Commit report for master branch
The git bot
announce at freeradius.org
Mon Apr 15 02:00:02 CEST 2019
New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzYH8ACgkQfQ55zXdi
Hs2ijAgAjL+E7jaVRZHjy8maS8kmy3gYndsN2jzpn3APFvAU1eUcSSvF4Zvh61XA
p7cTPAS870vOP6FG8b5BxEt0GbZqgKDSGmovJXYRlKYcZeDwGsdvsUmEtQZBunrp
2YZNV7KQhjyDnC1jjIKBCqdoJpv+ROExrqgQnag3nXBqcYLcmj0dLF4v+WEFI24L
i/O+BbQEX9ytV2wgDwNw9BJ/ktoRqn4LWY138h6+QYguE0nEGlAVUkx707JThlVc
VdMMTbZtuTC5Cj20QHaHH1tK8E5dJWa+f+qM378yVfEEJhyjwkwGPH7aVHU7OjtQ
+A1f8Uu4gtebdCcJY++cHEmQ2y7nPQ==
=5CDb
-----END PGP SIGNATURE-----
register the master sockets
so we can tell when there are conflicts
Alan T. DeKok at 2019-04-14T16:31:47Z
Files modified:
* src/lib/io/master.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/774dc48102dc502d4c9a7b64e5ca25f47c80c6df
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzYFQACgkQfQ55zXdi
Hs2Kjwf/aF75diRUDTx3FkSjhuFz3mvx8RmGmaG6EFnBz3oylLcjtYrMA+kTa7Gt
SIigoDWpZ/VRYirFsqxZtVOPW1Pr9ZjrtfruKA4wHaH9ILbTGmNxLSIUm3BqPi23
iEUDZwYXy/Hptch58C62OWtWnfZ3BVH0BvFw0VCCWRVbeiTa047T16wP0l2EMjeK
ugno1pgCXtn6ZW89jcVl9vrd2tJ7VbHIOie5S6q0W+MHQ68Jg7nfLVJP2lkQfnB5
OMgqHHhkx09UwdX5UlnLb/EvOcAhzrSRtUyDT8hph6FXWqqBiQmXWT8wRPainQO6
De8wOxlQYiPro5IVJL2xUfsaPEclww==
=v15b
-----END PGP SIGNATURE-----
add API to look up / add listeners
so that we can track the master sockets.
Note that we're looking for conflicts, so the typical comparison
checks don't work here.
Alan T. DeKok at 2019-04-14T16:30:39Z
Files modified:
* src/lib/server/virtual_servers.c
* src/lib/server/virtual_servers.h
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f20ea6de3ab67d93b2c74442e727cc62138c47c6
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzXswACgkQfQ55zXdi
Hs3UnQgAllro1D0yhX5owxYRrcN/4AJq6/Ftwyqeb3MGxc1D3R6hHKzB+07t9xS/
lbF9rKg+sv+jdh3rz3x/7J4N6mh1wvrUjY5oFs4E70ZNpqiExGuHF9i5WCzNKCym
usrMCfEcxEz74uuaEVtw3g0x1Zk5M/vVYroAUcgvnPKb3YElKcQ827S9aNyCvzS5
89GMcwjGJlA+ywfPRtzJWXVGYA/nRt4hNvMNDEYSDwKHrNzPpA/VyCKcA/kO9O7p
uAQmNUYdv45BLqxRv8Vf2X4snC6Mxt9jhUV7XrNUqwCVK7TOg8xYlSPRDTxlGsbC
RSLgmQM+PWL8Zexn2nR5oANhzsvHmw==
=SPOR
-----END PGP SIGNATURE-----
always set scope ID, even for IPv4 sockets
because we can find to an interface in IPv4, too
Alan T. DeKok at 2019-04-14T16:24:44Z
Files modified:
* src/lib/util/socket.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3fef7b77207917cf0e617e30c9de2b98c4d648b4
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzXswACgkQfQ55zXdi
Hs1nlAf/U6BJZ9qqGyf/JJ6oE43lWFd0k24OfDBPgywRk9pF9LaVhH19UUZM6jv2
TQVd9u8R0bMeCDsxg5OikRmTCOEXJ3wpo1c+3aJF8x/u2TkdPSWVRD0U83Zg/WGJ
QUzJgfKEeoMoP6TicbaNwAmDilWrq5udhXR6vIDwRUhi0iyvpAbQ5k0Nn1ii8YT8
PNuS29UkHsjo32fxVGGH8OY5fL1ANZ9ul5ZPbdxE0qhg/kswElugCEXJGqyWrjKB
0KwJRh7lqWhr9ia097P2wtS4VsffQg4VUl1GjUldw/UasLWhf41mpKTNHLiyF1RM
gIIFNzW3qbID4eo6tk3VFP/J5r1wSw==
=h7zG
-----END PGP SIGNATURE-----
add machine-readable socket name functions
and use them in DHCPv4, RADIUS, and VQP. So that we can
detect duplicate socket openings.
