New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== verify mode no longer needed in eaptls_session Arran Cudbard-Bell@2015-06-04T19:33:59Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d8ed2b7c2dddd8b9e500... ====== Messages in tls_handshake_recv should be logged to the request log Arran Cudbard-Bell@2015-06-04T19:29:41Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff23900cb895f366d9edd... ====== Make Peer Sent method message slightly clearer Arran Cudbard-Bell@2015-06-04T19:29:41Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/575dd9779d1c8ff81212b... ====== More duplicate code (tls_new_session also sets client cert verification flags) Arran Cudbard-Bell@2015-06-04T19:18:10Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6db91abf34639093284f0... ====== Duplicate message Arran Cudbard-Bell@2015-06-04T19:13:50Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1bf151a9b7969a7431c02... ====== Document FR_TLS_* constants with doxygen prefixes, and expose fr_tls_status_table Arran Cudbard-Bell@2015-06-04T18:53:53Z Files modified: * src/include/tls-h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42f5d4a79d91507d8ea21... ====== expose request in eaptls_operation Arran Cudbard-Bell@2015-06-04T18:31:18Z Files modified: * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc0a0e6153af72270b992... ====== print the string version of the return code from eaptls_process Arran Cudbard-Bell@2015-06-04T18:27:36Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/335278e2389dcb8c365fa... ====== More tweaks Arran Cudbard-Bell@2015-06-04T18:21:33Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b19bb5fc83e3ae24dd770... ====== Slightly improved debug messages for EAP/TLS Arran Cudbard-Bell@2015-06-04T18:17:40Z Files modified: * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/460049eda0811017d104e... ====== Only print decode errors if we're running in debug mode Arran Cudbard-Bell@2015-06-04T17:31:45Z Files modified: * src/lib/radius.c * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8429afdec60150be21468... ====== Don't need to check the debug levels here... Arran Cudbard-Bell@2015-06-04T17:25:02Z Files modified: * src/include/log.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2e63c2c23c6cf2d22573... ====== print out "bad packet" errors only in debug mode Alan T. DeKok@2015-06-04T17:04:40Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8796e0fad916cb6fb6a09... ====== More errors on rad_recv_header() Alan T. DeKok@2015-06-04T16:53:45Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2542fd52274755bbb0ded... ====== No need for WARNING in message Alan T. DeKok@2015-06-04T16:50:12Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1de7df0ef4cd506eff6ff... ====== Make debug messages consistent for bad packets Alan T. DeKok@2015-06-04T16:50:11Z Files modified: * src/main/listen.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b9534922eb3dd46772fa5... ====== Log the reason *WHY* we're rejecting malformed packets, instead of doing it silently This probably wasn't done before for security reasons, but now we have the RATE_LIMIT macro, there's really no reason not to. This was discovered by a poorly configured F5 probe. Arran Cudbard-Bell@2015-06-04T03:28:51Z Files modified: * src/lib/radius.c * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec80ed1fcac031521df3c... ====== -- This commit summary was generated @2015-06-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).