqdIjofXm5S4fqthAfQymtOeEPz83+k0/IYxoM1qk fZ0yPw1/aq1+Rh2DywmSmk/5PqDt3wXw7edZyzu8q3dDqpnET4/7tmz0vKTlD1Q= =d51P -----END PGP SIGNATURE----- Start of status_check code. it parses 'status_check = ...' and does basic sanity checks Alan T. DeKok@2017-08-10T06:58:09Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/acd1f848787ed30906e4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZigpBAAoJEH0Oec13Yh7N64MH/RAMNPL7+c8gQM3hUbBNjGiD kAcysJCG7cLxTxW70JvHZcLTfR0CwgTINP0MAzfwG4ufSeaYKtRjW3y+KCYFLXq2 62mFrvprNJHcGy/5525V+frVrRyn32isVYpvTiOPAjmFyxh75YjFYoPUMIUB++eD d6nGC3wpEBrOd5ZBGEurut8Tb/8exKR7iXcrvCIUksnh+03mBneuJoeR6djWxN5v Kja/E30WtuutjvnDMzKgt9SJ7eaX4/vaX5UP3seLnH054NN8TjcvVIuFhc24CLfF aG8Apaoy6C8++Mbf7BC4bN2sJVxrpbZVCmtRIk8MpzSnRmQgggsWkcLaekiKtf0= =Z9pz -----END PGP SIGNATURE----- comment out "skip signal" for now it works in debug mode, as we're single threaded... in daemon mode, skipping signals when there's no "next" packet means that it just doesn't respond We should fix the "skip signal" code to skip the signal only if the other end hasn't ACKed our last signal. Because when it drains the queue, it notices that the last packet wasn't ACKed, and sends an ACK Alan T. DeKok@2017-08-08T18:58:22Z Files modified: * src/lib/io/channel.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfbcb2fae1c72d530729… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZigleAAoJEH0Oec13Yh7NtY0H/1cWmly79KcrYkm26gGj/Z7w jV0cfjh+UwCOs9b855MTVp9AvDjVJWYcH1PQ+wvaRD1ABsTNkjNLJX+7Vwnjk3EM J7lHRAGNHAdAqgEHDKA5E0Bih8QCD//MS5W12RygaqoG5/Fdj9BOK5/aZgtxEuop HkUVc9BHDrP4cO9Fkh85GboDhWanhtWkNoc7GzvOQ7fag3SGInBKksNLO8DgatRm OBHjUZaFWrc62E+0/3RAQtnyYWQu1JYztZnfug/PHh0sWYS79UzQcfPXAex4C+uC 37iC+AhPfhKnCz4cGwjviEUVyMov9ESh0PgmhzawP44WpyNS5wbjlBEIJZAAsYk= =iBI5 -----END PGP SIGNATURE----- preliminary implementation of zombie_period Alan T. DeKok@2017-08-08T18:56:22Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f2684828e4751479d0e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZigkpAAoJEH0Oec13Yh7N5kcIAJHDYRJOap/xIAU0PHjFVgWI s+yJDD1ujMjvTdGrFCZ3TxHisRWCyrt2VHYFeK+UevrSjt8yrNso5r4omYCJBUX5 UqyXZPUdHNf88mHbvyfHRR4pmZKN2cFStYf5wT2meB9xeIJQYLUUHzX77gU3MHvb 24wflx2bEzCj4FkqmZ6LLJNe6hSgkC6CBFcoPoJEt74PpDbvMnR2A+0IgWqlQs5p vYhDRnD9yAtLvUsFUKTW0HMsTmSti0kyoD0p1W0MgYlWi57sa5HBjNfHqAxckX++ kr+a5eKj9YNS+1qt4mNyW5bZdmFu+bMqWQPWsWpZEvHmItAtC61z90UAT9ByRtM= =GedD -----END PGP SIGNATURE----- reset idle timeouts when we read a packet. which means (usually) deleting them Alan T. DeKok@2017-08-08T18:55:36Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8bcaa4414e0d2f9f4220… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZigjOAAoJEH0Oec13Yh7N8PAH+gJ0tziVfCDxbuA/sa3Zko9h uAHrCgY0TlEBkyU//9UxjC8J34JvpMWm844OaLZVf4s8JXdMN7lJF5lmGfL/rBnX wZTklc4aMrDmKf8W+pcvo1SXj3PqEOWQ+TpGxv6IKdhQpPSueJCBd+Cdl4so5asH 3PeRz69JeAIn05/BYKx8XdIqZ+SBaAACK9aYXponCpxngLrtjP12wCoqRPTD8L6x Xa/U3MicKKiBuqncE1SGGaspEL+CHNlflNq9dTTNq9QyIsJbpwNALME1QU7YL4SO iTPojiF7Kja5fkTzsYgyd+nmajZjROl9vv78xA9jD7JsfK1YKUf3NEhZTofaOP0= =zGbp -----END PGP SIGNATURE----- sanitize names Alan T. DeKok@2017-08-08T18:54:01Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55a0583348b0e292e916… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZigisAAoJEH0Oec13Yh7NxK8IAKPHBWSNrlzGpJfDt/U5yHov jvsBvzuA9hW5QKnMg/dN0ubGFGjMSO6csJP2O93Bu9CExNziR3qnyVEYnE1rRIOE