Commit report for master branch

The git bot announce at freeradius.org
Mon Apr 15 02:00:02 CEST 2019


New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzYH8ACgkQfQ55zXdi
 Hs2ijAgAjL+E7jaVRZHjy8maS8kmy3gYndsN2jzpn3APFvAU1eUcSSvF4Zvh61XA
 p7cTPAS870vOP6FG8b5BxEt0GbZqgKDSGmovJXYRlKYcZeDwGsdvsUmEtQZBunrp
 2YZNV7KQhjyDnC1jjIKBCqdoJpv+ROExrqgQnag3nXBqcYLcmj0dLF4v+WEFI24L
 i/O+BbQEX9ytV2wgDwNw9BJ/ktoRqn4LWY138h6+QYguE0nEGlAVUkx707JThlVc
 VdMMTbZtuTC5Cj20QHaHH1tK8E5dJWa+f+qM378yVfEEJhyjwkwGPH7aVHU7OjtQ
 +A1f8Uu4gtebdCcJY++cHEmQ2y7nPQ==
 =5CDb
 -----END PGP SIGNATURE-----

register the master sockets

so we can tell when there are conflicts

Alan T. DeKok at 2019-04-14T16:31:47Z
Files modified:
	* src/lib/io/master.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/774dc48102dc502d4c9a7b64e5ca25f47c80c6df
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzYFQACgkQfQ55zXdi
 Hs2Kjwf/aF75diRUDTx3FkSjhuFz3mvx8RmGmaG6EFnBz3oylLcjtYrMA+kTa7Gt
 SIigoDWpZ/VRYirFsqxZtVOPW1Pr9ZjrtfruKA4wHaH9ILbTGmNxLSIUm3BqPi23
 iEUDZwYXy/Hptch58C62OWtWnfZ3BVH0BvFw0VCCWRVbeiTa047T16wP0l2EMjeK
 ugno1pgCXtn6ZW89jcVl9vrd2tJ7VbHIOie5S6q0W+MHQ68Jg7nfLVJP2lkQfnB5
 OMgqHHhkx09UwdX5UlnLb/EvOcAhzrSRtUyDT8hph6FXWqqBiQmXWT8wRPainQO6
 De8wOxlQYiPro5IVJL2xUfsaPEclww==
 =v15b
 -----END PGP SIGNATURE-----

add API to look up / add listeners

so that we can track the master sockets.

Note that we're looking for conflicts, so the typical comparison
checks don't work here.

Alan T. DeKok at 2019-04-14T16:30:39Z
Files modified:
	* src/lib/server/virtual_servers.c
	* src/lib/server/virtual_servers.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f20ea6de3ab67d93b2c74442e727cc62138c47c6
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzXswACgkQfQ55zXdi
 Hs3UnQgAllro1D0yhX5owxYRrcN/4AJq6/Ftwyqeb3MGxc1D3R6hHKzB+07t9xS/
 lbF9rKg+sv+jdh3rz3x/7J4N6mh1wvrUjY5oFs4E70ZNpqiExGuHF9i5WCzNKCym
 usrMCfEcxEz74uuaEVtw3g0x1Zk5M/vVYroAUcgvnPKb3YElKcQ827S9aNyCvzS5
 89GMcwjGJlA+ywfPRtzJWXVGYA/nRt4hNvMNDEYSDwKHrNzPpA/VyCKcA/kO9O7p
 uAQmNUYdv45BLqxRv8Vf2X4snC6Mxt9jhUV7XrNUqwCVK7TOg8xYlSPRDTxlGsbC
 RSLgmQM+PWL8Zexn2nR5oANhzsvHmw==
 =SPOR
 -----END PGP SIGNATURE-----

