File: ChangeLog

package info (click to toggle)
ocserv 1.3.0-3
links: PTS, VCS
area: main
in suites: forky, sid
size: 6,924 kB
sloc: ansic: 46,747; sh: 12,630; makefile: 412; xml: 29
file content (29263 lines) | stat: -rw-r--r-- 974,619 bytes
parent folder | download | duplicates (2)
commit 92dba6e4f5efcbc4e293dc65e86fbcbda058fb76
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 5 21:08:20 2024 +0200

    released 1.3.0
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 538be2b5ffbddb433149050cda7544d00345fd95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 29 22:26:17 2024 +0200

    NEWS: mentioned closed issue
    
    Resolves: #597
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fe144f86c4a834fa5bc897596584b00af46b2a0e
Merge: db90324b cf56c975
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 18:24:13 2024 +0000

    Merge branch 'tmp-llhttp' into 'master'
    
    Switch from http-parser to llhttp
    
    Closes #598
    
    See merge request openconnect/ocserv!422

commit cf56c9754b1d8476fb3f0afd516b7b261c947891
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 12 23:16:41 2024 +0200

    Switch from http-parser to llhttp
    
    http-parser is an unmaintained library that has been replaced by llhttp.
    
    Resolves: #598
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit db90324b082ec671c08467140c68b9712ab85fc5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 13:35:52 2024 +0200

    tls_load_files: do not print informational messages on worker load
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 57ff431c9e3be1226ec4b85678bf70f777e8dcc3
Merge: 8e523597 71e4aba5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 11:23:21 2024 +0000

    Merge branch 'tmp-silent-worker' into 'master'
    
    config: silence informational messages on worker reload
    
    See merge request openconnect/ocserv!423

commit 71e4aba580f32c33c82f2b4ccaf01728857ba3ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 27 21:30:42 2024 +0200

    config: silence informational messages on worker reload
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8e523597f1e3edf82912897611e8a88143752935
Merge: 72b8e19c 48d7057f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 27 19:07:09 2024 +0000

    Merge branch 'tmp-config-url' into 'master'
    
    Allow selecting group by URL or profile
    
    See merge request openconnect/ocserv!403

commit 48d7057fb3630eb32dfd6d15d26a33451c071a3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 26 21:48:55 2023 +0100

    config: auto-select-group made global not per vhost
    
    The group functionality is available globally only and
    there is no benefit from this option being per vhost.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3f966ae8cadcb38a7de2f35cca8b0aeb05fdd5dc
Author: Marcin Ochab <github@horrify.org>
Date:   Sun Dec 24 11:58:48 2023 +0100

    Allow selecting group by URL or profile
    
    This introduces the 'select-group-by-url' config option
    that allows selecting an authgroup just by connecting to
    a dedicated URI.
    
    Signed-off-by: Marcin Ochab <marcin.ochab@gmail.com>
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 72b8e19cac44bf1ca0246791967cdc6a012d6d55
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 1 12:19:46 2024 +0200

    updated copyright notices and minor text update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8cd5e12e81e02c9ec84b112c9989e626c2fa2cf5
Merge: 6728eb24 c734a9c9
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Mar 26 20:16:21 2024 +0000

    Merge branch 'MAX_GROUPS' into 'master'
    
    Bump MAX_GROUPS to allow for more groups
    
    See merge request openconnect/ocserv!415

commit 6728eb2436406b419fdf30fa474eb19be49322bb
Merge: 332644b3 20ed2bfc
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Mar 26 14:25:41 2024 +0000

    Merge branch 'malloc.h' into 'master'
    
    Do not include <malloc.h> but for malloc_trim()
    
    See merge request openconnect/ocserv!418

commit 332644b31e17f9abb27d1acd9d0f7ff881e87646
Merge: 44721552 ee7bc8ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 26 14:07:47 2024 +0000

    Merge branch 'master' into 'master'
    
    src/ocpasswd/ocpasswd.c: handle malloc errors
    
    See merge request openconnect/ocserv!417

commit ee7bc8ae6076071e182482468393548a19cf40b7
Author: Ilya Shipitsin <chipitsine@gmail.com>
Date:   Fri Mar 22 14:53:36 2024 +0100

    src/ocpasswd/ocpasswd.c: handle malloc errors
    
    Signed-off-by: Ilya Shipitsin <chipitsine@gmail.com>

commit 20ed2bfc7ac431385190716c0230b97945cba280
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Mar 22 09:29:40 2024 +0100

    Do not include <malloc.h> but for malloc_trim()
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit c734a9c929b5eb44d1a1082366e72cea7445c689
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Mar 19 07:33:08 2024 +0100

    Bump MAX_GROUPS to allow for more groups
    
    Especially Radius accounts might belong to a large number of groups.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 44721552bef3ee98fdf8870d189fd7bf1554f21a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 22 22:56:53 2024 +0100

    README.md: updated URI [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1ea5385c2b718076babf3c1460d3ba9f22038c92
Merge: 444ae602 aa8ab8ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 20 13:23:35 2024 +0000

    Merge branch 'feature-expand_no-ipv6-ocv3_test' into 'master'
    
    Expand no-ipv6-ocv3 test
    
    See merge request openconnect/ocserv!414

commit aa8ab8ed30776502af7b75a21d8e7c8701ba7615
Author: Daniel Lenski <dlenski@gmail.com>
Date:   Mon Feb 19 17:36:12 2024 -0800

    Expand no-ipv6-ocv3 test
    
    As added in c1a6f2b04a15ea0fecd51d0e7d38b3185268af67, this test verifies
    that ocserv will NOT send IPv6 routes to OpenConnect v3 clients, which can't
    handle them correctly.
    
    Additionally, we can also verify that ocserv DOES send IPv6 routes to
    totally unknown clients, which is the intended outcome resulting from
    8b8a1a7b53aecc5ea1076c3288b817c8c9b04fde.
    
    Signed-off-by: Daniel Lenski <dlenski@amazon.com>

commit 444ae6022a5881a07f5515d5229f2ff4761c867a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 2 16:29:50 2024 +0100

    bumped version [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fe05d2a63020d195e19b669ceafe4be558ef6abe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 25 09:13:39 2024 +0100

    Require ipcalc for the test suite
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2a17ffb8749fb33d5f7fa4fe5259ef2fc9616972
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 24 10:26:35 2024 +0100

    release.sh: use package type for tarball
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b94591a168cfaaef9a1da0b198b157ce11f1ef1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 22 23:21:35 2024 +0100

    release.sh: updated
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7ced730fb26caa8ce2299f18fea60469908ac6c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 22 22:57:08 2024 +0100

    released 1.2.4
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ab02819cd82e093596bedf9ca4afcd3c4000be0b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 22 16:11:40 2024 +0100

    release.sh: read .gitlab-token from home dir
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b5698222670a611cf94652895374a9fc9a1959ec
Merge: df657e27 ab58d9e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 22 15:10:09 2024 +0000

    Merge branch 'speed-limit' into 'master'
    
    Retrieve connection speed from RADIUS
    
    Closes #554
    
    See merge request openconnect/ocserv!390

commit ab58d9e9d768e2cac7e078e46cc33c3c51b8281f
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Dec 5 23:58:48 2023 +0100

    Retrieve connection speed from RADIUS
    
    Hijack Roaring Penguin's RADIUS attributes for that purpose:
    * RP-Upstream-Speed-Limit → rx_per_sec
    * RP-Downstream-Speed-Limit → tx_per_sec
    
    While the ocserv configuration options use b/s, ocserv uses kb/s
    internally. The radius attributes are already expressed in kb/s,
    so we don't need to convert them.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit df657e2772b6dc4f6c6071fa43095b9f7c19f5a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 16 06:10:05 2024 +0100

    .triage-policies.yml: updated
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit dd6778bf60c0c3c67a5494d89db9118015901148
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 16 06:05:50 2024 +0100

    .gitlab-ci.yml: use CI_PROJECT_ID for triage
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit aa41bfb8fe7b4ba19b33b791de0897b37177bffa
Merge: 313e68b9 badf9be9
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Jan 7 16:28:04 2024 +0000

    Merge branch 'PACKAGE_NAME' into 'master'
    
    Further improvements to arguments of AC_INIT
    
    See merge request openconnect/ocserv!410

commit 313e68b933be9ed20b5ee9bf2fd21fbd22539126
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 00:37:33 2024 +0100

    main: increased details on error message
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 072dd794c8943583504d03487a010bddb588cdf4
Merge: 7e9af98c c403e2bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 21:59:54 2024 +0000

    Merge branch 'tmp-detect-new-openconnect' into 'master'
    
    Added detection logic for new openconnect
    
    See merge request openconnect/ocserv!411

commit c403e2bd025ade065fc92277fe4a68efcd096358
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 22:21:54 2024 +0100

    Added detection logic for new openconnect
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit badf9be99abdbe784d1c477a26ba3d151ad9e1df
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 6 00:07:35 2024 +0100

    Further improvements to arguments of AC_INIT
    
    Reapply df6a3c2a, this time without regression.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 7e9af98c28f1fdd83003d57b5bc3b9b3e90ac273
Merge: 5756c06d 3a3edcfd
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 6 09:04:55 2024 +0000

    Merge branch 'bug_reports' into 'master'
    
    Bug reports are not to be sent by mail anymore
    
    See merge request openconnect/ocserv!409

commit 3a3edcfd80eb87c90d1f6cd8f7eb49a69c8f81ea
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Jan 5 23:24:18 2024 +0100

    Bug reports are not to be sent by mail anymore
    
    Instead they should be filed on GitLab.
    
    Adapt the relevant explanation to the different tpye of bug reporting mechanism.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 5756c06d81ebc35741f344b0529e20f9cc453650
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 5 21:56:00 2024 +0100

    .gitlab-ci.yml: removed the cppcheck checks
    
    They were causing more troubles than they were detecting actual
    issues.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 311abb54435f959764629a2e04e5711b80642cdf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 5 19:24:40 2024 +0100

    coverage: fix coverage calculation
    
    This fixes regression from df6a3c2abe4506279f10fa1918fde682c4f4f250
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 29dba5cee879711b87d4cd32685f1528fce38d63
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 5 16:47:18 2024 +0100

    web: updated links to web page
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2bc6ab240ea2f10b6fe07e0405f8e4263e1f96a1
Merge: 92a92058 b4113016
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 1 07:14:21 2024 +0000

    Merge branch 'man' into 'master'
    
    Reorder man pages
    
    See merge request openconnect/ocserv!408

commit b41130163d49bef96a78c626d235d84edca989a9
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 30 22:48:02 2023 +0100

    Reorder man pages
    
    Follow the conventions for writing Linux man pages:
    https://man7.org/linux/man-pages/man7/man-pages.7.html
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 92a9205814c78f29fdb05005bc56abc6becb1ffd
Merge: bdacff5e ff9d43df
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 30 19:06:31 2023 +0000

    Merge branch 'automake_1.14' into 'master'
    
    Restore AM_PROG_CC_C_O instead of bumping minimal Automake version
    
    See merge request openconnect/ocserv!402

commit bdacff5e50bd7aac13d84bfea1c364fa6630deec
Merge: 5a40095e f6f4c260
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 30 19:04:55 2023 +0000

    Merge branch 'gl_HOST_CPU_C_ABI_32BIT' into 'master'
    
    Avoid Autoconf warning
    
    Closes #570
    
    See merge request openconnect/ocserv!407

commit 5a40095efaac6859c1cd90c38ace8150619ae786
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 30 18:05:23 2023 +0100

    README.md: mention ronn for manpage building
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7c9e9b76a66ca61d676d511e6600c036106460a4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 30 18:03:51 2023 +0100

    doc: mention issue tracker to manpage
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a002d81685b6ee5f5706cd32098a9b2252bb0afb
Merge: 2bfb1885 df6a3c2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 30 16:55:06 2023 +0000

    Merge branch 'AC_INIT' into 'master'
    
    Further improvements to arguments of AC_INIT
    
    See merge request openconnect/ocserv!406

commit 2bfb1885744ad7a7e88c6175e5507cef3d5093ae
Merge: 6ac5c62d bc4b1c5f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 30 14:26:06 2023 +0000

    Merge branch 'tmp-better-log-radius' into 'master'
    
    tests: improved radius log presentation & IP assignment
    
    See merge request openconnect/ocserv!404

commit ff9d43df09ee3817eefe76134fb96d6d3a4d5543
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 30 12:45:41 2023 +0100

    Revert eeac2728
    
    AM_PROG_CC_C_O is obsolescent starting with Automake 1.14.
    
    CentOS 7 ships Automake 1.13.4. Keep AM_PROG_CC_C_O as long as we need
    to support CentOS 7, to avoid this warning:
            src/Makefile.am:170: warning: compiling 'ccan/hash/hash.c' in
                                          subdir requires 'AM_PROG_CC_C_O'
                                          in 'configure.ac'
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit bc4b1c5f12b4dddf55f57519ee04640e7233bcb5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 26 13:26:58 2023 +0100

    tests: auto-generate random addresses instead of hard-coding them
    
    The main benefit is that there is less manual work to add a
    test (discovery of unique random addresses is not necessary),
    but it also ensures that the tests can run on environments where the
    previously hard-coded addresses were present.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 21e35358b44e1d16da720a0eaf170e1ac45585ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 25 12:07:14 2023 +0100

    tests: improved radius log presentation
    
    Include the radiusd output with debugging information on stdout
    for the radius tests. This allows better visibility to potential
    configuration issues of radiusd.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit df6a3c2abe4506279f10fa1918fde682c4f4f250
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 29 13:47:20 2023 +0100

    Further improvements to arguments of AC_INIT
    
    The first argument is the full package name. Change it to match the
    GitLab home page and documentation:
            ocserv → OpenConnect VPN Server
    
    The package tarname differs from the package name: the latter designates
    the full package name, while the former is the distribution tarball name.
    Because the tarname cannot be inferred from the newly modified full
    package name, we have to set it explicitly:
            ocserv
    
    The last argument url should be the home page for the package.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit f6f4c260c33d2af5d480b45382eb56e2ce469cfe
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 29 14:43:57 2023 +0100

    Avoid Autoconf warning
    
    The warning is:
            configure.ac:94: warning: gl_HOST_CPU_C_ABI_32BIT is
                                      m4_require'd but not m4_defun'd
    
    The reason was that m4/lib-prefix.m4 was missing this depedency:
            m4/host-cpu-c-abi.m4
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 6ac5c62d0800c7885a7e6d3a069769c8579299c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 27 19:41:23 2023 +0100

    .triage-policies.yml: reduce the time for closing old MRs
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 135a60e2b6df6d2f2fe674d9906995e2d62499c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 24 13:41:31 2023 +0100

    key_cb_common_func: do not issue error about connecting to sec-mod
    
    This avoids noise during startup.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5fa9724955941a85d2604d060f564828a43e001e
Merge: 15077428 715b9b2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 24 10:32:20 2023 +0000

    Merge branch 'second' into 'master'
    
    Use proper SI symbols
    
    See merge request openconnect/ocserv!394

commit 715b9b2ea1918de98c21962383db78be870ebb25
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 20 12:44:44 2023 +0100

    Use proper symbol for second, prefix for kilo
    
    The SI symbol for second is s:
    https://www.bipm.org/en/si-base-units/second
    
    The SI prefix for a multiplying factor of 10³ is k:
    https://www.bipm.org/en/measurement-units/si-prefixes
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 15077428962ef314cdd26916a53acbcaad0d6752
Merge: 6fb59830 443a4ea7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 24 08:52:54 2023 +0000

    Merge branch 'bug-report' into 'master'
    
    Modify bug-report argument of AC_INIT
    
    See merge request openconnect/ocserv!401

commit 6fb59830827bd98db5686169247bd0a40b6b85e0
Merge: a000f32d eeac2728
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 24 08:50:32 2023 +0000

    Merge branch 'syslog_stderr' into 'master'
    
    Fix logging to stderr
    
    See merge request openconnect/ocserv!400

commit eeac2728320ca8a492d4620523b9ba99236ea3c6
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 23 11:38:50 2023 +0100

    Get rid of obsolescent AM_PROG_CC_C_O
    
    From the Automake manual:
            This is an obsolescent macro that checks that the C compiler
            supports the -c and -o options together. Note that, since
            Automake 1.14, the AC_PROG_CC is rewritten to implement such
            checks itself, and thus the explicit use of AM_PROG_CC_C_O
            should no longer be required.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 54818f3b6735948d5fdac67efc1ab333bcacef53
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 22 16:42:54 2023 +0100

    Fix logging to stderr
    
    While each `syslog()` adds a new entry to the system log,
    `fprintf(stder, ...)` does not automatically add a newline
    to distinguish between entries. We need to add the newline
    ourselves.
    
    We tried to make _oc_syslog() as atomic as possible in the
    context of a multi-process daemonn by keeping a single
    `fprtinf()` call. Probably not perfect, but the best we
    can do when printing to stderr instead of using the system
    logger. Works only with the GNU C or compatible compiler.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 443a4ea795dbd2ba059e2bfdf6b2cb525f2ed30f
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 23 12:47:24 2023 +0100

    Modify bug-report argument of AC_INIT
    
    The third argument of the Autoconf macro AC_INIT() is bug-report.
    
    The Autoconf 2.61 manual states this should be an email:
            The optional argument bug-report should be the email to
            which users should send bug reports.
    
    The Autoconf 2.68 manual relaxes the requirement by adding:
            AC_PACKAGE_BUGREPORT, PACKAGE_BUGREPORT
            Exactly bug-report, if one was provided. Typically an
            email address, or URL to a bug management web page.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a000f32daf69ba1100a676e1a3fbd1b5fc02f23b
Merge: f7da007d 8a61a68f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 23 11:09:56 2023 +0000

    Merge branch 'ff57a148' into 'master'
    
    Add missing entry in NEWS
    
    See merge request openconnect/ocserv!398

commit f7da007da8b98f4736a303bc645d9d6a0fc7e810
Merge: 1792d3d0 311433b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 22 18:25:53 2023 +0000

    Merge branch 'servers' into 'master'
    
    Minor typo
    
    See merge request openconnect/ocserv!399

commit 8a61a68f0609742b67c1f7c1f58e4411d1af7302
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 20 22:29:23 2023 +0100

    More missing entries in NEWS
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 311433b4db026797ffd08c00644c9afa28cccd7e
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 22 15:56:47 2023 +0100

    Minor typo
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 2f2346c6259c8f50ae399f02ab7c1b120950d0ec
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 20 20:37:47 2023 +0100

    Add missing entry in NEWS
    
    For ff57a148 / !397.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 1792d3d00fc4e97481ebcaf610a5bcee474196cb
Merge: 77098a7d 7d6213a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 20 19:31:08 2023 +0000

    Merge branch 'authgroup' into 'master'
    
    Fix openconnect --authgroup option in tests
    
    See merge request openconnect/ocserv!395

commit 77098a7d984fc30b0554e26813d7921c52c336ad
Merge: d504ba83 ff57a148
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 20 17:05:44 2023 +0000

    Merge branch 'master' into 'master'
    
    Added /VPNManifest.xml to AnyConnect urls for Cisco AnyConnect Linux clients
    
    See merge request openconnect/ocserv!397

commit ff57a148240e1f293f3d9af6197fd774dea9997b
Author: Rob van Oostenrijk <rob.vanoostenrijk@emirates.com>
Date:   Wed Dec 20 19:14:34 2023 +0400

    Added /VPNManifest.xml to AnyConnect urls for Cisco AnyConnect Linux clients
    
    Signed-off-by: Rob van Oostenrijk <rob.vanoostenrijk@emirates.com>

commit 7d6213a0d06f5f9a923fb2d2d7e9735704e751c8
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 20 13:34:31 2023 +0100

    Fix openconnect --authgroup option in tests
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d504ba832bae651f3497bb46686b2434de757fe7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 19 22:36:11 2023 +0100

    sample.config: added warning for compression [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 675c1280a8c2315360bdffc4b07218ddf50f8b8a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 17 21:50:36 2023 +0100

    added missing NEWS entry [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0f5ba83f762bed11815d1dd37c37dcc6d1cd26d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 17 12:26:58 2023 +0100

    released 1.2.3
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 639a381a0dc408800f476c39ce94edc4d2db77c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 14 13:34:44 2023 +0100

    subconfig: eliminated informational messages with little value
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 161523dad1b12b512524fee8927462456c7a34d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 7 12:14:46 2023 +0100

    config: do not print informational messages on worker load
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b670a323b3fc259daaf6e7c4698e45c07680fc81
Author: Stefan Bühler <source@stbuehler.de>
Date:   Sat Dec 2 18:41:47 2023 +0100

    Log assigned IP addresses with NOTICE
    
    * Client IPs are essential for abuse handling
    * NOTICE instead of INFO means they will be logged by default
    
    Signed-off-by: Stefan Bühler <source@stbuehler.de>

commit e44cc6fd780de30a75f76def58ab49961e1ab76f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 16 06:13:08 2023 +0100

    Separated logging for worker and main and oc_syslog() respects log-level
    
    This makes oc_syslog respect the configured log-level. This also introduces
    a clear separation of the logging function between the two processes.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f0067ae0eadd87fb376bd6c197a417e011720f7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 7 11:58:27 2023 +0100

    Cleanup of the logging subsystem; allow logging to stderr only
    
    Separated the logging logically from any remaining debugging
    features. Introduced command line option for logging to stderr
    only (for systemd and containers). The default log level is set
    to (2) info.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 39f274fb01cb14550a49774531ee03929ee58d07
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 14 14:16:05 2023 +0100

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5779a9cac1c02dcdfaf58904f4b8cb23dfb59b9d
Merge: aaf2a532 44fe565d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 14 12:52:22 2023 +0000

    Merge branch 'IPv6_for_unknown_agents' into 'master'
    
    Don't disable IPv6 for unknown client agents
    
    See merge request openconnect/ocserv!377

commit 44fe565dbd7794c1075c499fb7fb8c8d38702827
Author: Daniel Lenski <dlenski@gmail.com>
Date:   Wed Oct 4 22:04:14 2023 -0700

    Remove obsolete comment
    
    ocserv has sent IPv6 DNS/routes to AnyConnect clients since
    e9b79254e7f322437e1e990fc411160619cefbe4, but this comment was inadvertently
    retained.
    
    Signed-off-by: Daniel Lenski <dlenski@gmail.com>

commit c1a6f2b04a15ea0fecd51d0e7d38b3185268af67
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 14 13:24:55 2023 +0100

    Added test for IPv6 routes in openconnect v3
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8b8a1a7b53aecc5ea1076c3288b817c8c9b04fde
Author: Daniel Lenski <dlenski@gmail.com>
Date:   Wed Oct 4 21:21:08 2023 -0700

    Don't disable IPv6 for unknown client agents
    
    We are now planning to change the default HTTP user-agent string in
    the OpenConnect client. In order to improve compatibility with Cisco
    servers, it needs to start with `AnyConnect`; likely, the complete
    prefix will be `AnyConnect-compatible OpenConnect VPN Agent`. (Details
    in https://gitlab.com/openconnect/openconnect/-/merge_requests/497)
    
    ocserv treats clients differently depending on their user-agent
    strings:
    
    1. ocserv makes simplifications/accommodations in its authentication
       flow to accommodate old versions of OpenConnect
       (`AGENT_OPENCONNECTV3`).
       https://gitlab.com/openconnect/ocserv/-/blob/master/src/worker-auth.c
    
    2. `ocserv` entirely disables IPv6 for old versions of OpenConnect
       (`AGENT_OPENCONNECTV3`) *and* for unknown client software
       (`AGENT_UNKNOWN`).
       https://gitlab.com/openconnect/ocserv/-/blob/master/src/worker-vpn.c#L2123-2136
    
    At this point, ocserv seems to be aware of a reasonably-complete list
    of compatible client software: AnyConnect, OpenConnect, Clavister
    OneConnect, AnyLink, and Cisco SVC IPPhone.
    
    Among these, *only* old OpenConnect clients are known to require special
    handling to unconditionally disable IPv6.
    
    This patch modifies ocserv so that the IPv6 is disabled *only* for old
    OpenConnect clients, and not for unknown clients. This should make the
    transition to OpenConnect's modified UA string go more smoothly.
    
    This should also improve "future-proofness" generally. Accommodations
    for buggy clients should specifically list the affected clients,
    rather than include unknown clients, since unknown clients are most
    likely to be newer clients, in which bugs and incompatibilities may
    have been fixed.
    
    Signed-off-by: Daniel Lenski <dlenski@gmail.com>

commit aaf2a532462f3734c1241518accf42b04c40591c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 13 12:01:35 2023 +0100

    Improve graceful termination
    
    Wait for all processes to terminate within 5 seconds, and
    report the number of processes that did not terminate.
    