Z5Eu0HuQCdp38QDoAyeZ2KGi9b9e2Gx3CHMCkD3+tSm0lWYXT9zU1a7kflXd8Ux3 XYZgPMWggTEhlOQt95uKQzfn1aP/nuxcnDgNu3+pQlIXAAbjWqiWQIFZf/jV2c2G p6Dlq++lbXbNix+j46WFnaZXdmpFwc1MCZ0PQZ+pHYFqzNlhD6wwMn1+T7Abx6jX BIgHd8PNkQ71DuNIBl/EFuwMzBGhf8rWkd21KfO8taJlQOt1VoVQPHgMidv/nNg= =309/ -----END PGP SIGNATURE----- add zombie_period Alan T. DeKok@2017-08-08T18:53:26Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02d59fb3622a6d5daf9b… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZigVFAAoJEH0Oec13Yh7NrJIH/j3D2llO24ue/49XQFpuy0qf J869FAP+mPcjO7Gdf7QYCkmg71KUuEqWf8CgUVss7fwuAzWd9etqjQ0cPRl7otMK LmAsCzsI85c5E05OSx7CViipL5H+cFupk2U34JHzUmve3J4v/TJFw/yy5eVXU/1q D2L6oQFE789k2OIujcce9vEeWJQr7z3KCwTUOCXUMu05sbdWGT/cW5BYkNHqszV0 SnhIgoLmQ0x+YE3E9KGfVQxkANswoa5n36jUx1XerTKKYvOQrjFLRTXT3U4iCvj3 kW+BWZeDyCL8a+8qHHJdfTInTeZg7SP9xSaFFT17FDOgOn03DGf1v6vJfBwkeWg= =jAhJ -----END PGP SIGNATURE----- it helps to call write() on retransmit Alan T. DeKok@2017-08-08T18:38:51Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4111f45e8c2bbf0cd62b… ====== -- This commit summary was generated @2017-08-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 09 Aug '17

09 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZi0YiAAoJEH0Oec13Yh7NggYH/0j4acnosCM/9THvpzVMu9Wk qkTIOALPsljI6WaYMTZ5usc6fthmKtCXYWJHChkXCSYTf9SpIhkSCyTEqjQozk8P dqfRMT60AqGd8m+r+t8M5VoNS2gsZWayDn8B2TuVHyb5rAWk07p5+8R7X0bJisjB eUP0mRwR9HonYcb50toBJam94T5K+Zea6ELM778S/z7ubdmfJVgUbqF3WRLNk7lh zLraVT4O+YE/KOTfWw9AjmNDOZKB/Wi3vcwtgJIAveYa3tJKQekY5cUoh6oY9zsS E43Ba1DOATQlRF+nL5z4q5rURoLH1rw+j48W4FGmteMFeAe0/LvqtWwTuXjzli4= =ln+w -----END PGP SIGNATURE----- stupid fix Alan T. DeKok@2017-08-09T17:27:49Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d0244a31097f95e0e0c… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZizYzAAoJEH0Oec13Yh7NBrIIAIrzxD3EztvVdboKBQvy96t0 kZ49WkGIgvwsvZGCDMvl5s5KVMsVJbXXUKdzOj0FaoFp2kQhi17Xd7PlOLMFVGd1 wlcr1CjLhu/VOdnnRfpYe3HnSOuSGvPMAuoVUKZ451v2r8Ph7WzjdzziVwFa9eeu PbfuNjTbz5CHX3lRSaJtEXyY0TvM78Kh+OTkafHmvMOVk3UdRuac1k1Yx2+5N/eX TvUk+5zSsjj7pazzs3Il2BDE/0OSkgY8g80DQadMaKB3r3xJAdMvfusH1F2BELEs kZygeNaBWiNrEOjOYCqt6GHZbP8SPp/Ge6OwvM2u1tH1CihHCbjzNDtGr8GQl8w= =H1Hi -----END PGP SIGNATURE----- print out ALL of the State attribute Alan T. DeKok@2017-08-09T16:17:44Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e1835af2ec91832b927… ====== -- This commit summary was generated @2017-08-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 09 Aug '17

09 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 08 Aug '17

08 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-09T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 08 Aug '17

08 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZiXZdAAoJEH0Oec13Yh7NHqYH/2aUZpzQomd4z9zMaoae+1O0 IRvEuHOgzvi+yr7P9nDoN8zMklPNFwN8nsDGICWKv7cwsG0In0dgKHA6HVpmIcdu XkEkWEflBGM1Pc3P6zkVU2Zb/BESFMDpv9ISbXUxG0tQvenk3PmsrCqxJCyceu1P h7+rM1v7PZBpDPHB2mmKWPi6zn1QVTbYP+xDXOvekCFfeyOKe2V9BkyXA/BH/3on m1G7jNcoxCDoCD9fH417xDE6lvPGJcGtrf/7MWQATNzsOCw/yGWMW6DMFnBvB4jN MUiATtxSfQUgawiU70/a01iFDZWUia07UyJg+CH96Ao+ceaVtnCCvpcQoWthk64= =Z9d9 -----END PGP SIGNATURE----- timer events are events, too Alan T. DeKok@2017-08-08T08:29:12Z Files modified: * src/lib/util/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ff47894c5292f6c6baf… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZiBn0AAoJEH0Oec13Yh7NDpgH/RWrMgDmOPhXoF0jE2l54wHt