Freeradius-Devel

Download

freeradius-devel@lists.freeradius.org

August 2017

5 participants
42 discussions

Commit report for v2.x.x branch
by announce＠freeradius.org 06 Aug '17

06 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-07T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 05 Aug '17

05 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-06T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 04 Aug '17

04 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add support for passlib and crypt pbkdf2 variants Arran Cudbard-Bell@2017-08-04T19:21:35Z Files modified: * src/modules/rlm_pap/rlm_pap.c * src/tests/modules/pap/pbkfd2_passlib.attrs * src/tests/modules/pap/pbkfd2_passlib.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3508f369a4c4e26675d… ====== Typo Arran Cudbard-Bell@2017-08-04T13:43:57Z Files modified: * src/tests/modules/pap/pbkfd2_dig_big.unlang * src/tests/modules/pap/pbkfd2_dig_small.unlang * src/tests/modules/pap/pbkfd2_iter0.unlang * src/tests/modules/pap/pbkfd2_iter1.unlang * src/tests/modules/pap/pbkfd2_iter1000.unlang * src/tests/modules/pap/pbkfd2_iter100000.unlang * src/tests/modules/pap/pbkfd2_iter_big.unlang * src/tests/modules/pap/pbkfd2_iter_miss.unlang * src/tests/modules/pap/pbkfd2_iter_small.unlang * src/tests/modules/pap/pbkfd2_salt0.unlang * src/tests/modules/pap/pbkfd2_salt1.unlang * src/tests/modules/pap/pbkfd2_salt1024.unlang * src/tests/modules/pap/pbkfd2_salt64.unlang * src/tests/modules/pap/pbkfd2_salt_big.unlang * src/tests/modules/pap/pbkfd2_salt_small.unlang * src/tests/modules/pap/pbkfd2_sha1.unlang * src/tests/modules/pap/pbkfd2_sha2_224.unlang * src/tests/modules/pap/pbkfd2_sha2_256.unlang * src/tests/modules/pap/pbkfd2_sha2_384.unlang * src/tests/modules/pap/pbkfd2_sha2_512.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc0a5bc4d8c5a0cf18b3… ====== Disable pbkdf2 tests if we don’t have OpenSSL Arran Cudbard-Bell@2017-08-04T13:27:54Z Files modified: * src/tests/modules/pap/pbkfd2_dig_big.unlang * src/tests/modules/pap/pbkfd2_dig_small.unlang * src/tests/modules/pap/pbkfd2_iter0.unlang * src/tests/modules/pap/pbkfd2_iter1.unlang * src/tests/modules/pap/pbkfd2_iter1000.unlang * src/tests/modules/pap/pbkfd2_iter100000.unlang * src/tests/modules/pap/pbkfd2_iter_big.unlang * src/tests/modules/pap/pbkfd2_iter_miss.unlang * src/tests/modules/pap/pbkfd2_iter_small.unlang * src/tests/modules/pap/pbkfd2_salt0.unlang * src/tests/modules/pap/pbkfd2_salt1.unlang * src/tests/modules/pap/pbkfd2_salt1024.unlang * src/tests/modules/pap/pbkfd2_salt64.unlang * src/tests/modules/pap/pbkfd2_salt_big.unlang * src/tests/modules/pap/pbkfd2_salt_small.unlang * src/tests/modules/pap/pbkfd2_sha1.unlang * src/tests/modules/pap/pbkfd2_sha2_224.unlang * src/tests/modules/pap/pbkfd2_sha2_256.unlang * src/tests/modules/pap/pbkfd2_sha2_384.unlang * src/tests/modules/pap/pbkfd2_sha2_512.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f37b2368a08fb2001931… ====== -- This commit summary was generated @2017-08-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 04 Aug '17

04 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 03 Aug '17

03 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #2031 from alejandro-perez/fixpython Add support to receive different VPS lists into python sub-modules Arran Cudbard-Bell (via GitHub)@2017-08-03T23:49:15Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6813d0e5be0f735b04fd… ====== Merge branch 'v3.0.x' into fixpython Arran Cudbard-Bell (via GitHub)@2017-08-03T23:47:03Z Files modified: * redhat/freeradius.spec * src/main/checkrad.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/481e11e50b1914e8e0f0… ====== Merge branch 'v3.0.x' into fixpython Arran Cudbard-Bell (via GitHub)@2017-08-02T12:46:53Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f876c92a7e1ef8aea95… ====== Version 1 Alejandro Perez@2017-07-31T16:17:15Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/13c507131f5e7c1c321e… ====== Merge pull request #2022 from alejandro-perez/patch-1 Update rlm_python log level declarations Arran Cudbard-Bell (via GitHub)@2017-08-03T23:49:05Z Files modified: * src/modules/rlm_python/radiusd.py * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb4b4237aa0960f12279… ====== Merge branch 'v3.0.x' into patch-1 Arran Cudbard-Bell (via GitHub)@2017-08-03T23:47:17Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * doc/schemas/ldap/samba/README.txt * doc/schemas/ldap/samba/freeradius-attrs.ldif * doc/schemas/ldap/samba/freeradius-classes.ldif * doc/schemas/ldap/samba/freeradius-clients-attrs.ldif * doc/schemas/ldap/samba/freeradius-clients-classes.ldif * doc/schemas/ldap/samba/freeradius-user.ldif * redhat/freeradius.spec * scripts/ldap/schema_to_samba.py * src/include/exfile.h * src/lib/radius.c * src/main/checkrad.in * src/main/exfile.c * src/main/modcall.c * src/main/parser.c * src/main/stats.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_rest/rest.c * src/modules/rlm_sql/sql.c * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b26b2ca56bb2983a7423… ====== Update rlm_python log level declarations LOG level declarations in radiusd.py were very outdated. L_WARN was duplicated in rlm_python.c Alejandro Perez@2017-07-19T14:14:33Z Files modified: * src/modules/rlm_python/radiusd.py * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11f51305ea10723f9d3b… ====== Merge pull request #2007 from alejandro-perez/tr_rekey_rebased Add Trust Router rekeying functionality Arran Cudbard-Bell (via GitHub)@2017-08-03T23:48:50Z Files modified: * src/include/realms.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4bfaa0f55d1150e0ebd3… ====== Merge branch 'v3.0.x' into tr_rekey_rebased Arran Cudbard-Bell (via GitHub)@2017-08-03T23:48:44Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * doc/schemas/ldap/samba/README.txt * doc/schemas/ldap/samba/freeradius-attrs.ldif * doc/schemas/ldap/samba/freeradius-classes.ldif * doc/schemas/ldap/samba/freeradius-clients-attrs.ldif * doc/schemas/ldap/samba/freeradius-clients-classes.ldif * doc/schemas/ldap/samba/freeradius-user.ldif * raddb/radiusd.conf.in * redhat/freeradius.spec * scripts/ldap/schema_to_samba.py * src/include/exfile.h * src/lib/radius.c * src/main/checkrad.in * src/main/conffile.c * src/main/exfile.c * src/main/modcall.c * src/main/parser.c * src/main/realms.c * src/main/stats.c * src/main/tls.c * src/modules/proto_dhcp/dhcp.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_rest/rest.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/sql.c * src/tests/dictionary.test * src/tests/unit/extended.txt * src/tests/unit/rfc.txt * src/tests/unit/wimax.txt * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1463206accce169a3b8… ====== Merge pull request #2035 from jimdigriz/winbind-v3.0.x winbind build (v3.0.x) Arran Cudbard-Bell (via GitHub)@2017-08-03T18:28:24Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3cf137a6a8b0a9d47b7… ====== gpgsig -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJZg2g/AAoJEN4fOtvtnv9r48IQANZZukVBOr9vRvLlw0BB3HO1 MBKf/4rnGzGDLLVN1Q6BQcQ1VkXX4sY3Rk9/ViZhDi2ISzDEQo09VuNobomdFhL/ GVT5gdU4Wb4ShEONLAgt2GcoT9E5TXYaHs9O6ZIHSbntARZfjZBtB2HXTWoJlKW/ FTi9HSVJyetadd0udcgp2mS/d3O/pruGzx+GgegUH+eU2teFA/bwoDEq0eZ0fDhT jpjygVe0Uk11FafBTzTU6BMJlcra6wFkCRDmOyvEMTsDEOck1CSzwMuZ8MO0z8nx mLOzZAjHBbMMZI+5IilJBLwjB7uVmPImQRTSrLUZaJgkBHtEu+LlhlJufR0M4TJR /Krw6XxK3h5/0Ui53UbNIds55dSKHeNdN9pT8X02FK0vl7wUkHp77dYROOhqqan3 71i7T6a5DsFN9p3az7CjZAL4fEhok3rQI3+PY3tlUbgs97jY5cFiNYGIaSArBYaI fKwlAUWAcwz/+ffMyurVYbKCkWqldK/Qdf+gTps4wIKHhWDSGT0/sr5lzJMaw0VC CqHS+5TOvD4dXtmourFyxBk3raNnDy+7Vx776PxkkB4xbj6if7o1AevhZv45XWnF mAtcYeogt9nEwgtZEFTje8bvJN+x+OAgpfnzkRdcYHWMI2+/6qpfcdD3vUMAuc1I 9TO9njKth7vWJC2vLxVj =AvnW -----END PGP SIGNATURE----- winbind build Alexander Clouter@2017-08-03T18:15:23Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f68b225dff58dc1cb065… ====== -- This commit summary was generated @2017-08-04T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 03 Aug '17