    Resolves: #563
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit eb011030d5d01abf179d91dbf756736c0d2164ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 12 15:18:01 2023 +0100

    lzs: sync with version from openconnect
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6e05add266cb685925ca6e49348fba3cd86b9c86
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 12 10:40:15 2023 +0100

    code coverage: work with lcov 2.0
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 86cd25dafb7613c1d1659884f0625e8849330c32
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 02:11:13 2023 +0100

    sample.config: further clarify RX and TX meaning [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d192340484e256f0f8a4049ebbc5bbadcf0987cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 7 16:06:14 2023 +0100

    sample.config: clarified RX and TX meaning [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a711aa4a224ed3f6bf34e7bf0e91c7280226b2bf
Merge: 69f7c084 8ada82ff
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 6 17:51:37 2023 +0000

    Merge branch 'libexec' into 'master'
    
    bin/ocserv-fw → libexec/ocserv-fw
    
    Closes #78
    
    See merge request openconnect/ocserv!388

commit 69f7c0845d8b1390672a70da368b0e22591c2952
Merge: db4caaef 99dfdb3b
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 6 17:49:58 2023 +0000

    Merge branch 'PRIu64' into 'master'
    
    Avoid compiler warning on 32-bit Linux
    
    See merge request openconnect/ocserv!391

commit db4caaefb0af8069c8aea57df26cb2ab73da4983
Merge: 30cf47ad 00ad2b76
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 6 17:49:29 2023 +0000

    Merge branch 'MAX_IP_STR' into 'master'
    
    MAX_IP_STR → INET6_ADDRSTRLEN / INET_ADDRSTRLEN
    
    Closes #556
    
    See merge request openconnect/ocserv!382

commit 30cf47ad603be1717cbb4691c24d9ac5206dd7d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 6 16:47:00 2023 +0100

    sample.config: set default logging priority to 2
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit bdc4d5988a14bf4fbe9cb26006a86d5b7f67fcf0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 6 16:43:26 2023 +0100

    .triage-policies.yml: close merge requests without update for a year
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 99dfdb3b8f032766a34ce83167439be7da66df60
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 6 15:49:06 2023 +0100

    Avoid compiler warning on 32-bit Linux
    
    From i386/Debian CI jobs:
    
      warning: format '%ld' expects argument of type 'long int', but argument 4 has type 'uint64_t' {aka 'long long unsigned int'} [-Wformat=]
        snprintf(output, output_size, "%ldms", microseconds / 1000);
                                       ~~^     ~~~~~~~~~~~~~~~~~~~
                                       %lld
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 00ad2b7611a4a0b651ab97c654284c6dc00ea0b3
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 6 15:08:51 2023 +0100

    Move macros at the top of the header file
    
    Macros are usually defined at the top. In this specififc file,
    all other macros are already at the top.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit f3ded6f3ae976ab620e4581c90af2e824e746e85
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Nov 26 13:01:03 2023 +0100

    MAX_IP_STR → INET6_ADDRSTRLEN / INET_ADDRSTRLEN
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 8ada82ff5cf2e1f7423a20c40f897462b1f27812
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Nov 26 14:24:34 2023 +0100

    bin/ocserv-fw → libexec/ocserv-fw
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a3ff6864b948f57b29033261e104db7e637bfda9
Merge: d7618b09 392a6542
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Nov 27 21:35:39 2023 +0000

    Merge branch 'fix_clean_all_rules' into 'master'
    
    Fix clean_all_rules bug on multiple devices
    
    See merge request openconnect/ocserv!384

commit 392a6542d3b45d67af9a83acf407af244a5fd3fd
Author: Gennady Sadchikov <dessolo@mail.ru>
Date:   Mon Nov 27 15:29:42 2023 +0300

    Fixed clean_all_rules logic on multiple similar devices
    
    Signed-off-by: Gennady Sadchikov <dessolo@mail.ru>

commit d7618b095f614dc7a824630a3e0141ce05a2256e
Merge: aa2db56a 86ea13b2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 27 09:06:34 2023 +0000

    Merge branch '311' into 'master'
    
    A few RADIUS changes
    
    See merge request openconnect/ocserv!381

commit aa2db56a9f9f23339e616822311284c33898b277
Merge: 6c2d3c16 a8e7e4a9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 27 09:04:56 2023 +0000

    Merge branch 'protobuf' into 'master'
    
    updated to protobuf 1.5.0
    
    See merge request openconnect/ocserv!386

commit 6c2d3c165f5b0596aa0036c16df5182fe0d6dc4d
Merge: f8afbad5 725be86e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 27 07:46:28 2023 +0000

    Merge branch 'autoconf' into 'master'
    
    Small autoconf fixes
    
    See merge request openconnect/ocserv!387

commit f8afbad5a942fe1e001507c00da879c9e45f5c1b
Merge: 20310ec2 5f3d75e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 26 19:44:22 2023 +0000

    Merge branch 'mailmap' into 'master'
    
    Merge my different identities in Git history
    
    See merge request openconnect/ocserv!385

commit 725be86e0c9f6c76baa34a09cc6228a96babc347
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Nov 26 14:43:01 2023 +0100

    Small autoconf fixes
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a8e7e4a9656a3fd23761eb65b93d655fffcc7d16
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Nov 26 14:05:41 2023 +0100

    chmod -x
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 8bd5f8fe02bf1dd96e3b84534efce773743ac3d1
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Nov 26 13:59:01 2023 +0100

    updated to protobuf 1.5.0
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 5f3d75e7b2bdc997c20b6581dcabf145e4c45e3b
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Nov 26 12:33:38 2023 +0100

    Merge my different identities in Git history
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 86ea13b213f7edd3d9e9ab9cfdebc185f2591057
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Nov 15 11:40:53 2023 +0100

    A few RADIUS changes
    
    * Use the exact names used in RFC 2548.
    * Warn in case Radius sends more than 2 DNS server IPv6 addresses.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 20310ec202a52d5edfe9ed791108bae46917e899
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 22 21:06:42 2023 +0100

    .gitlab-ci.yml: corrected latest fedora release
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 09779ea55beedfc5a0116f2c382bb1588b0ac56f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 21 15:07:33 2023 +0100

    .gitlab-ci.yml: use latest fedora
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f6f510961160fb29ef39517bf1bf58169b8731d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 13 11:54:49 2023 +0100

    dtls_mainloop: corrected typo
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 47a1de33f27682ee34c7ae6e6b2d6129530906fd
Merge: c7ca2c0c 6dffaed6
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Nov 6 13:17:19 2023 +0000

    Merge branch 'master' into 'master'
    
    Add support for LoongArch:
    * Legacy syscalls 'fstat' and 'newfstatat' are not available
      on new Linux architectures such as LoongArch.
      This commit will fix related build-time errors.
    * They have been superseded by syscall 'statx', which should
      probably be enabled to avoid runtime errors.
      Runtime errors can be fixed in a different merge request.
    
    See merge request openconnect/ocserv!380

commit 6dffaed6412859829c3cb40cef4ccd97634be3b0
Author: wuruilong <wuruilong@loongson.cn>
Date:   Wed Nov 1 10:32:03 2023 +0000

    add support for loongarch
    
    Signed-off-by: Ruilong Wu <wuruilong@loongson.cn>

commit c7ca2c0c469bd6e5b41079303a88a1ccd8817aff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 3 12:30:08 2023 +0200

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 80d6a32d11eb0e2819854f2f3f4534f37946b31b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 3 12:29:47 2023 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ed538039c37026b6931656d96ada7deb96b9519d
Author: Rob van Oostenrijk <robvanoostenrijk@users.noreply.github.com>
Date:   Fri Sep 29 11:12:19 2023 +0400

    Skip camouflage check for authenticated users
    
    Once a client has progressed through the initial
    auth checks (and successfully passed the initial
    camouflage check), it's safe to skip further camouflage
    checks. This allows the Cisco Secure client continue
    successfully through HTTP requests for /profiles//etc/ocserv/profile.xml
    and /1/VPNManifest.xml.
    
    Resolves: #544
    
    Signed-off-by: Rob van Oostenrijk <robvanoostenrijk@users.noreply.github.com>

commit 1476e66cbced1076ba7f5337dbc9aa46589907c1
Merge: f6164756 798dce24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 25 19:31:05 2023 +0000

    Merge branch 'occtl-user-raw-connected' into 'master'
    
    occtl: add machine-readable "raw_connected_at" field for user stats
    
    See merge request openconnect/ocserv!374

commit 798dce24ba68336b3626590cd830a6916a76a9ab
Author: Florian Domain <f.domain@criteo.com>
Date:   Mon Sep 25 14:52:45 2023 +0200

    tests: add a test to validate occtl output
    
    * this test allows to validate the occtl output (JSON format) returns
      expected fields
    * we only test 2 fields for now (ID and raw_connected_at), but could
      be expanded easily
    
    Signed-off-by: Florian Domain <f.domain@criteo.com>

commit ec6c48da4e524e0f4c1291eaba6e74eb95faa53c
Author: Florian Domain <f.domain@criteo.com>
Date:   Fri Sep 22 18:06:11 2023 +0200

    occtl: add machine-readable "raw_connected_at" field for user stats
    
    * useful for machines reading JSON to get directly the unix timestamp of
      the users connection start time
    
    Signed-off-by: Florian Domain <f.domain@criteo.com>

commit f616475643783995c4208ae205e288019eec18e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 21 21:14:05 2023 +0200

    released 1.2.2
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ac49187a7ce4735d1de6c629558963e8b28e9b6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 20 22:10:53 2023 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 747940238dce29775aedec7a19f138065caaef8a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 18 17:10:35 2023 +0200

    tests: added test for idle and session timeout
    
    This checks the functionality of idle-timeout and
    session-timeout as well as whether the cookies are
    invalidated after the user is disconnected.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 049d9e520e42575cfb56c951376b241635823be6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 18 20:12:37 2023 +0200

    worker: do not account ICMP/IGMP data for idle detection
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b0c9ef1e0e45e126e3ed6e896b81f696772c46b7
Merge: f71538d2 61b6f0a9
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Sep 15 13:57:33 2023 +0000

    Merge branch 'static' into 'master'
    
    Make functions static where it makes sense
    
    See merge request openconnect/ocserv!370

commit f71538d226d46e5dd7430f0b8733df43a09d1733
Merge: a12873af d21d2c45
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Sep 15 13:57:00 2023 +0000

    Merge branch 'static_camouflage' into 'master'
    
    Make check_camouflage_url() static
    
    See merge request openconnect/ocserv!368

commit a12873af21f031a693be9438f8867a6a58fa6191
Merge: 8f4e2de4 b29d9156
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 15 13:29:41 2023 +0000

    Merge branch 'codespell' into 'master'
    
    Fix misspelling newly reported by codespell
    
    See merge request openconnect/ocserv!369

commit 8f4e2de4b561147ed44d11441c7cc7db42ea908f
Merge: fbfbdc05 fec6cc99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 15 13:29:04 2023 +0000

    Merge branch 'rc_avpair_add' into 'master'
    
    worker: check the return value of rc_avpair_add()
    
    Closes #546
    
    See merge request openconnect/ocserv!372

commit fbfbdc058ac3fb40f5d0bca3fc766a791b7d6ed6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 15 15:06:01 2023 +0200

    tests: use sec-mod-scale on cookie tests
    
    This ensures we catch issues similar to !288.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 26258d7cb120939a92c5bfa6ebca016725b21c98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 15 11:11:50 2023 +0200

    Revert "Fixing issue: Authentication requests from the same IP address are not load balanced among security modules"
    
    Each cookie is valid for its IP address and when reconnected it must
    reach the same sec-mod that contains the corresponding session
    information.
    
    This reverts commit 4ec99609ca1d1ba986ee58a0695bab87c12ae7c7.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fec6cc99083f4f7b9064a23d33f1f30f89221224
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Sep 15 13:43:27 2023 +0200

    worker: check the return value of rc_avpair_add()
    
    We have been checking the return value of rc_avpair_add() in all cases,
    except the PW_NAS_IP_ADDRESS/PW_NAS_IPV6_ADDRESS cases.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 61b6f0a9248a82742ff1961f09b06ab4a97926b8
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Sep 11 19:38:44 2023 +0200

    Make functions static where it makes sense
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit b29d9156996fb8356093571357d68d6e2fa014b3
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Sep 11 19:18:00 2023 +0200

    Fix misspelling newly reported by codespell
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d21d2c455c6041bef294e2bb9b43c86680a31b40
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Sep 11 19:03:27 2023 +0200

    Make check_camouflage_url() static
    
    It is called only from worker-vpn.c.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 6dd533a10c37eb000056b774a02b55aaa31f578e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 2 20:54:15 2023 +0200

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 16b86e751ae3232a5420b8dbbb3416310f9b8d18
Merge: 6aad62e2 ab8a05e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 2 18:52:26 2023 +0000

    Merge branch 'TODO' into 'master'
    
    Why not delete TODO instead of only emptying it?
    
    See merge request openconnect/ocserv!365

commit ab8a05e4c2eef5e20defe7a64e8e5145926f2efd
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Sep 1 18:26:29 2023 +0300

    Why not delete TODO instead of only emptying it?
    
    Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>

commit 6aad62e2666044f23d0364d5696c852414181e78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 28 20:48:02 2023 +0200

    debug: increased default log-level to debug
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 895a23f372fd2ef7f29c8ccd635e33b32de0915f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 22 15:10:32 2023 +0200

    release 1.2.1
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b2ab415f7ae009eeb77dc2c4b9e382cce9d966d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 22 15:09:34 2023 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e665fd5a5bc529a70e8bc71d14a62e0ba301a9c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 17 16:31:04 2023 +0200

    Account the correct number of points when proxyproto is in use
    
    When the proxy protocol is used ensure that authentication failure
    will credit the right number of points to the actual client IP
    address.
    
    Resolves: #529
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 59400941cf51f8d1d85cbde05f4d269bf59ee11e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 16 13:19:12 2023 +0200

    tests: verify that address got by the proxy matches the client
    
    Also measure whether ban points are credited to the right
    address for failed attempts.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e269f22a4395ed9fad44127da92f7abe65e93a8c
Merge: 5c738a8c 2c375721
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Aug 15 17:51:02 2023 +0000

    Merge branch 'fix-user-json' into 'master'
    
    fix(occtl): correct key for Limit TX in JSON output
    
    See merge request openconnect/ocserv!363

commit 2c375721c153d167ccce00c74fa89e8f45ae88c8
Author: Florian Domain <f.domain@criteo.com>
Date:   Mon Aug 14 10:43:08 2023 +0200

    fix(occtl): correct key for Limit TX in JSON output
    
    * `TX` key is present twice in `occtl --json show users` output, the first
      key turns out to be the Limit TX configured.
    
    Signed-off-by: Florian Domain <f.domain@criteo.com>

commit 5c738a8c4569ad6091ae101db018ae8842e5cc65
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 27 22:41:25 2023 +0200

    build-aux: removed legacy gnulib files
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d7b07677fe1af621888cb28e3f8026cc91aec5c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 27 22:38:21 2023 +0200

    release.sh: added script to do the release process
    
    This does the release of the tarballs, the git tagging and
    the release of gitlab.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1c5c02b057773caa6fa9257ccf1f5cd8cca876f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 27 15:53:16 2023 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 02442aabbc6894b7f97212dbe511cf1166baaa76
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 17 00:19:14 2023 +0200

    Replaced nuttcp tests with iperf3
    
    iperf3 is consistently included in all distributions we
    are testing at, in contrast with nuttcp.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit c393d4d7b4efb777dc540fb4521dca19f3ae59a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 12 11:16:28 2023 +0200

    vhost: do not require setting device per vhost
    
    It is not necessary to specify the device config directive on
    each virtual host configuration. Ensure that we don't require it
    by mistake. This also introduces a traffic test when operating
    with virtual hosts.
    
    Resolves: #480
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 870086600c22a43b1d43cdc65e47ff8f53b8b18c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 18 11:48:07 2023 +0200

    main-sec-mod: Added explicit check for too extreme length values
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a4b8f2a237b81241bc614dc7286ec01b90f59a0a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 18 11:42:27 2023 +0200

    config: correctly set tcp port on vhosts
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6edfb7f1041c416f3845eab0704933a23c68900f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 18 11:38:19 2023 +0200

    ipc.proto: time_t is sent in 64 bit value
    
    This prevents Y2K38 issues.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0cc4a469ab97f551b4fd867f393c60999ecf646a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 18 11:28:14 2023 +0200

    worker-svc: added check on cstp_printf
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 35fd6ddf4d09970fc341a763f9130609b63969aa
Merge: 78e25f4f 66a1fc8d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 14 14:25:09 2023 +0000

    Merge branch 'tmp-clavister' into 'master'
    
    Accept the clavister android client
    
    Closes #485
    
    See merge request openconnect/ocserv!361

commit 66a1fc8de39c55ad5baa679f363042b4eab822c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 13 12:56:48 2023 +0200

    worker: accept clavister's VPN connect request
    
    The clavister oneconnect VPN client for android issues an
    incorrect URL for the connection. Accept it.
    
    Resolves: #485
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ea7cb0a09fd503453c32c58314531b5fecb031a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 13 12:42:04 2023 +0200

    Added lib-link and dependencies for AC_LIB_HAVE_LINKFLAGS macro
    
    These macros were part of the gnulib, and they are not available
    by default on system. They become available pretty randomly as they
    get installed by arbitrary software (e.g., gettext-devel on my system).
    We now make them available unconditionally ensuring we can compile
    ocserv on a freshly installed system.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8f4ed396c269474ca9dfdfbb06256613bff858ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 13 11:46:09 2023 +0200

    worker: print alerts received during TLS handshake
    
    This also makes the tlslib macros more consistent.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 78e25f4ff61e234bd0987cc49910aa23b56b6799
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 13 02:00:52 2023 +0200

    .gitlab-ci.yml: introduced a signoff check
    
    This also moves any static analyzers checks early in the testing
    phases ti catch basic errors faster.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7c8abd2e2ca6ec0dffb8c7768c3839e057f21ee7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 11 19:39:09 2023 +0200

    NEWS: updated for next release
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b09b1b81deda4f4a5455522e172e053f7edbaa6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 11 18:11:06 2023 +0200

    tests: added missing file
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 49bee78af8b5131152106be7cef76c4950607978
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 11 17:04:33 2023 +0200

    updated news for release
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 70ceee36d6f2da4b39baefc872fdd3c1be3faad7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 11 14:54:32 2023 +0200

    sample.config: corrected documentation [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9bd97bde91072a198fdc34913bc761bedb86af14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 10 09:26:09 2023 +0200

    .gitlab-ci.yml: added ubuntu22.04
    
    There is an issue with gssapi on this version of Ubuntu. While
    the package exists, it doesn't work as openssl doesn't support
    md4. See https://bugs.launchpad.net/ubuntu/+source/gss-ntlmssp/+bug/1995915
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 42b125a32fba71ff6441b7900ca34c9142703111
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 10 09:24:36 2023 +0200

    configure: bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9e457abda84adc0abe2604929a64f8faab73875f
Merge: 5841da06 996d021e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 11 12:46:40 2023 +0000

    Merge branch 'cisco-ipphone' into 'master'
    
    Add support for Cisco IP-Phone Enterprise firmware VPN
    
    See merge request openconnect/ocserv!356

commit 996d021e1b1b783cebbfcb345ec859324f0bb07f
Author: Gareth Palmer <gareth.palmer3@gmail.com>
Date:   Tue Jul 11 22:48:22 2023 +1200

    Add support for Cisco IP-Phone Enterprise firmware VPN client.
    
    The VPN client that comes with the Cisco IP-Phone Enterprise
    firmware is based on AnyConnect but was unable to authenticate
    with ocserv.
    
    The phone makes an initial GET request and looks for a cookie
    named 'webvpn' that has an expiry attribute and a cookie named
    'webvpnlogin' containing a non-empty value.
    
    When username+password mode is configured, the phone will then
    send a POST request containing those credentials. When using
    certificate authentication an empty POST request is sent.
    
    A handler that implements this new behaviour has been added
    under the '/svc' path.
    
    To use DTLS 'dtls-legacy' must be enabled and 'udp-port' must
    be 443, a new 'cisco-svc-client-compat' option automatically
    checks those settings.
    
    New test cases test-pass-svc and test-cert-svc check the above
    behaviour.
    
    Older versions of the phone's firmware will fail to create the
    DTLS tunnel if the cipher negotiated for HTTPS does not match
    that selected for DTLS.
    
    To work-around this either disable DTLS or only allow the
    RSA-AES-256-CBC/SHA1 or RSA-AES-128-CBC/SHA1 cipher to be used.
    
    doc/README-cisco-svc.md includes additional information.
    
    Note: 'Enterprise' here is used to differentiate between that
    firmware and the MPP (Multi-Platform) firmware which uses the
    same hardware.
    
    Signed-off-by: Gareth Palmer <gareth.palmer3@gmail.com>

commit 5841da06b689e73fd0d454decd87f903bca4dcdc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 7 12:04:41 2023 +0200

    .gitlab-ci.yml: static-analyzer: enable optional code
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 58d510d0a516527fb9f7dd9980e8316114c7c850
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 7 12:04:11 2023 +0200

    vhost: corrected issue under scan-build
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6ba30cd78186546860525089107139a0bfd2e4f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 7 12:03:47 2023 +0200

    openidconnect: corrected possible cleanup issue
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7ddf10e28ced94f34b362f7ae9030601819f6123
Merge: 52f64c40 fc5d24ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 7 06:36:54 2023 +0000

    Merge branch 'tmp-fix-do-while-in-macro-issues' into 'master'
    
    Replace "Macros starting with if should be enclosed by a do - while loop"
    
    See merge request openconnect/ocserv!357

commit fc5d24abaf2fa88b7663597208d087365996792f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 27 12:04:36 2023 +0200

    use brackets in defines to avoid potential side effects
    
    This replaces the logic of using do-while, and the logic of using
    no brackets to get the best of both worlds. The reason for using
    brackets is to avoid obscure logic bugs when including the macro in
    a complex logic, while the replacement of the do-while is to ensure
    that we can continue using keywords like 'continue' and 'break' within
    the macros.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit c4c6590aeb20a281474408552ebda3afbcb67d60
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 27 11:59:29 2023 +0200

    Revert "Macros starting with if should be enclosed by a do - while loop to avoid possible if/else logic defects"
    
    This reverts commit b5380f2181d2ca252625079f594e0bec2d38830b.
    This resolves this issue identified by coverity:
    462455 Unexpected control flow
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 52f64c40327206e81d11853ad7ce3989992f7d90
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 5 18:37:44 2023 +0200

    sample.config: added more information on how logging works
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b0c45ffc508a3f8c3334a6294ce2c87a6932268e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 26 12:49:11 2023 +0200

    .gitlab-ci.yml: use the new centos images
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2eaf754c51b71daed7034347caa52739f177d789
Merge: e547733d baecb64e
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jun 22 18:15:41 2023 +0000

    Merge branch '_XOPEN_SOURCE' into 'master'
    
    _XOPEN_SOURCE → AC_USE_SYSTEM_EXTENSIONS
    
    See merge request openconnect/ocserv!354

commit e547733d6162ff287b2b68828282a27311e582a9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 22 11:26:47 2023 +0200

    tests: removed legacy tests and added missing ones
    
    Added test-group-cert and test-fork tests that were
    present but were never included in the CI test suite.
    
    Removed unix-test which was an obsolete test present
    in tests/.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit baecb64e3dd6c3e05e482263490d1189450113d3
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Jun 20 11:32:25 2023 +0200

    _XOPEN_SOURCE → AC_USE_SYSTEM_EXTENSIONS
    
    Do not define _GNU_SOURCE directly in sources.
    We just need to include "config.h" instead.
    
    This is a follow-up to 1ca50d73: autoconf macro AC_USE_SYSTEM_EXTENSIONS
    will define _GNU_SOURCE or _XOPEN_SOURCE in "config.h" as needed.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 354e13f7c1486d9efd99d68e11b4dd5c7db71753
Merge: f1648c9d a28ffdd4
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Jun 20 09:29:41 2023 +0000

    Merge branch 'print_single_value_int_0' into 'master'
    
    Call print_single_value_int() with has_more = 1
    
    Closes #517
    
    See merge request openconnect/ocserv!349

commit a28ffdd4c37a06a7c9d1424a027fbbc5dca2f62b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 20 06:58:00 2023 +0000

    Test both --debug and plain options.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f1648c9d0f9ea128973ed95fecf98e82c220850b
Merge: e74a0b7e b6658a8e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 19 08:28:36 2023 +0000

    Merge branch 'strcasestr' into 'master'
    
    Get rid of strcasestr.c vendored file
    
    See merge request openconnect/ocserv!353

commit b6658a8eaa22d445296d84e56aa0770b2a6805dd
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Jun 18 20:44:56 2023 +0200

    Get rid of strcasestr.c vendored file
    
    The initial indea was to move strcasestr.c out of src/common,
    as it only used by the main program, perhaps changing to the
    OpenBSD implementation at the same time instead of falling back
    to the Gnulib test.
    
    Then it appeared we probably don't support systems without strcasestr().
    I checked ihe following systems support it:
    - glibc
    - uClibc    https://git.uclibc.org/uClibc/tree/libc/string/strcasestr.c
    - musl libc https://git.musl-libc.org/cgit/musl/tree/src/string/strcasestr.c
    - Bionic    https://android.googlesource.com/platform/bionic/+log/master/libc/string/strcasestr.c
    - Newlib    https://sourceware.org/git/?p=newlib-cygwin.git;a=blob;f=newlib/libc/string/strcasestr.c
    - FreeeBSD  https://cgit.freebsd.org/src/tree/lib/libc/string/strcasestr.c
    - OpenBSD   https://cvsweb.openbsd.org/src/lib/libc/string/strcasestr.c
    - NetBSD    http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/string/strcasestr.c
    - Solaris   https://docs.oracle.com/cd/E88353_01/html/E37843/strcasestr-3c.html
    
    It might appear not to be available when _GNU_SOURCE or equivalent macros
    have not been defined. Now with AC_USE_SYSTEM_EXTENSIONS, I doubt the
    function is missing on any platform, therefore I get rid of the test and
    the Gnulib fallback.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit e74a0b7e47cfdddd9ea542fe8850661af5a7b80e
Merge: 0b210e03 a5c261c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 18 09:12:49 2023 +0000

    Merge branch 'gnulib' into 'master'
    
    Remove remaining references to Gnulib
    
    See merge request openconnect/ocserv!350

commit 5942ced085183efe2e1494f699b73620da0ebb5c
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 17 23:06:50 2023 +0200

    tests: check JSON output with `occtl --debug`
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a5c261c074074074eb755d31322afe429bb2f337
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 17 23:01:51 2023 +0200

    iFix a typo: directly → directory
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit bcc41b83012920d8abd96261ba618e5d606134ab
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 17 14:33:34 2023 +0200

    Remove remaining references to Gnulib
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 8139e78697bd43197e6feef1f136054426bf95c0
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 17 00:18:03 2023 +0200

    Call print_single_value_int() with has_more = 1
    
    This is not the last print. The "0" had been introduced by 722e030e.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 0b210e034f99e3c8f0230d23e43c2a94831bc084
Merge: 2830263d f8ac9bb0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 17 04:37:28 2023 +0000

    Merge branch 'radius_multiple_group_avps' into 'master'
    
    radius: groups defined over multiple AVPs
    
    Closes #489
    
    See merge request openconnect/ocserv!321

commit f8ac9bb088ac0e868d825a6e33744e9c78eee1b8
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Jun 16 21:43:50 2023 +0200

    Emit a warning whenever we hit MAX_GROUPS
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 1373a11f571567c57a8f0084db61b2d32a965f24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 16 19:12:46 2023 +0200

    tests: added a test for groups defined over multiple AVPs
    
    This adds a test for the available multi-group options as
    well as documentation for the feature. This tests two options:
     * Separate group names in separate class attributes
     * Separate group names in separate class attributes with the OU= format
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 813690b9c26b8e11ec52846b347f57262ce52287
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Jan 20 12:18:38 2023 +0100

    radius: groups defined over multiple AVPs
    
    This helps circumvent the 253 characters limit of RADIUS string values.
    