L3F/ZVyEptcWXDbIxPXKiQxN7ODsafs28vGFhkGrtt6zX6in8kThFVwzH7M4XPQZ pJ85nLnpmT91+cvSNZZjQ8ij/Ay3e/I0U0bedfPoaU9y31DuPkdQx3ffcyOneh45 PmyiJyRELLKDFCQTIkh74yA6TxOXamThZ2z2C6js6PputqxCsq4zA2vigxF0eCkF 1ild9obuopEC9ZCKkGBrHxBgnx5rbrUx+17iRBJBXjRd9/ZbwGtEzWtohjrsxSwC 4OBu46JhPOkCR/F8LDbNFLKgAmDY5c2noyh+2VaZbvRlF229UBLnBjp4E4MZRLQ= =RYwb -----END PGP SIGNATURE----- update documentation Alan T. DeKok@2017-08-07T07:42:43Z Files modified: * raddb/mods-available/radius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/facd33a59e7c16e0475e… ====== -- This commit summary was generated @2017-08-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

rlm_sql_oracle: OCI_COMMIT_ON_SUCCESS
by George Chelidze 08 Aug '17

08 Aug '17

Hi guys, rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c: status = OCIStmtExecute(conn->ctx, conn->query, conn->error, 1, 0, NULL, NULL, OCI_COMMIT_ON_SUCCESS); Any reason for having OCI_COMMIT_ON_SUCCESS in OCIStmtExecute() call? The problem is that any module (rlm_sqlippool is a good candidate) relying on rlm_sql and using the concept of database transactions will have no chance to rollback, neither it can provide any guarantee for data consistency. Kind regards, George Chelidze

2 2

Commit report for v2.x.x branch
by announce＠freeradius.org 07 Aug '17

07 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 06 Aug '17

06 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZh0OJAAoJEH0Oec13Yh7NqigH/j/Qmodo54K4ouj4uR4qeumQ zl+k0l8TorvitS8K4vDkPVEt+PDm6QCZWwuT2TGGphS56Qqife/eygMBYVRnqSm2 vR76N25OCFjIgn1G6swrYj27tUciIpM18pcdmNiiSHvDvU/i3Dn9WylG2b6dZVqd KddKzPJ9Fk5OFn5FhTXtn8HQV+uQaC48pUPavB6PWNMgHJUWWe0bptIzMIUvkZ3i uT9VHCvcG9BsFsHxfm0aHX8gH6Y25qFRxane5TSMaL9FKCSuubaIZkb1sKkFc+Kt QPd5BI1QvVG3sngEdbIIdbg+GgKlR+EqwZHBqFaE7S5UBo6S0Kco+WgVwWh0NNQ= =Qy9f -----END PGP SIGNATURE----- check for possible proxy loops Alan T. DeKok@2017-08-06T16:27:47Z Files modified: * src/modules/rlm_radius/rlm_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/229ee38e46468ad124c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZh0NFAAoJEH0Oec13Yh7N97sH/RomPOX70jrSa2ohbmjIe0AX mvCbwVrwTzpaE3IvQ/yFJXTmHyqdQcVCfJDmAaFa1QKj4nDpb7FVmmWhcqU86HMi RHeoUdP3+u9gs2s4LpG92chuVPUFtMV7lNmHPWDYYZi5GnVeDUzE9Ye4WuMe4Aqq bLRn0QZisKJ3OWcTX1zBsEOjJX9ng8Crq1iki8zc3ABjhU09NfqBCnRtn9OzIbsX SAOj4SpLCLW03VRgCSuqQRYvZHJBgfFwohuHhvpi6v/syPoNd9KKfkY6JisE6cw+ Tz6Zw/Sx+7/aI4vDTvMIkr+sZmkbNeuKSr63vPK7wSQ467Z3wlTd55z8EK/Mr3I= =qxeb -----END PGP SIGNATURE----- clean up debug messages Alan T. DeKok@2017-08-06T16:26:36Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff2daecbd1722d81325a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZh0HaAAoJEH0Oec13Yh7NK04H/3vyaIJdV13b8d7XO/MrMGFR VvFLWmeWq0DD78Gqsw18pBw7juDckaT+oAvjIhGIiYsdlF+mK/jvXSghRIAsNfQN E0vcz/1aiZHG/CO2nNqkToRpQBm0a3Ad2rRqn+9xsTy32olafAsgaYziSKhKP8E8 QuC39JKFzoyvDMSYGK7xZUXcyP/cn9h+Yhhjv/Hm03RYjhWV+V9fHpD1yJc20C5L iN4ABuMgp+u6b6ZBYtQDQ5lAgW2HCCxWvounoKsON79zqrUBkTme1J23PJZuE4Hp 7hagkpR2sCQXpJJ19iY8YWHF5wOy469NjTpWFczSinqlDz1IZXJdWhnykl93154= =/wwq -----END PGP SIGNATURE----- move proxy_state random number to main module Alan T. DeKok@2017-08-06T16:20:10Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/503fc4f5e3cb6416e626… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZh0FXAAoJEH0Oec13Yh7N5FEIAJFl1ED9ir6hGLWc8HjEkhXB