03 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ignore with extreme prejudice Arran Cudbard-Bell@2017-08-03T23:39:15Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9174630dbea39f1930a9… ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJZg6XeAAoJEP+k1YKfttfKpJAP/R/yR2c222GO4Oa2G8+HBHx2 fBokTSu0PMbcrM8PNUkn8M47hgxwaiosD6rIy3tb+VQ5OLB+HmhLgFHXA+VUAwqN cIhsOyL0vJwb8VSoJrp2ip6EySGwgql+pqzf7uEnHC9Re3WfaBVjcDImG6558zVC zVmG9zlrInDcxa1aJ27HEPcb2qmypCc/G7drb4gVpzJm0Ltj489rgX5/4Tg7h6Xw QEAK1wy3wAN0ngxR6ACTAl9Ci3LIyD/I+D2ELYMW/0YZ7OIlGfXIV/VFiNygXysr DlXoImYfQ6KDhSVuyWimp7maLDM6SAvzGQ1pwgKuZzbRdsYpCzV2Libv5IN3lsSM GOTdx8B2c9t1jZnnhQ/u67/1G8/wyco7rR+7i3NquvBW7JEy67mraka38NPaXpKy cIVBNbKwOn0bDfzkP/dnD99/5U4GP6HGfSw3ZJTvI/5U9kLsz2XZaZzFUAsehgHa 31KDkaShBISe+G3KzaJ++nJyas2AF/KbbiXlSIXQ2wHr7+Ha/hW+uUI91Ly5cYwo rsKQBdINHd0qwXcL2mGhHOy5TPBYpvEs2HBpyZskwl5YYdaNdQH8F7GAfPRHCZ8k 4MkbJm/PwHhlTg7+74AF7z9OLwHB8y+u9KuZ1z+liifdcN//a0sCC5Y3obkF++wG +AvY2eSvGHvsdsnWocv0 =e+97 -----END PGP SIGNATURE----- Make the build error go away by ignoring it Arran Cudbard-Bell@2017-08-03T22:38:22Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c1531813891673e0aef… ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJZg57FAAoJEP+k1YKfttfKKjQP/jg5aSLSO72biw/f5N7fUl5z u/lPQ7dWViBZrrqGyussCmK5j41p50jLSoJ8kwDxldGbVi75RPPS5G7tMOXqKSsj UIsHV64BNj06U9qf8wMl8wQnjgG0q0CiXLUhxjCHMbmpI6xpq96zrXFN68/R/0Wu Gd3fLYiUYbJiJ6DCHyiupOEMfSE13/RZdaT/OKVWEbaRJjgbFdoLosJGmiGzeNcd zMozqAUbh26A6p/yE9WKHMTGEtX1ewOSQN/lxvrGVePnkAz2CxOByVpxD46PXEom wqV4TojOb/E6XHzPN8bpwsPTf6/eQPV2DAVrI2KwlqNHwb1+xV2Xq9/8msRxnRp3 HLiU2u+yyCc1QUC6lTgOXndsl8qX+rRZyHQShS04jRtlOmZh89JI4dr4Ih4zUadX 0zHqpzTuU33z3CF7upaYD3UxiPAJ2pk+BV9GarpiTsrqHJFYI1d4OhBo7HjxXMI1 skyo8x4uIrtCTu5cLHqVSILnoE1d4rrQDqTY0O/sF6YXYJA1lLPWBw4TUnoFds6m R8+zEpo0fJoyOu7LqJBMVAe+2ltKLjgoEAY0WLcwrNZ8rca8taMzsFYr/dJrlAYE EjzHTyFFFPaAEYWIhNWnUCaASdibwgbOL9EiBKdFMbyku8anu3JKSSczujIFrTos 5FtsC41tMKqio31hhApy =/ViL -----END PGP SIGNATURE----- More used/unused Arran Cudbard-Bell@2017-08-03T22:08:04Z Files modified: * src/modules/rlm_radius/track.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f6197a7c58a0be239eb… ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJZg5RQAAoJEP+k1YKfttfKWL4P/j9MHq7gel5moVYEfZpx+01F XP/B8F2qKZ9jkfjBnD0wu+/y50IG4meE1PKovqCKF+UK03NQi3K4SxVZx+P+FQk8 Q2ei/vsHdLudI/DJSnzROFUkQV4QcEKoDIqiFwB5NRPMS8zIkXkUp0q7DsjjdFgO 2phk1YiaA+PXcZ8sVsxqwouM8ii372ong9rFNQsAmNxfATTTUOwnw9fXKX/Oqh7G +v22k5eLfIeOtyIPDAKd/ppVz9yzSxCArse+tyXYGNAM4rSMiQRwV3gxorh3pPa9 L7wh6MYMKcpVHDeUijFTC1u2xMy027ok31vpET/v6a7ALzFCGnCknY1ULTHqxbUH YuBmU1S6tNwMxvRCsy1IwJh8nTTU8sMi0tgOzInWgZR5Ylh1ZCaQ1/TJ4xLcXFJ4 i34T5tVXF5wjMlFAo9tH4apJGBYzU3EcT8wbJuN0sIneOqecnAKWkXOGboU9Zczn 5/eb1yt5mGUQUd1fCMkfgUY2SPv5Xqd5sUcKGJxyUEg7gmVbaz5S5IhV7xv8tXpt Xr2lAoMBpN5xG56Ud7uJceYvgaIRbTwlkJE/lQsX4AFJOKYGPP3G6dpWxAp1xiOF Xim5z0RwtP7Gw+/g+S0Bm440LfYafPt0jJ+6qxeFlyTZG4EWghmHsueaJ2Vkw37E YSrFtk0wc3wLk/hd7M9Y =RTTE -----END PGP SIGNATURE----- Moar format specifiers Arran Cudbard-Bell@2017-08-03T21:23:28Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ce601fdf44fe28cb9e7… ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJZg4FyAAoJEP+k1YKfttfKzdgP/0xt2myn4+Kq90mOvCrPrnPV xTTgkxgcbgwTIlmSo003e0yubme7yF3QTPDsYlld4RoSSJq6t5FdHZx03Fw1GtCt KKINAhHR1pTSx4mRQ0Etuo0A+9PMUIPwMLjBRsorsf3v6i86rt3jaoj5WyF4kOal MNYuvzz7o9LZ1cpxFHXP3SmIi8s/XdHTs4MEHB097qJPOWhFeSL0iolacteRHfy3 wBdTdPzSf8HpbHCWyeLWTRdO8PWFpBJYJFIb+GRUSwct8bgNl/NvAvKM4CDTZfDu 8zVpuaCg3HyChNXvpVygzGCi4pMsDGwYa2LlS5s1HavV0aX/gXPuNb0mAqY6zrSq wH0bAIcqArX7dm1BZ/cXsEfsahjcLmfw9es8cPQcl0uSpWOM9M+2k3uWA9ny0bdk cnK54L4XWfPGKqSoCtTo40H5WSX3g2/4iDyvrecCBxx1dUDsw7GvMjs65RC4g4J4 WmahJ5nTpgl6mekYW5kf2hnRFbMs2XPFce3OsewOD1iIEAPfsbDpeXD9AeWLMPc1 PSl7AjsHvo+/qsSJqf4ZOhbh9sWKBP4KUuSR68BprhEbbYFm+C+891hTAzCGd0o+ 36mMmtxsU4bjgHemKclwEGAxtyPARPSBXobi4GCJdtvMO6SW4zoNia1FQ0FmhYdK 8O2KV9Nb9v17vlIAy6yo =FUUl -----END PGP SIGNATURE----- Fix build issues in rlm_radius Arran Cudbard-Bell@2017-08-03T20:02:58Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c * src/modules/rlm_radius/track.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d4092217612b7061628… ====== Full stops... Arran Cudbard-Bell (via GitHub)@2017-08-03T19:56:22Z Files modified: * CODE_OF_CONDUCT.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d34ec53ad7b11f59508… ====== Make it sound less humble braggy Arran Cudbard-Bell (via GitHub)@2017-08-03T19:55:09Z Files modified: * CODE_OF_CONDUCT.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb0081ca198302e2416d… ====== Reflow to 100 columns Arran Cudbard-Bell (via GitHub)@2017-08-03T19:46:32Z Files modified: * CODE_OF_CONDUCT.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f578ded0200693673ede… ====== Merge pull request #2034 from jimdigriz/winbind-v4.0.x winbind build (v4.0.x) Arran Cudbard-Bell (via GitHub)@2017-08-03T18:30:56Z Files modified: * redhat/freeradius.spec * scripts/docker/build-centos6/Dockerfile * scripts/docker/build-centos7/Dockerfile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20c8219550492735204e… ====== gpgsig -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJZg2N8AAoJEN4fOtvtnv9rChUP/17mLLBSsCtbnqdMwr0jKcPe /pX6qjnrx1kL03AaRxZWeLSz104SR4FGz9p551Hrcjj/oYvnKD9Gmygew5aEHOYS pz5U+F8Oa+C22anrYGoW4VKa7P3rcQ1Rda0bbjq9aYjswddSRWhCwInArCYmFbg0 BnLbXW1hJZfuOuGPb+xAHCxXxEsDJBm9AFKyYYzpWq6fgSU+IQbaWyo8iiX5XtW1 Dxp1HH5oM+to+80Nk2SCNsuO6E9CGRBhtNPduxCZf+ud+Pm6aQg/iQ/3Psefr791 rFVvuNoDVWpvDE2DCmk+PXRGMKWreE9xC1SdvSi3j/CW5Q8pw8N1qnQ7RhJ8NgmL SDtdhztZ+KdAYr13aF63Dy5vuL9sa2TpMLwdRowfWweRAmoDZsTY0g56HLhS4j+X 5R4n3lTB7vxOI8+/A+wxcLlPIPKJ9EOu5x2beeCqxe7BNB2rXVBVov4QO08NAHzV aNnlCodg/wX96+RDXxabB0j3KWZo3iEhG47Yv4zVdvFx1lqq3WKZHa58Ok0+41+G cr+eiLBHAHnQPn/ZxIa2u+9KBb0inhrOU/d6D417fagtbp/eEFE3vYHAERrNXmz9 Slr18OT+4HvNHqZX6hJX46NPNOuAKffzEQLcklbX8zNktf6u+grFnzQ6QWaCCreg svrvh1srek9niK5gHxWd =tOJi -----END PGP SIGNATURE----- winbind build Alexander Clouter@2017-08-03T17:55:01Z Files modified: * redhat/freeradius.spec * scripts/docker/build-centos6/Dockerfile * scripts/docker/build-centos7/Dockerfile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79877febd7069c5c357f… ====== -- This commit summary was generated @2017-08-04T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 03 Aug '17