Alan T. DeKok at 2019-04-14T16:24:37Z
Files modified:
* src/lib/io/app_io.c
* src/lib/io/app_io.h
* src/lib/io/listen.h
* src/modules/proto_dhcpv4/proto_dhcpv4_udp.c
* src/modules/proto_radius/proto_radius_udp.c
* src/modules/proto_vmps/proto_vmps_udp.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/63d61bb40d659fc64bcd090096d9faaf65dc6075
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzJRgACgkQfQ55zXdi
Hs1LJgf8CQ8y5HnIV98XvsOEBcNvO3A5ES0A5XaGu8S0eNKBqfx+Ur9KKY1UIx1d
EOlzwYMokoQSgYhHpZ4zC8zDGLx8v0WYaqHXYBy1V/wdnxIdn2TyfJemW4wDHnND
A4ZRsk4+tLZXHZ3Suj+6FQA+2WKNETEEo20QFhm0LYaFuVYoFdkOI7VxWW3G2rBK
eY0QQve+mwsPWDMcoPMU1caty0SRbUSRAbadkzb8NOWCycxjIVrxeIYB2n01fZK0
zr1QSMgaAnKPVPKc2HM3/Ah5Te2cTSiDDaVrWjij+8OmjcAihrUHcjUEJcmksu4X
KF7XXlw68o1PueYyvk9G87/FD31R2Q==
=TAdB
-----END PGP SIGNATURE-----
fix error message
Alan T. DeKok at 2019-04-14T12:18:23Z
Files modified:
* src/lib/server/virtual_servers.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/86aa529d82eacd50906cfaba02700df2b2800ee3
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzJGwACgkQfQ55zXdi
Hs247Qf/Rtd0W4g9mw34PIKc42Lu7c9ucwRhh64e7C5aOD7dpxIoBQVFBPZcam8P
KKkpIKsFYMQYD6QrPTVxIWHJsVdhzpN/vc6GcUw0TWxR8CszAf/WZLDMCvatz2Pf
06VTTfzqiFWtkLXbOTuArYV4Km8XG28Gp3Gd9Rrt5iqOWJ+V7nQed3ffSP3ccxE6
76z7dKZuRXv5If05k3pLxIkHseNkTuYhXyXsQfF9qw4eYj0WpsuFnh0muSqnsTsS
03pDiTuK9gklz2xtvYr98Aydz2VWKOxtPT5qVx45jVEbsijej0+yMZZNVbg6tM5J
px0b4tuUX0vCZD0Ah5jQdqWuMy+++Q==
=rVCz
-----END PGP SIGNATURE-----
Revert "'listen' sections can only be in a virtual server"
This reverts commit 7eaadf3e64c1c19f1912ec310bf3ba0aaa11ddae.