    We distinguish between value strings that start with "OU=" and the rest:
    * Value strings that start with "OU=" define multiple groups in a single
      AVP. Here, we update the previous logic by taking into account all the
      AVPs. We emit a warning when discarding subsequent AVPs, but also when
      discarding groups within the current AVP because we have reached the
      maximum number of groups.
    * Other value strings define a single group. Here, we change the
      previous logic. We append to the list of groups instead of silently
      discarding subsequent value strings.
      We emit a warning when discarding AVPs because we have reached the
      maximum number of groups.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8aecd4f0c5ba178675a8025229fc0d5bf60596b1
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Jan 25 09:40:36 2023 +0100

    Trim trailing whitespace first
    
    This doesn't change anything, we just want to make clear that trimming
    the string pointed to by `p2`, after assigning `pctx->groupnames[i]`,
    will have an effect on both since they point to the same string.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 2830263d4ccbb3663049a27bc316116ce88e87b4
Merge: a0d101f4 ea23edd4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 16 19:23:46 2023 +0000

    Merge branch 'SYSCALL_open' into 'master'
    
    seccomp: GnuTLS 3.7.3 requires open() unconditionally
    
    Closes #491
    
    See merge request openconnect/ocserv!322

commit ea23edd453f8d7ce47eba9f42ef7767c84645f65
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jan 26 09:34:37 2023 +0100

    seccomp: GnuTLS 3.7.3 requires open() and openat()
    
    We have added open() unconditionally, to be able to open system priority
    and FIPS complicance configuration files from workers.
    
    We had already added openat() unconditionally.
    
    Therefore there is no need to re-add them to read XML config files.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit e2afd99c96acc238410c75cad2bf1dd73c432bc7
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Jan 25 08:39:30 2023 +0100

    seccomp: GnuTLS 3.7.3 requires open() unconditionally
    
    Required on some version of Suse with GnuTLS 3.7.3, reportedly to open
    system priority and FIPS compliance configuration files:
            /etc/crypto-policies/back-ends/gnutls.config
            /proc/sys/crypto/fips_enabled
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a0d101f45f9b9aa078d6d6594b77739923fae925
Merge: 661fc3b9 73d94d7e
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jun 15 11:32:20 2023 +0000

    Merge branch '_GNU_SOURCE' into 'master'
    
    _GNU_SOURCE → AC_USE_SYSTEM_EXTENSIONS
    
    See merge request openconnect/ocserv!345

commit 73d94d7e5be4f7f29d2b0ce6ab30557bd8f15d92
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 13:52:20 2023 +0200

    _GNU_SOURCE → AC_USE_SYSTEM_EXTENSIONS
    
    Do not define _GNU_SOURCE directly in sources.
    Make sure we include "config.h" instead.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 661fc3b9478a4c5d6fc9e3fc89cecaabd715b0cc
Merge: 93e8b162 99e67dcc
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jun 15 09:22:21 2023 +0000

    Merge branch 'for_if_switch_while_(' into 'master'
    
    for/if/switch/while( → for/if/switch/while (
    
    See merge request openconnect/ocserv!343

commit 99e67dcc16a0cfeed24db29310aacd8bd382f4c7
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 12:39:45 2023 +0200

    switch( → switch (
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 88c8672e7e56dabd12f8823796aca7865e10e2c8
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 12:35:44 2023 +0200

    for( → for (
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 8bae1f6a595144f400c9884937e4121c051f1509
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 12:34:29 2023 +0200

    while( → while (
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 8d192c4e7604f03d4856e83fd45dd29fcab1b0ec
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 12:30:28 2023 +0200

    if( → if (
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 93e8b1628ec1364e1a01fe040b5f92c9bd1737fb
Merge: 359a137d e33ef13a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 14 05:29:55 2023 +0000

    Merge branch 'tmp-fedora38' into 'master'
    
    Add fedora38 and almalinux builds / get rid of gnulib
    
    See merge request openconnect/ocserv!342

commit e33ef13a214b0cb0c41d4e344b91a0c6df0dfe62
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 9 21:32:48 2023 +0200

    base64-helper: do not use restrict keyword for portability
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1ca50d73370c8ca263d92c2c20015777958697e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 9 15:33:17 2023 +0200

    Removed gnulib
    
    Supporting gnulib brought a whole class of problems due to its complexity.
    Removing its support eliminates this class of problems and simplifies the
    code significantly.
    
    This sets the locale explicitly on server startup to eliminate the
    need for custom string comparison functions.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0fac0efc149b512206acdd48f66f4c4e30e587b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 9 22:02:00 2023 +0200

    .gitlab-ci.yml: added almalinux9
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f41a07c7c1eeb0a09a6ba7113201a55bae4a8155
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 9 21:03:37 2023 +0200

    occtl: removed dead code
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 39e6eb7d2c0b0b2efd69a48d8629e10bcab1b0d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 9 14:48:29 2023 +0200

    .gitlab-ci.yml: added almalinux8 build
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit cb48bc8f7f7c8cc3813915a43a1ea8ea6cb35304
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 9 14:37:05 2023 +0200

    .gitlab-ci.yml: use fedora38 image
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 359a137d1b485ccf6a3e5a43b5f7f74ccf3d9e1e
Merge: 92da630c e57b36e1
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Jun 13 12:11:14 2023 +0000

    Merge branch 'asprintf' into 'master'
    
    Check the return value of asprintf()
    
    Closes #515
    
    See merge request openconnect/ocserv!347

commit 92da630c3767197fdfc7fc16d2bdbf1d95bde6e7
Merge: 210da435 d2fef9f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 13 11:36:45 2023 +0000

    Merge branch 'ocserv/ocserv' into 'master'
    
    https://gitlab.com/ocserv/ocserv → openconnect/ocserv
    
    See merge request openconnect/ocserv!346

commit 210da435f42baec1d8db8cd7324684cded7ceb40
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 13 11:48:26 2023 +0200

    sec-mod: simplified load_keys()
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e57b36e112f955908f1458b89ed67c173129a694
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Jun 12 20:35:04 2023 +0200

    Check the return value of asprintf()
    
    The value of the pointer to the string printed to might be undefined.
    In case of error, set to NULL, as we do with strdup() calls.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d2fef9f08f4dcfd695edf7b564fcbc49c9f91868
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Jun 12 15:24:22 2023 +0200

    https://gitlab.com/ocserv/ocserv → openconnect/ocserv
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 59ba4a63bea7b59f5a855cbeb19a7bd4d0825796
Merge: 5c253125 abebe455
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 12 12:24:10 2023 +0000

    Merge branch 'dtls_pull' into 'master'
    
    Fix function defined but not used (in some cases)
    
    See merge request openconnect/ocserv!344

commit abebe4553c3a653266bdc5941a5e7d855fa17b5a
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 13:28:51 2023 +0200

    Fix function defined but not used (in some cases)
    
    worker-vpn.c:170:9: warning: 'dtls_pull' defined but not used [-Wunused-function]
      170 | ssize_t dtls_pull(gnutls_transport_ptr_t ptr, void *data, size_t size)
          |         ^~~~~~~~~
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 5c253125c89b8e5f04e1d5af0e7475a5db4f3f52
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 11 13:07:38 2023 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0bd957350a0d31fe7e79a1bed1994d5c282bcbd0
Merge: 85fdf7d2 eadebbbd
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 10 12:01:16 2023 +0000

    Merge branch 'ignore-querystring-of-post' into 'master'
    
    ignore querystring of post while dispatching
    
    See merge request openconnect/ocserv!337

commit eadebbbd71e7e044636cfacd8cd714f1194ad1fa
Author: johnson <eway@mail.io>
Date:   Tue May 23 20:10:09 2023 +0000

    ignore querystring while dispatching
    
    Signed-off-by: johnson <10619522-OnFIs@users.noreply.gitlab.com>

commit 85fdf7d2e6ffe9c1c89f73240712caaa961d1c5a
Author: Kirill Ovchinnikov <kirill.ovchinn@gmail.com>
Date:   Fri May 26 21:13:41 2023 +0200

    Camouflage functionality
    
    This adds a "camouflage" functionality (looking and acting like an ordinary web server),
    to prevent OCserv installations from being automatically scanned or blocked with active probing techniques.
    
    Signed-off-by: Kirill Ovchinnikov <kirill.ovchinn@gmail.com>

commit 1ecdf3549478bf4b0d6b9f5d211e802776d2a08b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 6 14:41:15 2023 +0200

    NEWS: added entry for 1.1.8 [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a8d5d3616ed9f5bd9d088887ceefaf0bd615a830
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 6 14:34:37 2023 +0200

    corrected typo
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit cf2eba93e8ec8aac6a0497ba136f4dd286462db3
Merge: 52e16650 84049206
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 6 11:20:04 2023 +0000

    Merge branch 'checkpatch.pl' into 'master'
    
    Pedantic suggestions by checkpatch.pl from Linux kernel
    
    See merge request openconnect/ocserv!339

commit 8404920637a17a7bb9a598eda15fd3e8b020e4ac
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 19:09:43 2023 +0200

    Macros with multiple statements should be enclosed in a do - while loop
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 44840a4f7231bb7c1459e72747be1cb2e41b83ea
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 18:35:33 2023 +0200

    Unnecessary typecast of c90 int constant
    
    - `(long)0` could be `0L`
    - but then `0` is sufficient in a comparison
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 895b009c7d85105d3621bceb3832e38afb210904
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 18:28:56 2023 +0200

    Statements should start on a tabstop
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit cea0fc2e3fd8ac36d4c6c6472f0521aa99f62344
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 18:12:07 2023 +0200

    return is not a function, parentheses are not required
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit b5380f2181d2ca252625079f594e0bec2d38830b
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 18:04:00 2023 +0200

    Macros starting with if should be enclosed by a do - while loop to avoid possible if/else logic defects
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit fa7f33d6f1fddd6920a45f8eb0b37f65c0860273
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 17:43:57 2023 +0200

    switch and case should be at the same indent
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 30fc4eb46d8c51f7e3b8c5938cdc954fae3c678d
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 17:41:00 2023 +0200

    Prefer ARRAY_SIZE
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d6d5680249cbaeeb046f6c91124f6aaced27e95e
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 17:35:26 2023 +0200

    Bad function definition - int main() should be int main(void)
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit c221d901dca4f752dd1c45118297d60398f79ef5
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 16:58:33 2023 +0200

    Avoid unnecessary line continuations
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 5e881697e7f589d19a2dd1451b9bd38aada9108d
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu May 25 16:55:50 2023 +0200

    void function return statements are not generally useful
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 52e16650ec131ecfd6e7e849da4c920e3d3aa17a
Merge: e6ac970d a1294ead
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Jun 4 12:31:21 2023 +0000

    Merge branch 'http_parser' into 'master'
    
    Update bundled http-parser one last time
    
    See merge request openconnect/ocserv!325

commit e6ac970dbb0797fbe1cf72e0de304048515f1dc6
Merge: 2a3066d9 28562d89
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 4 09:06:19 2023 +0000

    Merge branch 'pcl' into 'master'
    
    Revert previous fix to PCL
    
    See merge request openconnect/ocserv!326

commit 2a3066d97c462ae140713314d226fb397de3b4ff
Merge: 3cd972df ce3d5435
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 4 09:05:29 2023 +0000

    Merge branch 'UNDER_TEST' into 'master'
    
    Fix compiler warnings
    
    See merge request openconnect/ocserv!336

commit 3cd972df3df2c2ba310fc6003bfb7297ce249305
Merge: 719ccfcf a12ec4a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 4 09:05:09 2023 +0000

    Merge branch 'liboauth-dev' into 'master'
    
    Add missing optional dependency: liboath
    
    Closes #508
    
    See merge request openconnect/ocserv!335

commit 719ccfcf276f4d560e4267d8c37238de764c48e3
Merge: fb0906c2 c35dda6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 4 09:04:52 2023 +0000

    Merge branch 'syslog' into 'master'
    
    Improve ocserv man page
    
    Closes #512
    
    See merge request openconnect/ocserv!334

commit a1294eadac7e9666e4f5c0a331957c2cf8ad5309
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 28 23:27:02 2023 +0100

    Typos found by codespell
    
    Re-apply 81df79a9.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 1d30eda56ec5e85dd0c8debabb00bd81a1eb5329
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 28 23:18:00 2023 +0100

    Update bundled http-parser one last time
    
    The http-parser project is not actively maintained any more on GitHub,
    it was archived on 6 November 2022:
            https://github.com/nodejs/http-parser
    
    This partially reverts cosmetic change 2b899aaei, only for this vendored code.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 28562d89c2dcdaa3b813ddad699a93a3bef59537
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Jan 29 00:01:10 2023 +0100

    Revert previous fix to PCL
    
    Partially revert !308 / 7b2cb883.
    
    This brings us back to the latest version 1.12 of PCL, the Portable
    Coroutine Library,  with important local fixes re-applied:
            http://www.xmailserver.org/libpcl.html
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit c35dda6e2abab4e36d429c5e3e2c8f0024577739
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue May 16 13:20:41 2023 +0200

    Improve ocserv man page
    
    Searching "syslog daemon facility" will fetch more precise suggestions
    on how to manage oscerv logs than a mere "daemon facility" which doesn't
    mean anything by itself.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a12ec4a56b9792ca7f5d2378d213406862f18982
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue May 16 14:35:07 2023 +0200

    Add missing optional dependency: liboath
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit ce3d543569f08c4f4cab45b25eb648164a8dacf3
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed May 17 09:52:51 2023 +0200

    Fix compiler warnings
    
    In file included from cstp-recv.c:37:0:
    ../src/tlslib.c:440:13: warning: 'tls_log_func' defined but not used [-Wunused-function]
     static void tls_log_func(int level, const char *str)
                 ^
    ../src/tlslib.c:460:12: warning: 'verify_certificate_cb' defined but not used [-Wunused-function]
     static int verify_certificate_cb(gnutls_session_t session)
                ^
    ../src/tlslib.c:580:13: warning: 'certificate_check' defined but not used [-Wunused-function]
     static void certificate_check(main_server_st *s, const char *vhostname, gnutls_pcert_st *pcert)
                 ^
    ../src/tlslib.c:646:13: warning: 'set_dh_params' defined but not used [-Wunused-function]
     static void set_dh_params(main_server_st* s, struct vhost_cfg_st *vhost)
                 ^
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit fb0906c21f483db5159a2d8ab31f9a6d4a898dfe
Merge: d98a06e1 a7c3c4f1
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jun 3 07:58:51 2023 +0000

    Merge branch 'tmp-new-certs' into 'master'
    
    Update certificates to avoid expiration dates
    
    Closes #513
    
    See merge request openconnect/ocserv!341

commit a7c3c4f1bcad005240dece4e267ec3ef4450f678
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 2 03:37:46 2023 +0200

    Regenerated expired certificates and updated scripts for new ones
    
    Also added rules and templates to regenerate certificates when
    needed.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f828f8d5bb0e19b3ab6cffa87731bdd50266f92a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 1 19:47:41 2023 +0200

    use modern libtasn1 definitions
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d98a06e1431dfedf582c3916014f21a81860006f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 8 09:31:10 2023 +0200

    Fixed operation of make distcheck
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3610b9f4f8a5355d7a0344ba69328c718b908102
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 7 14:40:50 2023 +0200

    .gitlab-ci.yml: moved distcheck to noprocfs
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fb31fb47406f329b349b3f85633b9e45915c3c10
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 7 14:25:46 2023 +0200

    .gitlab-ci.yml: test distcheck not just dist
    
    This will detect issues that show up on release time.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2bdbf7927c4db16ccc6bcc90d78d42dcefe6eb02
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 7 14:21:37 2023 +0200

    Revert "Update CCAN code snippets"
    
    This reverts commit d78f57994a402d8e61613ec1dedb7465f559303f.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1bc33ad61284e9d44f0a77cd8845572d5ecb95cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 7 14:07:55 2023 +0200

    released 1.1.7
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fa099bb2b47f97d5eaf1a81d40438e293fa61a58
Merge: b3d6f714 b43d4ce1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 12 17:08:37 2023 +0000

    Merge branch 'codespell' into 'master'
    
    Fix new typo found by codespell
    
    See merge request openconnect/ocserv!333

commit b3d6f714f24aba85404db8dff8fd36a87b03a0fe
Merge: 5e89efa5 4cd41e0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 12 17:01:14 2023 +0000

    Merge branch 'message_name' into 'master'
    
    Full name for message types in sequence diagrams
    
    Closes #500
    
    See merge request openconnect/ocserv!330

commit b43d4ce174076779823b347926d3561ccaf79c98
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Apr 11 22:47:52 2023 +0200

    Fix new typo found by codespell
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 5e89efa5c7ea2f3e35f608f8f3b3c49c9ece8ea0
Merge: 1f635a65 cc97e3a6
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Apr 11 20:25:13 2023 +0000

    Merge branch 'master' into 'master'
    
    Add AnyLink Agent
    
    See merge request openconnect/ocserv!331

commit cc97e3a6de33f57b8d0e7a03cf1c76c86dcee2eb
Author: Xinjun Ma <xinjun.ma@qq.com>
Date:   Sun Apr 9 14:20:21 2023 +0800

    Add AnyLink Agent
    
    Signed-off-by: Xinjun Ma <xinjun.ma@qq.com>

commit 4cd41e0ccfa351ab7eddddffb020f2ccb0c5d58b
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Mar 3 09:30:55 2023 +0100

    Full name for message types in sequence diagrams
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 1f635a6560a647cbd92031ddd403d88de50e6e10
Merge: e627dc55 f6aa5507
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Feb 28 08:50:31 2023 +0000

    Merge branch 'this_file_is_part_of' into 'master'
    
    Consistent header files
    
    See merge request openconnect/ocserv!329

commit e627dc55fbd1472224f452ab7aebd051bb9b7992
Merge: f77b8641 87e69fbf
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Tue Feb 28 08:03:08 2023 +0000

    Merge branch 'hex' into 'master'
    
    CCAN hex: src/occtl/ → src/ccan/str/hex/
    
    See merge request openconnect/ocserv!327

commit f6aa55071be75de0a96f3f6d44be1b73bfe86438
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Feb 23 22:04:10 2023 +0100

    Consistent include guards in header files
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 92bf45edcbc8639c9957e219671b2c636e45c3f9
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Feb 23 21:55:13 2023 +0100

    Add missing include guard
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 25b85eadb38a0c61e027552286aa56b9b4b04f46
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Feb 23 21:41:04 2023 +0100

    This file is part of GnuTLS → ocserv.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 87e69fbfb71029c152e4f54cbfd517baedc75e12
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sun Jan 29 10:06:42 2023 +0100

    CCAN hex: src/occtl/ → src/ccan/str/
    
    Make clear hex.c and hex.h are vendored files from CCAN:
            https://github.com/rustyrussell/ccan
    
    At the same time, update to commit ba79e21 committed on 9 January 2023,
    for consistency with the rest of CCAN vendored files.
    
    Additionally, by including <ccan/str/hex/hex.h> instead of "hex.h",
    this fixes my Ubuntu 22.04 build, where including "hex.h" would include
    the system Kerberos file /usr/include/heimdal/hex.h instead of
    our local CCAN file hex.h.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit f77b86415e8b9588928404396c7c11f5c3f5e408
Merge: 7ee60df2 49c5251d
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 28 17:50:22 2023 +0000

    Merge branch 'ccan' into 'master'
    
    Update CCAN code snippets
    
    See merge request openconnect/ocserv!316

commit 7ee60df243736f4ac429449e536cfc8f4642d2ff
Merge: a21dc7ff 70ec3f2d
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 28 17:04:18 2023 +0000

    Merge branch 'OpenIDConnect' into 'master'
    
    doc: missing whitespace
    
    See merge request openconnect/ocserv!323

commit 70ec3f2d01b03da4b1bd7ff0b26f43a8058ec34f
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Jan 28 10:05:19 2023 +0100

    doc: missing whitespace
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 49c5251dcd1a8012804615d0a934b85c812a8d90
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jan 12 12:19:20 2023 +0100

    Local change to CCAN: #include <config.h>
    
    Re-apply changes from 08efccdf
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit ecd0971a85e4bc13e3b21b1bbf3e5f3f10278336
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jan 12 12:14:20 2023 +0100

    Local change to CCAN: detect endianness
    
    Re-apply changes from 10d9b144.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d78f57994a402d8e61613ec1dedb7465f559303f
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jan 12 11:26:19 2023 +0100

    Update CCAN code snippets
    
    Latest current commit ba79e21 commited on 9 January 2023:
            https://github.com/rustyrussell/ccan
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a21dc7ffe01ff063db4c287c4d45139b21fdb367
Merge: 8bff61c5 eb657c83
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 21 18:40:11 2023 +0000

    Merge branch 'ARRAY_SIZE' into 'master'
    
    Use ARRAY_SIZE macro for more readable code
    
    See merge request openconnect/ocserv!314

commit 8bff61c585ce5b075b51a80c8b54baf193419f85
Merge: c85b4689 a0334733
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 21 18:37:17 2023 +0000

    Merge branch 'passwd_LOG_NOTICE_ERROR' into 'master'
    
    Print message in case of plain authentication error
    
    Closes #478
    
    See merge request openconnect/ocserv!315

commit c85b46894a78ff3d8446413bc049ecf80e4e8251
Merge: 2340aa32 89c18daa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 21 18:33:03 2023 +0000

    Merge branch 'space_tabs' into 'master'
    
    please, no space before tabs
    
    See merge request openconnect/ocserv!317

commit 2340aa3296dd6c774fe3ef53ac62c5fc7464277a
Merge: 94d5ee57 ec50b517
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 21 18:32:39 2023 +0000

    Merge branch 'mail' into 'master'
    
    Update mail of author
    
    See merge request openconnect/ocserv!320

commit 94d5ee578cefdc057afd3281800be26e03f2c983
Merge: 2a56c2ad 128754d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 21 18:32:20 2023 +0000

    Merge branch 'chmod-x' into 'master'
    
    chmod -x
    
    See merge request openconnect/ocserv!319

commit ec50b5176211de268fe7c0780ef9cdba13979df7
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Jan 20 11:00:05 2023 +0100

    Update mail of author
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 128754d7bb903a7858f361af37add7551c7358d1
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Jan 20 10:55:01 2023 +0100

    chmod -x
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 89c18daaf044fdc6a688706076d001abb1b0dad0
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Jan 20 09:19:50 2023 +0100

    Suggestion from checkpatch.pl
    
            please, no space before tabs
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a0334733ddf715c01ab08f0766df46e541014127
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jan 12 10:15:34 2023 +0100

    Print message in case of plain authentication error
    
    Message would be emitted at LOG_NOTICE level and go unnoticed.
    Change to LOG_ERR.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit eb657c835434eebdb1f158faa1d1d5d1e46653a0
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Dec 27 14:02:57 2021 +0100

    Use ARRAY_SIZE macro for more readable code
    
    Copied over from the Linux kernel.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 2a56c2ad4e9ac3d173a3d5d53dce2bb8263dae01
Merge: 3f68b64b ff528db3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 12 07:59:45 2023 +0000

    Merge branch 'clavister' into 'master'
    
    Initial support of Clavister OneConnect clients
    
    See merge request openconnect/ocserv!311

commit ff528db37873028357162b82264a8525bd0d2bd3
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 31 00:39:16 2022 +0100

    Initial support of Clavister OneConnect clients
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 3f68b64b55f0a7cb6ca0d0c2dd4fc90da7f2fbcc
Merge: 91429e5a 1a2100f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 8 10:54:34 2023 +0000

    Merge branch 'inih' into 'master'
    
    inih: updated to latest version r56
    
    See merge request openconnect/ocserv!310

commit 91429e5a44115709a9f0b5a7f6d8dbdcd55d0d6b
Merge: 88e4212e 8bde99db
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 8 10:54:06 2023 +0000

    Merge branch 'ROOTGID' into 'master'
    
    PAM tests: ROOTUID → ROOTGID
    
    Closes #486
    
    See merge request openconnect/ocserv!313

commit 8bde99db99a6160492f8f8c8c65f3893f7f9c9c6
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Jan 5 13:07:05 2023 +0100

    PAM tests: ROOTUID → ROOTGID
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 1a2100f9cd8344a2f2a5a9c3cc2619f51f1f9085
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 30 19:20:36 2022 +0100

    inih: increased max line size
    
    Re-apply e7233819.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 92c31d1c02b49232b310177f7a6ec361c79880bf
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 30 19:18:21 2022 +0100

    inih: updated to latest version r56
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 88e4212e28adfdcaf5d18f5d411ae01709d8ceea
Merge: 76334ef7 7b2cb883
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 2 07:59:13 2023 +0000

    Merge branch 'arguments' into 'master'
    
    Improve arguments of time() and exit()
    
    See merge request openconnect/ocserv!308

commit 76334ef7d91b860353143daf5e9efca265e0c903
Merge: 5a225e40 2b899aae
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 31 13:58:28 2022 +0000

    Merge branch 'RFC9110' into 'master'
    
    Use the capitalisation of RFC 9110 in HTTP headers
    
    See merge request openconnect/ocserv!307

commit 5a225e40085667ea6458922da18c235f87a4f159
Merge: e7dc62ac bf71414c
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 31 13:54:08 2022 +0000

    Merge branch 'protobuf' into 'master'
    
    updated to protobuf 1.4.1
    
    See merge request openconnect/ocserv!309

commit e7dc62acd4c3c7b2244ba12502a3e0b3e15c6839
Merge: 30ae9908 3eec11bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 31 13:31:23 2022 +0000

    Merge branch 'cookie-validity' into 'master'
    
    Get rid of deprecated option cookie-validity
    
    Closes #483
    
    See merge request openconnect/ocserv!305

commit 2b899aae8291d6cb90bea15a374f994b3eee8dce
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 30 18:49:41 2022 +0100

    Use the capitalisation of RFC 9110 in HTTP headers
    
    Capitalisation shouldn't be an issue, yet conform to RFC 9110 for
    consistency:
    https://www.rfc-editor.org/info/rfc9110
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit bf71414cf9219308959b26e375653415afb782cc
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 30 19:09:46 2022 +0100

    updated to protobuf 1.4.1
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 7b2cb88350c360fd72a1c1ccf9f8c13b12d1cbe2
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 30 17:27:06 2022 +0100

    Use EXIT_SUCCESS and EXIT_FAILURE with exit()
    
    The use of `EXIT_SUCCESS` and `EXIT_FAILURE` is slightly more portable
    than the use than the use of 0 and nonzero value like 1 or -1. In
    practice, this is not an issue on Unix-like systems, but it does make
    the intent clearer.

commit cd4c4c26eb1f88f9a8c0036e750693de4dc6c40a
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Dec 30 17:10:20 2022 +0100

    The second argument of time() is a pointer
    
    Do not use `0` instead of `NULL` in C.

commit 3eec11bfcd4653586a70a2deb3b3ffd7fbefe5b4
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Dec 24 12:46:53 2022 +0100

    Get rid of deprecated option cookie-validity
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 30ae99084d6cb144ad10288780896c4fec0044aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 26 16:47:04 2022 +0100

    libtasn1: no longer use deprecated types
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e7a9529051d5aa8f3888543623d9f36f45297d3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 26 16:28:19 2022 +0100

    improved code coverage identification
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d4cb726644202eb51bc2a4cc473b4313f3003b4a
Merge: bb25bdd3 d8504e7e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 2 18:59:10 2022 +0000

    Merge branch 'tls_reload_ocsp' into 'master'
    
    Avoid compile-time warning
    
    See merge request openconnect/ocserv!301

commit bb25bdd3aa169e22a62625e2f660d392b01581d2
Merge: 03b71ca5 59fe28c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 2 18:57:16 2022 +0000

    Merge branch 'spaces' into 'master'
    
    Remove spaces [ci skip]
    
    See merge request openconnect/ocserv!304

commit 59fe28c85e68e454e06c480085336423265af185
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Nov 28 10:32:06 2022 +0100

    Add .git-blame-ignore-revs
    
    For `git blame` to ignore the previous formatting changes.
    
    Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>

commit f28669bf6007af7afd27e03fc3f48f355a19c3fe
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Nov 28 08:31:12 2022 +0100

    Remove spaces
    
    * Remove trailing spaces at end-of-line
    * Remove blank lines at end-of-file
    
    Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>

commit d8504e7e285b2e8af6baa6a6a01edad7a3b1f5b7
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Oct 7 18:38:09 2022 +0200

    Avoid compile-time warning
    
            ../src/tlslib.c:54:13: warning: 'tls_reload_ocsp' declared 'static' but never defined [-Wunused-function]
             static void tls_reload_ocsp(main_server_st* s, struct vhost_cfg_st *vhost);
                         ^
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 03b71ca57f314a67140e41e600377b104738df42
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 26 16:25:17 2022 +0100

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1f5bd46ef13b62d9e4e4568b4c41d9cd97ff5c4d
Merge: 15fe1202 3bc39e40
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 26 15:22:54 2022 +0000

    Merge branch 'master' into 'master'
    
    seccomp: allow essential syscalls in 32-bit arm platform
    
    See merge request openconnect/ocserv!298

commit 3bc39e40c09ff218f466c0fb7cb72f2760df60b0
Author: Zhiyuan Wan <h@iloli.bid>
Date:   Mon Nov 21 15:41:08 2022 +0800

    seccomp: allow essential syscalls on 32-bit platform.
    
    This fix ocserv auth issue on armv7 platform.
    Not tested with other 32-bit platforms, be careful.
    
    Solves issue #474
    
    Signed-off-by: Zhiyuan Wan <h@iloli.bid>

commit 15fe120292c705c84f7dd52785ef13e7be65e592
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 23 20:29:23 2022 +0200

    ocserv.8: Align example with the default ocserv configuration for certificates
    
    Relates: #468
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a299300e67a0ad9c30768725a53bc69638ef37b7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 1 19:28:53 2022 +0200

    seccomp: allow setitimer
    
    This enables ocserv on musl/alpine.
    
    Resolves #455
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d034f0d95a2a752c0ef6a9a37ce756bec1442f9d
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Fri Oct 7 18:58:33 2022 +0200

    Fix codespell false positive
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit f1afd357e4cd1a2c321a166647ce7bc3ecfe3e55
Merge: 413edf38 cfe2ea06
Author: Feng Xie <fengx@microsoft.com>
Date:   Sat Jul 2 04:02:57 2022 +0000

    Merge branch 'taramallesh-master-patch-65583' into 'master'
    
    Allow HTTP headers to be  configurable
    
    See merge request openconnect/ocserv!293

commit cfe2ea06d9ba242c72c4fee40a166f679fb7a55e
Author: Tara Mallesh <taramallesh@microsoft.com>
Date:   Sat Jul 2 04:02:56 2022 +0000

    Allow HTTP headers to be  configurable

commit 413edf38bfb29d76d9c5ac3beb615555f1c0bb60
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 2 08:51:20 2022 +0200

    Makefile.am: LICENSE -> COPYING
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 95b521d58e473f971c534e41ee1a14b18e1d4490
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 1 15:59:51 2022 +0200

    Added detailed licensing information in README.md
    
    This keeps COPYING as the main licensing file.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1c17846ea5768af5e950814d3830b6d55b5428ac
Merge: 7114104b e0a2fa4c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 17 07:44:26 2022 +0000

    Merge branch 'tun-iteration-fix-issue-443' into 'master'
    
    Base /dev/tunN iteration on max-clients
    
    Closes #443
    
    See merge request openconnect/ocserv!291

commit e0a2fa4c3cca76dceec1610ee4b2dfe68a394172
Author: Marc West <westmarc@gmx.com>
Date:   Wed Mar 16 22:47:29 2022 +0000

    Base /dev/tunN iteration on max-clients for OSes that do not have the /dev/tun special control device

commit 7114104b8c6aa2042d7396788cd5f4899b9696c1
Merge: a1bd0116 73307e2d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 15 08:36:22 2022 +0000

    Merge branch 'taramallesh-master-patch-01031' into 'master'
    
    Add Pragma and Cache-control HTTP headers.
    
    See merge request openconnect/ocserv!290

commit 73307e2dacf3a4c7b68ea9eff58a401ab8688456
Author: Tara Mallesh <taramallesh@microsoft.com>
Date:   Mon Mar 14 05:25:11 2022 +0000

    Update worker-http.c

commit 058c63303f7032a34b2a6dbe408caef169f2780a
Author: Tara Mallesh <taramallesh@microsoft.com>
Date:   Wed Mar 9 17:48:51 2022 +0000

    Update test-owasp-headers with Pragma and Cache-control checks

commit c60c7cad987562c79350242aeeaf335e3669851e
Author: Tara Mallesh <taramallesh@microsoft.com>
Date:   Mon Mar 7 21:16:11 2022 +0000

    Fix typo to remove extra closing bracket

commit 49a03419e8010e40704b9be93ebabcb5412197be
Author: Tara Mallesh <taramallesh@microsoft.com>
Date:   Mon Mar 7 19:57:46 2022 +0000

    Add Pragma and Cache-control HTTP headers.

commit a1bd01169f787934a030f8a6e53060f8719dc732
Merge: 3d19078b 030163fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 2 08:48:55 2022 +0000

    Merge branch 'groovyfengx-master-patch-69245' into 'master'
    
    Fixing memory leak in OpenID Connect auth module
    
    See merge request openconnect/ocserv!289

commit 030163fbbe9e2c1fcb64f60d1ca22b9a62b057c2
Author: Feng Xie <fengx@microsoft.com>
Date:   Tue Mar 1 22:28:47 2022 +0000

    Fixing memory leak in OpenConnect auth module

commit 3d19078be665da2c9c915d69050937e6119c95b2
Merge: 43dbe741 4ec99609
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 1 20:26:44 2022 +0000

    Merge branch 'groovyfengx-master-patch-58049' into 'master'
    
    Fixing issue: Authentication requests from the same IP address are not load balanced among security modules
    
    Closes #444
    
    See merge request openconnect/ocserv!288

commit 43dbe741c7e568db1800c6e982add68fabd53d3a
Merge: 8b00d198 765472bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 1 20:25:01 2022 +0000

    Merge branch 'groovyfengx-master-patch-44853' into 'master'
    
    Fixing memory deallocation issue in auth
    
    See merge request openconnect/ocserv!287

commit 4ec99609ca1d1ba986ee58a0695bab87c12ae7c7
Author: Feng Xie <fengx@microsoft.com>
Date:   Mon Feb 28 16:00:13 2022 +0000

    Fixing issue: Authentication requests from the same IP address are not load balanced among security modules

commit 765472bd2c48210a0b3cb21a5292cb38ef077b98
Author: Feng Xie <fengx@microsoft.com>
Date:   Mon Feb 28 15:54:18 2022 +0000

    Fixing memory deallocation issue in auth.

commit 8b00d198d9ff9c76b5d466f6c06bd10b51db29d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 17 09:21:36 2022 +0100

    released 1.1.6
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit eb6d1c0aef150485bf4f984fa779a631a6778bdb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 17 08:53:27 2022 +0100

    sec-mod: increased max groups to 128
    
    Relates to #219
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1b826069ebee1ff4ff3d40adb5141b88d416780d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 15 10:34:18 2022 +0100

    str_rep_tab: added explicit initializer
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 53b08d243375f2830bf4eb479b61192ba89cf9e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 15 10:18:46 2022 +0100

    forward_udp_to_owner: sanity check of session_id_size
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit cdcc5eda4dac7ac3acf1ea9ae7c2c0c7fe1b4bb0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 11 11:41:58 2022 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 93e62b93ac08731ead4cd9b4166839d3ddf89a7a
Merge: ed4ec0a3 c1030512
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 10 15:28:23 2022 +0000

    Merge branch 'tmp-fix-f36-issues' into 'master'
    
    Updates to fix operation in fedora 36
    
    See merge request openconnect/ocserv!285

commit c1030512a73833167045686aa733fe05a9d38bb7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 10 16:01:29 2022 +0100

    load_keys: work around GnuTLS 3.7.3 regression
    
    GnuTLS 3.7.3 introduces a backwards incompatible change and
    GNUTLS_E_PKCS11_PIN_ERROR is returned when an encrypted
    file is loaded.
    
    Reported at https://gitlab.com/gnutls/gnutls/-/issues/1321
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 94af87c7a2bcd832c28db94af5db32b074923a64
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 10 15:31:39 2022 +0100

    libtasn1: use NULL instead of ASN1_TYPE_EMPTY
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a2fbdabf5e9662d43db2cd03625bb4c49ec03021
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 10 15:03:23 2022 +0100

    seccomp: allow futex()
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ed4ec0a3cbb0ea86c1f4345ec4f920d7ed4f2b34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 5 10:20:22 2022 +0100

    NEWS: doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 44ec3c60ed8f63797cbc446c3f65d9cf80d4ab84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 5 10:19:30 2022 +0100

    sample.config: document the local subnet exemption from ban.
    
    Relates: #441
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f65bb80e9a12b0cd2d485a1120c00b93332dadcd
Merge: 3a5dd582 feffac37
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 27 10:35:55 2022 +0000

    Merge branch 'Openconnect' into 'master'
    
    Openconnect → OpenConnect
    
    See merge request openconnect/ocserv!282

commit 3a5dd582eb5c97505eed4990ab83eabd2e16bead
Merge: dcd08a66 bfeab649
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 27 10:23:28 2022 +0000

    Merge branch 'master' into 'master'
    
    Make compatible with AnyConnect client on Windows ARM64
    
    See merge request openconnect/ocserv!284

commit bfeab649c8314a683d671bb3327c9ba42902b4b6
Author: David Madole <david@madole.net>
Date:   Wed Jan 26 01:46:57 2022 +0000

    Make compatible with AnyConnect client on Windows ARM64

commit feffac374a255d1172c1cb10701696cb5961feb7
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Mon Dec 27 12:46:44 2021 +0100

    Openconnect → OpenConnect
    
    Spell OpenConnect products consistently.
    
    This will modify the README file, but not the online documentation.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit dcd08a66393685682bad20580f0f120a7d3c8052
Merge: 5b7e35cb 2cec6c92
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 23 14:34:56 2021 +0000

    Merge branch 'makefile_silent_recipe' into 'master'
    
    Silence the codespell recipe in Makefile
    
    See merge request openconnect/ocserv!281

commit 2cec6c92d1a9161163f22c9010a7d8f0d5d24ad6
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Dec 23 11:52:17 2021 +0100

    Silence the codespell recipe in Makefile
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 5b7e35cbc1ed10193513244281bfb4785fca2dae
Merge: ace958c3 c0091349
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 23 09:46:41 2021 +0000

    Merge branch 'codespell' into 'master'
    
    Add codespell configuration file
    
    See merge request openconnect/ocserv!275

commit c009134915b76137a9addf8d538ba86c2a225752
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 22 15:44:04 2021 +0100

    Add codespell CI runner
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 44bb12bb1a722202e4e0062f5c9d0a1fb9d15af2
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 22 15:13:27 2021 +0100

    Revert previous typo fixes to CCAN and PCL
    
    Revert !271 / 81df79a9 and !276 / 3a92062b.
    
    These are vendored files that need to be fixed upstream.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit e51acb8c3ecc81338f48fc2bf8b757704c2024ac
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 22 15:04:09 2021 +0100

    Fix more typos
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 172d91328dd317360f45ec57002262b6c5804977
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Nov 17 11:29:14 2021 +0100

    Add codespell configuration file
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit ace958c31f077c1cf99dcc172ea6a2f2790770f3
Merge: db505b37 cd2ad0c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 22 21:57:19 2021 +0000

    Merge branch 'tmp-fedora35' into 'master'
    
    fedora: updated to 35
    
    See merge request openconnect/ocserv!279

commit cd2ad0c66f0ff977b1bf07d9a18aa3a0f61c11b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 22 21:41:14 2021 +0100

    radiusd.conf: set libdir through autoconf
    
    It should depend on the system tested.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit db505b373c337418a2a046549607ae7b5e93dafc
Merge: accfc816 3a92062b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 22 18:41:17 2021 +0000

    Merge branch 'visual_studio_spell_checker' into 'master'
    
    Typos found by Visual Studio Code Checker
    
    See merge request openconnect/ocserv!276

commit cffd7d23b37eec91cd7a964aefe1507b675793fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 22 18:54:16 2021 +0100

    fedora: updated to 35
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit accfc8169d22e1f9e09f2b7723754a64f2cb246c
Merge: d28b2e9f a58ff253
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 22 18:35:24 2021 +0000

    Merge branch 'chmod+x' into 'master'
    
    chmod +x executable scripts
    
    See merge request openconnect/ocserv!280

commit 3a92062b44feb48640b569cf1dd123acc2164152
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Nov 17 12:31:15 2021 +0100

    Typos found by Visual Studio Code Checker
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit a58ff2534f397c1b0cd4ebf4ed70024f17920fca
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 22 19:14:22 2021 +0100

    chmod +x autogen.sh
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d28b2e9f01b3ba5c5daf1af64d657bcd5def7f7b
Merge: 78c26b6f a5d79fc2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 22 18:16:36 2021 +0000

    Merge branch 'const_char' into 'master'
    
    Improve const char declarations
    
    See merge request openconnect/ocserv!278

commit a5d79fc230336ebde974984cb54ba6a1617ca3fb
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Wed Dec 8 22:37:51 2021 +0100

    Improve const char declarations
    
    Declare C string constants using array syntax, avoid pointer syntax
    when possible. They are different, the array syntax generates smaller,
    faster code.
    
    Also, const char[] should usually be static, again to avoid poor
    compilation and runtime performance where compilers tend to
    initialize the const declaration for every call instead of using
    .rodata for the string.
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit 78c26b6f217f6058b3146cd360e77610faac7d31
Merge: 5c79fa24 47c1e1be
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 11 16:55:34 2021 +0000

    Merge branch 'repeat' into 'master'
    
    Fix repeated words in comments
    
    See merge request openconnect/ocserv!277

commit 5c79fa24b249fa86b2ee5201a117cf5e0a0b16f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 20 17:14:35 2021 +0100

    sample.config: removed mentioning of listen-clear-file
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 47c1e1be843963fb7818d4dce7d6478f4f91e1cc
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Nov 18 06:21:14 2021 +0100

    Fix repeated words in comments

commit 11fdd9fb04edf42e7d9137aefeaf90ec5f18a912
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 17 13:16:54 2021 +0100

    manpages: fixed output with ronn-ng
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7f5414bd07fcebf11afe68f01c9eff25f9ceea73
Merge: a61daf03 1dcd78d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 17 08:52:48 2021 +0000

    Merge branch 'codespell' into 'master'
    
    Fix typo found by codespell
    
    See merge request openconnect/ocserv!274

commit a61daf0332783a2e60b257e297f7f2d8b1a27f6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 14 12:27:44 2021 +0100

    systemd files: updated
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1dcd78d05fe37bd013fc5af48e69bb0eda8bbfde
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Sat Nov 13 13:17:51 2021 +0100

    Fix typo found by codespell

commit 176a10b8dca564acf2e8975636059b1ddf285b34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 13 08:45:56 2021 +0100

    configure.ac: 1.1.4
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 697f5f9bc2f1d43b08bfc07d439b349b0fe089f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 13 08:45:14 2021 +0100

    maxmind: ensure that asprintf is checked
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5f943148becc50e9c3d6c0da51c9467dfbc670df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 13 08:42:52 2021 +0100

    NEWS: released 1.1.4
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 4f9c4de805629f9a7a512407edfbeed229222b9f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 13 08:41:30 2021 +0100

    lgtm: ignore unuseful warnings
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6e821c3df3027908a318412b91a7c469593939cd
Merge: 471d804e 11c79189
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 12 17:45:26 2021 +0000

    Merge branch 'tmp-allow-small-prefix' into 'master'
    
    Do not assign an IPv6 address to client that matches the network
    
    Closes #430
    
    See merge request openconnect/ocserv!273

commit 11c79189cc57d71849b75c8969136babae15853d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 31 10:23:01 2021 +0100

    tests: skip leaks in occtl
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 296b4fb4fef83317bb36f5d5830b2c6d647b5560
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 31 10:50:19 2021 +0100

    test-explicit-ip: corrected the illegal IP address
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 39954732195237811fa6425c4b2088b8b0587660
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 31 10:30:20 2021 +0100

    NEWS: doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ceebc11cc4490f6c6ef435baa36328bf201d5c17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 31 10:14:31 2021 +0100

    tests: check functionality of an IPv6 net with prefix 127
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8ac992d273bd4ea768132fb799826a220990af06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 31 10:29:12 2021 +0100

    Do not assign the same local and remote IPs
    
    Resolves: #430
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 471d804e289778da8dda09ae98e4a9229d81017c
Merge: d8d19837 7fc33ad0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 9 16:25:14 2021 +0000

    Merge branch 'tmp-codespell' into 'master'
    
    Typos found by codespell
    
    See merge request openconnect/ocserv!271

commit 7fc33ad008ef5e749f3ae0c90e18c155119d0731
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 9 18:07:08 2021 +0200

    sample.config: documented sec-mod-scale
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 81df79a95b186bd5e55d230fb6ea3db44478e9c9
Author: Dimitri Papadopoulos Orfanos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
Date:   Thu Sep 9 12:31:39 2021 +0200

    Typos found by codespell
    
    Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

commit d8d19837d9dd0629f34240355ee49ec32c441273
Merge: 80fd3293 890a37eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 7 07:50:46 2021 +0000

    Merge branch 'tmp-no-self-test' into 'master'
    
    hash.c: removed self-test
    
    See merge request openconnect/ocserv!272

commit 890a37ebea2871da1f30a23f6c7840a30742013e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 7 09:34:21 2021 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 53dfa056a4a441b0451f637fc9cf1038210c89c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 7 09:30:23 2021 +0200

    hash.c: removed self-test
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 80fd3293b2301134b6d8d51400b18d8acb0a3992
Merge: ec14f60b 807250f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 14 07:15:50 2021 +0000

    Merge branch 'tmp-ignore-self-test' into 'master'
    
    cppcheck: ignore SELF_TEST in ccan/hash
    
    See merge request openconnect/ocserv!269

commit 807250f78e24bf3baf0352814233ce752100112a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 13 22:17:57 2021 +0200

    cppcheck: ignore SELF_TEST in ccan/hash
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ec14f60b7983625d073acd5ab73b760a6b455879
Author: Luo Bo <luobodi@hotmail.com>
Date:   Mon Sep 13 23:00:46 2021 +0800

    seccomp: Add epoll_pwait to allow list. AArch64 requires this.
    
    Signed-off-by: Luo Bo <luobodi@hotmail.com>

commit 664d88d84e02ed5754cbc62b77a3bb6a8ebfb9ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 23 09:17:56 2021 +0200

    README.md: updated [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 644873f5a911bb77c3e1be4d66461f68e97e553d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 23 09:16:35 2021 +0200

    README.md: updated [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 45fcdbf0b3ec18fd08b1d4ddeb181ebc49783ba9
Merge: 559a0f85 3c783faa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 21:11:30 2021 +0000

    Merge branch 'tmp-log-simple' into 'master'
    
    Clean ups on logging
    
    See merge request openconnect/ocserv!266

commit 3c783faaa26c11f568eb2630d00c8d5c3ba95fb1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 22:51:29 2021 +0200

    .gitlab-ci.yml: removed epel RPM builds on second stage
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit add3272c1db665423037eb49a6cba584a642db75
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 22:23:08 2021 +0200

    disable_system_calls: added newfstatat unconditionally
    
    It is required in newer glibc.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 4bfb42cb3453ea3b0e7a32e017c8ae68cbdafad9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 21:46:26 2021 +0200

    pcl: removed code causing use-after-free
    
    Found by static analyzer.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 173b5abd56be52e6598348dee8817a66ab035e2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 18:46:39 2021 +0200

    .gitlab-ci.yml: updated fedora image name
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 29995ebd436b269cde351e36a8705a715fcccbc7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 10:47:02 2021 +0200

    log: simplified logging process
    
    This combines duplicate logic, and allows uncovering errors
    when the wrong log level is specified.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit bcf6ed7204930b9713d4c737974176ed100b30f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 10:26:55 2021 +0200

    worker: minor improvements in log messages
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6daa24f010927be601a21fca9ac7b2a9c4b459f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 12 10:16:27 2021 +0200

    worker: correct log message
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 559a0f85c67bf3700e220695dc805613114e50d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 2 08:32:46 2021 +0200

    released 1.1.3
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 750a4bfb3f46e81ccba5a147f6317351c29294c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 23 18:58:13 2021 +0200

    NEWS: removed X-CSTP-Lease-Duration
    
    This amends fac0244f3eb0cd1fd9a510472dc741570c2a0f43
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 60af6e3f6a5483f24858d7a046562982c82495d7
Merge: b37544b5 fac0244f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 22 18:17:29 2021 +0000

    Merge branch 'do_not_set_X-CSTP-Lease-Duration_header' into 'master'
    
    Do not set X-CSTP-Lease-Duration header
    
    See merge request openconnect/ocserv!265

commit fac0244f3eb0cd1fd9a510472dc741570c2a0f43
Author: Daniel Lenski <dlenski@gmail.com>
Date:   Sat May 22 10:29:53 2021 -0700

    Do not set X-CSTP-Lease-Duration header
    
    This header was added in https://gitlab.com/openconnect/ocserv/-/commit/dd34f8587585bc6f3e7c30ea09aa1dd26d1c6215.
    The intention was to allow clients to accurately determine the remaining
    lifetime of the authentication session by replicating the headers that Cisco
    servers were observed to send. See https://gitlab.com/openconnect/openconnect/-/merge_requests/156
    for the client-side implementation in OpenConnect.
    
    However, two users of ocserv have now reported that the *presence* of this
    header *breaks* compatibility with newer Cisco AnyConnect clients
    (https://gitlab.com/openconnect/ocserv/-/issues/414#note_581221384,
    https://gitlab.com/openconnect/ocserv/-/issues/232#note_477714207).
    
    This patch removes the `X-CSTP-Lease-Duration` header, while leaving behind
    the `X-CSTP-Session-Timeout` and `X-CSTP-Session-Timeout-Remaining` headers.
    With
    
    (a) Cisco AnyConnect clients are able to correct (tested at
        https://gitlab.com/openconnect/ocserv/-/issues/414#note_581563460)
    (b) OpenConnect clients are still able to determine the authentication session
        lifetime (https://gitlab.com/openconnect/ocserv/-/issues/414#note_582314323)
    
    Signed-off-by: Daniel Lenski <dlenski@gmail.com>

commit b37544b513382e9a9f064883ae174a70a49ec213
Merge: 797d6f75 658ffb47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 18 18:38:50 2021 +0000

    Merge branch 'refactorlogging' into 'master'
    
    Separated logging level from debug-ability
    
    See merge request openconnect/ocserv!262

commit 658ffb47df3b248706b0e8fce32355ee7ba4aaf5
Author: Russell Young <ruyoung@microsoft.com>
Date:   Tue May 18 18:38:49 2021 +0000

    Separated logging level from debug-ability
    
    Modified code to separate logging level from the debug-ability. Added new command line option -x or --traceable to control the pr_dumpable state (default is pr_dumpable false) Added config parameter for controlling the log-level the option is "log-level" it can also be specified on the commandline with -d or --debug.
    
    Signed-off-by: Russell Young <ruyoung@microsoft.com>

commit 797d6f75d00728516fce0bdc69739e2517426c57
Merge: 4eb211d8 b3fe0d85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 18 07:15:43 2021 +0000

    Merge branch 'bypass-protocol' into 'master'
    
    add client-bypass-protocol config option
    
    Closes #407
    
    See merge request openconnect/ocserv!261

commit b3fe0d85c2c81b5b7e133cabd6f3de8b951978f0
Author: fdomain <domain.florian@gmail.com>
Date:   Tue May 18 07:15:43 2021 +0000

    Added client-bypass-protocol config option
    
    By default, anyconnect clients will drop all traffic of a given IP
    version if there is no IP address in that version assigned to the
    client. The client-bypass-protocol option, if enabled, will send an
    extra header to the clients telling anyconnect client to bypass VPN
    tunnel if there is no IP assigned. No impact for openconnect clients,
    this header will simply be ignored.
    