lkDPHvgkojcpG9+S8GRjUWSoExmAqqvAM/ZCLD0kQNYRLDKAbxYKr0EMpWjzx8lG PKk8cVmLyp4p5l0781cMsh5d8YAXOconDNcnl8l+dvIBnoEkKKN6eFlCwj+HUp+F a4sYBk3aztGO1Ct7u3oxfmCIusyn+ZJMZ4+IuTETHy4xDUZBAZACJNXzAsPCaipG UjMRG2+/MZXfd8KM9O3/DaWWMWCcOimCEuFSZ3QlQo2GMntXu7sXRneu86q7tejP T8VP5sAlFbewrxLyTt0yIuAb9TXNPJrNtm9woly4TDu2riQ2ED9EBWuaBWNn5xE= =MTOI -----END PGP SIGNATURE----- print out Proxy-State and Message-Authenticator when proxying Alan T. DeKok@2017-08-06T16:18:30Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04323aa21045126bbe6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhzqiAAoJEH0Oec13Yh7Ncp8H/12OLCqQP3iYlWXIVHmSOlYt IqnQPrUom5O4EfXo0hUFft8aLr072F1ymY+G7N+2INFte8ZMMNvKtafVRTrwjYlI AA6jV2jkAyYDWKcVdTSNOpDZLXHKPFcYfo+DEoNjbyi+afMx+7P5zmfKYO2bvCMj vj5pnQpudCDcTr3QN/3mvHJiaZFh6qf/pJGNhlHyYIsjWILBH5NDVnFLTB6HaFQ1 934s4G/Jhc/w34PPc1MMWYAnV2P5xFH6jq1RlMnCbZbYxnT5lUuVX/Eq1XPhKbQ7 hlME2JBG55Xzxf9cB74U/89X+uc8PkAq5Z7aMPvRmA4/7EX9ZqNSeMGrPmNcJnY= =HR4H -----END PGP SIGNATURE----- update notes on todo's Alan T. DeKok@2017-08-06T15:49:50Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c45083e6222bf5f986d3… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhzpKAAoJEH0Oec13Yh7NtQAIAKdNgBxqjyDdbYYxbOcboIpG 9PXC5TJGUaUL/Cb3SFfsskZ/+HXqwMXBB/MzRTzV2TSpqhgy5a1Y0MYZUwoMxA7z zgd1Is8CFCcxRxQ/kkayBQ685xdEK7Gls/s5SeSTyMlxeL+a+XxhML4C9R8FknuG BMQmHDZG3uAiLjb9HVT5BJb/eHiqhH7JR8lRHm8M9LPqWD24iIswCtM9H0Bwhojd uRdtoUG3MKcqYHBLUgJpINEe5aaDI0+yVzk6J+g3tyPL3TvXskB8CXbadLT757EI OSlAucc/Akql6yZF37hR8Mtq2UifN0i05bnaWDfLLHEoX4MXfdwUvJApvQL3tKQ= =4MzQ -----END PGP SIGNATURE----- print reply packet VPs, and add to request VPs Alan T. DeKok@2017-08-06T15:48:26Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7b6a94db6fdd1a21b7bc… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhzmjAAoJEH0Oec13Yh7NSdAIAIox7TVU8ssDyJau4atMETXj p2k5FdsvhDtvqrT9gun59Ym9Sjvj4+MPaOsSu5UNH07eODIP9peJJkXJEzd68uoI xIQ28YSIMwaWPf2a5b53qESESVFi9Z9NVojnorD0/RVqLpBt/M+X6OB8206eLFPS JcD7PArFooGAI/O9qCPKedzjXhj/hB5TSt26+Y2MZeCJORtmAnYdkrLgxwWnIswF 1pFIcnsUck3/wbxUZX8fxi8AWJNg6ueeKtsQz3rOlzF7LIjroIy1TRa8aeyjvg+d 9e4oeCxQVtc2LyUErfJWutv/MnCU+fFfh/Z4HfqQVUSGUEE/OxhxFASTT3lhv/M= =pwUu -----END PGP SIGNATURE----- create and use Session-State-User-Name so that we can cache the User-Name in Session-State without affecting the User-Name in the reply. The default "send Access-Accept" policy adds all of the session-state attributes to the reply. Which in this case would mean User-Name... but we don't want that. i.e. we don't want our internal policies to pollute whatever the user wants to send back Alan T. DeKok@2017-08-06T15:42:29Z Files modified: * raddb/policy.d/filter * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e7f19ff1686bc4d784c… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhzWOAAoJEH0Oec13Yh7NDAgH/1nblbORe27hvhs/aio4K3WR N1T4GAlAvyxdZRyqMWplSU+WnO1Pf1DZu8hrzJQ9mDQmlgXNygNIry/EH9B7yLjD ehkAY8fMa1IpVSMGMvOOxj6yHXBU7JGycIM0gursyVJ169ECa2Rlaa7MzOn5kJfR o4kSTmpoXrf/dE8jm9eWBmmHkdZZnSon67M0J9gE48q4KEQfyc7BSi0m8mvueBxP F1DwnP0j/41tvcFuN71HRHunGVUVxmfWiSfwk4x7ymbgWvNpIIwUoqttIqmb6uVw /pH1CNaF54pfsSRO6WopejfVZG8g6/zmfjHV1CBMErnwJSeTYEsBssyL1SzxLaI= =vAVb -----END PGP SIGNATURE----- add base fr_radius_decode() Alan T. DeKok@2017-08-06T15:28:08Z Files modified: * src/protocols/radius/base.c * src/protocols/radius/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d850bf16f3a7e910ea8… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhzVbAAoJEH0Oec13Yh7NgfYH/iamvG4D8a705FkOwbZKRbIz iv9j7/P6TYqbVO5/Z1lGgHGcWpvtT3RaiuwFRzGF/lI7HNXWphc5tmeHe46U/9sy whyt1ep2zEsNhSSBwBHS8MOtxuKpMb/u1dc8cX7VttSILpaR1dNhUOjZlMcJHPhw MxTlfzscExcTZ8GZNBhhrB5CvSbMXWN34oE1AKNxdHGuCy8JyG4LzT4DtRIUtbUW phxsRhNjQqqclX6Ci3bOyN1yuI5//ufT5fKG/oXJHgg0R/iCHAm5B2I3LGPMXfy3 LshhpkmFfhT6mo/cPrc4Ol1pRpWwUqhgKUl9AlikmPC/ngXjYAAIvlBD2vIi8d0= =ifkG -----END PGP SIGNATURE----- clean up duplicate / different debug messages Alan T. DeKok@2017-08-06T15:27:12Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/214fcd7166aae8161510… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhy43AAoJEH0Oec13Yh7NnE4H/RESQJltk76vJCdcYlCkbsuw 7wP9MV9eqdh41h2SQl2uVpPgQSALWqg/Ry7/6M3L/7VSi8OiIdZbHG3YxHPkyHmK FSLvMDiUWpUrK0fzsQecgnOWDkdFPLs2G73tLVB+7uVJAu1jMatfa3FeRU2qIFjA 7UPKmmI0+2zEju8dtEV/gCFyrT01sPF5WdneN/fotLqrWrcTUl4t+6Jz+Ct7XHXc f8iHx09YjNrAPkj6LPxEuwM0/TFy74sesFMhebP4E3SpB8l9uwMX8GNSazb1oxOd 9QiGjtSkkNwCkJH8DHRP6B3v1K105XkA+t7MRTuzM0sh9bl1ekqA9+sUIyBp3eY= =NqZ8 -----END PGP SIGNATURE----- allow replies to Status-Server packets with provisions for future pings... Alan T. DeKok@2017-08-06T14:56:41Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2b1b84fdec5739ec0cae… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhyqPAAoJEH0Oec13Yh7N21EH/AkPlH0FU6c3I2JP6zdjBs2g oU/QjZpJxAoYo66da3XAKGa+2Cg5RCGiz4VMrvWtMp/zax5GJXAG6RHOAYXL2kXw uru7MmuTGmYKOQakl+AGJVXPadfW0ReKkZHXEt8P5c8Huju4xx0oHwSwf9ORoopS zFTnq6VEvwy7mL34ewjkdPsqa7XeznGW3KzF+r+imWCoOAz6oVWtAnkd1/ArM2m2 jVsG40AIyzh7oZOFJCNXEdDkZ1cnBbmanjFo/DxDev5hAXDPi8lZVyc0e0af+mU0 I8lhh4iSGrN/eUGXq7EEQoWzwpslBGdGdeZc7/mYH7mLEqBqx3uu+LvX9Cf7++8= =i0fZ -----END PGP SIGNATURE----- Allow Protocol-Error packets as all responses Alan T. DeKok@2017-08-06T14:41:10Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e08167177997c133f77… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhw6nAAoJEH0Oec13Yh7NoNcH/3LzI68Srwot93cpkuFX7x/y CEAj8EakVqj4JV1k1wtw/7tSLeZQ7veIZwIsDRbf6eQkdHgSAZ+wzOQWqAJLURiz T/Hx78gqAVc8W4OUqLsWLPVLYKLp+TFIVDaQKJ+ENKsyyY4Fm0QOwYXKzFJfHNoA fFuSblDLAoH+6fCxLKc+fCpgSzFY66FVRSNqXDYDd5lK4TDI9zdhQWlVvT5c+BaK +dbIZLJT7CJzLeK/EQvfQ+TG14rQTSxsDK67/8VCKg30RDKEq8Q1YbxOR/JtQ4iH XolHSXIMCv4dYwDHuHioadbO4loOyBw3MQhpkZT/GQeyTtWrvXjONXM0GR62QEs= =48T6 -----END PGP SIGNATURE----- check allowed return codes for replies Alan T. DeKok@2017-08-06T12:42:14Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0223511706d334f48b0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhwtwAAoJEH0Oec13Yh7NoakIAJXCUoKrATarcOedZADihzLR qSXPjba080OpucGBj7yCsa7c979KHdbaBc0/hEIoCyHWZkHdpHms0/zjLHT7oaoS A9V7wpGkVQb+7fnpRN9KRwN84yd6JY6syoxAqNGkcKPzsbwXRh/wKo8Pz72wH/6W qbIy61VxnWfcfrP1S0XfwZn4I9VHXOzQbBAAI3su9YDv5NUmVeUmaHHpHDDf6RIH 2jftZ0K2WluBD2rChfGr8elcUUizoMfP88w+xDn1tLun6Qh5jbqiazhjtfC0n3nF 2gTwJo+cdekqqFEzyMjZBGiFZMed7W882jn5uOJx/gNDlVCedW9fkXdPqv4laiY= =5ueK -----END PGP SIGNATURE----- set module return code based on packet return code Alan T. DeKok@2017-08-06T12:28:24Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a4100692a6707ea551cd… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhwmuAAoJEH0Oec13Yh7NvkUIAIXmtGToaFIbbuVxZWhg3M86 kG2qQ1aUNpKk+nkD3Oq0x0SLOeVP0CnXovty6tp/kuAdRzVO0waZgQ/1qz4cJTWV