the structure of the config parser `server` -> `listen` already
prevents this
Alan T. DeKok at 2019-04-14T12:15:21Z
Files modified:
* src/lib/server/virtual_servers.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/44fe48bdef32f34f70394ef9229227d73430e713
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzEHMACgkQfQ55zXdi
Hs34jwgAlNU0sggUpekmA/56u9WqhmuiuCWdHUEyX+ycMaZYo7UqnH3Aq7w19uA2
Q82b9ROgx0kYqoh7VIqSSqbYdKIr8BHR5T9J71x4wm5sOsD6zMtNSo1Wo1TcmtQv
9PUDxUDkJBidaBRMIi3jHoKehdZznjhqF6wc1DLbS3fZ7IgL9x2zFzgQHk/kFgSZ
0qrqa7TxQC6Iu2wcujbqmhVMomnPsKEqxEEBUfAeDb9dfygFUzRCnrMYYZzInztJ
N2Be1xdB6j1C1NcyFs88Rd8qWci2QgSTyNvytXykYanVM3EkK5S9CNNCcgjZsiH2
C8J7/YV9nY1073iZsoRhYLQ7hRHsXw==
=xzbo
-----END PGP SIGNATURE-----
'listen' sections can only be in a virtual server
Alan T. DeKok at 2019-04-14T10:50:27Z
Files modified:
* src/lib/server/virtual_servers.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7eaadf3e64c1c19f1912ec310bf3ba0aaa11ddae
======
gpgsig -----BEGIN PGP SIGNATURE-----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=Y0+6
-----END PGP SIGNATURE-----
Remove libressl version checks
If someone wants to contribute checks which use actual LibreSSL version numbers, so we're not stuck supporting the initial API version of LibreSSL at the point it was forked from OpenSSL, then they're welcome to do so, otherwise we will not continue to support these lazy, short sighted hacks.
Arran Cudbard-Bell at 2019-04-12T16:19:42Z
Files modified:
* src/lib/tls/missing.h
* src/lib/tls/session.c
* src/lib/tls/utils.c
* src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9652affe38f41ba2484e013cf9d2c0bcb8c80d67
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlywka4ACgkQ/6TVgp+2
18rM5g//Z3OvmE0TDxqcosteKr4dR8tfFfoy5NU813+G0D98URxmL+NtpYFOiRDj
buT2IhfBg0p/yTQVB4zGv6tjUQYKa8jwZnp7mtbv8bhaDdZE2oE3JT/Ts8X+p4to
lCj3zutFrlsXndrdfqDRKmCoFKM0i5E9ftI7Ax+u7a2uK6h6I54ZxW2QD/OL3Vg8
8WYDL+BPncLqyuaCqMbGlsThe4o8bsxDL8D/7al6KWeQ8aox0uC0aEmZv+BZ5l0T
H9OlxWyrpTvzNYaK6IxEvvAA7mrZfCHFUNp9OT02QgmQJsi+QdObKPGi5b4vdFUg
X+mQAt2JfotVeLSmc5yykCXlIoLvMdCkpBVnMQFVWFCQj/WkSGR+TU72rDlL1SqU
1cwQGAzI3CCGDYifUZdjRFRpJ/ep3yYDCDp2GOfy54tJK5gx8egov+diJ2z3GR+a
UnaqKDLmHDtsk7/JSBYubNAfBZjJYk5K4sq6KnQVnISZwrsZDBL7E8vBCLerwxDr
wUm7j0xaNLdZsXXm7RHK/OwLIIxYSqx8qhhlG6gk+sTV88/0aS/ur29tf+B+VlLf
dY8tTFMJKXj6EDfXfOdzpZiptRSS2dntBjM6+yZmLoQGuG15quG8vtcitmBiWZQ8
hxGi4fhd6kfOg/wF2VjEJ4uCc2H/lODhN23M+kxeXb9QUnz1Wtg=
=9UQH
-----END PGP SIGNATURE-----
Add ubsan support
Arran Cudbard-Bell at 2019-04-12T13:25:02Z
Files modified:
* configure
* configure.ac
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/6f188e1986e9f3a569659cddf84ff6c92197c958
======
gpgsig -----BEGIN PGP SIGNATURE-----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=gHv+
-----END PGP SIGNATURE-----
Build sigtran configure
Arran Cudbard-Bell at 2019-04-12T13:24:54Z
Files modified:
* src/modules/rlm_sigtran/configure
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/33b0fb7bf78533c3783d559a5bb0b883e9f1f95d
======
gpgsig -----BEGIN PGP SIGNATURE-----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=MMqC
-----END PGP SIGNATURE-----
Fix lua tests on macOS
Arran Cudbard-Bell at 2019-04-12T13:24:43Z
Files modified:
* src/lib/server/dl.c