always set scope ID, even for IPv4 sockets

because we can find to an interface in IPv4, too

Alan T. DeKok at 2019-04-14T16:24:44Z
Files modified:
	* src/lib/util/socket.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3fef7b77207917cf0e617e30c9de2b98c4d648b4
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzXswACgkQfQ55zXdi
 Hs1nlAf/U6BJZ9qqGyf/JJ6oE43lWFd0k24OfDBPgywRk9pF9LaVhH19UUZM6jv2
 TQVd9u8R0bMeCDsxg5OikRmTCOEXJ3wpo1c+3aJF8x/u2TkdPSWVRD0U83Zg/WGJ
 QUzJgfKEeoMoP6TicbaNwAmDilWrq5udhXR6vIDwRUhi0iyvpAbQ5k0Nn1ii8YT8
 PNuS29UkHsjo32fxVGGH8OY5fL1ANZ9ul5ZPbdxE0qhg/kswElugCEXJGqyWrjKB
 0KwJRh7lqWhr9ia097P2wtS4VsffQg4VUl1GjUldw/UasLWhf41mpKTNHLiyF1RM
 gIIFNzW3qbID4eo6tk3VFP/J5r1wSw==
 =h7zG
 -----END PGP SIGNATURE-----

add machine-readable socket name functions

and use them in DHCPv4, RADIUS, and VQP.  So that we can
detect duplicate socket openings.

Alan T. DeKok at 2019-04-14T16:24:37Z
Files modified:
	* src/lib/io/app_io.c
	* src/lib/io/app_io.h
	* src/lib/io/listen.h
	* src/modules/proto_dhcpv4/proto_dhcpv4_udp.c
	* src/modules/proto_radius/proto_radius_udp.c
	* src/modules/proto_vmps/proto_vmps_udp.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/63d61bb40d659fc64bcd090096d9faaf65dc6075
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzJRgACgkQfQ55zXdi
 Hs1LJgf8CQ8y5HnIV98XvsOEBcNvO3A5ES0A5XaGu8S0eNKBqfx+Ur9KKY1UIx1d
 EOlzwYMokoQSgYhHpZ4zC8zDGLx8v0WYaqHXYBy1V/wdnxIdn2TyfJemW4wDHnND
 A4ZRsk4+tLZXHZ3Suj+6FQA+2WKNETEEo20QFhm0LYaFuVYoFdkOI7VxWW3G2rBK
 eY0QQve+mwsPWDMcoPMU1caty0SRbUSRAbadkzb8NOWCycxjIVrxeIYB2n01fZK0
 zr1QSMgaAnKPVPKc2HM3/Ah5Te2cTSiDDaVrWjij+8OmjcAihrUHcjUEJcmksu4X
 KF7XXlw68o1PueYyvk9G87/FD31R2Q==
 =TAdB
 -----END PGP SIGNATURE-----

fix error message

Alan T. DeKok at 2019-04-14T12:18:23Z
Files modified:
	* src/lib/server/virtual_servers.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/86aa529d82eacd50906cfaba02700df2b2800ee3
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzJGwACgkQfQ55zXdi
 Hs247Qf/Rtd0W4g9mw34PIKc42Lu7c9ucwRhh64e7C5aOD7dpxIoBQVFBPZcam8P
 KKkpIKsFYMQYD6QrPTVxIWHJsVdhzpN/vc6GcUw0TWxR8CszAf/WZLDMCvatz2Pf
 06VTTfzqiFWtkLXbOTuArYV4Km8XG28Gp3Gd9Rrt5iqOWJ+V7nQed3ffSP3ccxE6
 76z7dKZuRXv5If05k3pLxIkHseNkTuYhXyXsQfF9qw4eYj0WpsuFnh0muSqnsTsS
 03pDiTuK9gklz2xtvYr98Aydz2VWKOxtPT5qVx45jVEbsijej0+yMZZNVbg6tM5J
 px0b4tuUX0vCZD0Ah5jQdqWuMy+++Q==
 =rVCz
 -----END PGP SIGNATURE-----

Revert "'listen' sections can only be in a virtual server"