03 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-04T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 02 Aug '17

02 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix for mikrotik_snmp not working If the interface table is above a certain size, MikroTik does not show the ppp interfaces in the interfae table, but they are always in the mtxrInterfaceStatsName in MIKROTIK-MIB. Simply switching to that fixes the problem and should not break compatibility for current users. Michael Ducharme (via Arran Cudbard-Bell)@2017-08-02T12:50:05Z Files modified: * src/main/checkrad.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/207126e22e2d7ccb3d65… ====== Initialise home server prefix len to /32 Required since 9e659f9 compares prefix, this allows home servers to be found by IP for stats lookup Phil Mayers (via Matthew Newton)@2017-08-02T12:38:55Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1625c2d855535e4cde8c… ====== -- This commit summary was generated @2017-08-03T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v4.0.x branch
by announce＠freeradius.org 02 Aug '17

02 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NwD0IAJKxQGT9qqWSAzSLPosQlUOs PQSN5PPTwu4MZpW8g6HGIAZi7DHwF3juUVowDNXMtYYF90XNMKutJaJphd017GOJ MG+yhXpZaQ8ZOZuC2MGD9MCcS7JlAmsDl7EGh89usXaC30/Yk4C6pe0KmJzcbznM sc8WPM7cTUIm98Qhuy4Sj5DnNbIb8fsU0P4UKBXRGdkpUWRnbSQOvJAVBmYadkkc +k/WeLd4ehe/v5EEb0ybj5tjVaDcVklWPihKjPx/evbc/1Pcp0GA/goXgml6IPXg p5NgLWRpF9H8XXaF1Me5TZoU5qTv0Hbbdv2ugjRYZJX86G6BrVMUbmKqDgbiy5o= =8oAg -----END PGP SIGNATURE----- more notes on what to do Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/TODO.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/65d323bd0739406343b7… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NIboIAKKfVSfUB0Gq16NHDKgIGcqG KBjM2//B43Tg4URJF/w7GQeW6z/LduVZdEo2wC2E/l4hI7ddm7ZvCz2kPZG0YMVK zOrDuFYuDuxRG0eQEX2Y6HCkGmVVN9dKEAbnmyGoFcTHw/m0L0pyZj0s2bTbUnp0 7N/lOeo+IOxLUaK6dKa4ucLduDNlHmmJb58Tg91cPIrCpriO/CEovDPdeYGhMhrd 81P8J5Z8bl5PV43g+5GLhQQNbQ5z/fdv713L3XjzKiM8tDNwLXELPubjmW7travN XFctifVLcOw2drs4WrNwyY7i311oE2tWL1JyLhsaQYUoB1/gxWICXiUg1umz67w= =LJcT -----END PGP SIGNATURE----- set to NULL after freeing it Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d230332f0af807f76f10… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NFjcIAJ6nqwfxx5Nzx0Au3jgy9m8n vjSUKspz02c040lyuOh5bSo3F3gocK9kGjoMiQ3OpZdDoyH2ESX0G6sS+FFaM0VI 4DxN1iJmNgmDI2Z4SeyiZADl++9QJYFsBXs6WK9IXzY8wOF/KY2kjxwCTnvczJEp AkLUnSxJQDvg9/IgCvjDCY7/VQyiVfs06MFNM9gzXdlESV8PMTT5+vmxB84r83mI ERb4k03Vcy1ebW1OxBtU2T7LpYIOL9o1M/iFNaokhLEqlTmM0YgvjyuOet1BZZ/c 2Ea/kk49XW2UNs4wHIRUtTZvdLqmRHZxUXhn227enlmC7ED/e2CUSFmeVPKFpyo= =MUWO -----END PGP SIGNATURE----- parent events off of id, not request because when we're freeing the request, the event will be removed before rr, and rr points to the event. Instead, rely on the rlm_radius_link_t to free up the things properly. Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/track.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe3d549e2301cfdf7c15… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NwSYIAIygzxskIyIPN6cfocHaguAO XZMcGQII68QFBp7N/yYnVu6MYYyC3KRS6o0spQU0OMNvj0YbeLCELwy95o6ppj3W KWVlnSHwxin40xOUaTrnM6rq58Xrpaw3o48g9EQNAQ0aOcXHbcQDP4LPnXHmdfWH 11UUk2uZsWAPOXLBPMk1uVEx3brvnbpPo5yRiyXiHopZugrkYt0u0hJBPrKLvBzw gu78RUWqjlGCj2h44vjbO4ciQjhyDnZgyE51GrC4zNajfyLh7/q9tksMI8Cq1103 +T26fTZtuNxfjG6lVUn2HdVlRDV8/k5LIZlotJg9ur6560qPTz15SZXKqqmLrLc= =7x07 -----END PGP SIGNATURE----- reset cleanup timer if there's no more work to do Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/lib/io/worker.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73260b14aebdaca924e6… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7Ne68H/Rmbe7ycSz05eAf8kzeDSzkx xyy/YXzG3IcW72AfHgehxiVXXACKMIF3ReOo7f64y5JQwpqg9ns+nBSK9uj+hvW3 8OBQ0ylx0C4BYVBNWCifwOwXyfMNPS69fMTmZHp4MaPUB4L1As5CslWc1KTrH1bY wbYnrfmjQVLZX+MsCcNJ6pymhoPUIRhh3IRPR8GamjZzgvxI+abZREREJ108q8o7 G0Dgo0YdY9jQ12IFrJP5bMnqYAM4yPY8k3ogLlbucPzwA49CAbDgH/LW4F4XSNNT n8dw1B33Klcgit1mwN0m5fICfNIYdFU6QwfH0K85YgT/2QiTxkXgPrsCdrKuQNY= =vAFB -----END PGP SIGNATURE----- set "must signal" flag if the worker is sleeping Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/lib/io/channel.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/871c97ea6068a1edbf1e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NT88H/1Yipk3njiv2h783BxDEqa81 BlqiOMjg1acXNjHYvufgxRjwrCwmuPRRgwgyFPRFnMjfLrh3AAtZcEgU3attJIj2 0wEQ0qv/dE6Dd72eNEiTRgUIC/8w+cib1QixnXaMwaHlnqL7ddKbtBW1FaTZI/qG EcMkravALz8ciaXtmA5GksGbVSxGpMVAXBTLnHALIeUoH+6DarCXnmUKANQhFTNH zLN23r9YSS9md/LUKbl1JrpzMCXtWiC/Hzmil+B3T5n5HXE8Z3ehxkxEOFM18b7K /y6OFoy9vqMrgjKzGjkOFfix4TrSClwCsB3v6iEn6FBQQCO6ykBWc4AFk+P8/nk= =+7Kj -----END PGP SIGNATURE----- start of tracking connection state Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/edf62968178814a0b7d7… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NsgMH/2RtesCkTz/0Aicx9Z4IAmQN aGJBRIcyNdsN+n5NJn+XuqJuPhgklSOD/susoXYksjJPeYylok3Kt85chx+5OsYw vhDoQDdVmhUF2AvMf31O4jjbSuhF0YkbUVR1AEUJe1KtPQOvRiQQ7ugyDuna9sWR Fw9fw5WK1g+0bXUpju4lZwe5lA+B17Vl/NqqSoFrs2FnXL5iImr7IoBR8EjijQ9x qMGVdnlUhNKT4HSzyxVehsJFngsSaW0kQTN1UeogqMFGu2J8lIrUPWZITm4qffR3 qYCvShc5CgIlQ7M4p7sXUHJxXml+DtvDlwwRpVbnq7gTFJl2t1BeyC0cmPX9CJM= =f4vq -----END PGP SIGNATURE----- this is now done Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/TODO.md Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1aec8c1f4acf2f9a8b63… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NGbwH/RIrwr0/7ECcGYNF/2kQPsZP cwHX0KlP1hB0UGUymoyH+XYLa+7EuwdRDXhsSCB+L4NmmCXsScEWlr/BmaF0dRYr nhBHBCzNqOKebkljCbih37WVbLWqng00Pn7QazT0mqJHUfgZVts4UefpuoqUe2Ug G3hRHtleh/PKjqpeHCh2j8QQayE5+vZKq/onHJfxL+jqGiZTgboVixl5u4vBzLhN