RRYPfvfC9eaZwsvomVcLIaYM4vwUaskANmAbNgE5uAUSGvCqmyrqAKofuo0sOyQQ 22c6y5wCulZ1bEdIe1BUEjVcq6viw0wEPoGSKQFUn8s61xkPPFeI5vrAp1gUrTln TioU/JDfxHNLMmlKezSD0M8BTOAjSYul6tHBHJS7xbNTOei2t6p/MxK8Fz8wuhEl ub8MV9OTJfKJNfLrK/g+COhFR7v1uxvmLyY8F9OkoWgn8nDSv00aFg14hfAB04w= =Zn4p -----END PGP SIGNATURE----- try to drain the socket when reading packets Alan T. DeKok@2017-08-06T12:20:52Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7673f58156253daff324… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhwdtAAoJEH0Oec13Yh7N5bcIAJBDe349zQZQq44VSXn33CO0 5iEmBDYyNuW1G/7ukAc1oXoN0s6fQBg1awDZj+heDT8vEI6WPGIXNI4qHIuY8kIL 401LECS2Rnaij73h1lrEImGd0nkVGRUHAWRJh5ygXH001iil4r/WXy8eATceL+B3 23VRnbYYYGlKSztepx75VSMbZPGv/3vSYSSg39Sc13fCyYB08Rkna+yR2uyL5jiS 6OAHYgVd0midwv+dCfAkK8zYh1AdVHh65+ywVWpz993YHOwlcd08vhYJZsHYR0sn 5aDDD/K/rjLP6sBzHW2LAaqv9SAYMYIMsPJfcsRIYph8V4YInKxcDoHWuXptc6Q= =BwAn -----END PGP SIGNATURE----- set c->pending in fd_active Alan T. DeKok@2017-08-06T12:11:24Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6609991166c68e2f04be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhwXVAAoJEH0Oec13Yh7Nw3kH/1JxfiFaMCiKTxSDssNHZiqQ Pp6Pc1SlSLrEmreS9DhjxKDRsyudlVQgcphTGk9lf/dZa1f6ss8197ZlLbuI1LmR KEKKiX/2ZWLJdvaud1gzV7VTNlhAmGY7aYruWEWXUbIoZzxABLBJSwDmRCzdQjEV F0yuq2p+fxRYPuPpzw7pqqox9CSUBDdY3ihWCyYjm6nHHVMmB8sST5WuhOnaUAQ9 WA9u1efQxN89zcmtszCt5D0kiNmaElERkVzcA3sHbl0gI3w9dEzTQDaSkVtIkKZd uYnPO8dqfYB6gS35RRaCG3IcAkMc2VQhEPSSSieW9HFRnXW7q61ObVxogvtEQHg= =3lqV -----END PGP SIGNATURE----- update "write immediately" code so that we don't call yeild / resume when replicating packets, and we don't flip/flop the event list to set it writable, call write, and then set it not writable Alan T. DeKok@2017-08-06T12:04:36Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius.h * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60d9f0967d8d896f583a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhvwMAAoJEH0Oec13Yh7N3gYIAJKg8hHKNTSs6K8Tk99gx94c JmEbsWcyoUClYfxs1dDij7DffuV0eTa9zSqFfRXrARe+2bmFHnflORVIZz592qoL 0cWuotfCLpwxte7CEu86KmYVocVwZvLRohUy0SCbsZAUQaGJwQJzDfOHuEl9+FK8 1Z4XNacLaTtU+9DSEJnwn70MfgppcQHtuoIHLyzEB5fij49mwCL/mLcXnef/qPdC 0fn3IL4adwf7YIv8GvPkV6Vr3fpJMxkla5RVsLx3qBaw/KXsT1JHucPx7NbYomVM hGjxLt7VkL9WvWJiZsjJ7VlAmWW1RhPpFsPhghIg0iAbBjHdjorIp5KS/2tM5jk= =LQdl -----END PGP SIGNATURE----- clean up idle timeout logic on open, set idle timeouts only if there's no queued packets on fd active, delete any idle timeout on no more packets, set idle timeout again Alan T. DeKok@2017-08-06T11:22:51Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/872805e63e54cbb3a153… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhvWeAAoJEH0Oec13Yh7NBAMH/3On6jzfjz14Hnoco3rVkxui pzOomDcYw+qm3zrrTyAS691rFkqHh8bLmIYOGZTdV4ELIibMsGdhaTN2OVliHYpX Qqo1cJgDEtd3JAeA0wxU75cPT367PrnsdlmuG/rXTmvBhmvm4en0Pj83n+UWzMEj tHzkWBlO7/M2ISdqI6qbTw/fM/44G0oW5Ka2VCynuAUCvNtWd20DWhegq78nNgDt kRZ0Sr4P6LTfIsCXXlWBofEiRfQG0EpxGA492qeK7UQt7NnX6FTbCT2O1RYJ7K5i /N1c98hW4kitzs7w+YBJ/wTaGAz3+DuzCyfOPS87KBvcdLn6WldVFUFJe0UqOEw= =6LQG -----END PGP SIGNATURE----- DEBUG3 output, and return 1 on "please retransmit" Alan T. DeKok@2017-08-06T10:55:14Z Files modified: * src/modules/rlm_radius/track.