This reverts commit 7eaadf3e64c1c19f1912ec310bf3ba0aaa11ddae.

the structure of the config parser `server` -> `listen` already
prevents this

Alan T. DeKok at 2019-04-14T12:15:21Z
Files modified:
	* src/lib/server/virtual_servers.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/44fe48bdef32f34f70394ef9229227d73430e713
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyzEHMACgkQfQ55zXdi
 Hs34jwgAlNU0sggUpekmA/56u9WqhmuiuCWdHUEyX+ycMaZYo7UqnH3Aq7w19uA2
 Q82b9ROgx0kYqoh7VIqSSqbYdKIr8BHR5T9J71x4wm5sOsD6zMtNSo1Wo1TcmtQv
 9PUDxUDkJBidaBRMIi3jHoKehdZznjhqF6wc1DLbS3fZ7IgL9x2zFzgQHk/kFgSZ
 0qrqa7TxQC6Iu2wcujbqmhVMomnPsKEqxEEBUfAeDb9dfygFUzRCnrMYYZzInztJ
 N2Be1xdB6j1C1NcyFs88Rd8qWci2QgSTyNvytXykYanVM3EkK5S9CNNCcgjZsiH2
 C8J7/YV9nY1073iZsoRhYLQ7hRHsXw==
 =xzbo
 -----END PGP SIGNATURE-----

'listen' sections can only be in a virtual server

Alan T. DeKok at 2019-04-14T10:50:27Z
Files modified:
	* src/lib/server/virtual_servers.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7eaadf3e64c1c19f1912ec310bf3ba0aaa11ddae
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlywup4ACgkQ/6TVgp+2
 18p4Pg//YIvJs+UBy2lPOBY7oK4mVARyFXUYDGvfwNDw9Ozpwy3LrBPN89n6gb+V
 ZSfHjWJ8zJXsEP7pBdsOkQ2mAx5j/W5sKmFQHnu+RfMZ9ypWOWNzUASOLHBXIvJo
 bQPqkAOvx3eOoytRtrJAV/hxd8PVAAdbiTc/BHr4x/+OnPkvukJB7HOEaFhDpEE1
 NlR9jFQRiOcxNktSzRe6VpfQizrbpLkJOZ6OHbt+1pOzyFP8+DigHzm1Uh0xxyfL
 /CIrdjAmvRA0tNCkCY2rzxRgY3peULlw/l2dbH/lMrfxE4k2uzZvNAIK0mjBUkS5
 FMKBCPGyQL4M0MW3SQYg9KDd74EmxXeuQ26oAbh9C6KtcxnaGj4tsY4cMOZYp6VF
 rM22tjSwjBPjW7k15fMW9q5CHbLH/hcytihUw6UiWTC/ExFw9izFPx1la9zi73z1
 GAARHGRoiTjTHbffvHChpQ2DySG0W3a9j5azZsFvLdYBTLketvhj91WTT/DS7ZD8
 UeyDqmEblh1/yRU8kMnicPbzb5tWf22FaLZZ7X40kZhN+cM9w4e4boo6PNpP9nsb
 llFzlXJevL7f/BZTBkNKfNx3Q41K0KE1HHMwl9EboeM/ocPpCJ/pMS+H91aKWgkD
 Y2ekCMWC2LWHpNkD9yeduqptUF6XnlruBEpEcSeOJBGeFwQSAXM=
 =Y0+6
 -----END PGP SIGNATURE-----

Remove libressl version checks

If someone wants to contribute checks which use actual LibreSSL version numbers, so we're not stuck supporting the initial API version of LibreSSL at the point it was forked from OpenSSL, then they're welcome to do so, otherwise we will not continue to support these lazy, short sighted hacks.