zueBYBb6MYUE4/FPpMe08n4F1hgrP3Iphi0uZB+cwle/xe7h9vDdC9/zcoOcwxj8 5tnL/rQV1T0X4ZzmK7XH0Pfqgjet+WGr1/iwsix23LE+encdUjQz427TSy5sNJI= =dvcX -----END PGP SIGNATURE----- don't malloc / memcpy the packet if we're replicating Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d45a65c331f1f4fe6de… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7No6gIAJH1I1HFdSQo77FqaTr5zDsG ZvzMP3tIe83KRt+PDOQKNZAiYesd19X+TJbrpN+Tv59M9puMjYe2n5HK3AjQUWL/ tk3C5nfLzQTO0m3quzTtEMiBEcQ2Wko7aqgtR2zNA1PA2nsOM8lyh2JTUPGGJEdd LC6FMk7bhV00SAjLyrfexDgosW8MQmIF7ZVsPdRWCtgnX8L29UcvjN+aF/98Jol8 OFgmftxxD6VFWgcRCVgBycY0gEXxeNVS/drpL8D6+cs/xkm4qPBFjDU/Ycs5C0t5 iMWo9jzAVtutLrm/NXLQRHBXPY8pLlM0oPPM15bUm1dpL3r2EsuPR5DBxH5L8eU= =vAeD -----END PGP SIGNATURE----- manually add Message-Authenticator to proxied packets Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fadd4cf5bc092a857d11… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep5AAoJEH0Oec13Yh7NHjYH/jCuxuuGAq6XTjlk7T2oTWDJ R/AH5aiu/nwDm+uU+exKuUEjxU5tBRsHJvdRVwu1NNFxnL6eJUSXPKlHGuZak4lk mtjmd9kMZTWR0ReWCjMtzAeB/ArqLnOGSidpn3FpcGMLTXpgH8Ej409J8Tjnklxb pSgGUsiDp0OC0rjy/e4z8AJzoE51F4pYMseRHlAa7IclxetRYYalDWIvuMmzPoHB ysGrl7Gs+m05DQPa7mLqOqts5QQ+mZzCInPsGlWzzr9DlqwN9QQiCWeAlaq9GSvR y5mNp34kd4wdbN4ZkkaZZvheq52RH/vtOtyb1KCckgtYX3X6KwwRTFGU5WhqSjw= =Eog0 -----END PGP SIGNATURE----- do RADIUS fixups Always add Message-Authenticator to packets. add CHAP-Challenge if required Add Proxy-State manually, as a per-connection 32-bit identifier We probably want to add Message-Authenticator manually, too... Alan T. DeKok@2017-08-02T15:06:33Z Files modified: * src/modules/rlm_radius/TODO.md * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/33b818c7f2366252d3e3… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep4AAoJEH0Oec13Yh7N8CMH/0fE7TQJ1+PPHoKOkTLxwzMl h5qeKTuQgHFN1yT2lvJshR0IzgnuYlD6SxEtZpW8SOgkAuXHvQoIBi8Y0eZ1oGhZ ViIQ65qcEh64ZhVcQ4FGu2Ugw/fPAQ6VNlV1liifuX1Hix/luY5ylpfb6d3qf4Q5 /J9BzwXxl5FX7GjGT/X6lOY39mM0u6c97MtiU9XMafb2267LJkIW8Nz9sT+6m48B 4ButQjkNuDaFy6b8W9hLjcBk3I/UOg2R7uiPV2w8487JEkufOeQpiyt4aqacQ0Ia izwd8sB2hVjBvXpEFtRCFFJhWv3M2/J/umbFTA+W5qh4+4gIe6vobF2haaMZj6M= =8YfV -----END PGP SIGNATURE----- set idle timeout and free c->conn before other children and set c->name to something useful Alan T. DeKok@2017-08-02T15:06:32Z Files modified: * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ad439929a5ebef37edc… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZgep4AAoJEH0Oec13Yh7N9PEIAKjx19DAu07mKSHR/QFy0K0i aGJhqdK7lP8dT6u6eYem1kGKx6uWCQGHKwsML5G7EEx7Wwcj4SwdW7m5b0gTxHLQ W2LTYJfZ8vsXM2V3P6slX1Hpy3ZwihGidgsKfjGYBNNRV5vks/bJ0FRor2kiNTjq gC2blxw2WqQVd5bFJpnf4hMhI+p1EPIlpr+c4orujoEo6794nGHUlmXLmrm3e0up QiVgx0Symn5Mz7mP+Ajb1u18oJPjcDMoDnKuYRk0D+tuqOfEePgcMsFTEK1e4KvJ g/ufIEfB7SPycvpKv570TaexQOGFwmRd+xhxNPiDWgyglWjudVgqBiJrrgfyMBg= =0K9F -----END PGP SIGNATURE----- notes on idle_timeout 0 means "no timeout" Alan T. DeKok@2017-08-02T15:06:32Z Files modified: * raddb/mods-available/radius * src/modules/rlm_radius/rlm_radius.c * src/modules/rlm_radius/rlm_radius_udp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0be31837fae8baf3059a… ====== Merge pull request #2032 from mjducharme/patch-1 Fix for mikrotik_snmp not working Arran Cudbard-Bell (via GitHub)@2017-08-02T12:47:58Z Files modified: * src/main/checkrad.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/382047abbb0c5fea2c92… ====== Fix for mikrotik_snmp not working If the interface table is above a certain size, MikroTik does not show the ppp interfaces in the interfae table, but they are always in the mtxrInterfaceStatsName in MIKROTIK-MIB. Simply switching to that fixes the problem and should not break compatibility for current users. Michael Ducharme (via GitHub)@2017-08-02T04:39:57Z Files modified: * src/main/checkrad.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3abfda86982446fcb6e… ====== Merge pull request #2030 from pwdng/ldap_openssl For CentOS, use LTB's openldap packages intead of the distribution ve… Arran Cudbard-Bell (via GitHub)@2017-08-02T12:46:26Z Files modified: * redhat/freeradius.spec * scripts/docker/build-centos6/Dockerfile * scripts/docker/build-centos7/Dockerfile * scripts/docker/centos7/Dockerfile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3687ebcb6c7c080c3bfd… ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJZfyQPAAoJEFyGT46NO35o3BgP/jsgroMqQzzLalo3QNEjXXRR dDtkL5WaTsyz8zSWLJZFDioFtkoh5swkA2zyu+e4j2V1t79c/06BI4eJe2SuKXRe gTg9RE3wynvque4MUycAoAztTz27fmjzmCBPgevHPA0/n8ARr8E+yRI6ikDDJLUN aAIzB4omMudk80xThoAydT0c0ge8JizJwpNgs3xGIZVYsXMTvMo2MGL+YzOfgqPM SRJ2sUjgOF/Vlxct63Me+2icG49aPBFn2xq0OFJT32gFQq0hTozvyC+86D4CchFF 3RJ2QEMx7yf8wpvQyYLUFGkNxq4Rjt1wj0iE3Op293zSnPKq7xHFLvEw/MkJo+Cf JM+9h8q8wCaeVgl8602Ce+7WkhX1tWyWv0rRHY/fIkV4zJXNm8ll4eP/yHMxm8Ef QYgttJMQ2v7PF9j/Sss55T9gDT8RB+Pj2D9Mpl7qttPin8DJoMBdt+0y6KUAsfEz SocgxBuxmPVBtw0QuVmF4YPmpyoYzmawDCayGo2w3iAvChOZ+RSWcXTRXKFZaChp FcE9UOLV7+9iB3vz8XvqaD9Cdi2YFdshJ4VSwuv8iG+rU7NQ6ew/Qvmv34mGIEjo 3S7MY9/vvT5m2A5Li7IZUO2ufe66iir7ZOfLTupPo1kFBM9zQQWV4AOt6+3oRXRt M2T/tnhhELTtZsalU5hA =TkFM -----END PGP SIGNATURE----- For CentOS, use LTB's openldap packages intead of the distribution version to avoid linking against NSS. Linking against NSS & OpenLDAP causes issues that manifest themselves through unexplained connection errors. Philippe Wooding@2017-07-31T12:35:21Z Files modified: * redhat/freeradius.spec * scripts/docker/build-centos6/Dockerfile * scripts/docker/build-centos7/Dockerfile * scripts/docker/centos7/Dockerfile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/24f87092f4e42ab28382… ====== -- This commit summary was generated @2017-08-03T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 02 Aug '17