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/319f63615bb9e58ae6e4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhvQ/AAoJEH0Oec13Yh7NQUUH/1Ff+896cG2v74kaxLY29Uyo pjsPO9xbDQ2VF0j93XFDtQCSD2SuVCiokYZNy/dLbw/kqSPB8cux3+hN/FgeoOeZ QTEugKc8I9HbIbfAATs7aSJ9aOjJ8+C9hJWebMVsgylNom+IS8P2lU6FlFhRTOAa OZW3pHVSc/sVhuvYVfcLbBcD5zI/yokm0ZCmA8i6lMUBC8gRN7f9+73ZEt6w2SCe rSOTjprHKNOISHZz36GmIJ/6Lr9I5+pikFf7UrRPHZ6aiaAhzlHWDz5DL7q1lu4b yupz1NHvMBb54fkBOoUPUSs+dNSTCGuItkewuCT0O+bd2mX/HSIMKb+QgF6sqDI= =+x8v -----END PGP SIGNATURE----- re-set "was_sleeping" if there's no data read from the channel i.e. when the network tries to wake up the worker saying "data ready", but the worker says "I know, I'm waiting for requests to finish" Alan T. DeKok@2017-08-06T10:48:42Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a2c9c3e8795fc6ff3af… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhvIQAAoJEH0Oec13Yh7NjSQH/jS0tlSu0yHPUeAqTXKI2C4+ /H4n+6b9dhY7Z/0Rgm/zBvoBRSIxC4NF9KEgp34XzqgtZian/BGNy5uC0lC7xkJt VNrknr6I6sYqfTDw6pknnfzKDukS17Kl+ayYYDiacQZyaIDki1KZOn9aKOf7kG5L NWLRB9cK1AVGLR2rjpTtOs09CNrIiw+q59ciDeUWG4Y6OAzjHdZXUa1jY01KWXYj 8GTKKUZZ+E5CRsjDgGKTIGo9xwsXL41LZ0Upn8Ew7qrU7AMaNDf+BTIY8cNGR+92 eZwp0PKeis77Lsat0cupFB0cC0W/v7NaMFsrfCVXXT8e8A3mtjMAkm13EldQ1yA= =j6Rp -----END PGP SIGNATURE----- check for reply:Packet-Type, and enforce it just before sending the packet, i.e. if the module returned "handled". If there's no reply:Packet-Type, set it to Acccess-Reject Alan T. DeKok@2017-08-06T10:39:41Z Files modified: * src/modules/proto_radius/proto_radius_auth.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be1604a29f26a4fcfa60… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhvHnAAoJEH0Oec13Yh7N7q8H/ipnzFlYDK3AtXJD6PSrX/ID R3oOoL4T+dQ6zAWzlxpsYmzh/2sQ2TtjQWPy/nkmrqz1RD4cMRZR5ejBP9X+ev5i gGSce9jOsEKHlzceQjWUa/fKry8Cq5nUuOkHA7MMRhIbiPWwHKsgGhq34KVSjXal +HtYuLYyFMmC76ZWeHoFxezS9Gie6VrHDNhdIkk0U/rDgBcpiXybLrAFiwN5FSqv JjS/xX8hK52M2W6kFSD0CKdtHcJFXzVBnqrQXoQ5IqF3wqPphMOV6GkxKe8nsQh1 tjEkLU2lmBiFS86pcz6YxamYncRJtezETlk6JAK+aY5We1zyH5t+LnGFHy5fzrQ= =r4DX -----END PGP SIGNATURE----- enforce "do not respond" policy Alan T. DeKok@2017-08-06T10:39:28Z Files modified: * src/modules/proto_radius/proto_radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0fad23212b9bb44bdbf… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhu5iAAoJEH0Oec13Yh7NXQQH/1Kv3xX3JuYstvT6XqiDhJUQ 3W+rk/RdvxC+57KCW79QvOPH/IhHHGL/L4NyryX4QanOWmc17i1VpvCOJtCTVHWV QvDYTyUSIis5ntJt2KoRlDyacjaju/LATJ58fD4KbZOaLZAIEx7zODiuO4HOidb7 1HhFlMAwvYZgb0jZt81z+kFAMK1iRiauxeE3CpZXBMtGXiMsfjiLV5hS4xLxzUjt ldbi4uytXHs0Uy1lD7tN73nfnKlF3DkEKTjq6ifxHDYO0BmRr4k8oVeI33Fyj5Zd uOtVNujC+TgJoOCdFQH00pJjaaSHGdiDDxA5D52zwqEOnXG18GNRXB9rCVC/2eo= =yHGf -----END PGP SIGNATURE----- add Do-Not-Respond packet type Alan T. DeKok@2017-08-06T10:24:21Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a6afa4a68e0b8f4a375… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhu27AAoJEH0Oec13Yh7NR1EH/2vixdUJnsLXNYI81g2/zs5s XwntYByFK5KN+uB4SiusFTex31p7uawGPF+nMKHhvsREifbdI4bzTYT3NlSp5Bxl /iT8dzdz64ZOHB4otgLRDQTB8wvGcsY3XGqyF38GQ3RvjJt5xwJIzZ61nT0QNLkF gfcYr1KKFj8ZhYXooJWQM+QusQxMrpAW21VJMTyK92mzo8eDceFpN8wgCOl8dCNl n/wBZng01ZXeX8XVGIbC12zlregOqWUFDPzzO50TjXAbY9SmfY98ODlneyYKPmnw aP8AwmacOn+KX14BNT61cGdZudRK5roA/vkyJNOr51JrQv3FDhDBWylycPXsgxc= =WkrJ -----END PGP SIGNATURE----- update notes Alan T. DeKok@2017-08-06T10:21:42Z Files modified: * src/modules/rlm_radius/TODO.