Arran Cudbard-Bell at 2019-04-12T16:19:42Z
Files modified:
	* src/lib/tls/missing.h
	* src/lib/tls/session.c
	* src/lib/tls/utils.c
	* src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9652affe38f41ba2484e013cf9d2c0bcb8c80d67
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlywka4ACgkQ/6TVgp+2
 18rM5g//Z3OvmE0TDxqcosteKr4dR8tfFfoy5NU813+G0D98URxmL+NtpYFOiRDj
 buT2IhfBg0p/yTQVB4zGv6tjUQYKa8jwZnp7mtbv8bhaDdZE2oE3JT/Ts8X+p4to
 lCj3zutFrlsXndrdfqDRKmCoFKM0i5E9ftI7Ax+u7a2uK6h6I54ZxW2QD/OL3Vg8
 8WYDL+BPncLqyuaCqMbGlsThe4o8bsxDL8D/7al6KWeQ8aox0uC0aEmZv+BZ5l0T
 H9OlxWyrpTvzNYaK6IxEvvAA7mrZfCHFUNp9OT02QgmQJsi+QdObKPGi5b4vdFUg
 X+mQAt2JfotVeLSmc5yykCXlIoLvMdCkpBVnMQFVWFCQj/WkSGR+TU72rDlL1SqU
 1cwQGAzI3CCGDYifUZdjRFRpJ/ep3yYDCDp2GOfy54tJK5gx8egov+diJ2z3GR+a
 UnaqKDLmHDtsk7/JSBYubNAfBZjJYk5K4sq6KnQVnISZwrsZDBL7E8vBCLerwxDr
 wUm7j0xaNLdZsXXm7RHK/OwLIIxYSqx8qhhlG6gk+sTV88/0aS/ur29tf+B+VlLf
 dY8tTFMJKXj6EDfXfOdzpZiptRSS2dntBjM6+yZmLoQGuG15quG8vtcitmBiWZQ8
 hxGi4fhd6kfOg/wF2VjEJ4uCc2H/lODhN23M+kxeXb9QUnz1Wtg=
 =9UQH
 -----END PGP SIGNATURE-----

Add ubsan support

Arran Cudbard-Bell at 2019-04-12T13:25:02Z
Files modified:
	* configure
	* configure.ac

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/6f188e1986e9f3a569659cddf84ff6c92197c958
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlywkaYACgkQ/6TVgp+2
 18o1nw//RYqCo4K6CJcmgtHP+GkDA+puDruclK+4F4SJDN1WeEpPdZmgfoAqnsJu
 ++P3BuU2urYApjJZRB3Hi6sE7rG1i0AdCvnxVs/UgbiujoHvE9OaWAD6xQYsE2eb
 s7TUhhIR4BcAeV3TJUOeDYFdXiUxVvTkzNFl4LMQJolqYyhxqoyHrDb8UyMf7CVt
 qTOLkUqiBzHFIImxW2fK0T2Rg8mT9CiMS92/vYqvZiMb+jyNEXjemaW7Wekl1Tbf
 iX0NVoK+u6+lN6cbp9HXauQiMfnb5NoLrT4zvednlWfd2mAbea2slR9KP8+WvMIC
 wFO6C+HykRiQGt4PKNpqTVaK6egkm3acYxqiE2xYiK2PhFrDRyK/H+JfoGcf/28J
 1YA/nZiSeby+6gg6IuFVgQfk++Zd/QvZdFX5Y7nkQ6Wer46NFhg7z0i9A3/Y/bvy
 kteCGOw/sU3yWpNxQbqgGNAuTbkY9L2f/HIwYGBquCo3nM0I4CYdyGGFLOg8Mt0W
 nj2M5HtbmOD2E8GljYgFb41S3TX02oNX/5aCfymefIypH/8ALmNb2jBsVtQpdY02
 Jq0cbuzYek4092qptH7D2d/KO08vJc2uKtHEC3LC2/ZKZs4Q6RH2J2soul3CjAtr
 dt3aGJNd3VHbt7Ag62tqDCn3s5BzeKR++3L3b2O/oDogHTA6pNM=
 =gHv+
 -----END PGP SIGNATURE-----