02 Aug '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK4wAAoJEH0Oec13Yh7NPv0IAILP3HDUQma9xCEvzHsEIQZk E4Uwa+dZdVO+hPoZl4Rj7+l5h8nkdXJwAJ5WdndDCKlMlCXX4oZwPUucBALPuNdq RF3mqr4T4Ol0AMP7NtCRmbjsQUyK4yKuKk8h7vOOqwxzwlt5p7NHd7XFWrJZ+bYS Im3NmmOGXrNe8nckYO0GaKfcabq7c/7ypYNhyTpFClVHt5gDW7aLsdbZVqW8mSAb xymStsnBPaxRT0eV1KXZovusDt4x7vXPrus84npgGBcxtBhxmILrD09Wg7ZSShzu suH+2vPPEw+df6Z5ONVm+r2dL/gw3Xdjw0jWPFYzTnrx0aM/IhSm0pbrwDd23QY= =5DmM -----END PGP SIGNATURE----- use packages@ Alan T. DeKok@2017-07-17T12:31:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6cba74cfa0c7214eb0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbK28AAoJEH0Oec13Yh7Nc18IAIEGyMj9agTqf/W5bx1ax9gA BX+UNqJv8Iq5sgfCUc4yowk7mB+C9koSa7GV4YzjL9eDmzIYJHCFOAqtZ0Tsmh6z 8QG3OYj2942XDT3lOfGKxZ7Q/JSZQnfmSjHiyr5B0flBamfVebA+zYJOr64UAZb0 jopVhU+zdnZ8NmtO8s6J81IWzGZ+xB6NsdugFLyUubmcc9zW6Y0HdYuss1/oxiib dK/CcPz3JQpA36s0R8g+OV+oDTBfBdD9HVfGG6bEpyBKNLK8+JCgM+WVgieuaJJ2 9VMM++rDGWaT3kNoHx7ws0Y5y5WoDItJd60f4WywPPXgF0At0mO1zmGh4OhXIII= =GUYy -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2017-07-17T12:29:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d210e7321bab17ce3802… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwUAAoJEH0Oec13Yh7NwRAH/jR5hHmjnE+i1Zi6kCSkM3dT JgFU4+EyOO/aCTqIgzbVNZ4gsYMynwK3C+7P/ruSTNb10ooXgZAuv9Ry5tMfSyZv S7wOYRvoRQ3SdteSWKVlQYEgJwcsTyeJXtf0upTWtcRNcyfT7lyOccBM2sekesBu zRsXP7kwUb2+ofLOOMqdFC9i7BGH8sZihXYUyeAQfVTdAJTvMz3SJ3CvNqKibPqL hD+4g6Unj0TXAziwAFVPiZ6ZwAdYPQKYe0Nft2g9scuTIAiEgfSWwf0HTtVPiH7s wUMiXltbiZu318jQPGfcEIFwrHx2Lxz94oQXYxNfAHppkaApTic9qiN92SjDqKA= =HT+d -----END PGP SIGNATURE----- FR-GV-207 - avoid zero-length malloc() in data2vp() Alan T. DeKok@2017-07-17T12:22:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26be8a680d2a6830e7be… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwOAAoJEH0Oec13Yh7NyhoH/AttTez0cDjxWA3nf0mV9Msa MFQUg7n4FGpqY8d0fkEbw/b6Du5+dSrYofNBiVQra/TRvAGy9NYj2RNLH3GFKjza iJtmrzrLXYLFuCzlYJZvjyW67HhuLU3RjAHdrTHZRNMjdSULy9OBaUS7EBFaTKqd mPrg9r3Wn/BmHIOn41P7rwx3tPc4DrzIOogp6lNydfNmx7LNMOOv5SF4zsfmzj6s aq4U6p+RCE9DBeqYNQjopq7xqf9SHZY4Djx7Grwv+edL5gjU2PRSpcXKmNBZe/uH bHU24fNZiwcktmsqpUFtTTs/Ejl+D8v+qBdHsUqzP4utMpO91tL6ch+cruh9AdM= =zWy4 -----END PGP SIGNATURE----- FR-GV-206 - decode option 60 (string) not 63 (octets) Alan T. DeKok@2017-07-17T12:22:38Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwIAAoJEH0Oec13Yh7N6zEIAIwQDsfGbCCWhRSAodkUUNY3 bkaatj3kqY+PnLJwuBRINp9ovfOuj9JtEKcfQ5WVF1Zei+WOSvJvG2vwGwVn5sGt CRO75kQdJZNIIgHO4wr4eGOOsukmHAiY3xPQhlAL65vMJiHulGvvNUD6Sk0Ze9Df 8g7n5+h2LNIRGa0wjwXr+7ZDrX6s4+Fo/5GZ5QrzW3KMqx+S8s6lPOOtHaCS5OBX QTSppIwAF+q8ti1FD9q+H3nhOd7UTQhhUnO26ebPFJXe/jzF+G4JC4acWF5CmUuo PJm053ifGi5ObNG7Vm0PSz1CSi3QAbm648ywj9rr3bUuEjrz32VoD9okwwwUhV8= =PoTG -----END PGP SIGNATURE----- FR-GV-205 - check for "too long" options, too Alan T. DeKok@2017-07-17T12:22:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKwCAAoJEH0Oec13Yh7Nuw4H/AiG6n43aza26cUjDIGnvnxW ZAyF0YnGcPl1CH1PZH6akTIcsTMKGrHeLQL1J/Zv6z09ZZYiRFqf3A2yL+f8FU0b S76DDCgTwoD1juKp1N7Vn7qpemLcP3wbLOqRIIAphK1eEB7QnZq7DdFjuVdYhw8z KmCCH+SxMSdkf130saGhxaX101qKPr2FAcjDrhzTCmySqrh+puVXi9LvlgD9YWLl cYG1OKsr4zRq9R7fNh4GsvHwYVmANdCmBEXUSrH1srWKut/lmj4zYGRiCTj6lND1 vXwSSvOWBjLFZ8mjOqEMzvD3TBf6M5kOoigzmBdesdgnDql8+frVXHKnElrVL0E= =0pLl -----END PGP SIGNATURE----- FR-GV-204 - free VP if decoding options fails, so we don't leak memory Alan T. DeKok@2017-07-17T12:22:26Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv6AAoJEH0Oec13Yh7NVCoIAKRSATgz+OwIkCAyi/c50tnU fphjWgKXzbG3sOdfFm4+WbKdMHd5FgJJ3ei3ckJlqyePHZhGmix5SYe17FDAs09G UkxQ+0yOB5IK25djtF6ak6tFqd9iJaNRFQt2CjfF5UDTfKCvvrWPrctMeBRC8Su5 W0pI6yKcVFzyjMdP2tOP/aB9Ew2J26W5PemMkv1OjyOvnNkuFySJifr2Ytk5l20j +qCgKhC36JpzbUDkB6W6J4n42gHmPljTqDsdN4qolmGoex7eA9Xq8gZoyTH4mps2 zCBmMkIqrS+UgSo4wSyf5WNEKiGJzHcrHZBZ2BhLu3er8umBzyZgnkB3owBLdOw= =tKAE -----END PGP SIGNATURE----- FR-GV-203 - fix memory leak when using decode_tlv() Alan T. DeKok@2017-07-17T12:22:18Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKv0AAoJEH0Oec13Yh7NYUYH/0VSrU0ZErHse0LSi7g5lrrH vLDNQFsWUL2L9yzINMy6Wth6mOKBWNlo9Kz0VXbaORILPZuD0YPBUUzQPZwrqgQg qo0BE9L5HOho1Oe4ZPIOu+tkHVSfCAhBO+DQn8RNDyTCcdhaaAHOdD/UtTMKlude 8G2ZNUd5z9ZTKwCI4lWGj7vSZOW3++PBFEn7MSUsN2pvPE0TFIZktW/omZJfHAi8 3XmfBqEYai6l4v1OkW2Kq4AFrMKLL3e+YZXlRux3Rp922umLO8bv/KViyjYQsd5Y urshbjbmJfJVm/DJDK+CDO/JP1Yg6YKtrBGt45Dpru6J/vQAw2QcAl2FYU57BUU= =oyOB -----END PGP SIGNATURE----- FR-GV-202 - check for "too long" attributes, too Alan T. DeKok@2017-07-17T12:22:12Z Files modified: * src/lib/dhcp.c * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c4… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvtAAoJEH0Oec13Yh7NZfEIAKhgk9KOvmh50+cX43LgWLqy hYO6/uqYjqMx/fjIv7pu2/aPRG1W8ka0NlmQ5bo1tVax/bMhfMOue9k4VA/sfoGE 4k7Zx+Z3/L++hmIkQEq/IvIkBeGo10UdQ9Y5iIezKnyovmhvAOirob3dkLwPFZOj jWvjZsAqNiv8P+kmsd5ioqGwa1riIaK0cEqzAnTTMFQiwZTOJzqhGGoRhsNiaTiU vFqqRqSkxwInMrDtye3PY/p5V18M2Mdp9jUvstqxPjiv3gjVRE9al52J2zIdRtT3 yQWhLjhg/DJ2QNW8gWT8jqzwb+nmCiApclFXsj/ubM/hjjmQvYI0xSxers2eKJc= =dOp+ -----END PGP SIGNATURE----- FR-GV-201 - check input / output length in make_secret() Alan T. DeKok@2017-07-17T12:22:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKvlAAoJEH0Oec13Yh7NLZ4H/3m1wqJCaVBWZ+L65zzDT4Co 6Sk3g/nZmMc920Ynw18dX7Txgbxi4XjW8fKBw5vfGJseqoK8PmXiAOLRn6DK4fqt 7p1Ii9sm4QvYoU3n2xBj0Dnu5H8GkG5PzBPVLfWGkmzgdwPKieURy/Z8ju4bGYdL kGv1pY1x8kCjyfGVQRRUtybnkfliVqzQPO8rAvbprS+fyCLGzaUrL4IvwqHhjBYT EMGLF3GkJm5JYasJPT9kRrz8OkxXiLhuCI1Rq6seYtXiGwp3GPD5i6gBlCDMeqd0 7wo+OHceBJSLmQBL9jrq4efJEQmkQ0tmPqi7zpL2cAmhw8ILIxDZ6eMKKpCQAmU= =Ay/O -----END PGP SIGNATURE----- FR-AD-001 - (v2) use strncmp() instead of memcmp() for bounded data Alan T. DeKok@2017-07-17T12:21:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30c9f53f85a9d07f5213… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZbKtfAAoJEH0Oec13Yh7NUqYH/Ayioe2kYHZaB+U0tRHhdSW+ jcXWkC5NavdVpoHqAO551fzccsOsyAY5FZiNw7ht9kvCnoJrPK9mC21Bah8vCeY0 GJJqpV1A9tuLf1Ijfp3nk4e6uC+vrOJKjMku0nqFlDZmiR5DefVpSmgAZ/GtRyes rG8AMmYjWsqtFztwkzourYEZrdfkLW54e8Nxf89fn+NJfXIs9LmiGiJjO9NGJQHL Fc2WiSj5IF2ZmNxAyH2iX6WPf7DbIgiVWMp3TL2BfMbZeC2n0N4zzKlkz6pqSpst 1h0WePZXcmz58PgINB5DSUnf4IQGN6cj0sEdPDWQmVwM7+AGUi7hld10aZnWHq8= =3rSp -----END PGP SIGNATURE----- Remove erroneous fprintf Alan T. DeKok@2017-07-17T12:19:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08a7c2aaa7400ebf70c0… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZdmAAoJEH0Oec13Yh7NniAH/2fkFoV9sONFMYDg3kOqrbHd GlmVBDytYmY7zCiOJdyfLD1NvV1oVPdx+4Q/Ak720NC8xhiH6CfjdMD6kB2xc/fv Uc3BBY47UvERGgSHPjCXZusYmyaE2oaGu9EzUlRRgIyWHWWuHE/LgvlomODiln3h 83PJJRSWS+R8ZIzutn0do4LNjKZZF6FyJKbw1y+RXhJX7CWO7yNHAjbz32F/+s7+ Cv7YH11S4is2GpNk8B+H4ftXjOMaNVX2VK4sfSlBlQF9pcFmkSDz3pyIoCXiVZiZ ZZ6wCClApeIbjkxKunIW9d4WGSDJqKNEQN/74ThBj8gQA15L1BMGWeSbLBDLH/A= =cSQm -----END PGP SIGNATURE----- disable TLS session caches. So that malicious users cannot falsely resume sessions Alan T. DeKok@2017-07-03T01:00:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00579336c0378d84a35e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZWZc0AAoJEH0Oec13Yh7NTzUH+wcnRkfyteHnX7p/BYHNd6iq