    Signed-off-by: Florian Domain <f.domain@criteo.com>

commit 4eb211d8d088a4f2aa8cede63a86bf1bcf9eb590
Merge: 1d32c505 3d5981c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 16 21:27:05 2021 +0000

    Merge branch 'tmp-minimal-fix' into 'master'
    
    .gitlab-ci.yml: merged options from minimal and Ubuntu minimal
    
    See merge request openconnect/ocserv!264

commit 3d5981c0f230d9afdfa471cb78569e06ad0a5c30
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 16 22:19:56 2021 +0200

    .gitlab-ci.yml: enabled more tests on ubuntu20.04 minimal
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 59e4539736163a90e28e3394f162e42eca4e693a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 16 21:38:00 2021 +0200

    .gitlab-ci.yml: merged options from minimal and Ubuntu minimal
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1d32c5052e22a492ce520ef7a6fcda3feab71b80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 16 21:33:42 2021 +0200

    updated NEWS for the owasp headers
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2584222a3f15b43c7601daa50558037b7c21d873
Merge: 415a6bce 1d5b699e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 14 17:41:14 2021 +0000

    Merge branch 'owasp-headers' into 'master'
    
    Owasp headers
    
    See merge request openconnect/ocserv!263

commit 1d5b699e49125dc6263101e080fec06213848862
Author: Russ Young <ruyoung@microsoft.com>
Date:   Wed May 12 13:27:35 2021 -0600

    Changed mode

commit c4bc01766d2723a641f0bc9bd81815b6da472407
Author: Russ Young <ruyoung@microsoft.com>
Date:   Wed May 12 11:56:09 2021 -0600

    Removed conditional code for OWASP headers

commit 065f51e6af6b1716bedc5a04a06de6cc8f7a5abb
Author: Russ Young <ruyoung@microsoft.com>
Date:   Tue Apr 20 11:55:28 2021 -0600

    Added build flags and Test for OWASP headers

commit f3e23793a7dede68fa3af1f9c2c0bcd857da6e36
Author: Russ Young <ruyoung@microsoft.com>
Date:   Wed Apr 14 10:55:04 2021 -0600

    Added the default OWASP http headers to http responses.

commit 415a6bce7b4b59cf33332ea728e2410ef57e39f7
Merge: b1c9573c 3f0ece49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 2 18:56:09 2021 +0000

    Merge branch 'tmp-coverity-fixes' into 'master'
    
    Include fixes identified by coverity
    
    See merge request openconnect/ocserv!260

commit 3f0ece492fcb2d9c2f95d08088fbe8a8275ab8c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 1 17:16:12 2021 +0200

    set_self_oom_score_adj: corrected error handling
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2d1bd947e29221e1af5a37f703a948c9eeaed815
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 1 17:09:25 2021 +0200

    ctl_handler_init: fixed resource leaks
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6677ac04faa7d3a2cc9740fcc53e47f6ca40e92c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 1 14:52:27 2021 +0200

    occtl: fixed uninitialized value
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b1c9573ce0768258af9079e9b968f1760394346b
Merge: 25e89901 cbd85808
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 12 19:30:39 2021 +0000

    Merge branch 'lognoise' into 'master'
    
    Changes offensive messages. Reduced log noise
    
    See merge request openconnect/ocserv!259

commit cbd858081ef5ec893e8fdb4f4dd3d6e54133c768
Author: Russ Young <ruyoung@microsoft.com>
Date:   Mon Mar 1 10:42:43 2021 -0700

    Changed logging level to reduce noise.

commit 7864798b59371c0ad0de290b38fdc380136349e4
Author: Russ Young <ruyoung@microsoft.com>
Date:   Mon Mar 1 10:41:30 2021 -0700

    Changed logging levels to reduce noise.

commit e9ddacde595fd49cfab362f3c4eed9743c845de0
Author: Russ Young <ruyoung@microsoft.com>
Date:   Wed Feb 17 12:09:40 2021 -0700

    Changes offensive messages.
    Changed noisy messages to be logged at LOG_DEBUG level.

commit 25e899017a4ea0a1a84cc603d70914a215a87bc1
Merge: 3e47d192 90e08cc1
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Feb 22 16:25:42 2021 +0000

    Merge branch 'cookie-httponly' into 'master'
    
    Added HttpOnly flag to cookie
    
    See merge request openconnect/ocserv!258

commit 90e08cc12de2a2f6b5ccb417b07ca499511ddf45
Author: Russ Young <ruyoung@microsoft.com>
Date:   Wed Feb 17 12:15:09 2021 -0700

    Added HttpOnly flag to cookie

commit 3e47d192edbc950af56e07e4959443404c64f8dc
Merge: 7c81ba20 a2775715
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 11 10:24:31 2021 +0000

    Merge branch 'openbsd-devname' into 'master'
    
    OpenBSD Devname changes
    
    Closes #399
    
    See merge request openconnect/ocserv!256

commit a2775715ec124bb463c854fa8c650581ef8ff713
Author: Jake S <jake.stennett@uniserveteam.com>
Date:   Wed Feb 10 22:17:46 2021 +0000

    OpenBSD Devname changes

commit 7c81ba20f40145d048871c3032b729a47ae7c773
Merge: 9f08770c 4cea55c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 10 20:48:42 2021 +0000

    Merge branch 'dtls-fix-memory-corruption' into 'master'
    
    dtls connection setup: fix memory corruption, proper watcher setup
    
    See merge request openconnect/ocserv!255

commit 4cea55c6d68c1c46755876af4e3ff142cd6c81a3
Author: Stefan Bühler <stefan.buehler@tik.uni-stuttgart.de>
Date:   Wed Feb 10 13:23:42 2021 +0100

    dtls connection setup: fix memory corruption, proper watcher setup
    
    ev_init and ev_io_set must never be called on active watchers - we
    need to cleanup previous connection state before setting a new one.
    
    ev_init clears the "active" flag, but doesn't remove the watcher from
    libev internal linked lists (and doesn't clear the "next" pointer for
    it).  This can for example lead to (unexpected) cyclic lists in libev,
    and libev can loop forever trying to deal with them.

commit 9f08770c08d79a6d0f91dd08179543c82bcba839
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 4 21:58:41 2021 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 289ce060dcbbf3811f8588792833ae5bf8bd9f6c
Merge: d4800b54 c53cc973
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 4 20:56:06 2021 +0000

    Merge branch 'issue400' into 'master'
    
    Close fd and stop ev_io on failed handshake.
    
    Closes #400
    
    See merge request openconnect/ocserv!253

commit c53cc97395efccaf9a567c51475bcfc3d1a8ee5e
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Feb 4 09:29:45 2021 -0700

    Close fd and stop ev_io on failed handshake.
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit d4800b54e33d25c43a994a55979e34921f723dcb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 3 20:36:11 2021 +0100

    Updated NEWS
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ae049ee9ab0066a5fcddb85d892ac132e08e96db
Merge: acf31f5d 9d3ac170
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 31 19:43:15 2021 +0000

    Merge branch 'tmp-394' into 'master'
    
    Change how stdin and stdout are closed
    
    Closes #394
    
    See merge request openconnect/ocserv!252

commit 9d3ac1707316f7fd615a5b5d067c31dbb12b3d02
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 25 20:55:02 2021 +0100

    Change how stdin and stdout are closed
    
    We only close the descriptors on the main process
    as this could close other unrelated descriptors.
    
    Resolves: #394
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit acf31f5dde7aa19fac9031ba5b5f6f88218999eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 27 21:57:49 2020 +0100

    parse_data: print unknown bye packets
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b7134d59f8b8c6f19e8bada34644dd12ed77dd99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 27 13:22:31 2020 +0100

    corrected typo
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7f088554d231dca32d4bd4f61ed389d020fc08b6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 27 13:20:48 2020 +0100

    README-radius.md: corrected note
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1f6cfdc41e6f5e97b4144e35ad328275e5338986
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 27 13:12:34 2020 +0100

    README-radius.md: better phrasing of NAS-Port issue with freeradius
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d0708ab3ff0d5b1711ea564b26d938ef0b3ee115
Merge: 1657781c d8377398
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 19 14:00:59 2020 +0000

    Merge branch 'tmp-coverage-check' into 'master'
    
    Include debugging output into our coverage tests
    
    See merge request openconnect/ocserv!251

commit d8377398bc8ab56840b371dd8877029416873d6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 19 14:17:32 2020 +0100

    .triage-policies.yml: improved message on reopening
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 13f59eebbd9aefd393af40fb8d2f274560a00bae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 19 13:56:41 2020 +0100

    tests: increase verbosity on coverage runs
    
    This includes the debugging output into our tests.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1657781cafcd1ab7140c9fdcccfe9434be02f136
Merge: 8b9cc3a5 8d4a5924
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 14 23:10:08 2020 +0000

    Merge branch 'tmp-share-vars' into 'master'
    
    worker.h: share OCSERV_ENV_WORKER_STARTUP_MSG between main and worker
    
    See merge request openconnect/ocserv!250

commit 8b9cc3a5c52896b45a58907ed71360efde150aec
Merge: e09a7d5a b2a5688b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 14 22:40:12 2020 +0000

    Merge branch 'tmp-cleanup' into 'master'
    
    Cleanups in Makefile
    
    See merge request openconnect/ocserv!249

commit 8d4a5924e48d9679ca78518a3ed8514af9cf17a3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 14 23:26:05 2020 +0100

    worker.h: share OCSERV_ENV_WORKER_STARTUP_MSG between main and worker
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b2a5688bf7d10d8c9ba6299f7b9b2a77fb0ffe7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 14 21:20:20 2020 +0100

    Makefile.am: cleanup
    
    This rearranges variables so they are set before they are used.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e09a7d5a7034b1feb91dc995e07e8de5d66124f2
Merge: 56f98cbb 5869006c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 12 22:30:50 2020 +0000

    Merge branch 'tmp-lgtm' into 'master'
    
    More fixes to reduce warnings from lgtm.com static analyzer
    
    See merge request openconnect/ocserv!248

commit 56f98cbba259426c5f74ba62551937119d2a2398
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 12 23:12:10 2020 +0100

    sample.config: document what 'unlimited' means
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5869006ce15d80c3249b5a46256987feba363ff1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 12 22:45:35 2020 +0100

    Replaced redundant checked with asserts
    
    Although the checks where strictly redundant, an update
    or restructuring of the loops/files could cause a signficant
    issues. For that keep them but within an assert() statement
    to be clear what it is about.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 47c6638286a694b4d278e01b278f64f9368b3e1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 12 22:41:50 2020 +0100

    ocserv-worker: renamed loop to worker_loop
    
    This avoids warnings and static analyzers complains about
    the libev functions hiding the global 'loop' variable
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit c7788819274c86d21270fc867313ca0fa71bdd1c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 11 09:49:58 2020 +0100

    Revert ".lgtm.yml: added"
    
    This reverts commit f1be23a7f7d1eb499826291567d84dd6f2d09f17.
    The LGTM.com integration doesn't seem to work as lgtm cannot
    checkout this project.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f1be23a7f7d1eb499826291567d84dd6f2d09f17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 10 17:16:29 2020 +0100

    .lgtm.yml: added
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit dd34f8587585bc6f3e7c30ea09aa1dd26d1c6215
Author: Daniel Lenski <dlenski@amazon.com>
Date:   Wed Dec 9 16:52:41 2020 -0800

    OpenConnect will interpret these headers once https://gitlab.com/openconnect/openconnect/-/merge_requests/156 is merged
    
    Examples of newly-authenticated sessions from Cisco servers:
    
    - Default value of `Session-Timeout` is 1209600 seconds (14 days) per
      https://www.cisco.com/assets/sol/sb/RV345P_Emulators/RV345P_Emulator_v1-0-01-17/help/help/t_SSL_VPN.html
    - https://www.mail-archive.com/openconnect-devel@lists.infradead.org/msg00968.html:
      `Lease-Duration` having the default value, while `Session-Timeout`
      and `Session-Timeout-Remaining` are `none`
    - https://gitlab.com/openconnect/openconnect/-/issues/43#note_177677716:
      `Lease-Duration`, `Session-Timeout`, and `Session-Timeout-Remaining` all with
      same value
    
    My own testing of *reconnected* sessions (on a newer Cisco server supporting
    DTLS 1.2) shows that Session-Timeout-Remaining will have a value less than
    Session-Timeout, such that the expiration timestamp remains constant from one
    reconnection to the next.
    
    Signed-off-by: Daniel Lenski <dlenski@amazon.com>

commit 32570703124b2adf392a019fe4f3518a36156d3c
Merge: 44bff9ce 3d7c846e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:40:24 2020 +0000

    Merge branch 'tmp-lgtm' into 'master'
    
    Several updates to remove LGTM.com warnings
    
    See merge request openconnect/ocserv!246

commit 3d7c846ecdff97953e7e1f6a3f1ce3c727b69b4e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:56:27 2020 +0100

    ocserv: renamed main_loop
    
    This avoids warnings and static analyzers complains about
    libev functions hiding the global 'loop' variable.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 689b6fa1a4696c3880939d8b3f257df693d12707
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:48:30 2020 +0100

    process_worker_packet: remove FIXME comments; they serve little purpose
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 85817d38b77531b1ae81be3de9376f890da40684
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:47:52 2020 +0100

    get_session_id: avoid parameter hiding
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a9cb1b7f1e971e106c10b733e4acad4b591ca3d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:44:58 2020 +0100

    headers: added header guards
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f6cb0db8e0681eb0e61a154f280b1479c939bb8b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:44:12 2020 +0100

    get_cert_names: made infinite loop apparent
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 07606fc2d87f9079732f3036088e376b06e1b2fe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:10:41 2020 +0100

    load_keys: avoid hiding a global variable
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9482756e6c12c0d7b96886eecdd39ad79c583bee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:10:01 2020 +0100

    parse_cfg_file: avoid hiding a global variable
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e035221030f8fdfbb38483889631916fef9d9798
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:05:24 2020 +0100

    update_auth_time_stats: cast operations to avoid overflows
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d619c9051856e689fb27ad75170533bdba11990a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 15:01:36 2020 +0100

    Avoid localtime() in favor of localtime_r()
    
    This is to keep some static analyzers happy that check for the
    thread safe functions, even if in practice we do not need to be
    thread safe.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 24814ac87427a0d3a17832c66564b8de8c6e2c01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 14:55:46 2020 +0100

    ocserv: avoid the use of ctime
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 44bff9ce5e09ab68be4f8593622b60c1ed46ea2d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 13:27:27 2020 +0100

    .gitlab-ci.yml: corrected syntax
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 39a86845cb573f39c3399071b6c7103868b58860
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 11:44:50 2020 +0100

    .gitlab-ci.yml: RPM/epel8: undo downstream patch
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9927fbe997504fe138318e9d2ff60232f409139b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 11:33:43 2020 +0100

    design.dia: updated to mention seccomp
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8defa732938745a51d3fbe7487d3ecbacee5c4f7
Merge: eaeac139 5c53d5f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 09:15:53 2020 +0000

    Merge branch 'tmp-updated-http-parser' into 'master'
    
    Updated http-parser bundled library
    
    See merge request openconnect/ocserv!245

commit 5c53d5f82da808f68917ff556b554578afb76e06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 09:31:07 2020 +0100

    Updated bundled http-parser
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3702debb95ade58e3bc3e28b966e9ae35da0765d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 9 09:28:28 2020 +0100

    README.md: no longer recommend pcllib
    
    It is a very small library that doesn't change, not used by
    any other projects and we bundle it. Let's use the bundled
    version by default.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit eaeac13962165b8ba710698de223935fa3819d49
Merge: bbaf5125 70150a85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 6 21:57:56 2020 +0000

    Merge branch 'tmp-tests-no-need-root' into 'master'
    
    tests: drain-server-fail: make sure it runs only when root
    
    See merge request openconnect/ocserv!244

commit 70150a856bb9f41aad676445115e0b8c5530edd8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 6 19:55:03 2020 +0100

    tests: drain-server-fail: make sure it runs only when root
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit bbaf5125e195994528f35cb8ffa5fbfba4f65144
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 6 14:00:50 2020 +0100

    released 1.1.2
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3ba6b243796e4ad5796b3c4504880b101d69a068
Merge: 051a20dd d08f4832
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 6 12:59:51 2020 +0000

    Merge branch 'tmp-setrlimit' into 'master'
    
    update_fd_limits: set fd limits for "unlimited" users to 8k
    
    Closes #349
    
    See merge request openconnect/ocserv!243

commit d08f4832e46d28da021c14ba61e736be85fab91a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 23:44:53 2020 +0100

    update_fd_limits: removed comment on future raise
    
    This increases the maximum number of fds by 96 to allow up to
    128 scripts being run when close to the maximum limit of clients.
    
    Resolves: #349
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 86138698fe5a029f2defbdff566afac77cff0eb7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 23:42:10 2020 +0100

    update_fd_limits: set fd limits for "unlimited" users to 8k
    
    Relates: #349
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 051a20dde94ac855ff2da513c835a59d270abdd7
Merge: 3055c15c a2e2bf00
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 10:40:57 2020 +0000

    Merge branch 'tmp-ubuntu' into 'master'
    
    .gitlab-ci.yml: ubuntu: added seccomp check and enabled nuttcp tests
    
    See merge request openconnect/ocserv!242

commit 3055c15c96ff1a8067468e330c2bdfa84cbff024
Author: Russ Young <ruyoung@microsoft.com>
Date:   Wed Dec 2 12:13:50 2020 -0700

    Log changes to reduce logging noise
    
    Signed-off-by: Russell Young <ruyoung@microsoft.com>

commit a2e2bf00533dad2f39869a0a0a8f74de20333b8a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 10:18:50 2020 +0100

    .gitlab-ci.yml: ubuntu: enabled nuttcp tests
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2f0b1bba0d0558898d3dc923a6ba0054b65ba822
Merge: 6c961561 5cf457b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 09:50:18 2020 +0000

    Merge branch 'tmp-remove-listen-file' into 'master'
    
    Removed the listen-clear-file config option
    
    Closes #376
    
    See merge request openconnect/ocserv!238

commit 5cf457b425b68040a92a2333be1dde87be3d3b69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 21:02:17 2020 +0100

    Removed the listen-clear-file config option
    
    This option was almost impossible to use in general and worked with
    very few clients only (not including openconnect). That also meant that
    it could not be tested. Removed to reduce maintenance to parameters
    that are used in practice.
    
    Resolves: #376
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6c9615618d7dc8e0011ec2120eec5ee3076e5762
Merge: 84dd1ace b797d509
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 09:00:59 2020 +0000

    Merge branch 'tmp-coverity-fixes' into 'master'
    
    Several fixes or annotations attributed to coverity scan
    
    See merge request openconnect/ocserv!237

commit 84dd1ace600ed69cc1de3e9e4915cfdd9ecf728d
Merge: 8000de58 50ab4078
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Dec 2 20:43:39 2020 +0000

    Merge branch 'coverity_fix' into 'master'
    
    Fix coverity warning in forward_udp_to_owner
    
    See merge request openconnect/ocserv!241

commit 50ab40782a49ba11231cec70bf82517357f9c76d
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Dec 2 12:58:56 2020 -0700

    Fix coverty warning in forward_udp_to_owner
    Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

commit 8000de58bd71222c33979c118d2a90982db7af5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 21:03:29 2020 +0100

    handle_sec_auth_cont: corrected use of ps_status_to_str
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6805023bd32f56e00fcc94d23b3f3dfbdf3f5dc3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 20:46:31 2020 +0100

    handle_sec_auth_cont: print status in readable form
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b797d509fc49abe2fbe29be8423d5df47c9f6c01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 15:50:40 2020 +0100

    set_non_block: ensure we log errors
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d60cbf53c5345cd4fd652773d0b5ab815115685d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 16:11:30 2020 +0100

    handle_commands_from_main: silence coverity
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9680622d868d1857feb6e8d52ff03432f83e6ea0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 16:09:28 2020 +0100

    handle_events_cmd: silence coverity
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 65a0e595e5ad07eccf043f453dbbb0f6bd7cd75c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 16:06:41 2020 +0100

    gssapi_vhost_init: simplified
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6fe528ec4c075bee47e459c3bc071dd2f17a93d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 16:04:52 2020 +0100

    post_auth_handler: added error checking to cstp_printf
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 57c0381269abd5e2e3228d0c59d14c8bdce59a0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 16:02:58 2020 +0100

    send_stats_to_secmod: silence coverity
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 56c6ab9cbf2a08a4d7484c7239ac00ac77bec930
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 15:54:37 2020 +0100

    _listen_unix_ports: error when remove fails
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 4150c2251b942a0e7b0036a3dc4ebf204b47d617
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 15:52:23 2020 +0100

    pam: silence coverity warning
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9d98e08aa102234446411902ba2fe93668acf0ec
Merge: fa73c53d 3be9234c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 22:04:23 2020 +0000

    Merge branch 'tmp-always-check-rnd' into 'master'
    
    gnutls_rnd(): always check its return value
    
    See merge request openconnect/ocserv!236

commit 3be9234cb944462521afed1272e0a2ef51b79508
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 22:18:15 2020 +0100

    gnutls_rnd(): always check its return value
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fa73c53d46411fd33ed3962fe2af2f503ac700ff
Merge: 6d8bcb47 7ee163ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 14 22:03:18 2020 +0000

    Merge branch 'tmp-upgrade-ci-to-f33' into 'master'
    
    Upgrade fedora CI to fedora33
    
    See merge request openconnect/ocserv!235

commit 7ee163ad2c162d656918b19ac2ed5f2fce2d65d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 14 22:05:56 2020 +0100

    kerberos: fixes for fedora33 kdc
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6d8bcb479539ebf1c4995bb52e816ef27509df69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 12 16:55:01 2020 +0100

    .gitlab-ci.yml: do not use --disable-maintainer-mode
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit dfadd45b9b462be9e34f87ea93fb13b1121c1f14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 12 16:37:25 2020 +0100

    Makefile: removed unused rules
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5b9fc73fd96bccd89f83243c312eaf13cba83401
Merge: 82fc1e48 01a9815b
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Nov 6 22:30:21 2020 +0000

    Merge branch 'issue360' into 'master'
    
    Issue360 - Send disconnect reason with BanIP message
    
    Closes #360
    
    See merge request openconnect/ocserv!234

commit 01a9815bdf055693181bdd28b8c23c629aa7a262
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Nov 5 16:56:13 2020 -0700

    Set disconnect reason when updating ban-ip
    
    Resolves: #360
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit 82fc1e4881b6ba1f170a975195da63380d767e70
Merge: 4afbf8fd 95219181
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 1 22:27:55 2020 +0000

    Merge branch 'tmp-enhance-syscalls' into 'master'
    
    worker-privs: enhanced with syscalls used by socket wrapper
    
    See merge request openconnect/ocserv!233

commit 4afbf8fdb2a760d78d6ae325d4c7b31a1bea44c3
Merge: 940e4895 d83a39da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 1 21:39:29 2020 +0000

    Merge branch 'tmp-init-snapshot' into 'master'
    
    set_env_from_ws: ensure there are no uninitialized variables from snapshot
    
    See merge request openconnect/ocserv!231

commit 95219181436b9c0b3ee5ed67e3aabf4b779b9517
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 22:30:35 2020 +0100

    worker-privs: allow new syscalls
    
    This adds the syscalls used by socket wrapper as observed
    in Fedora builders, as well as syscalls observed in different
    platforms such as aarch64.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d83a39da51dd16f8721f3170ee3851b1dcbb42e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 29 10:05:00 2020 +0100

    set_env_from_ws: ensure there are no uninitialized variables from snapshot
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 940e4895002c6538aec893d95f550863703b7f3f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 21 16:30:09 2020 +0200

    .gitlab-ci.yml: i386/Debian: do not run on schedules
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 37856ba31443107745d25c8480d5dc9d041398ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 19 21:37:54 2020 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 73ebc582653a6655db0c709df6bcf7ce10056064
Merge: c5d3e4f3 3436705a
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Oct 19 17:21:33 2020 +0000

    Merge branch 'issue359' into 'master'
    
    Allow setup of new DTLS session while processing on old session
    
    Closes #359
    
    See merge request openconnect/ocserv!223

commit 3436705a9c558bbc30b31f391ff1e587b0482427
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Oct 2 15:33:39 2020 -0600

    Allow setup of new DTLS session while processing on old session
    
    Resolves: #359
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit c5d3e4f3214f25b8baab8a05b8218a681d4f5b23
Merge: 117bad2e b7575cc2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 18 19:58:51 2020 +0000

    Merge branch 'tmp-inih-update' into 'master'
    
    inih: increase the limit for a config line
    
    Closes #364
    
    See merge request openconnect/ocserv!230

commit b7575cc2204ea2ee80597311f53bbb5333edb39c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 18 21:04:00 2020 +0200

    tests: fixed space after \
    
    Also ensure that similar warnings are treated as errors
    in CI.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 16bfb30586f979842c177e51e72467bf5177143f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 18 10:53:49 2020 +0200

    inih: reintroduced INI_STOP_ON_FIRST_ERROR
    
    This also introduces better error reporting to inih, and
    handling of the errors received by inih.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit c49d981274ec8f11f71c55e6e1c8d8a7dccdd9ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 18 00:30:14 2020 +0200

    inih: updated to latest version
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 66a263e477fcea131f792bfa57653e0457c6ce7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 18 00:29:01 2020 +0200

    tests: increase the size of a transmitted banner to reproduce #364
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e7233819da34abeaf373acb48e20f9e7ebe9e59a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 18 00:13:02 2020 +0200

    inih: increased max line size
    
    This also removes the stop on first error directive
    which was set but not used for very long time.
    