Build sigtran configure

Arran Cudbard-Bell at 2019-04-12T13:24:54Z
Files modified:
	* src/modules/rlm_sigtran/configure

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/33b0fb7bf78533c3783d559a5bb0b883e9f1f95d
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlywkZsACgkQ/6TVgp+2
 18r1uxAAmtBdO4y2LKx1hIvk4WQAc28EjyKVWa7Q8SPKfWJbpC5R6HA7MLTAPBCV
 wPieQvwXXyUCsY/ECyOwyLxmWrWOwswSJR8UcUzk11W1E1Iv2ME85rVDNbxXYbsJ
 /2nB9fBOLdeSTkqxHkL8R6doRnV1BouO9pq0TBa8cWlnvl0PoJdQkXr6LKM/r6Tz
 SZB9mXMfx/KbWD7a+UN416TLoZchb7gSTs7XP97+BZUiyYVhDLMiq1W3GbONgn1n
 kMLby7gauDYqOdMcrNoUItDy7qxup8siBaEjJ2xupPOiUBDzuH4CHrk1gm/A55fF
 GVdbzrE6xS6W3f/GAxQka2Y0NKUrICQTHWA3HV1KMwnv5ElZHbyTKq+l2YL3XP9A
 Ftonk4uD8o+YQLY4KnORnXpfKlKyVkbiNpYJtq/Z2XJVyuSXW55FGYKC2ZJ3LDaG
 DeQGn5c36QAi48yAw0ed9+fBS3C0mDx6yJMItUMNNNXZN95kPvgqaXzm2OXiTQnR
 wTRxGpRpaOFwtukn62mXmnMvolhw73rhwsQNnAkfjSoapBtU5MhlTkQhhLNXu12W
 3SNbfkEZ1Q59QtPgpd9hRHEHcYafjZBCPftuIWXrgiGQ35YJC2usMJUZ/v8YLY7O
 HPCeObrT1yzh0tIPKMEBUgCYBwe6+XI+MuKT6Sx4nFo2+sTtE3w=
 =MMqC
 -----END PGP SIGNATURE-----

Fix lua tests on macOS

Arran Cudbard-Bell at 2019-04-12T13:24:43Z
Files modified:
	* src/lib/server/dl.c
	* src/lib/server/dl.h
	* src/modules/rlm_lua/lua.c
	* src/modules/rlm_lua/lua.h
	* src/modules/rlm_lua/util.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/053beecfe4b0faeb35fd658e4c78b1f3d86e90b0
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlyv64kACgkQ/6TVgp+2
 18pknw/+MnahW/NYPXpHLtmRGIUrVufKYWHL4E0Hzc3W1ezdWnfOfPB6iSmixazF
 Vl3zcFauF8TulRi2TevF/Z5b44Dyi025Yn+tX8QrhCkWeAwC0bw/snAAg8gUfeVl
 UT+l+3ytQ4hH0y/p7vSQUrURaBz5pzT5pdAH9hdBP8pPTDy884iAPTFos33Sxs/M
 0b/jvfLrsA04hv6n/qPzVvIf5AgGMdbex7aAkRvnXeUD498FHQsF30dOqYV4yYB3
 n5mir6ojQhw6ti9L+OlJdTRjTEV3N4SYHpGIks3lXpf99S/F8dlDiy7DBVsActoF
 cHYseEZ1m1xKHIR1eq9vcMgd9iqNQl/FB3rYCdv/aAmTJBqlhvGcDYIhEzxgY9UY
 d/w2yEXT5XJFbiumffgVlPAF7orsUQt36vTIGQCd1jVOk3qEEk6tFkf4cok0kaxq
 Mpy8rnrys5RbWVuLrf0s1GQmdAiCY958rR1GFYPTApQVf4GOR9saakIOJ380nnjv
 d2wg3ACV6Xe7qZH7X58CpYzea+BPp0JbIpyNLq+Ujmb0NC3/c8/BbfzwxZbqSeO0
 aynH1zpN28LyZxxsSyrVYJuod0z/9Z33tE9e6A8hfWeCsgKFbOnqM6ZrlNRMS9jR
 7v3ARw/1OWgaqTbqajMwvrEOdZUf7en5M9rF/qsjmfnAG17LEoI=
 =A85i
 -----END PGP SIGNATURE-----