XZzwdam02KIrXmNR/RR9JEh0s51HUuOLk6EDWYcNYp9+0ZOLp4qWd9hyXHfQsb9g 4hRyaRDi0lTtHkUz33AZudOKZyIj8/ED6ayky0hmRpg5uhhaf1DCM8QGkiDKN6eq MSSEnl0nVy6BubSWSevvkTtGDZ4Do/BgM45eMrG2ferNmou3mZvsxGPC/dDm8RGl HjnuURpwPFDrAcTbJekdn8g4xgfjjj9MTVi44lJpILVUBZpL4W3am8FuMHpOwodM Y6ZiHjnhzXl5m3/NXqpzjU04GAMQBTvvMjT7dj7noXdCholJ8J8Sd+gCt+2HufU= =kb1R -----END PGP SIGNATURE----- Fix OpenSSL API issue. Based on a patch from Guido Vranken Alan T. DeKok@2017-07-03T01:00:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7f120e8c16841e45656… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7Nyf8IAIH7tzS+ZQ+Yu7nQ9H3WfWLM tOKe+QUqmPYuF3FTXsMmsbS+DCK78jX8sAhnptuxB02NwjzW8N/+AsvMItgnpGmx DIDq4MxWrpdKAiVO1VeLQO4W9HrTlFUDRQHqAK9DRBlRluK3STPunFrmY/r06UCV udUvt2WqnCuOHZ5vsiCdJTzfThXiaK67t176/ewb9lbMeBd3iSb94X+gPxDaHAph 5x/CcIGSmoZWQvtuRvyMWz5/KH6g0BJ0Y7rKW/orXHSQFOwuxSCL3WsiKiy86i79 2o4ielybeyoAaL/31tSgFtOI8SDX2mtYskL91aNMyM2kxWpURY4DbksSJ42fQmA= =tYx7 -----END PGP SIGNATURE----- note EOL status of v2 Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c795af10fb99bdb5d3ba… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NfwgIAJIskV51iU7I2cHxdJWNTqj6 Ax+9wKuEichn/VzVszkQ0a+yALJ6NqYsPnc7FjaKZaorCR6gMPx8n3JpBKnThilQ Glu40EyKVPGGLpgNvoo1PgEuOHn2Li/dr6yufV2eVcoiVRz6OhaRDJKkKvxIJLSE dX/J43cCfGhO9H2v4jjllBRHTXH7Ptr5r53HVXFhAvF3Y4ENdNgPG/bF6kxgmLpv giIsJgGOgQTSyB6uVsAKYISNfqHCw33u4qd7Cf33R5pgrID/TIKvdK9XdiRBq4oK Tg2LBajIKLTgaPNHyKvLI4w58CqnORaJVOv5p5jya2y8LQkxCebQBnVIRuoECk0= =hFWW -----END PGP SIGNATURE----- note recent changes Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f94975e216a249e5f6f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NdMUIAKXwOQIUZqv8T419HoXWU0aR bBqMYnar2Ct4kN0NzvN92oDkBtQdf8LacJH4/BfxLJnpDeozWjREWcp6+fkd4Xha cmI7GBdKLqHjh2eYPV+jeK4QLg7vj1TMr/Gj7x8XNVCYZIcuVAOv9eBSITwEmWVg CTacMAyBhwCOuvEnYVmrGe+Xh8qf7h4NYnREYyaICHo2QqivjNguVV7QMCF4xAh/ rOgMwa/Kcu7lwxH8VLKYAHYf2axgT3TnZ3MlCWjrrObmiseteo0NdbFHhc4JOhVJ FmQ3dp6xnBXDgh00vkdTEu2fDZig66wCFkYm5hyuq6LsurUN5lhzoFKqKYDtheM= =Dqn3 -----END PGP SIGNATURE----- allow non-FIPS Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fac92e082abac759f76… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIImAAoJEH0Oec13Yh7NuLYIAImv+AB+76ZjSVCRA2YtdGC6 fhmN7UZQilyG9biRwNVcGdBMNmJPAT5DMEPQiM6Q2HOEHXauGoqSyIgubOg5CJ1S cQMu2ej/d9oG6pWvug2lAmT8M7JHVSRElouvnCkW+LGFC8nBC2NGfQo+hu7KM/Hb NqqifLa6e8DMtFgA0D/xSOnS5Gbq/vof1K+B/rx032dY3aqNBtSWqRBQVZykfBEZ ZuA4nKFNmb5fL1Abf/pRrXR8DrSC43LClCwTmjb3NngUDkj7vIw8Aiu8jsLGpCtr +gN+0JMw29c8ZaKso8J0pXpcBDaaPrvGvSOk8aaJrejKvLccBSeBYypUes5y68k= =K6kM -----END PGP SIGNATURE----- issuer_cert may be NULL Alan T. DeKok@2016-09-01T19:31:50Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad58666552a4fe27411… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXyIIlAAoJEH0Oec13Yh7Ns50H/RDDg7wklcz4R6gYVA3XF5TR 21VMJI7kMzsTFN2dX2fy6eTcdXKXoybjIh6yQuufSEl23lXUeT/4V9ocQKKEZgKs uITepEfPYeu7yM4aP3TPD9nx8mKpApW3YoLt/Z6t46/33PZDDyV2QwFwAUE5ENFK 74hCVTzzere87IBwsfpq7KFF/bzPBeutshVBBExnlMhGFbO96n0YSgAmXWIqy88v +Ctw2W/ycX2MxGvzOG1772JNLifTs1+NdIZLtrDgo1qQ7nQlfafQN3ATL4q3G/SG PeMbaP4Aq6nskUDrVUrzgqVUi6Rb1uadX5DYL8PnT8JX1RmSuBGW0cAC9CU8Dq8= =QZed -----END PGP SIGNATURE----- look at index i, not 0 Alan T. DeKok@2016-09-01T19:31:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79937e9859610976ef39… ====== Merge pull request #1570 from alanbuxey/patch-4 fixed typo Arran Cudbard-Bell@2016-03-23T10:06:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d41d06f37760218789fb… ====== fixed typo minor typo was still lurking Alan Buxey@2016-03-23T10:05:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/874a8a5379277635b6ab… ====== Escaping for v2 style. Fixe #1543 Alan T. DeKok@2016-02-21T13:04:50Z Files modified: * raddb/policy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325aa6b0cfd9c07d5fea… ====== Merge pull request #1441 from TheMysteriousX/v2.x.x-fix-disable-ssl Fix build failure when --disable-openssl-version-check is set. Arran Cudbard-Bell@2015-12-20T21:16:28Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f26cb094ce57e8dcde7… ====== Fix build failure when --disable-openssl-version-check is set. 4f24d4c mostly corrected the behaviour, however mainconfig.allow_vulnerable_ssl still had a dependency on ENABLE_OPENSSL_VERSION_CHECK. Adam Bishop@2015-12-10T23:44:44Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c23709fc90bb30b51c5… ====== Make default match config Alan T. DeKok@2015-11-06T12:00:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3af2547314f105107b3… ====== Note recent changes Alan T. DeKok@2015-10-15T22:09:18Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c17d0d8ab3304c11acc… ====== ENABLE_OPENSSL_VERSION_CHECK was intended to be used to disable checks for vulnerable OpenSSL versions, NOT our compile/runtime checks for OpenSSL version mismatches. Arran Cudbard-Bell@2015-10-15T21:22:03Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f24d4cda8b43b5f7031… ====== Work around other OpenSSL stupidity. Alan T. DeKok@2015-10-11T21:21:57Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffcd1143d43b43f5e28e… ====== note OpenSSL 1.0.2 idiocy Alan T. DeKok@2015-10-10T13:07:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a3ce7cd204bfd97bf8c… ====== Fix compatibility with OpenSSL 1.0.2 Which may help OS maintainers who really, really, really want to keep support for v2.x.x. Arran Cudbard-Bell@2015-10-10T00:48:09Z Files modified: * src/modules/rlm_eap/libeap/cb.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8d53ca3684c518216fa… ====== Bump for 2.2.10 Which will only be released if there are catastrophic security bugs. Everyone should upgrade to 3.0 Alan T. DeKok@2015-10-06T13:11:27Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c69b7e0abdb69e821133… ====== Update for release Alan T. DeKok@2015-09-30T20:37:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de6808e7e3b9cf970f6f… ====== Merge pull request #1280 from mcnewton/ch2xx update changelog Arran Cudbard-Bell@2015-09-30T11:39:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee84ef8023cbc53c2c48… ====== update changelog Matthew Newton@2015-09-30T10:05:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb3ffb6e3b6ae290418… ====== note recent changes Alan T. DeKok@2015-09-28T14:39:29Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb5215f8143f3fd553b… ====== Don't go to next sibling on empty case. Fixes #1274 Alan T. DeKok@2015-09-28T13:28:43Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/090698d10a03bae13b59… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-22T17:46:43Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2354774d83af5376b1f1… ====== close to 2.2.9 Alan T. DeKok@2015-09-16T18:08:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/236e087a117888fa42d1… ====== bump for 2.2.9 Alan T. DeKok@2015-09-16T18:07:12Z Files modified: * debian/changelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75650992c8f6aa92b129… ====== Bump for 2.2.9 Alan T. DeKok@2015-09-16T18:05:40Z Files modified: * VERSION Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a066956e3412909c0f8… ====== Note recent changes Alan