    Resolves: #364
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 117bad2e29fcaee49c9731f2a2957f4bde531f52
Merge: 1b938f87 6fe6926c
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Oct 16 15:56:53 2020 +0000

    Merge branch 'issue362' into 'master'
    
    Log disconnects from TCP healt probe at debug level
    
    See merge request openconnect/ocserv!229

commit 6fe6926cff4c13b7fd773ea88650bdc0e930bf37
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Oct 16 09:13:49 2020 -0600

    Log disconnects from TCP healt probe at debug level
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit 1b938f87263b68f0cd2815a9e43a27175831970d
Merge: 0d3d0dbd f116c134
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Oct 14 22:30:48 2020 +0000

    Merge branch 'user/alanjo/issue365' into 'master'
    
    Log fatal key retrieval errors at LOG_ERR
    
    Closes #365
    
    See merge request openconnect/ocserv!228

commit f116c134a4442dbe1d795b585fa76b33bda3dbf5
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Oct 14 15:47:48 2020 -0600

    Log fatal key retrieval errors at LOG_ERR
    
    Resolves #365
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit 0d3d0dbd3d5797974bb06b58d509b6ab3b6c62f6
Merge: c106bb86 afe437f8
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Oct 9 16:23:15 2020 +0000

    Merge branch 'malloc_enforce' into 'master'
    
    Raise warning level on malloc to catch double frees earlier.
    
    See merge request openconnect/ocserv!227

commit afe437f8ebb4e8161ae1b70aa13b0a4160411f05
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Oct 9 09:39:35 2020 -0600

    Raise warning level on malloc to catch double frees earlier.
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit c106bb86fcbe1931013526a196004f96551da3ba
Merge: f0f90ef4 cd0f3826
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Oct 7 19:52:35 2020 +0000

    Merge branch 'issue363' into 'master'
    
    Latency stats should be at LOG_DEBUG not LOG_INFO level
    
    Closes #363
    
    See merge request openconnect/ocserv!225

commit f0f90ef4d712e83238f6ae2919c911962f5a011b
Merge: f8ff70a0 7ffb4d1c
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Oct 7 19:39:40 2020 +0000

    Merge branch 'issue362' into 'master'
    
    TCP health probes shouldn't be logged at INFO level
    
    Closes #362
    
    See merge request openconnect/ocserv!224

commit cd0f382628a2bb22b931193ab35d7105ccb041d5
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Oct 7 13:09:05 2020 -0600

    Latency stats should be at LOG_DEBUG not LOG_INFO level
    
    Resolves: #363
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit 7ffb4d1ca267b6498cf3cac9c363b183a9e7c253
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Oct 7 12:34:03 2020 -0600

    TCP health probes shouldn't be logged at INFO level
    
    Resolves: #362
    
    Signed-off-by: Alan Jowett alan.jowett@microsoft.com

commit f8ff70a0988e2404fbffb6f9a7458339e3b7b96c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 2 21:56:48 2020 +0200

    NEWS: updated
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f94b54341e1f20b1807d9e09ea7a736a7e8b5a87
Merge: 8cc7fed1 5b402014
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Oct 1 21:22:45 2020 +0000

    Merge branch 'issue360' into 'master'
    
    Don't apply BanIP checks to clients on the same subnet.
    
    Closes #360
    
    See merge request openconnect/ocserv!222

commit 5b402014fde94ed19bcab2f334f29d4ab6ecc9fa
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Sep 25 12:23:35 2020 -0600

    Don't apply BanIP checks to clients on the same subnet.
    
    Resolves #360
    
    Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

commit 8cc7fed17219bd52d62d5daabcd77f1cd7c02bb5
Merge: 7c0c6ec1 7a924b6d
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Sep 30 22:46:37 2020 +0000

    Merge branch 'issue357-part1' into 'master'
    
    Don't attempt TLS if the client closes the connection with zero data sent.
    
    Closes #357
    
    See merge request openconnect/ocserv!221

commit 7a924b6d9cca4f944738b1a0e752f08d3b17935b
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Sep 25 12:23:35 2020 -0600

    Don't attempt TLS if the client closes the connection with zero data sent.
    
    Resolves #357
    
    Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

commit 7c0c6ec1adf3e124f8ee034c5542c5cd6b08e69c
Merge: 71e36cca 333bbd53
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 30 19:06:06 2020 +0000

    Merge branch 'tmp-remove-todo' into 'master'
    
    Removed TODO file; it is out-of-date
    
    See merge request openconnect/ocserv!220

commit 333bbd536c15b5095a5fbb1bb60e105df95bcfbc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 29 23:44:12 2020 +0200

    Removed TODO file; it is out-of-date
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 71e36ccae40a4ef61267a0da168fbb367b1b4842
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 29 23:43:07 2020 +0200

    README.md: corrected links
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2a1e91795bd39a3a53ecefb0552295c4d50e10a7
Merge: 58c08279 12c3d622
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 29 21:39:09 2020 +0000

    Merge branch 'tmp-drain-ms-repro' into 'master'
    
    Stop listening on ocserv-sm socket on error to prevent looping.
    
    Closes #356
    
    See merge request openconnect/ocserv!219

commit 12c3d62276e60764c1da92b77474fc6b9e4f2484
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Sep 28 14:56:53 2020 -0600

    Stop listening on ocserv-sm socket on error to prevent looping.
    
    Resolves #356
    
    Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

commit 53c8c0f139d2882cf3a38dcd2d936dd7265b9445
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 29 21:23:23 2020 +0200

    tests: added reproducer for drain-server-ms failure
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 58c08279bda02a0a5d3043fe2e6f98ec62e17ef1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 29 21:37:26 2020 +0200

    sample.config: moved server-drain-ms to a more suitable section of the file
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 067c96cb0656befc2ac8934af858f17e6f7e6985
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 29 21:07:47 2020 +0200

    tests: renamed test-drain-server to drain-server
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5879a6b6dd730fe0fe0caf6179232ef56f42819a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 22 21:59:02 2020 +0200

    .mailmap: added aliases of Mike
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 21c6b981beb6d39ac678c9d535655230cfa90402
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 22 21:57:20 2020 +0200

    .mailmap: added aliases of Alan
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b9f8ea6b6cec00b09dce269665f53f8ccce3464d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 12:21:11 2020 +0200

    bumped version for 1.1.1 release
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3426b8f6c930197806f320cab4cbffe54bcf6204
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 12:16:36 2020 +0200

    ocpasswd.8: document the current behavior of ignoring groups
    
    Resolves: #353
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 61c2b5c155a869b920c29f47bf67cef69410b9fe
Merge: 3ba9ebda 8208f741
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 07:24:23 2020 +0000

    Merge branch 'tmp-nanosleep' into 'master'
    
    disable_system_calls: added clock_nanosleep
    
    See merge request openconnect/ocserv!216

commit 8208f74138e3e1280f404484bb90d358a5aa199f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 08:38:21 2020 +0200

    disable_system_calls: added clock_nanosleep
    
    It seems that new fedora versions depend on it for nanosleep().
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3ba9ebdab032fa4713d54cce44a3d8835aa7b464
Author: William Dauchy <w.dauchy@criteo.com>
Date:   Wed Sep 16 22:02:27 2020 +0200

    tests, radius-group: fix unstable tests
    
    - print outfile instead of new command; this will help debug when an
      issue occurs, to know what was the original output
    - also add some time between tests to avoid race; this was failing on
      "could not find group information"
    
      Established DTLS connection (using GnuTLS). Ciphersuite (DTLS1.2)-(PSK)-(AES-256-GCM).
          inet 192.168.93.190/32 scope global tun0
      PING 192.168.93.1 (192.168.93.1) 56(84) bytes of data.
      64 bytes from 192.168.93.1: icmp_seq=1 ttl=64 time=0.217 ms
      64 bytes from 192.168.93.1: icmp_seq=2 ttl=64 time=0.246 ms
      64 bytes from 192.168.93.1: icmp_seq=3 ttl=64 time=0.235 ms
    
      --- 192.168.93.1 ping statistics ---
      3 packets transmitted, 3 received, 0% packet loss, time 2052ms
      rtt min/avg/max/mdev = 0.217/0.232/0.246/0.011 ms
    
      could not find group information
    
    Signed-off-by: William Dauchy <w.dauchy@criteo.com>

commit 80babceacf119de408983adf3fa7cffa4aacfcdf
Author: William Dauchy <w.dauchy@criteo.com>
Date:   Tue Sep 15 21:06:19 2020 +0200

    listen-netns: fix worker case for DTLS
    
    while using udp, we later open a file descriptor for the worker. With a
    listen netns config, I overlooked this case which oblige me to move the
    struct containing the file descriptor in the main one. Then I can access
    them from each worker to make it possible to open the socket in the
    correct netns. I also need to keep the netns fd open during the whole
    life of the process.
    
    the issue was not visible on a tcp-only case, but while using udp you
    can see logs such as:
    
    main[user]: x.x.x.x:54024 bind UDP to 0.0.0.0:443: Cannot assign requested address
    worker[user]: x.x.x.x setting up DTLS-PSK connection
    main[user]: x.x.x.x:54024 bind UDP to 0.0.0.0:443: Cannot assign requested address
    
    update tests to reflects that:
    - instead of creating our own netns, use the one created in common.sh
    - we start server in ns1, but listen in ns2, and test client from ns3
      (we don't want to listen in ns1 to test listen-ns)
    
    Signed-off-by: William Dauchy <w.dauchy@criteo.com>

commit 8f6ff20f66d87e3d3be1d144beaac8bf344228ef
Merge: f1c093f8 c47911a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 16 12:17:06 2020 +0000

    Merge branch 'minor' into 'master'
    
    cosmetic fixes for rx/tx per sec limit
    
    See merge request openconnect/ocserv!214

commit c47911a7d0689c080ceb62255b482d5cf726420d
Author: Yousong Zhou <yszhou4tech@gmail.com>
Date:   Tue Sep 15 19:12:23 2020 +0800

    Fix typo in comment of sample config
    
    Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

commit 5cb41a570b31b092658c3ff3c77a9ae285986109
Author: Yousong Zhou <yszhou4tech@gmail.com>
Date:   Tue Sep 15 19:06:33 2020 +0800

    Fix display of rx/tx per sec limit
    
    Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

commit f1c093f8a840fa79937fe876094d98f1b2516ff0
Merge: 5b3b8e8d 6be284dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 7 18:05:06 2020 +0000

    Merge branch 'tmp-ocserv-group' into 'master'
    
    radius: ignore redundant group class
    
    Closes #332
    
    See merge request openconnect/ocserv!213

commit 6be284dd6354c85c36d23f58551a404c253323b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 2 21:42:41 2020 +0200

    radius: ignore redundant group class
    
    This ignores any items following the first group class attribute.
    
    Resolves: #332
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit dbbf7fe3e0580b27303a2b6fa8efbebc0cf76c42
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 2 22:17:10 2020 +0200

    ns.sh: conditionally call IP with NSNAME3 route
    
    This fixes operation in Fedora 32.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5b3b8e8d33084091bcc53923b2a1fed689428ae2
Merge: e5191bf4 77dfa36c
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Sep 2 14:51:05 2020 +0000

    Merge branch 'issue345' into 'master'
    
    Stop accepting new TCP connections when the server is at maximum active connection capacity & add support for gracefully stopping the server.
    
    Closes #345
    
    See merge request openconnect/ocserv!212

commit 77dfa36c7179a1890234059f32bab0619c2afce1
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Aug 13 21:35:33 2020 -0600

    Stop accepting new TCP connections when the server is at maximum active connection capacity.
    Add support for gracefully stopping the server.
    Add primer on using ocserv with L3 load balancer.
    
    Resolves: #345
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit e5191bf4f39005c057975eb81794e29baa990dab
Merge: 44a13570 94569909
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Aug 26 16:44:43 2020 +0000

    Merge branch 'issue341' into 'master'
    
    Modify ocserv-sm to permit it to scale up to the number of CPUs. This permits...
    
    Closes #341
    
    See merge request openconnect/ocserv!210

commit 945699097d6bd55eb617e5fbbe070fff7dd0e2e2
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Sun Aug 9 13:23:25 2020 -0600

    Modify ocserv-sm to permit it to scale up to the number of CPUs. This permits a higher rate of client connections and prevents TLS signing from becoming a bottleneck for clients connecting.
    
    Resolves: #341
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 44a1357083acf46f8f1d1201850f38c1ecb6d73c
Merge: e5fced51 edbb1e71
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 10 18:44:07 2020 +0000

    Merge branch 'tmp-domain-suffix' into 'master'
    
    sample.config: documented how to specify multiple default domains
    
    Closes #328
    
    See merge request openconnect/ocserv!206

commit e5fced512fc68012356cb343db8e6e999864b0c4
Merge: 8f3dd014 d0a509c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 20:13:31 2020 +0000

    Merge branch 'tmp-test-updates2' into 'master'
    
    tests: eliminate legacy docker tests
    
    See merge request openconnect/ocserv!209

commit d0a509c6c34c9d40d6e2798bcce5faf3ad9292b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 20:36:36 2020 +0200

    tests: introduced new proxy protocol tests
    
    This replaces the old no longer used "docker-tests".
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5021c994dbda7a5ec34e42ec9d9377e957c0642e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 19:56:35 2020 +0200

    tests: always use @ISOLATE_WORKERS@
    
    Now all tests configs are being auto-generated, so this variable
    will be replaced.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8f3dd014839e007f92307663932803fc958fc069
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 18:32:48 2020 +0200

    sample.config: disable all legacy TLS versions by default
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit c914b8d398d3f2290463855ba2faae7bb45e663e
Merge: ae9f299b d84272ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 16:39:57 2020 +0000

    Merge branch 'tmp-test-updates' into 'master'
    
    test updates
    
    Closes #340
    
    See merge request openconnect/ocserv!207

commit d84272ffed60a4394353ede1c31d00f049b34480
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 12:57:23 2020 +0200

    tests: added test for ping-leases
    
    Resolves: #340
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b2c0c6c1cf6c105df8366ab3c30815c98c14cbca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 12:05:51 2020 +0200

    tests: replaced explicit ports with random assignment
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f814cf851be11c5c07bd83034c7bfd9e4cf814a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 9 11:54:04 2020 +0200

    tests: added session resumption test
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit edbb1e71118297566cfdd8beb4111723fb149160
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 6 20:55:58 2020 +0200

    sample.config: documented how to specify multiple default domains
    
    It is possible to specify multiple domains in X-CSTP-Default-Domain for
    openconnect clients; make sure that this is documented.
    
    Resolves: #328
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ae9f299b0fc4ece25a790b2a035c32be6272dd2c
Merge: c3e62fe7 08c0eecc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 6 11:10:53 2020 +0000

    Merge branch 'tmp-warn-in-password-auth' into 'master'
    
    config: error when multiple password authentication methods are present
    
    See merge request openconnect/ocserv!205

commit c3e62fe7a384dceef97d1e57a10f30d74497afbe
Merge: df61f59e 0ecef934
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 6 11:10:13 2020 +0000

    Merge branch 'tmp-enable-asan' into 'master'
    
    .gitlab-ci.yml: reenable address sanitizer
    
    See merge request openconnect/ocserv!202

commit 0ecef934235e438cd7058a9a2ec97175cc4ffb16
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 31 13:51:31 2020 +0200

    .gitlab-ci.yml: reenable address sanitizer
    
    This disables all the tests that use LD_PRELOAD, and thus limits
    the test suite on the tests that are run as root.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7a7d432d0fd5bf04e8d949c6d7257424d54d2bb1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 4 17:48:42 2020 +0200

    use REMOTE_HOSTNAME to pass the user's advertised hostname
    
    The previously used HOSTNAME variable is being overriden by bash and
    thus was not a reliable one. We switch to setting REMOTE_HOSTNAME,
    but keep the HOSTNAME for compatibility.
    
    This also changes 'test-pass-script' to check for the new variable.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 08c0eecc85a83f7f4f32a0046886202ccee43d94
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 5 22:34:17 2020 +0200

    config: error when multiple password authentication methods are present
    
    This prevents starting a server with an invalid configuration.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit df61f59e3e689959a548818251d4d5f17fbd8a13
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 5 22:26:30 2020 +0200

    config: better debug messages on default vhost
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9ce249e583c5493098522faf80f269a29973d32a
Merge: 7a347595 24a9945e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 5 05:08:34 2020 +0000

    Merge branch 'tmp-update-contribution-guide' into 'master'
    
    CONTRIBUTING.md: added more detailed contribution rules
    
    See merge request openconnect/ocserv!204

commit 24a9945e0d74ce2e97d6560d8389f3754cdc350c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 4 23:38:20 2020 +0200

    CONTRIBUTING.md: added more detailed contribution rules
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 91712b3420331a919c21764ac5219cbd40abdfad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 4 17:34:15 2020 +0200

    test-script-multi-user: do not run under asan
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 99fd5d72639cd7e06f9358be7921b98ebd006f58
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 4 17:33:26 2020 +0200

    test-pass-script: introduced more sophisticated timeouts
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d2a9f6b5de47021e2cc46d7607abba60136955a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 4 17:05:11 2020 +0200

    occtl: free the talloc pool on exit
    
    This eliminates any memory leaks pointed by asan.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e379b5075a866b47b8f71fcf631103b51d39a041
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 2 21:56:37 2020 +0200

    snapshot: clear htable on cleanup
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7a3475951f19923a30ab3a5167a033c22b09d0ba
Merge: 0aed7584 0fa951a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 3 13:36:15 2020 +0000

    Merge branch 'tmp-introduce-clang' into 'master'
    
    .gitlab-ci.yml: introduced clang compilation
    
    See merge request openconnect/ocserv!203

commit 0fa951a06b793040a6298966b4d6b67a393960db
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 2 22:39:40 2020 +0200

    .gitlab-ci.yml: introduced clang compilation
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0aed7584d92243b48754b7cfe9b70459a4cb059f
Merge: 2f9d534e 1759bfdc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 31 12:31:53 2020 +0000

    Merge branch 'tmp-add-x86' into 'master'
    
    .gitlab-ci.yml: added i386 build
    
    See merge request openconnect/ocserv!158

commit 1759bfdc4fc08f0ed4163eb02d009e5308b0ec5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 1 15:51:46 2020 +0200

    .gitlab-ci.yml: added i386 build
    
    This introduces an i386 CI build to catch issues that relate
    to 32-bit systems.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2f9d534e2c68058bd0aa00ab3056e26e66555242
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 30 22:41:14 2020 +0200

    NEWS: corrected issue number [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9ac1be83cd37a1efb3424dd0a7cd18131ffc862f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 30 09:19:57 2020 +0200

    README.md: removed unnecessary dependency [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8934be816c58fd85106f6fb1bd5fe30f3034a52c
Merge: ce1911ff 34eab813
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 29 17:13:21 2020 +0000

    Merge branch 'issue326' into 'master'
    
    Pass the hostname to ocserv-main after receiving the connect request.
    
    Closes #326
    
    See merge request openconnect/ocserv!200

commit ce1911ffca64d7404cf2dd28eae83fa3ff603154
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 28 21:35:49 2020 +0200

    .gitlab-ci.yml: added auto-triage rules
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 34eab81339a518a97e6cb8f9e3879c2441508609
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Jul 27 11:02:31 2020 -0600

    Resolves: #326
    
    Pass the hostname to ocserv-main after receiving the connect request.
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 68eccaedf7f6474ed16f473daafc68d3aeef03d3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 28 20:12:42 2020 +0200

    sample.config: documented host-update-script and added unit test
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2b4251eba74e968aa2c6e39aeb39a9245adab5ff
Merge: fc842a8d 94603678
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 27 20:56:22 2020 +0000

    Merge branch 'tmp-banner2' into 'master'
    
    Added the config option of a pre-login banner
    
    Closes #313
    
    See merge request openconnect/ocserv!199

commit 9460367822810d43599071f1f57826518ca0d799
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 27 09:55:36 2020 +0200

    Added the config option of a pre-login banner
    
    Resolves: #313
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fc842a8d5dc10df745b60b90a1c05e97e29d0224
Merge: f100dcfa 8aa39b01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 26 11:11:08 2020 +0000

    Merge branch 'tmp-disconnect-user2' into 'master'
    
    Race free disconnection of a connected user with occtl
    
    Closes #59
    
    See merge request openconnect/ocserv!198

commit 8aa39b01069dbddebc841a607325f1b2d2cce023
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 20 22:27:18 2020 +0200

    Improved user disconnection to avoid race conditions
    
    Previously when we were disconnecting a user there were few seconds
    after which the cookie was still valid, so a reconnect would succeed
    by the same user. This change ensures that a disconnected (via occtl)
    user cannot re-use the same cookie to connect. That enables a safe
    user removal from the authentication database, and from run-time.
    
    Resolves: #59
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f100dcfa9a26cae97c6b921e5c9992df1a056edd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 20 22:13:48 2020 +0200

    occtl: corrected error code on failed commands
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e677c8b5366eee278e13fab74b2c47b35d253ae7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 20 22:07:18 2020 +0200

    common: added textual description to all messages
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d0a12f6d8e2ce99b15186a3856efffa9cc22fbe5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 25 00:08:57 2020 +0200

    .gitlab-ci.yml: coverity: use centos8 image
    
    This addresses incompatibilities with Fedora32.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0811d7d46b483ee0e17a3cb3d65684ddf7e14d3f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 23 08:59:24 2020 +0200

    coverity: enable OIDC and latency stats in coverity run
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a1f5fbf20652b1ff4513adc1ee51010003fe4889
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 23 08:57:46 2020 +0200

    .gitlab-ci.yml: reduce unnecessary runs in schedules
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3ebd9ecc3eb72e217ea62f7199e3c2c305be99ce
Merge: bf8b22f3 e75e8d24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 22 20:50:57 2020 +0000

    Merge branch 'tmp-nobody' into 'master'
    
    README.md/sample.config: underline the need for a dedicated user
    
    See merge request openconnect/ocserv!196

commit e75e8d2471814c47ba63d282194ab1e6c68d517d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 20 19:48:11 2020 +0200

    README.md/sample.config: underline the need for a dedicated user
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit bf8b22f3b9abe33bc91568c7bc90c0369f1176ee
Merge: f53d5e13 0d1ae8a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 18 20:22:45 2020 +0000

    Merge branch 'tmp-add-ubuntu20' into 'master'
    
    .gitlab-ci.yml: updated ubuntu build to 20.04
    
    See merge request openconnect/ocserv!195

commit 0d1ae8a53d80471141c5732ebc888d70b047646a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 18 21:30:07 2020 +0200

    .gitlab-ci.yml: updated ubuntu build to 20.04
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f53d5e1395ec244d5ba1ebec2dbabf45b3313957
Merge: 8d4238db 5b8f3320
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 18 19:27:10 2020 +0000

    Merge branch 'tmp-disable-tls13' into 'master'
    
    ocserv: disable TLS1.3 when cisco client compatibility is requested
    
    Closes #318
    
    See merge request openconnect/ocserv!194

commit 8d4238db68df1549ddefda9aaf302a3186feab0d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 18 21:19:36 2020 +0200

    README.md: added missing components
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5b8f3320d3c89d1d43dc0897da4fca6c43d1273c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 20:24:00 2020 +0200

    ocserv: disable TLS1.3 when cisco client compatibility is requested
    
    There are certain anyconnect clients which seem to fail connecting using
    TLS1.3.
    
    Resolves: #318
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 5882c9468c61e3658aa63737463a3e3ef49310f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 15 09:04:14 2020 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit d4824cc1fcb9df2703810e3a875cef42ba8545f0
Merge: a060acf9 1bb2d880
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 15 07:02:32 2020 +0000

    Merge branch 'namespace' into 'master'
    
    add basic namespace support for listen address
    
    See merge request openconnect/ocserv!189

commit 1bb2d8800fa061cae54e6dc50d4c694562e592fb
Author: William Dauchy <w.dauchy@criteo.com>
Date:   Tue Jul 14 12:15:46 2020 +0200

    tests, ns: use namespace option for all ip commands
    
    simplifies use of of `ip netns exec` when it is about ip commands
    
    Signed-off-by: William Dauchy <w.dauchy@criteo.com>

commit f4c7d41d14668adfd856ee09851defe42b500e05
Author: William Dauchy <w.dauchy@criteo.com>
Date:   Sat Jun 27 18:56:56 2020 +0200

    add basic namespace support for listen address
    
    - this patch adds `listen-netns` parameter
    - when set the listening socket will be created in the given namespace
    
    it allows to properly segregate your traffic:
    - do the backend traffic in the root namespace
    - receive the VIP traffic in a given namespace
    
    All this patch is widely inspired by haproxy implementation which allows
    to bind each IP in a given namespace.
    
    Resolves: #316
    
    Signed-off-by: William Dauchy <w.dauchy@criteo.com>

commit a060acf9e3748316ce9b766bc602d9799b313b18
Merge: 6533299b 2aaa287a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 11:40:50 2020 +0000

    Merge branch 'tmp-alpine' into 'master'
    
    .gitlab-ci.yml: added alpine linux CI run
    
    See merge request openconnect/ocserv!193

commit 2aaa287a4c768ebf97de8bb3e0cb3e04ddf02b7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 13:00:20 2020 +0200

    icmp-ping: removed unnecessary assignments
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit dc042ec32740c174756a4308df8631fe6185fcfc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 12:55:43 2020 +0200

    occtl: fixed issues with unused variables
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 541bf6f137380130e91fd3ef14e785aebb9e0ff2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 11:53:05 2020 +0200

    .gitlab-ci.yml: added alpine linux CI run
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 4ba30c87e5e702cc4c5fa66cfc3aa1e58aa291f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 12:24:18 2020 +0200

    worker-privs: use signal.h instead of sys/signal.h
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6533299b78b3f52ba3c4ad36436d2ab6ad3390f3
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Jun 25 10:35:19 2020 -0600

    Improve accept rate limitation and make it conditional on queue depth.
    
    Resolves: #310
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit fba372ba0a9c98ad9cd63b03b8c4753200a536a8
Merge: 9ae0c983 770c4202
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 11 09:33:36 2020 +0000

    Merge branch 'issue317' into 'master'
    
    Check for presence of /dev/net/tun device in tests that need them.
    