Fixup error messages in EAP-PWD

Arran Cudbard-Bell at 2019-04-12T01:36:09Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/389c6d913b1cfc8a84d01769b20ccc6d86a013bb
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlyv63QACgkQ/6TVgp+2
 18qxQA//TLQpdZvsSptl0LhVLPSmkkVV+q3POuXn7SeCiuEi0mc6QXc2YpLvKKKA
 bvRliHl3Xv93PZMDJKPwgk4LxicrHK2/MzYBByurBymtgi7UxztcKmBq5RhA4k4K
 llsqV37uPaH+gsn4WiHxAvgUqWy8VU/VND2U8oLfnVsoElYf1iBupAadXcHT0BfN
 StNqzgXbw4iBgxCZCXrtgEsHMKseE0idT8EiM8aAeYRCzksQ1NjrFqCmwNHMuT8N
 POsPS2AQlJ1MLRie2U0q5cY09ICUyVjITf4/FDEaa4knQGYUIWRrZWsmno4sOORo
 ifj1FUfYb8tTjSyfdwMs1Im7uPshYyz9In+CDOk8xOQYuYzepE0jV7W+4uBLOIqe
 ND+kRlDLZd8E/20ZOsvnzTyHd6YuLDkx5QRKsfRQgsKiCyKEaWzPxijQN2MhllM5
 wDT76ku0HA5lmwc/eJ+N1Ehf1cNH1MkYZmLEMK2wjYbF1iqZ7bFokPGs3CH7aQkr
 u4jRBQACXkTWSP2YLpclvFF7Am7tvNMwdqG0DTQVTpOP213uTOfzO6CSo4naMipu
 gPZ34XNx4FxDZ6ayTKe0YQ8mR5U19zVky4iNN9No3Xwbba/pMJkYKxAjb5V0ly4t
 5bC98MkvKRkLe/Co7XrZ+gPZAJgWor8eMGfF+QP3Audl3FS5yJE=
 =17mc
 -----END PGP SIGNATURE-----

Fixup copyright notices in EAP-PWD

Arran Cudbard-Bell at 2019-04-12T01:35:48Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.h
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/49a15456a144bb9be5f2ac8add8557b432f3c2b1
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAlyv6bsACgkQ/6TVgp+2
 18qCmxAAmyKQyDnSgFucKnBZ0PqqeXe6Rmh482u9jU9OCeUkxAo0z+HJTOuvaic4
 4tD2zMb8QIsLGxGJGiwU/s+DOoPZ2XOgLsaG4LtlUORSNUMy03vhfOl27Vs1+1EK
 +35j1SZjxqwY6p2kw3tMlcIsjZNA5eGFzx0hwDrMx/kiwjeGNZLjfN3TTfbYFNPf
 QGMp6Vgf3n+ay8iVCTOX4AsrODBF67XU86kyeQeRxmORuTgmRU/ify2hhqPyfRUI
 qd9mqCS9BQ24lQpNFJkWTL1b2sfB7kQkvoO0+1qWe1ERb296KOQyQ2oFyiOiEl7q
 ut3pnDI0FokeSXBiLbi8NGWAm32lveDj4d7ijRAIQjtyZgWsUy8r77WwWoHE8XUt
 s8uE28CuYrbNohQ8L7cgKvyySpZp2wXYdLCT7jL1paq4bVtSIdWoa637O17hO3kY
 4rBB1x/4nXzXLlY1Sf+x+aI1t58mBcJ3K9GNUt0IH2lBJLhc6gS/uMOUYF3cfx9g
 5AYo/kGwLnM9E9Yx9M5OhLp4aEklfJ2eCdOs4+Htwd1AXDdexr3h+b+N/07mZfBv
 NqBbo1OCldr1yr3LP9QM8H/7AVqAxxmbTi5QF76I4tboRJYW/ubRyRyFIDmK/oZM
 ERUSaiqyFIL8BWX9A73q5BN0M5bdG7NwwnJgacnhyBeQc0U+ntM=
 =Jh8s
 -----END PGP SIGNATURE-----