* src/lib/server/dl.h
* src/modules/rlm_lua/lua.c
* src/modules/rlm_lua/lua.h
* src/modules/rlm_lua/util.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/053beecfe4b0faeb35fd658e4c78b1f3d86e90b0
======
gpgsig -----BEGIN PGP SIGNATURE-----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=A85i
-----END PGP SIGNATURE-----
Fixup error messages in EAP-PWD
Arran Cudbard-Bell at 2019-04-12T01:36:09Z
Files modified:
* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/389c6d913b1cfc8a84d01769b20ccc6d86a013bb
======
gpgsig -----BEGIN PGP SIGNATURE-----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=17mc
-----END PGP SIGNATURE-----
Fixup copyright notices in EAP-PWD
Arran Cudbard-Bell at 2019-04-12T01:35:48Z
Files modified:
* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.h
* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/49a15456a144bb9be5f2ac8add8557b432f3c2b1
======
gpgsig -----BEGIN PGP SIGNATURE-----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=Jh8s
-----END PGP SIGNATURE-----
Cleanups in EAP-PWD
Arran Cudbard-Bell at 2019-04-12T01:28:27Z
Files modified:
* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.h
* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c61f42f298e737274997eeb8fd2b0c80111f3fb3
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyuFzYACgkQfQ55zXdi
Hs0b5Af9EenBvs6JELGg1LMfXjjENLjyEst1BpAyQrDvqWEbncwDBD3/EC2vTpQ1
sYAKuWAdHotVKbZZ9pS1oXlyzj79rlBbW7IW9aAryyvUHWdWkiCZp10AbUW+GYfo
kfFsdMHJPhaqtM8br+6E8LIXp4FgvzU2rQIYYWRNdJzfXitYR/KFKkjnGRwyCzik
8rkeHZ7dhAKvdwRyVDsDs0un0VGjGb7MR7NP7kEacYR9Tfg72HY/QNlBkGfzVhA5
EQaC2Wh3WJ4PmA23lnujQyh6rms0k7DEIlNl9vvkTUSxp2/vw4BRxckTBDOrAgwL
/GUWjwYMWHIb2wdGVdnQowSmHKwy9Q==
=1Idb
-----END PGP SIGNATURE-----
EAP-pwd: validate received scalar and element
When processing an EAP-pwd Commit frame, the peer's scalar and elliptic curve
point were not validated. This allowed an adversary to bypass authentication,
and impersonate any user.
Fix this vulnerability by assuring the received scalar lies within the valid
range, and by checking that the received element is not the point at infinity
and lies on the elliptic curve being used.
Mathy Vanhoef (via Alan T. DeKok)@2019-04-10T16:17:58Z
Files modified:
* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a99746c93b8b3ae3be367af0e46f0d6a9626f566
======
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyrr9IACgkQfQ55zXdi
Hs02kQf+JzMSKCXm6A4f6JBf7aMNHkM6WS1xF7jqL3Kh7afiW8BoeyeZ2TycPMa3
RWdBC27J4mfU4a40+PAbXxC2jMd5CztFTMuiOZL8spnO/xM4xi8V0M5Yz5RgKmmf
chRW2/MvamPBmA31A+nTnb78nm/EYYI+4b4DgJ49smNbeM3kUompb2co63ewX9g1
n0CdMEIZqaJaEXS9WTjPKXDOUBBMQXlDaEO9H1k2pWnc8kTVoOjQAaTto7BeKBUc
QBRhpltQcd5brcr0P0YmL63KnrVsr3QFUwQzwdXLCoMqi89wH+cDDHR0qqJHAEGq
E0sLe6WGNsueno/IclKIIBiU1Gx9mQ==
=4mi5
-----END PGP SIGNATURE-----
look in root for virtual server
as virtual servers haven't been bootstrapped yet, so we can't
call virtual_server_find()
Alan T. DeKok at 2019-04-08T20:32:18Z
Files modified:
* src/lib/server/client.c
Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8fd22318feb100c8041309e1460fc2f02e81340e
======
--
This commit summary was generated @2019-04-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).
More information about the Freeradius-Devel
mailing list