Package: ocserv / 0.11.6-2

Metadata

Package Version Patches format
ocserv 0.11.6-2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
allow parallel build of autogen files.patch | (download)

src/Makefile.am | 9 7 + 2 - 0 !
src/ocpasswd/Makefile.am | 8 6 + 2 - 0 !
2 files changed, 13 insertions(+), 4 deletions(-)

 use stamp files to allow parallel build of autogen files
 Autogen seems to output on the creates files gradually, something that
 makes 'make' believe that the command is complete prior to the output
 file being fully populated. The current approach uses stamp files to
 ensure that no incomplete files are used for compilation.
prevent parallel build of manpages.patch | (download)

doc/Makefile.am | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 prevent unsafe parallel building of manpages with autogen
0001 ocserv fw should still create a chain if restrict us.patch | (download)

src/ocserv-fw | 13 5 + 8 - 0 !
1 file changed, 5 insertions(+), 8 deletions(-)

 [patch 2/7] ocserv-fw should still create a chain if
 restrict-user-to-routes is set

ocserv-fw only creates SEC_FORWARD_CHAIN if ports are being blocked. This
leads to an error if restrict-user-to-routes is used without any port
blocking.

Since ocserv-fw is only called if restrict-user-to-routes or -ports is set,
remove the conditional check for creating the chain.

0002 ocserv fw should send all traffic to the device spec.patch | (download)

src/ocserv-fw | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 [patch 3/7] ocserv-fw should send all traffic to the device-specific
 forwarding chain

After adding port-specific rules to FORWARD and creating SEC_FORWARD_CHAIN
with route-specific rules, send any remaining FORWARD traffic to
SEC_FORWARD_CHAIN.

0003 worker vpn corrected calculation for MTU via TCP MSS.patch | (download)

src/worker-vpn.c | 16 9 + 7 - 0 !
1 file changed, 9 insertions(+), 7 deletions(-)

 [patch 6/7] worker-vpn: corrected calculation for mtu via tcp mss

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

0004 worker vpn use TCP_INFO on linux to obtain accurate .patch | (download)

src/worker-vpn.c | 80 48 + 32 - 0 !
1 file changed, 48 insertions(+), 32 deletions(-)

 [patch 7/7] worker-vpn: use tcp_info on linux to obtain accurate mtu
 information

This provides a more accurate value than the one obtained using the
TCP MSS value. The latter is affected by many factors (such as tcp
options), to provide a reliable value.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>