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/34745e51b575ba175786… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhuzKAAoJEH0Oec13Yh7NemMH/iRZ/Uvg9b7fMyY6T0bDZUKZ qqaTCOdqHWzerhpxCZGEO4De0LJ6VE/39siLdzERDBc0Vmo83Iv/AVemNqkWKnbM lNKJnhaN/zLlvL7WrLzRTiB/n6JTtEeD8ijT23EYpd3T5KdKoO+/xfl2jsdrIuBZ nfMB3O2++0WjQfbXKqjMxImYT+Bl5Yjko5RzphlVkuy7JhcdfWfZTRU/r7LxNfr/ eIBOnA3PGRg2ZFGF4ZXcTslBegfbSON0FUFDMYYbX8yD5NbfQVCR4Iisgyv/rfb3 +ZDix6eKLcmbXrSUYOTNgdW7agm83pehQQYF3yEpNhVQQ9RCJ+rm+7Pn7BwlPB4= =6Xp2 -----END PGP SIGNATURE----- minor cleanups Alan T. DeKok@2017-08-06T10:17:42Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/807c728ac0b2e300fbce… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhuzEAAoJEH0Oec13Yh7NovUH+QEbvwSrg2Uiz+7j/ms6teFA slvxWgr3kIOaSIbfNkaReP0FEorow3yBLliUliAtPYSjoksZ1kOTQNK0QDhlla1K 391+3Rpf8wLEXG1Pz/5jYYXtcsjJcTPEgLHuIDb1Qd81onvP7YlG4R+ZUinccPkn e3DhczscYm/GYE2/afOVY6dSzTLSe0TmgaumrgXRE+QuUXUJDc/BmL+PosWxWYFc ARASKAA1r0aT+XhMziGCfVkKDb648U+AOgBwgHfaRzohRlQmKDEAcwbbxdj1f1cB eNKb+j8tLVGhlvSsEQMuVwjTiGOd+097vQh4gLwbb/2C1BK8LH+4ngXGaAlAJvY= =YBWN -----END PGP SIGNATURE----- set most recent reply to now on connecton open Alan T. DeKok@2017-08-06T10:17:29Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1241f8f1863376397c1a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhuvjAAoJEH0Oec13Yh7N6y4IAIeosVcdvQKJ4obIQ/X1NH7x f7PgZrSR8BP8hXqEL22FhoJE86XFnGwIn2YmszfjJgi8qe4/lwHgxC0LYjVRQn9l McqRvvA9js3XqRFrW9WrskHt7SjbrOlf97m93dnGdT2BqjgbupTUkdGXpvX4ZOA9 k2hwxKAhICJwkbzBXP+JpJZ2h2mRj+dsaU9D2TE4MBYUvrEBZ+whVDqWmzAwEHRk 1iiKUVG6R2oE2GAQK6OwFju3EhB/jrrdD/+TSoXbso8eJIDwg4Ox+3vt0M8R4Hkt C1/jll17STglY2ZRM0tBUodGamL+G5afExmcPlg3Jm5jYReot4CTdN3xUqqC5ko= =ZaIt -----END PGP SIGNATURE----- update time after removing connection from the heap Alan T. DeKok@2017-08-06T10:13:43Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f517e9a0f976aad7854… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhuvVAAoJEH0Oec13Yh7NDjgH/3ug5eSfQJqSCgibn0N1a30f 8mh3GISfzNbaMT6V8ycqu8BpHENLmteHUHZwfOvu0AlJN3v1OPtBktERMOv50CX1 D9e0zaanjLDzy0nrM27uG4K7WFanp9QJIBy4oiD/R/eXNrv19hF4a1h0BSoJUShK faiDnkbuAFqw7viMJWCcIJtFHo36xkKAI7P6nHWPeIhFlPONlBvCM/QVWCpPbR8M r70Yisc8wBBzsxWYHWF90OP9574VJSVqI44i3CJ55s8bJMTikQrjnSuFQAHKqFvx vS5zpqyTtYtk4vZ7l84tb4IKcb0H9nxiMz5jhbKkQgeewx68f/gfE25CczdI48E= =KeQq -----END PGP SIGNATURE----- fixed event list bug Alan T. DeKok@2017-08-06T10:13:32Z Files modified: * src/modules/rlm_radius/TODO.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e34e316daa96ba4a0c94… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZhus5AAoJEH0Oec13Yh7Nq68H+gI6nL5UbJygIMZ8a/YoXX/2 k65DRJs1GNVDGVrEL7r/108IG9i5I9BLoDO1MXkh15iVeq5A96GkPc/KLNoTjjVD +fq7qpC2039O386hZJ/DX7X9COyIaubpu4kOC6jBuSuuzut4LkZCOGXCYJR0rxfI CqfLKA+CIBq2iuWqy60Xte8iEAPzjYpA8TefKHjlCqlZWSNnbjVIv8aDQk+tKuCG jeFM1e0nOjZlhS2tRhOOoqxCgSE1E1PeXqJxiB4adSzVXeDpUvlLi6EA1esx0C9h IGn1x7SP+rI+zx0mUPunFhWjV5vIntijjgFSTrwD0vG2+bRXxDFPO9E59mcvUhQ= =JXjJ -----END PGP SIGNATURE----- we can't compare seconds / useconds in isolation they have to be compared as connected times. The erroneous comparison was causing earlier times to be pushed to later in the timer heap Alan T. DeKok@2017-08-06T10:10:05Z Files modified: * src/lib/util/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0900d527e3b7bcb0b38d… ====== -- This commit summary was generated @2017-08-07T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0