T. DeKok@2015-09-09T13:25:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d57cc431bc6471206f… ====== Always delete MS-MPPE-* from the reply. Fixes #1206 Alan T. DeKok@2015-09-09T13:23:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a79e943d49b3a9cad3c7… ====== More fixes to use SSL_export_keying_material Alan T. DeKok@2015-09-09T13:21:05Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/905aadc266c19e7fb661… ====== Back-port d1cdce1b0 from v3.0.x Properly iencode and decode very long Tunnel-Password attributes Alan T. DeKok@2015-09-09T13:19:23Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e39f54ff154c2ca798a… ====== Merge pull request #1187 from jeremybrowne/v2.x.x Fix OpenSSL version check issues Arran Cudbard-Bell@2015-08-13T11:02:51Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a509695fe5d27bb5094b… ====== Fix OpenSSL version check issues Bring the relevant bits of 3eb1025dc6ac back to v2.x.x branch Jeremy Browne@2015-08-13T07:30:31Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50cd6585280a5038b70… ====== set "now" Alan T. DeKok@2015-07-27T19:30:23Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea2f2b88d8a685d612ec… ====== Time for 2.2.8 Alan T. DeKok@2015-07-09T14:37:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ab83f3abbc87236bbf2… ====== Merge pull request #1105 from alanbuxey/patch-51 Update Makefile Arran Cudbard-Bell@2015-06-29T15:06:20Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc81ea843af0dc616d4a… ====== Update Makefile Alan Buxey@2015-06-29T14:16:18Z Files modified: * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d19d4a25d748313888… ====== Manually manage the append list Alan T. DeKok@2015-06-29T12:50:33Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a55470f04929a56e0c6d… ====== Note recent changes Alan T. DeKok@2015-06-22T19:28:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1475486a18858c5e2d71… ====== Set X509_V_FLAG_CRL_CHECK_ALL Alan T. DeKok@2015-06-22T19:27:32Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf… ====== Mark home server dead based on calculated time Alan T. DeKok@2015-06-08T15:33:48Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d06af8ba158005d3f42c… ====== Note recent changes Alan T. DeKok@2015-05-31T14:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T12:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== Save a copy of the filename Alan T. DeKok@2015-05-20T21:39:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c05d7ce2419f38dd758… ====== Oops Alan T. DeKok@2015-05-20T21:36:24Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/796d49527703b97cc7f9… ====== Merge pull request #986 from alanbuxey/patch-21 Update base64.h to remove compiler warning Arran Cudbard-Bell@2015-05-08T03:22:46Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7db7bb620a02bfad8688… ====== Update base64.h Alan Buxey@2015-04-30T22:08:40Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0541f367ab1174e03626… ====== -Wshadow fix Alan T. DeKok@2015-05-01T11:24:14Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39d82966ee1921c807ec… ====== Merge pull request #985 from alanbuxey/patch-20 Update base64.c to remove compiler warning Arran Cudbard-Bell@2015-04-30T23:52:17Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b9d5315b93c18b1b9f… ====== Update base64.c Alan Buxey@2015-04-30T22:07:25Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0347c8268acda4041d30… ====== Fix client_add for virtual servers. If there's a "listen" section, the clients are added to that virtual server. If there's no "listen" section in this virtual server, the clients are added to the global list. Alan T. DeKok@2015-04-30T23:48:24Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dc741411ca0067155bc… ====== Bump for 2.2.8 Alan T. DeKok@2015-04-30T23:48:06Z Files modified: * VERSION * debian/changelog * doc/ChangeLog * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eae6c3d8736df039ce8b… ====== Merge pull request #979 from jahir/patch-1 fixed radclient.c compile error Arran Cudbard-Bell@2015-04-27T09:21:57Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fe35e5b5da83d6a2b16… ====== fixed radclient.c compile error gcc with -Werror=format-security doesn't like printf without string literal jahir@2015-04-27T09:18:24Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b914f2a5145f1c8f515f… ====== Release for 2.2.7 Alan T. DeKok@2015-04-22T17:31:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/298781855b0e0298a399… ====== Expand buffer to max string size Alan T. DeKok@2015-04-13T16:44:15Z Files modified: * src/modules/rlm_logintime/timestr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87e7be265f284cc8d9a5… ====== Add certs to the packet, too Manual port of commit #994db028 Alan T. DeKok@2015-04-08T18:42:57Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50a27a3ffef885d000a9… ====== note recent changes Alan T. DeKok@2015-04-05T13:57:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e6812c4f67caeb32e8f… ====== Port fix for #945 from v3.0.x branch Alan T. DeKok@2015-04-05T13:57:04Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ea117fbd794193a2f6f… ====== Fix for v2 Alan T. DeKok@2015-03-31T16:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T15:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T15:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T15:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T02:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== Fix error message to be correct Alan T. DeKok@2015-03-29T14:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== Note recent changes Alan T. DeKok@2015-03-26T18:15:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae350450b7b77f5c4e0a… ====== Allow "eap" in Post-Auth-Type Reject which sends EAP failure and Message-Authenticator Alan T. DeKok@2015-03-26T18:12:45Z Files modified: * raddb/sites-available/default * share/dictionary.freeradius.internal * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b95f560631bbe4bff38… ====== start from 0 for failover Alan T. DeKok@2015-03-24T22:12:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e5375916df9f3e7efd5… ====== md5 == nt Alan T. DeKok@2015-03-10T13:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== note recent changes Alan T. DeKok@2015-03-04T13:07:53Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d6dd97ea0e86b2735c4… ====== Use the correct name if there are multiple tagged attributes Alan T. DeKok@2015-03-04T13:06:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa567fa3fab1ac45fdb8… ====== Note recent changes Alan T. DeKok@2015-02-25T19:22:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7b6f8cd76c0c767add0… ====== Set correct default destination port for replies to relay Alan T. DeKok@2015-02-25T19:21:45Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c2a234f4e07bbb78448… ====== Merge pull request #907 from spbnick/ssl_headers_fix Include headers for OpenSSL init Alan DeKok@2015-02-13T12:36:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/411a6038325469468381… ====== Include headers for OpenSSL init Inlude OpenSSL headers into radiusd.c for OpenSSL init. This