Cleanups in EAP-PWD

Arran Cudbard-Bell at 2019-04-12T01:28:27Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.h
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c61f42f298e737274997eeb8fd2b0c80111f3fb3
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyuFzYACgkQfQ55zXdi
 Hs0b5Af9EenBvs6JELGg1LMfXjjENLjyEst1BpAyQrDvqWEbncwDBD3/EC2vTpQ1
 sYAKuWAdHotVKbZZ9pS1oXlyzj79rlBbW7IW9aAryyvUHWdWkiCZp10AbUW+GYfo
 kfFsdMHJPhaqtM8br+6E8LIXp4FgvzU2rQIYYWRNdJzfXitYR/KFKkjnGRwyCzik
 8rkeHZ7dhAKvdwRyVDsDs0un0VGjGb7MR7NP7kEacYR9Tfg72HY/QNlBkGfzVhA5
 EQaC2Wh3WJ4PmA23lnujQyh6rms0k7DEIlNl9vvkTUSxp2/vw4BRxckTBDOrAgwL
 /GUWjwYMWHIb2wdGVdnQowSmHKwy9Q==
 =1Idb
 -----END PGP SIGNATURE-----

EAP-pwd: validate received scalar and element

When processing an EAP-pwd Commit frame, the peer's scalar and elliptic curve
point were not validated. This allowed an adversary to bypass authentication,
and impersonate any user.

Fix this vulnerability by assuring the received scalar lies within the valid
range, and by checking that the received element is not the point at infinity
and lies on the elliptic curve being used.

Mathy Vanhoef (via Alan T. DeKok)@2019-04-10T16:17:58Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a99746c93b8b3ae3be367af0e46f0d6a9626f566
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEzBAABCAAdFiEE8n1lTTL4FC4LtEWpfQ55zXdiHs0FAlyrr9IACgkQfQ55zXdi
 Hs02kQf+JzMSKCXm6A4f6JBf7aMNHkM6WS1xF7jqL3Kh7afiW8BoeyeZ2TycPMa3
 RWdBC27J4mfU4a40+PAbXxC2jMd5CztFTMuiOZL8spnO/xM4xi8V0M5Yz5RgKmmf
 chRW2/MvamPBmA31A+nTnb78nm/EYYI+4b4DgJ49smNbeM3kUompb2co63ewX9g1
 n0CdMEIZqaJaEXS9WTjPKXDOUBBMQXlDaEO9H1k2pWnc8kTVoOjQAaTto7BeKBUc
 QBRhpltQcd5brcr0P0YmL63KnrVsr3QFUwQzwdXLCoMqi89wH+cDDHR0qqJHAEGq
 E0sLe6WGNsueno/IclKIIBiU1Gx9mQ==
 =4mi5
 -----END PGP SIGNATURE-----

look in root for virtual server

as virtual servers haven't been bootstrapped yet, so we can't
call virtual_server_find()

Alan T. DeKok at 2019-04-08T20:32:18Z
Files modified:
	* src/lib/server/client.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8fd22318feb100c8041309e1460fc2f02e81340e
====== 
-- 
This commit summary was generated @2019-04-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).


More information about the Freeradius-Devel mailing list