    See merge request openconnect/ocserv!192

commit 770c4202f56e479fa9cbe0e39335e6eefb9c2a33
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Jul 1 14:33:56 2020 -0600

    Provide option to suppress tests that depend on /dev/net/tun
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 9ae0c9831d346061bc801b665473028b46b0d685
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 18:25:53 2020 +0200

    NEWS: doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 9210852bb5e8c78c29ba4a89a7a6428ccd95c31c
Merge: baa9ae84 be17dac1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 16:21:05 2020 +0000

    Merge branch '#312' into 'master'
    
    OpenBSD lacks support for procfs
    
    See merge request openconnect/ocserv!184

commit be17dac16f924b469daa53ade673f4af3b9581bc
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Jun 17 10:36:13 2020 -0600

    OpenBSD lacks support for procfs
    
    Based on
    https://gitlab.com/Alan_Jowett/ocserv/-/commit/60641282df1462dd94a12a9832200bb5e6849ec4.
    
    Snapshot of config files are used to ensure that ocserv-sm and
    ocserv-worker remain in sync. These snapshots are anonymous files that
    are passed via a file descriptor. A worker creates a new file
    description and file descriptor by using open(2) on /proc/self/fd.
    Unfortunately OpenBSD lacks support for procfs.
    
    Instead of using snapshot of config files let workers use the config
    files.
    
    While here add a note to README.md about this limitation, and add a CI
    run (from @nmav).
    
    Signed-off-by: Björn Ketelaars <bjorn.ketelaars@hydroxide.nl>

commit baa9ae84db10a14527323f207a619d02395b4845
Merge: 3065b5c5 ce89e0f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 30 20:36:28 2020 +0000

    Merge branch 'tmp-coverity-updates' into 'master'
    
    Fixes related to coverity report
    
    See merge request openconnect/ocserv!190

commit ce89e0f582b2fc52d2954609da0a65414b89bf60
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 08:14:07 2020 +0200

    Ensure that unchecked function calls are for a reason and fix otherwise
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0307f49a04bf3d2461fed8209da999ea73c3dce6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 18:01:28 2020 +0200

    config: corrected typo in vhost assignment resulting to dead code
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d0857bd955c03ec03a7471ce2bfba36cdc99c7c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 08:02:43 2020 +0200

    session_open: improved check for null config
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 99fd5410bf4c1b0fb633959577a1ccbb6f23af29
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 08:00:20 2020 +0200

    setsockopt: always check its return value
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit cc8d4a90a8cac3ecbe0198d8753563aa496f1ab6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 07:52:48 2020 +0200

    config: removed unnecessary null check
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3065b5c54ede45bdfbb16789e4accf4c57ed337a
Merge: e4f5c933 4204d8a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 30 19:43:27 2020 +0000

    Merge branch 'issue315' into 'master'
    
    Filter out sensitive headers when logging
    
    Closes #315
    
    See merge request openconnect/ocserv!187

commit 4204d8a5c0eb8455054b88d460f97cdb150da065
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Jun 26 17:18:55 2020 -0600

    Resolves: #315
    
    Filter out sensitive headers when logging
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit e4f5c93381edad6b9ac9c5983e87b578d46fb00e
Merge: 7a03b9c6 fc5a1580
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 30 11:47:01 2020 +0000

    Merge branch 'tmp-tests-stability' into 'master'
    
    tests: improve stability of certain tests
    
    See merge request openconnect/ocserv!191

commit fc5a1580e0ff286ab513cb0ce6881ef96baba722
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 21:33:29 2020 +0200

    .gitlab-ci.yml: updated for new spec file
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6f3b20f17b3d14bf825f8f4add9f9a55bae6d9f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 20:39:15 2020 +0200

    radius-config: stability updates
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 95fb96ee323084085a488c78bf8d2d6ea01a1b05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 20:05:50 2020 +0200

    test-udp-listen-host: added some reliability improvements
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7a03b9c6a00f5e7e1dd965b7678b623c9e230534
Merge: 8457249a 63866a77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 28 16:05:34 2020 +0000

    Merge branch 'tmp-syslog-fix' into 'master'
    
    syslog: LOG_AUTH is not a priority
    
    See merge request openconnect/ocserv!188

commit 63866a7770e9733fcfa3ace30e50957a2eb1b397
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 27 15:35:39 2020 +0200

    syslog: LOG_AUTH is not a priority
    
    The first argument of syslog() is a priority indicator.
    The LOG_AUTH which was being provided is a facility indicator.
    Report the previously LOG_AUTH issues with the LOG_NOTICE
    priority.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8457249a8ed2c7958d292a042f5bf13d5734940d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 24 20:21:40 2020 +0200

    README.md: removed badges and added section for supported platforms
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1da9c1b3b01e7410142c3ae3e3b7df805da983d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 16 20:32:53 2020 +0200

    .gitlab-ci.yml: fix rpm generation
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 56794e4b0c0357000ff5b537922b383ae1e43355
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 16 19:37:45 2020 +0200

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit dd648772a636debd31c197d36b6f1cb66bfe369b
Merge: 62cd7875 fdb80bb2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 11 21:08:34 2020 +0000

    Merge branch 'tmp-311' into 'master'
    
    tests: detect openconnect's path and fail if not found
    
    Closes #311
    
    See merge request openconnect/ocserv!182

commit fdb80bb23e27b512a9101c7e7a99202c2063787b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 11 22:26:30 2020 +0200

    tests: detect openconnect's path and fail if not found
    
    Resolves: #311
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 62cd78753601e68fa58a444a6b4782820bac162a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 8 10:41:16 2020 +0200

    Log X-DTLS-App-ID and X-DTLS-Session-ID when sent
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f25875c758b4c8254d4838c7f8aa0a7effaaa08c
Merge: 59bdd070 1dacbb13
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 2 10:13:36 2020 +0000

    Merge branch 'tmp-268' into 'master'
    
    tests: added test cases for no-route in group and main configuration
    
    See merge request openconnect/ocserv!181

commit 1dacbb13a7fff0fd941e1de61900df7320189740
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 28 22:55:26 2020 +0200

    tests: added test cases for no-route in group and main configuration
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 59bdd070b6b9f893d3f552b6a8895a5f4eb014da
Merge: efa7a615 722e030e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 27 08:42:12 2020 +0000

    Merge branch 'latency_stats' into 'master'
    
    Add reporting of RX latency
    
    Closes #258
    
    See merge request openconnect/ocserv!145

commit 722e030e58169c76ad20e792ed6949b7d111fd2b
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Feb 28 15:49:47 2020 -0700

    Add reporting of RX latency
    
    Resolve: #258
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit efa7a6153864717bfbca245b48bdffaddfc7c00c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 12:29:13 2020 +0200

    addressed resource leaks pointed by coverity
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7b294e0b0e5b82441eec1d656c7707c92c82d95b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 12:25:03 2020 +0200

    snapshot_create: removed dead code
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0b146e522366982018a5b2988867f1011ecb8afc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 12:23:52 2020 +0200

    addressed several issues found by coverity
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2df4eb71fe3bcb7c1e3337f7785c72796ec29086
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 25 08:37:06 2020 +0200

    NEWS: mention ocserv-worker binary
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit ce66485ee6eb50fe30b9187b60c818d8353dd337
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Sun Apr 19 21:39:18 2020 -0600

    Uses fork/exec to limit memory footprint of ocserv-worker processes
    
    Capture all the required worker process state in a protobuf and
    pass to worker via env. Snapshot all config files to ensure ocserv-sm
    and ocserv-worker remain in sync. Split ocserv-worker functionality
    into it's own executable with minimal dependencies.
    
    Resolves: #285
    
    Signed-off-by: Alan Jowett alanjo@microsoft.com

commit fb4116b2d728f85e2d4bc1395a972c80e1f7e35c
Merge: 70f1fb27 3a8e280a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 25 06:22:35 2020 +0000

    Merge branch 'tmp-267-fix' into 'master'
    
    translate labels to groups when provided by client
    
    Closes #267
    
    See merge request openconnect/ocserv!180

commit 3a8e280a92cea9b5ead4f2bec63d234c6e795430
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 21 22:08:03 2020 +0200

    translate labels to groups when provided by client
    
    This addresses issues with anyconnect clients which send back the descriptive labels.
    
    Resolves #267
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 70f1fb27685f7f354759e80a1f5286822334f370
Merge: d94655fd 7f7bb95f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 16 18:15:45 2020 +0000

    Merge branch 'tmp-rpmgen-fix' into 'master'
    
    .gitlab-ci.yml: fix rpm generation testing when version matches
    
    See merge request openconnect/ocserv!179

commit 7f7bb95f8160b7a5b2c1ac1a62e877689a405f2f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 16 11:53:35 2020 +0200

    .gitlab-ci.yml: fix rpm generation testing when version matches
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit d94655fd2bf93e6113b555333cf20344a697f9bf
Merge: 10e3136a a227d6d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 21:50:11 2020 +0000

    Merge branch 'tmp-176' into 'master'
    
    tun: Bring up interface before setting IPv6 route on Linux
    
    Closes #301
    
    See merge request openconnect/ocserv!178

commit a227d6d66d645186b68617d8df53a8652279e835
Author: Michael Brown <mbrown@fensystems.co.uk>
Date:   Sun May 10 13:11:23 2020 +0100

    tun: Bring up interface before setting IPv6 route on Linux
    
    Linux kernel commit 955ec4c ("net/ipv6: Do not allow route add with a
    device that is down") rejects attempts to install an IPv6 route on an
    interface that is not yet up.  This commit is first included in kernel
    4.16.
    
    The current code in os_set_ipv6_addr brings up the interface only
    after attempting to install the IPv6 route.  On kernel 4.16 or later,
    this fails with the error "Error setting route to remote IPv6: Network
    is down".
    
    Fix by switching the order of code blocks to bring the interface up
    before attempting to configure the route.
    
    Resolves: #301
    Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>

commit 03b05526c381788c66125f2e9148586095dc5450
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 12 22:33:40 2020 +0200

    tests: check whether ipv6 interface is up
    
    Relates: #301
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 10e3136a43f2cf72b8c2a6705a69d0e96a92a378
Merge: 4e00087b f9d8b3af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 19:15:30 2020 +0000

    Merge branch 'tmp-eperm' into 'master'
    
    worker: allow filtered calls to fail with signal
    
    See merge request openconnect/ocserv!175

commit f9d8b3afc8a9aa3be7427c685d0caaaa36bdce78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 21:07:47 2020 +0200

    worker: enable all system calls used by worker
    
    This allows the set of non-blocking sockets in worker processes.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 350250ea82d8268179fc597336f9967bde55be5c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 19:51:53 2020 +0200

    worker: allow filtered calls to fail with a trap
    
    This adds a fedora CI run to with filtered calls failing
    with a signal in order to detect missing syscalls from our filters.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 4e00087b57e1a8adc589f8b4dc4361dd481cab44
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 2 06:10:08 2020 +0200

    .gitlab-ci.yml: the freebsd system became unavailable
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 783c2409980095d25cdd17dc8cc5df231f37b707
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 2 06:08:38 2020 +0200

    ocsigaltstack: posix_memaligns does not return negative on failure
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 7d4190a0a30b7a874a2285b31fe2f4e6ca682401
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 2 06:03:51 2020 +0200

    seccomp: fail with ENOSYS instead of EPERM
    
    When new calls are introduced in the kernel a libc may
    chose to move to them. Having our filter return ENOSYS
    will signal libc to fallback to the previous call which
    exists in the filter.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 75470d99c30929ce48cd2ebf083052f70f6624fa
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Apr 27 09:25:46 2020 -0600

    When setting up the DTLS session, close the previous DTLS session if it exists.
    
    Resolves: #293
    
    Signed-off-by: Alan Jowett alanjo@microsoft.com

commit d2def367c3177f856fe16daa2f5c68d6ad13f67e
Merge: df5ea8bd 7e505278
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 19:56:56 2020 +0000

    Merge branch 'issue291' into 'master'
    
    Remove unused code when --disable-compression is set.
    
    Closes #291
    
    See merge request openconnect/ocserv!170

commit 7e5052782efa0efee5f149c6c5c3968b269111eb
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Sat Apr 25 15:53:31 2020 -0600

    Remove unused code when --disable-compression is set.
    Resolves: #291
    
    Singed-off-by: Alan Jowett <alanjo@microsoft.com>

commit df5ea8bd3da334edb63cbd864253b5adf86a820f
Merge: c407ef9c 8cac05da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 11:35:58 2020 +0000

    Merge branch 'isssue290' into 'master'
    
    Remove unused code when --disable-anyconnect-compat is set.
    
    Closes #290
    
    See merge request openconnect/ocserv!169

commit 8cac05dac2615ac1e1819b241b621bc05d0bdcf6
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Sat Apr 25 15:37:50 2020 -0600

    Remove unused code when --disable-anyconnect-compat is set.
    
    Resolves: #290
    
    Signed-off-by: Alan Jowett alanjo@microsoft.com

commit c407ef9cc502f949590ddbac4acd2968f18ba75c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 22 21:35:56 2020 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 626ca7f377d04b504bb0ab9b195133548193a225
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 22 13:01:43 2020 +0200

    configure: fixed enable-oidc-auth help message
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit b63ecb771710bd2b1e52becb7d91d74a8c2553d2
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Apr 10 13:16:12 2020 -0600

    Kill ocserv workers before ocserv-main or ocserv-secmod
    
    On systems that are running low on memory, the ocserv worker processes
    should be killed before the ocserv-main or ocserv-sm process.
    
    To achieve this, we set /proc/self/oom_score_adj to 1000
    
    Resolves: #283
    
    Signed-off-by: Alan TG Jowett <alan.jowett@microsoft.com>

commit deef4603a08dc4ea418adc4783ef22f5c377bc39
Merge: e79348a1 9d9907ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 22 10:56:55 2020 +0000

    Merge branch 'issue284' into 'master'
    
    Attempt to download updated JWKs if the client presents an unknown key.
    
    Closes #284
    
    See merge request openconnect/ocserv!168

commit 9d9907ef5e919744b93c5478b591cc46930b619d
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Tue Apr 14 10:10:19 2020 -0600

    Attempt to download updated JWKs if the client presents an unknown key.
    Limit the download of keys to every 900s.
    
    Resolves: #284
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit e79348a15442dffd3622613967e450c177c1ace9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 17 22:14:58 2020 +0200

    corrected typo
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit df3b925524dd002178016a8cee61bcbb500d5888
Merge: c702227b a63164e1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 11 17:31:22 2020 +0000

    Merge branch 'tmp-disable-nagle' into 'master'
    
    Disable TCP queuing on the TLS port.
    
    See merge request openconnect/ocserv!165

commit c702227b3b9ce41008c3ee706dfbe6c164faa2c2
Merge: 8cb14b7e fd2bd42c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 10 21:44:55 2020 +0000

    Merge branch 'tmp-enable-kerberos' into 'master'
    
    Fix kerberos tests
    
    See merge request openconnect/ocserv!149

commit fd2bd42cb2e43dae4c48748def03f5a75b6b001c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 18:40:39 2020 +0100

    .gitlab-ci.yml: corrected kerberos tests
    
    This also corrects the kerberos test script environment
    to enable running the test.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a63164e182e3d438da358032d2ad566093a88001
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 10 21:10:17 2020 +0200

    Disable TCP queuing on the TLS port.
    
    This makes the CSTP connection more interactive for clients that
    cannot run over UDP.
    
    See openconnect#122 for discussion.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8cb14b7ebd32177c857c255db8e7916a69c0cd2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 9 23:07:19 2020 +0200

    released 1.0.1
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 304dc8af2dd60bdbf2b74c01709435234672f441
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 9 23:05:23 2020 +0200

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 33f225108af2211b4129c14d68c143c146d32e6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 9 22:56:40 2020 +0200

    config: removed reference of user-profile in group config
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b24c427b157d3b555ff422d6cbcdcec8bae98876
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 9 22:51:49 2020 +0200

    config: document that user-profile cannot be set per user
    
    Relates: #270
    Resolves: #179
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 87bee0b7cb498893eb9bb760e50bee5ac04215d0
Merge: 2c93618c fca41e2f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 9 12:30:54 2020 +0000

    Merge branch 'tmp-fix-anyconnect-disconnect' into 'master'
    
    Distinguish the bye packet interpretation
    
    Closes #281
    
    See merge request openconnect/ocserv!162

commit fca41e2fa294ac53770b240ee0ed663b6632cbb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 6 14:21:34 2020 +0200

    Distinguish the bye packet interpretation
    
    In openconnect client the BYE packet indicates an explicit
    user disconnect by sending 0x0b as payload. In anyconnect clients it
    may indicate an intention to reconnect (e.g., because network was changed).
    We introduce a check for 0x0b to identify the user disconnect and
    add debugging output for other disconnect reasons.
    
    Relates: #281
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 2c93618c903c16272a1d316725f5a0ee16a69b4d
Merge: b6d879d1 e9251a66
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 8 18:15:13 2020 +0000

    Merge branch 'tmp-tests-updates' into 'master'
    
    Minor updates in tests
    
    See merge request openconnect/ocserv!164

commit e9251a66e88448d0edff6757604feeca7f3aec13
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 6 16:48:03 2020 +0200

    tests: test-max-same-1/test-multi-cookie: use update_config
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 9246431590f16f4df47b62921582c9b3e571baac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 5 13:11:16 2020 +0200

    tests: radius tests are not run when radius is disabled
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 689843e87490956641eb4f2cecc0cc9765e79a38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 5 13:11:16 2020 +0200

    tests: separate resources in haproxy-connect in test-udp-listen-host
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b6d879d18f3249d5f63dd5ec2560530ba01612d3
Merge: 2291a373 1e657a61
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 6 14:58:52 2020 +0000

    Merge branch 'tmp-san-update' into 'master'
    
    Cleanup get_cert_names()
    
    See merge request openconnect/ocserv!163

commit 1e657a618a62342c365dcd3b5bcf2913df65d0d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 6 16:21:01 2020 +0200

    Cleanup get_cert_names()
    
    Ensure that we do not recognize unsupported names as
    supported.
    
    Relates: #822
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 2291a37336621e8cc107c6bb2069c5c4c8f4be21
Merge: 82dc37df fe99e77c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 6 12:26:20 2020 +0000

    Merge branch 'tmp-fix-vpnc-script' into 'master'
    
    vpnc-script: added attempt-reconnect
    
    See merge request openconnect/ocserv!161

commit fe99e77ccb9804de6687782292e6e451c39f4aad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 5 13:29:44 2020 +0200

    vpnc-script: added attempt-reconnect
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 82dc37df0ce8739ce5d188eabf14818a23030bbe
Merge: 79cb3cb7 2d9bc11f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 4 13:22:01 2020 +0000

    Merge branch 'tmp-fix-banned-printing' into 'master'
    
    occtl: list actual banned entries
    
    Closes #272
    
    See merge request openconnect/ocserv!160

commit 2d9bc11f59f55d0e4619f82db6860d5e7d182bcc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:56:57 2020 +0200

    occtl: list actual banned entries
    
    This fixes the ban entries listing from printing all the items in
    the database, to all the items that are actually banned from
    connecting.
    
    Resolves: #272
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 79cb3cb7ff9bd2b19eeb244c7ad49f7d7089b969
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:45:33 2020 +0200

    occtl: avoid division by zero
    
    Resolves: #278
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit c34b84e0d10fdece8829af48780a7c4b0c991f1c
Merge: f65eb9f3 aa9c401c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 11:39:28 2020 +0000

    Merge branch 'tmp-ignore-broken-dtls' into 'master'
    
    Prevent clients with a broken GnuTLS version from connecting using DTLS
    
    Closes #277
    
    See merge request openconnect/ocserv!157

commit aa9c401cacfaceb24009763942da94d79d43735b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 20:04:14 2020 +0200

    Prevent clients with a broken GnuTLS version from connecting using DTLS
    
    That prevents clients that send an all-zero DTLS client hello from being
    able to establish a connection.
    
    That also introduces the OCSERV_ALLOW_BROKEN_CLIENTS environment variable
    which when set to 1 it allows broken clients to connect. This is used
    mainly to allow test cases to pass to existing vulnerable systems in our
    CI.
    
    Resolves: #277
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f65eb9f318cef59bc2589a43453dc4d4371460d7
Merge: 275ab571 d551b8ba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 2 13:52:58 2020 +0000

    Merge branch 'tmp-fix-cstp-send' into 'master'
    
    cstp_send_file: fixed handling of syscall interrupts
    
    See merge request openconnect/ocserv!159

commit d551b8badcb934f19f0abb1b5a74ece14d28c670
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 2 15:04:29 2020 +0200

    cstp_send_file: fixed handling of syscall interrupts
    
    This also increases the buffer size.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 275ab571b3a52bd725836d22062eefa91e5bffaa
Merge: ced7ba9f 899a1323
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 1 11:31:01 2020 +0000

    Merge branch 'master' into 'master'
    
    Fix hmac hash problem for time_t and unit64_t, they may have different size in 32bit/64bit systems
    
    See merge request openconnect/ocserv!156

commit 899a1323a9106210fd462ccf72677a117b8922ce
Author: sunnyqeen <sunnyqeen@gmail.com>
Date:   Tue Mar 31 09:58:09 2020 +0000

    Fix hmac hash problem for time_t and unit64_t, they may have different size in 32bit/64bit systems

commit ced7ba9fd3e46f19770885f963ea1f62c2699f36
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 27 08:24:15 2020 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0e6a791a40ff92d6112dc94b61767687c56edfad
Author: Stefan Bühler <stbuehler@web.de>
Date:   Wed Mar 25 14:45:27 2020 +0100

    occtl show status: produce machine-readable output for json
    
    This adds additional variables to include machine-readable output
    in json form.
    
    Resolves: #271
    
    Signed-off-by: Stefan Bühler <stbuehler@web.de>

commit 07948320ad08ea812d3926122bbbe9715b77aa6c
Merge: c1428689 f19c3f7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 25 09:24:39 2020 +0000

    Merge branch 'fix_compilation_warnings_in_pcl' into 'master'
    
    Fixed minor compilation warnings
    
    See merge request openconnect/ocserv!153

commit f19c3f7d230bd2d5b348e9c64a60f908ad47f00d
Author: Pierre Souchay <pierre@souchay.net>
Date:   Mon Mar 23 18:20:08 2020 +0100

    Fixed minor compilation warnings
    
    Warnings outputed by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0
    
    * pcl/pcl.c:385:17: warning: unused variable ‘r’ [-Wunused-variable]
    
    * Use pre-compilation directive to avoid defining unused function when not needed:
    
      * pcl/pcl.c:62:12: warning: ‘co_ctx_stackdir’ defined but not used [-Wunused-function]
        static int co_ctx_stackdir(void)
    
      * pcl/pcl.c:54:12: warning: ‘co_ctx_sdir’ defined but not used [-Wunused-function]
        static int co_ctx_sdir(unsigned long psp)
    
    Signed-off-by: Pierre Souchay <pierre@souchay.net>

commit c142868909490e65acea22add83ff4e6237fb63a
Merge: 3382277e 23430d11
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 23 07:16:44 2020 +0000

    Merge branch 'fix-ban-log' into 'master'
    
    ban log: only log once when adding, not when increasing score when already banned
    
    See merge request openconnect/ocserv!152

commit 23430d11185a3404b1009a940776e9071803adfb
Author: Stefan Bühler <stbuehler@web.de>
Date:   Sun Mar 22 12:11:05 2020 +0100

    ban log: only log once when adding, not when increasing score when already banned
    
    Signed-off-by: Stefan Bühler <stbuehler@web.de>

commit 3382277e978f4b6c2fef9bbe50adfad29c94af8b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 20 13:58:25 2020 +0100

    released 1.0.0
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8ff144992cc2170bcc1c4646ceaed7969e4b146c
Merge: e97022e0 cf0bca2c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 20 12:40:08 2020 +0000

    Merge branch 'tmp-fix-nas-port' into 'master'
    
    radius: do not include NAS-Port via rc_aaa()
    
    Closes #269
    
    See merge request openconnect/ocserv!150

commit cf0bca2caeebc9d3090ea5344d876ffad3671047
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 19 21:26:34 2020 +0100

    radius: do not include NAS-Port via rc_aaa()
    
    We were previously asking rc_aaa() to include NAS-Port pair to
    the request which has undesirable results.
    
    Resolves: #269
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit e97022e01d009f5ca227d00eae9c24fa8d11764d
Merge: 881953c2 88059e43
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 22:33:42 2020 +0000

    Merge branch 'tmp-detect-ios' into 'master'
    
    Provide a special IPv6 route for iOS
    
    Closes #254
    
    See merge request openconnect/ocserv!146

commit 88059e43ac23594849b4c073c7cc443b480b2ddc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 22:55:26 2020 +0100

    .gitlab-ci.yml: no longer test on Centos6
    
    This is a very old platform with old openconnect available in EPEL.
    We do not need to keep compatibility with it.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3544e3ee2b1a6aee592be11acdb09483ba5b637d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 21:38:42 2020 +0100

    tests: verify environment under Apple clients
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 3475e2b0fc08719229dad846396f8a1df4a894db
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 11 21:20:44 2020 +0100

    Provide a special IPv6 route for iOS
    
    When IPv6 is requested by iphone we provide a special route that is
    necessary by these clients to use IPv6.
    
    Resolves: #254
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 65a7fcab67601921dd08d7f4dc5ca265968cc193
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 11 21:56:04 2020 +0100

    tests: remove option pointing to non-existant script
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 881953c2931c3c1f12d6d734c12daf550b4e8d56
Merge: af11e05f 5e817d3d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 19:40:32 2020 +0000

    Merge branch 'tmp-test-psk-negotiate' into 'master'
    
    Fix PSK-NEGOTIATE ciphers
    
    Closes #262
    
    See merge request openconnect/ocserv!147

commit af11e05ff7bf822103b3c64c3934694271127a22
Merge: 780fbb89 c4759fd3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 19:26:18 2020 +0000

    Merge branch 'tmp-werror' into 'master'
    
    Introduce a -Werror build
    
    See merge request openconnect/ocserv!148

commit c4759fd3344f72b7d578f02674890813485bbd21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 17:26:21 2020 +0100

    .gitlab-ci.yml: introduce run with -Werror
    
    This allows catching warnings that could have slipped in.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f14385e1b447bd6541d79deaddd4f1a86d9ba7fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 19:32:52 2020 +0100

    worker-proxyproto: corrected type of data_size to avoid warnings in comparisons
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fb07fcca87b74d619b7ec486ff41f368185dae82
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 19:26:29 2020 +0100

    vpn.h: made sign of max_ban_score more appropriate
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit bcc07c935e60048eab4983c0b1a1ebb8a6734366
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 19:20:42 2020 +0100

    tests: improved ipv6-prefix
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 449e608f86f1b412bfdc97129cdfc478799da59d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 18:36:19 2020 +0100

    str_replace_str: ensure types match for comparison
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit bf8616cbca32dd5f55b3d100f5266b7ba8043c7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 17:34:45 2020 +0100

    tests: generate_oidc_test_data: fixed used of strncat
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 370cc7cdf7010a845020c14e1bcfece9d7c923a2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 17:25:56 2020 +0100

    disable_system_calls: ensure gettimeofday is not a macro
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6b84d7e6818a08e890da718e11b604a1a7cc0e21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 17:22:27 2020 +0100

    eliminate warnings when used for unit testing tests
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 13b92d3b11866e37b16556bcea0f724e874f98ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 17:11:51 2020 +0100

    Fix crypt.h detection
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5e817d3d6067140bae5bd511ae05bfc3d30f6ca6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 16:22:04 2020 +0100

    tests: added test to test match-tls-dtls-ciphers config option
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b0c885ca6353a17342a8e1a35a787b3fbadfb4e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 16:13:46 2020 +0100

    ocserv: fix PSK negotiation
    
    This fixes a regression which prevented DTLS-PSK (or PSK-NEGOTIATE)
    from being negotiated.
    