fixes "implicit declaration of function" warnings concerning SSL_library_init and SSL_load_error_strings. Nikolai Kondrashov@2015-02-13T10:54:29Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d9ac9f5350716e64ce2… ====== Merge pull request #906 from spbnick/fix-openssl-version-check-disabling Move OpenSSL init out of version check Arran Cudbard-Bell@2015-02-11T16:13:00Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97ed7709112a30cf9c5f… ====== Move OpenSSL init out of version check Initialize OpenSSL outside ssl_version_check() to execute even with disabled version check. Otherwise SSL_CTX_new() returns zero and FreeRADIUS segfaults in init_tls_ctx with version check disabled. Nikolai Kondrashov@2015-02-11T16:07:50Z Files modified: * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c94eae5ec9b22272d… ====== Merge pull request #898 from spbnick/disable_openssl_vercheck_v2.x.x Add --disable-openssl-version-check option Alan DeKok@2015-02-03T19:40:05Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9ef84f83aa34e3b72a… ====== Add --disable-openssl-version-check option Add "--disable-openssl-version-check" configure option, which removes checking for vulnerable OpenSSL versions. It is supposed to be used by downstream packagers and distributions who have other means to ensure vulnerabilities are fixed, such as versioned package dependencies and vulnerability handling processes. This avoids the necessity of editing radiusd.conf on package upgrade to make sure it keeps working. At the same time, it provides safe default to those installing FreeRADIUS from source. Instead of defining a dummy ssl_check_version function and ignoring allow_vulnerable_openssl option, remove these altogether to match the v3.0.x branch. Nikolai Kondrashov@2015-02-03T14:58:20Z Files modified: * configure * configure.in * raddb/radiusd.conf.in * src/include/autoconf.h.in * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/767c67fc4f2f673a44f8… ====== Merge pull request #897 from spbnick/strlcpy_fix log: Check message buffer length to avoid overflow Alan DeKok@2015-02-03T13:32:49Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7c5eecddf78b8706972… ====== log: Check message buffer length to avoid overflow Check that adding strlcpy result to the message length didn't exceed size of the message buffer to avoid underflow in calculating remaining size and overflowing the buffer. Nikolai Kondrashov@2015-02-03T11:10:52Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94b88276fbdc14e945a5… ====== Replace strncat() with strlcpy() Alan T. DeKok@2015-02-01T22:24:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824dd5325f31d2fd2f4… ====== Merge pull request #895 from spbnick/v2.x.x_misc_fixes v2.x.x misc fixes Alan DeKok@2015-02-01T22:12:02Z Files modified: * src/lib/dhcp.c * src/main/command.c * src/main/conffile.c * src/main/dhcpd.c * src/main/log.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/threads.c * src/main/xlat.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql_log/rlm_sql_log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0495f31aa9255a343e73… ====== Don't dereference NULL cs in cf_item_parse Avoid dereferencing NULL cs in cf_item_parse and cf_reference_item it invokes. This fixes the following Coverity errors: Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:932: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:938: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:963: var_deref_model: Passing null pointer "cs" to "cf_expand_variables", which dereferences it. freeradius-server-2.2.6/src/main/conffile.c:782:4: deref_parm_in_call: Function "cf_reference_item" dereferences "outercs". freeradius-server-2.2.6/src/main/conffile.c:597:25: var_assign_parm: Assigning: "cs" = "outercs". freeradius-server-2.2.6/src/main/conffile.c:615:4: deref_var: Dereferencing "cs" (which is a copy of "outercs"). Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:958: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:973: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:994: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1009: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1041: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1051: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1054: var_deref_op: Dereferencing null pointer "cs". Error: FORWARD_NULL (CWE-476): freeradius-server-2.2.6/src/main/conffile.c:900: var_compare_op: Comparing "cs" to null implies that "cs" might be null. freeradius-server-2.2.6/src/main/conffile.c:1066: var_deref_op: Dereferencing null pointer "cs". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84a901901ad45ab41651… ====== dhcp: Remove useless variable initializer Remove an initialization of a variable, which is then overwritten, in dhcp_get_option. This fixes the following Clang warning: freeradius-server-2.2.6/src/lib/dhcp.c:144:11: warning: Value stored to 'data' during its initialization is never read Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a2848bd6463476ff700… ====== dhcpd: Verify DICT_VALUE exists itself Verify that a DICT_VALUE was returned from dict_valbyattr by checking the returned pointer, not the "name" field address. This likely fixes a possible segfault when debugging. This also fixes the following Coverity error: Error: NO_EFFECT (CWE-398): freeradius-server-2.2.6/src/main/dhcpd.c:300: array_null: Comparing an array to null is not useful: "dv->name". Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df1013f5b0d642c20ade… ====== dhcp: Use correct format specifiers in a message Format size_t with %zu specifier, instead of %d, as size_t is not guaranteed to be the same size as int. This fixes the following compiler warnings: freeradius-server-2.2.6/src/lib/dhcp.c: scope_hint: In function 'fr_dhcp_add_arp_entry' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 2 has type 'long unsigned int' freeradius-server-2.2.6/src/lib/dhcp.c:1536: warning: format '%d' expects type 'int', but argument 3 has type 'size_t' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff526ad4ad985b94dc6f… ====== Fix two pointer signedness warnings This fixes the following compiler warnings: freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c: scope_hint: In function 'cbtls_verify' freeradius-server-2.2.6/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:711: warning: pointer targets in passing argument 2 of 'pairmake' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:373: note: expected 'const char *' but argument is of type 'unsigned char *' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c: scope_hint: In function 'base64_to_hex_xlat' freeradius-server-2.2.6/src/modules/rlm_expr/rlm_expr.c:678: warning: pointer targets in passing argument 1 of 'fr_bin2hex' differ in signedness freeradius-server-2.2.6/src/include/libradius.h:418: note: expected 'const uint8_t *' but argument is of type 'char *' Nikolai Kondrashov@2015-01-30T16:16:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66727f8af40dd5646bb5… ====== -- This commit summary was generated @2017-08-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0