    Resolves: #262
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5097604d4dbec887144c63d6b41c6384a15e9fb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 12 13:18:31 2020 +0100

    tests: added test for PSK-NEGOTIATE ciphers
    
    Relates: #262
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 780fbb89a000b20260d81040ef8deea91e37a696
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Mar 2 12:12:43 2020 -0700

    Script needs access to additional client metadata.
    
    Export more information to the script, including client device platform,
    type and user agent.
    
    Resolves: #256
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 9a41a27b1859251fa36a9005fab9ab4c1c4b28c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 9 21:51:06 2020 +0100

    NEWS: documented bearer token support
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit b43e782b121555af4fcd000dee4ceb40865dbc0c
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Mon Feb 10 15:32:13 2020 -0700

    Add support for RFC6750 bearer tokens to ocserv
    
    This permits the validation of OpenID Connect auth tokens OpenID
    Connect is an OAuth 2.0 protocol used to identify a resource owner
    (VPN client end-user) to a resource server (VPN server) intermediated
    by an Authorization server.
    
    Resolves: #240
    
    Signed-off-by: Alan TG Jowett <alan.jowett@microsoft.com>

commit a6c2d36952ff946f1a93f8dbf43fe1551d5b3d26
Merge: 31719b2c 6d3b295b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 5 19:26:32 2020 +0000

    Merge branch 'coverity_scan_defects' into 'master'
    
    Fix issues flag by Coverity:
    
    See merge request openconnect/ocserv!144

commit 6d3b295b1259730c342ca22c783557e9fb73391d
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Wed Mar 4 09:20:01 2020 -0700

    Fix issues flag by Coverity:
    288530 Dereference after null check
    288529 Array compared against 0
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 31719b2cec1397d051013bbc657e3cf3e8ca1df5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 4 12:14:54 2020 +0100

    main: no need to check nullity on an array
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e70573d9fcefba2f8437029105befe115654ef3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 4 12:14:29 2020 +0100

    new_client_entry: prevent null pointer dereference
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 85912c705e6c772a918c06d3fd81697f8f34faf8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 29 19:43:54 2020 +0100

    Fixed incorrect pointer arithmetic on configuration error
    
    This addresses a crash on incorrect configuration.
    Reported by Zero King <l2dy@icloud.com>
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 4aeb5ea52e15a2167ab6856bae6ba37e50bf952a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 28 22:47:42 2020 +0100

    NEWS: doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 31104c4de90664d4dca9354d4f35c96cb336418b
Merge: 3449eefd bfa44237
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 28 21:41:39 2020 +0000

    Merge branch 'issue251' into 'master'
    
    ocserv-worker that fails to complete it's authentication should be killed
    
    Closes #251
    
    See merge request openconnect/ocserv!141

commit 3449eefdc3809ad9a767006d27cdd5ba0c92d7f8
Merge: e0e3cc9c c9662282
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 28 20:16:47 2020 +0000

    Merge branch 'issue252' into 'master'
    
    Use an HMAC to verify the local and remote IP presented during SEC_AUTH_INIT phase.
    
    Closes #252
    
    See merge request openconnect/ocserv!139

commit c9662282a1477116034060a589f20fc55ea115a4
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Feb 21 12:44:48 2020 -0700

    Prevent tampering of our_ip, ip, session_start_time in SEC_AUTH_INIT from ocserv-worker to ocserv->sm and reject replay of auth_init_messages from old sessions.
    
    Resolves: #252
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit e0e3cc9c977f45a4e64b97fb4fc8acd28107cd02
Merge: 6558653c 65189651
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 27 20:15:04 2020 +0000

    Merge branch 'issue245' into 'master'
    
    CMD_BAN_IP should not use the IP address provided by worker process as it is not verified.
    
    Closes #245
    
    See merge request openconnect/ocserv!140

commit 6518965129462dbfd31518dbe702ec3521e23b02
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Feb 27 09:33:56 2020 -0700

    CMD_BAN_IP should not use the IP address provided by worker process as it is not verified.
    
    Resolves: #245
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit bfa442379dc7defc6d04e2ac0e66caa7cc5b07b8
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Thu Feb 27 10:48:26 2020 -0700

    ocserv-worker that fails to complete it's authentication should be killed
    
    Resolves: #251
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 6558653c4be7d34e8cb142b9ae239d99c427258e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 26 12:47:56 2020 +0100

    .gitlab-ci.yml: include the right build in schedules [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 85108c75981a9241143d6d40873374c70021dcc8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 26 12:42:50 2020 +0100

    .gitlab-ci.yml: corrected 'only' use in coverity build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 12c69171a8c086aa3d88d8bf8706fd52027b7e39
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 25 08:25:24 2020 +0100

    steal_ip_leases: reorg to avoid null pointer dereference
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit de3d3cb7869f562a19552091cfd4781b776cb7bd
Merge: 91de6c88 cc651b9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 24 21:32:59 2020 +0000

    Merge branch 'tmp-fix231' into 'master'
    
    Ensure scripts have all the information on all disconnection types
    
    Closes #231
    
    See merge request openconnect/ocserv!137

commit cc651b9de537a7fd504b1a633365530af58a9d7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 23:33:43 2020 +0100

    Ensure scripts have all the information on all disconnection types
    
    When a client re-uses a cookie and takes over a previous connection
    previously the disconnect script of the old connection wouldn't receive
    the IP information. Ensure that all information is provided to scripts
    at this case.
    
    Resolves: #231
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 91de6c889e6fcd038c0e66a2398425b50be31a52
Merge: 6ad8da86 bc092793
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 23:21:16 2020 +0000

    Merge branch 'tmp-coverity' into 'master'
    
    .gitlab-ci.yml: coverity jobs only run on schedules
    
    See merge request openconnect/ocserv!138

commit bc092793f043cb9a48d7ebc3cd670c80813bd8a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 23:40:14 2020 +0100

    .gitlab-ci.yml: coverity jobs only run on schedules
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 6ad8da867146b4737e59b25184585414719fd8fc
Merge: 2932043d c3ff69e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 22:21:56 2020 +0000

    Merge branch 'tmp-ubuntu18' into 'master'
    
    added ubuntu18 build and minor cleanup
    
    See merge request openconnect/ocserv!136

commit c3ff69e7c496706798bbf79ce356f52752666598
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 22:43:55 2020 +0100

    added ubuntu18 build and minor cleanup
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 2932043dd9f8f2f5504fb8451505b567be01d615
Merge: f333e600 f410a5c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 20 16:47:52 2020 +0000

    Merge branch 'issue244' into 'master'
    
    ocserv-main should limit the maximum message size a client can send
    
    Closes #244
    
    See merge request openconnect/ocserv!132

commit f333e600b5fa2378c8cca321e022c9814e4848c6
Merge: c4f9d6cf 87b1dc65
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 20 16:46:07 2020 +0000

    Merge branch 'issue247' into 'master'
    
    Resolves: #247 - Bound negotiated MTU between RFC 791 defined minimum and configured maximum.
    
    Closes #247
    
    See merge request openconnect/ocserv!135

commit 87b1dc65babc8d5f3ac1b1b076efc2ace7e568c2
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Tue Feb 18 09:20:21 2020 -0700

    Bound negotited MTU between RFC 791 defined minumum and configured maximum.
    
    Resolves: #247
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit f410a5c637802a9d931beb00929250c8d403e5cc
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Feb 14 08:58:40 2020 -0700

    ocserv-main should limit the maximum message size a client can send
    
    Resolves: #244
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit c4f9d6cffb375d55912ccdae7493939dcaee4efa
Merge: 8d1aa343 d852195e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 19 21:55:19 2020 +0000

    Merge branch 'tmp-fix-disconnect-script' into 'master'
    
    tests: try to reproduce #231
    
    See merge request openconnect/ocserv!127

commit d852195e64d3f779bef2cc403f7f7203720ed925
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 17:12:38 2020 +0100

    tests: reproduce #231
    
    This modifies test-pass-script to force a DPD timeout to
    verify whether ${IP_REMOTE} is set on the disconnect script.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 8d1aa343b4dd013ba6b564036febb764f1ebf42a
Author: Alan Jowett <alanjo@microsoft.com>
Date:   Fri Feb 14 13:36:17 2020 -0700

    Ban score should always increase.
    
    Resolves: #246
    
    Signed-off-by: Alan Jowett <alanjo@microsoft.com>

commit 17957ed98f9211c0618a10c329a60423480a7304
Merge: d2884640 a6994ef1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 22:39:16 2020 +0000

    Merge branch 'tmp-reorg-gitlab-ci-yml' into 'master'
    
    .gitlab-ci.yml: avoid the use of '&&'
    
    See merge request openconnect/ocserv!131

commit d28846404d7fdfbbaa2eecf860f68eaa35da2f8f
Merge: 5aea4680 f4126fa0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 22:15:17 2020 +0000

    Merge branch 'tmp-centos8' into 'master'
    
    .gitlab-ci.yml: added centos8 build
    
    See merge request openconnect/ocserv!129

commit 5aea4680f5c390340430e685fe6b384247fc5f97
Merge: 1bce6526 ebe7c3bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 22:15:06 2020 +0000

    Merge branch 'tmp-check-multi-users' into 'master'
    
    tests: added test to check whether server blocks if script blocks
    
    Closes #241
    
    See merge request openconnect/ocserv!126

commit a6994ef1e7cf3dc7258a4aaa4e420cc84ed57d19
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 23:04:38 2020 +0100

    .gitlab-ci.yml: specify the master branch coverity and web pages generation runs
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 613242f343856db9901967ff3528db97ab51ba40
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 23:02:55 2020 +0100

    .gitlab-ci.yml: added epel8 rpm build
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 476638a52a15bcc9da790e2b0b133e4a1994e459
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 22:49:58 2020 +0100

    .gitlab-ci.yml: avoid the use of '&&'
    
    gitlab CI will often mask a failure when multiple '&&' are
    present.
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit f4126fa0954c19253b11bbb67bf10ab4dbcf9536
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 22:45:42 2020 +0100

    .gitlab-ci.yml: change raddb permissions
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit a8d34a80b925e68d3c323340873f7137de733aaa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 22:07:00 2020 +0100

    tests: radius: save log on CI failure
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit fc901e03c403d60330336c4263e44791beae4c50
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 13 21:31:44 2020 +0100

    .gitlab-ci.yml: use parallel builds
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 243c5e9fa2bc5d2092352e46413c7ed2b8e12368
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 11 12:33:39 2020 +0100

    .gitlab-ci.yml: added centos8 build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 1bce6526f31ab27cae3cfd5df4f8a29d964586ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 22:50:00 2020 +0100

    updated NEWS entries [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ebe7c3bfb4da19aed593b7b4e5d6ecc98527c9a4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 22:15:43 2020 +0100

    tests: added test to check whether server blocks if script blocks
    
    This test verifies that the server will continue to operate
    even if the up script will block indefinitely.
    
    Resolves: #241
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit cd4aac23054eaff2483882036e06eb85f3d1fcf0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 21:56:46 2020 +0100

    inih: updated to latest version
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0402df11de6a40ba0e34346061da97881f98c9cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 22:01:02 2020 +0100

    config: avoid crash on invalid entries
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit ea3f6900c157ac2ac0c246a139eaee5784b4b1e1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 16:48:19 2020 +0100

    common.sh: print message when script cannot run
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 1a6776c3a71b7a67bb21fa1eb2d278478cfae6f4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 7 17:09:03 2020 +0100

    doc: updated ronn usage and fail when manpage cannot be generated
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9bd3c136e1cc5fa2658fda4fbfa7b10914a85d54
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 26 09:25:44 2020 +0100

    .gitlab-ci.yml: run jobs on linux only
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 1d7a7088bf4f15a19568d8cff2d6574dbbab45fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 28 20:19:44 2019 +0100

    released 0.12.6
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 0f0a1b58e7ff6dbfd5365ee1d05e611adb202ce5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 28 20:18:34 2019 +0100

    AUTHORS: updated mailmap [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

commit 79f66712376cc5987994ff2667bb6ea76469a884
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 28 20:14:59 2019 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b94449211fc59754e91485f2f113f4087c08e1f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 27 22:53:05 2019 +0100

    AUTHORS: auto-generate
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4e5c9ad6c8f48d2562e01671c240ff992c2c9162
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 17 16:07:18 2019 +0100

    README.md: updated badge URI
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit a3fe249541a4494fe7f5021a48b3e34a0c4b3fb7
Merge: 95991950 58836af0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 17 15:05:27 2019 +0000

    Merge branch 'tmp-add-openat' into 'master'
    
    seccomp: allow openat()
    
    Closes #185
    
    See merge request openconnect/ocserv!123

commit 95991950c9e62f24bef153db5c5e91a6fed41201
Merge: 93581834 55d5af2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 17 15:04:35 2019 +0000

    Merge branch 'tmp-check-multi-users' into 'master'
    
    check_multiple_users: do not account disconnected ones
    
    Closes #223
    
    See merge request openconnect/ocserv!122

commit 58836af0f3e62a8eec7eb3bdbe327af6c78da7e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 16 21:05:23 2019 +0100

    seccomp: allow openat()
    
    It seems some libc uses openat() directly when open()
    is called.
    
    Resolves: #185
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 55d5af2ebcfb8314059a652cd425d2b7df91decd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 15 20:43:22 2019 +0100

    check_multiple_users: do not account disconnected ones
    
    When max-same-clients is set to 1 and a user re-using a cookie
    connects, check_multiple_users() would prevent the user from
    reconnecting. This corrects the issue by taking into account
    only valid sessions that have not yet been disconnected.
    
    Resolves: #223
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 935818346d10f47fcea276b1243a6515257ef513
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 15 21:37:40 2019 +0100

    seccomp: work around API breakage in libseccomp 2.4.2
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cfa62cf6b481e397f52c9a07d9077f6eca510ab6
Merge: 71468887 c9e907c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 12 15:29:35 2019 +0000

    Merge branch 'tmp-test-kerberos' into 'master'
    
    tests: added kerberos test case
    
    See merge request openconnect/ocserv!116

commit 714688879d71252ae15c1d2d66fedd015b880cab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 12 14:59:37 2019 +0100

    maxmind: added license
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit f68a44e5fd8a3880db8fc41c52a4221cd5366e4b
Merge: 9b1e9aee fa253b77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 7 13:23:07 2019 +0000

    Merge branch 'new-ua' into 'master'
    
    Adapt UA detection for newer AnyConnect versions
    
    See merge request openconnect/ocserv!121

commit 9b1e9aeeb4a92f57619dc31ff1f46f54f517f224
Merge: 6739529e 4bcf2964
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 7 13:22:22 2019 +0000

    Merge branch 'tmp-split-dns' into 'master'
    
    ocserv: added support for per-user split-dns directive
    
    Closes #229
    
    See merge request openconnect/ocserv!120

commit fa253b77413c037fb961d8c4869a692415861b74
Author: Marcos Del Sol Vives <marcos@orca.pet>
Date:   Mon Dec 2 17:17:21 2019 +0100

    Adapt UA detection for newer AnyConnect versions
    
    Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>

commit c9e907c8416ad8ab858da0fd57cb4a324bc4af4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 17 16:19:03 2019 +0200

    tests: replaced docker-based kerberos test case with one that runs in CI
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit ea845a57fc8d7eeb38625990a305a486f33613cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 15 15:54:31 2019 +0100

    tests: clean-up pam server initiation
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 4bcf29643df1fc682c788eaa22a55bc0a6fe23f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 17 10:56:46 2019 +0100

    ocserv: added support for per-user split-dns directive
    
    Resolves: #229
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 6739529e056a537951fa3ec583dfadbc60aac0f9
Merge: cb138ede f7326917
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 17 10:03:18 2019 +0000

    Merge branch 'tmp-anyconnect' into 'master'
    
    Improve IPv6 support for anyconnect clients
    
    See merge request openconnect/ocserv!119

commit f73269175a5311e86c5e9dd44136eedc68339c38
Author: Leendert van Doorn <leendert@paramecium.org>
Date:   Thu Nov 14 22:29:19 2019 -0600

    AnyConnect clients expect a different verb (X-CSTP-DNS-IP6) for passing IPv6 DNS addresses.
    
    Signed-off-by: Leendert van Doorn <leendert@paramecium.org>
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e9b79254e7f322437e1e990fc411160619cefbe4
Author: Leendert van Doorn <leendert@paramecium.org>
Date:   Thu Nov 14 22:26:20 2019 -0600

    Detect AnyConnect clients and allow IPV6 routes to be passed through.
    
    Signed-off-by: Leendert van Doorn <leendert@paramecium.org>
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit cb138ede0382e33831a37ef0ea39788cc8284d79
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 30 08:23:59 2019 +0100

    sample.config: documented script exit code handling [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit a5a1b2d62f119cc9d8a5100d85870fed10c6ebb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 18 09:50:45 2019 +0200

    .gitlab-ci.yml: added coverity build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 962de41fba3104a724167973ac423b05d3b9c773
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 16 21:30:42 2019 +0200

    released 0.12.5
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit caf8ed2d4840871d4e09f25e1de0f8484e925a2d
Merge: 6c2c0936 960032e0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 16 19:32:02 2019 +0000

    Merge branch 'tmp-maxmind' into 'master'
    
    occtl: use maxminddb when available
    
    See merge request openconnect/ocserv!115

commit 960032e065e20789669bf6c79599a2b74b837a73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 14 14:54:40 2019 +0200

    occtl: use maxminddb when available
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 6c2c09362eaa993854381ea417dcdff3814be071
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 14 20:22:51 2019 +0200

    README.md: removed references to git2cl [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b9ff297c7d8210ff96d049f72cb6a1aa4bd8d81b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 3 09:20:32 2019 +0200

    NEWS: updated
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e4621ebcdeac2b04a554a92a86e0e8db42a5bcc8
Merge: 994dfa09 aa07f183
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 3 07:19:12 2019 +0000

    Merge branch 'FreeBSD-tun' into 'master'
    
    FreeBSD tun(4)
    
    See merge request openconnect/ocserv!114

commit aa07f183f2037673a25c6ba3e91c4f056e67d5da
Author: Trond Endrestøl <trond.endrestol@ximalas.info>
Date:   Wed Oct 2 14:00:26 2019 +0000

    FreeBSD tun(4)
    
    FreeBSD has a mechanism by which a tunnel has a single controlling process,
    and only that one process may close the tunnel.
    
    Kyle Evans of the FreeBSD Project authored these changes.
    
    See issue 213.
    
    Signed-off-by: Trond Endrestøl <trond.endrestol@ximalas.info>

commit 994dfa09818622709b80465cf90fc43f2b8f898e
Merge: c6b24c18 17ed4748
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 30 06:08:33 2019 +0000

    Merge branch 'udp-listen-host' into 'master'
    
    Add `udp-listen-host` option for DTLS
    
    See merge request openconnect/ocserv!107

commit 17ed47488d4bb6d6bd333b1041e32bcddedb05f2
Author: Lele Long <schemacs@gmail.com>
Date:   Fri Sep 6 18:50:23 2019 +0800

    Add `udp-listen-host` option for DTLS
    
    This option supports different listen addresses for tcp and
    udp such as haproxy for tcp, but support dtls at the same time (haproxy
    does not support UDP at the moment)

commit c6b24c1898e7ff08e05956214f2d602e8c003b30
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 26 18:04:26 2019 +0200

    http-parser: updated to latest version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 708147d60a0c4e763e3d3f4851a643fe1d9d9234
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 26 18:12:26 2019 +0200

    ocserv: addressed gcc9 warnings
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 16569dd05c2673492affc8632575a7bb22103be9
Merge: e2b12460 92b5db7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 25 19:18:35 2019 +0000

    Merge branch 'tmp-fix-json' into 'master'
    
    occtl: fix json in show status
    
    Closes #220
    
    See merge request openconnect/ocserv!108

commit 92b5db7b26df4a6780ac77bbb442a7f7f5953838
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 25 19:58:29 2019 +0200

    occtl: fix json in show status
    
    This removes a trailing comma from the end of the listing, and
    adds a missing one.
    
    Resolves: #220
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e2b124600379500e01349dcdef1635da1b9276ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 14 20:49:17 2019 +0200

    design.md: updated URI [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e892ba4faa590610371ef9e248960e6146258b4c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 3 21:15:50 2019 +0200

    released 0.12.4
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f79d5113e7c17129adf1abefadb422a869e8e69b
Merge: d43745bf 9d7339f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 20:59:26 2019 +0000

    Merge branch 'tmp-better-cleanup' into 'master'
    
    Perform quicker cleanup of sessions which their user explicitly disconnected
    
    Closes #210
    
    See merge request openconnect/ocserv!102

commit d43745bf70572b788b312fe9346cbe7e9fd15815
Merge: 4da4ade2 5247833d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 20:33:22 2019 +0000

    Merge branch 'tmp-build-rpm' into 'master'
    
    Build an el7 rpm as part of the CI process
    
    See merge request openconnect/ocserv!106

commit 9d7339f317024dc6d0f082d08087fcf52301b0fe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 29 13:16:00 2019 +0200

    Perform quicker cleanup of sessions which their user explicitly disconnected
    
    When a user explicitly disconnects after the session is open,
    cleanup its entry immediatelly. That ensures that a radius
    server will be notified sooner, while anyconnect clients which
    disconnect early (before session is open), remain unaffected.
    
    Resolves: #210
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 5247833d91cc70e22808e3245b0624ce00bd97a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 23:09:32 2019 +0200

    .gitlab-ci.yml: build rpm as part of the CI process
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9f51f86b559216ecb4c0f80ce9a6287ff23492f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 22:14:34 2019 +0200

    Makefile: removed dependency on git2cl
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4da4ade2a33a87c93988bda5596d3936e842ded1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 21:37:55 2019 +0200

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 91105ba25655ddc96f6f7c779f5f7785ced5f1d6
Merge: a89fbec8 a1b8d079
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 19:55:16 2019 +0000

    Merge branch 'tmp-ev-script-fix' into 'master'
    
    remove_proc: remove script watcher from libev list
    
    Closes #208
    
    See merge request openconnect/ocserv!105

commit a1b8d0794ac63534cf66084da22063d2d6807603
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 30 09:28:33 2019 +0200

    ocpasswd: address memory leaks
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ee2f5e8c05241e88486fefc621f168e87222315a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 23 13:25:15 2019 +0200

    remove_proc: remove script watcher from libev list
    
    This ensures that libev will not be notified by already
    terminated and handled scripts.
    
    Resolves: #208
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a89fbec81d28ece40a249644b6303ac30cfe45cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 11:38:20 2019 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit fdf0aeb36a8799dd71cb08d8a990ff2681f7b5b8
Merge: 4a6120e2 97592426
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 09:37:36 2019 +0000

    Merge branch 'add-radius-access-challenge' into 'master'
    
    Add radius access-challenge (multifactor) authentication
    
    See merge request openconnect/ocserv!103

commit 97592426ce8f40586ae2958b04c71046b52cc671
Author: Alexey Dotsenko <lex@rwx.su>
Date:   Wed May 29 16:01:58 2019 +0300

    radius (challenge-response): add MAX_CHALLENGES macro as a limit of password requests
    
    max-challenge configuration option removed as redundant; replaced by static constraint
    via MAX_CHALLENGES macro
    
    radius (challenge-response): remove  max-challenge configuration parameter
    
    Signed-off-by: Alexey Dotsenko <lex@rwx.su>

commit 0153172c03c32bc5feb831dd447ea40af0f1109f
Author: Alexey Dotsenko <lex@rwx.su>
Date:   Wed Jun 19 10:23:53 2019 +0300

    tests: add radius otp test
    
    tests (radius-otp): add a check radcli version (atleast 1.2.7), since debian uses version
    1.2.6, which does not support Access-Challenge server response.
    
    tests: show debug messages only in VERBOSE mode
    
    tests (radius-otp): replace test for option max_challenge to macro MAX_CHALLENGE
    
    Signed-off-by: Alexey Dotsenko <lex@rwx.su>

commit 283daffc1aba6d4147b308e6475c74804d2a4392
Author: Alexey Dotsenko <lex@rwx.su>
Date:   Wed May 29 15:51:09 2019 +0300

    radius: add access-challenge (multifactor) authentication
    
    skip banning each next OTP for modules with allows_retries option:
    
    sec_mod_auth: add check - the repeated password or the password of the
    following factor is entered
    
    radius: passwd_count incremention is related to a auth-message change
    
    sec-mod-auth: set more descriptive name for password-retries indicator
    
    Signed-off-by: Alexey Dotsenko <lex@rwx.su>

commit 4a6120e2112fced1dd37e260fa644580747ad135
Merge: 33633560 15380220
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 3 21:10:23 2019 +0000

    Merge branch 'tmp-radius-tests' into 'master'
    
    tests: rewrite the radius test using namespaces
    
    See merge request openconnect/ocserv!104

commit 15380220acad2e2ada11e7e9483d48dd706ad2d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 30 22:15:53 2019 +0200

    tests: rewrite the radius tests using namespaces
    
    This simplifies the test and makes it runnable in our CI.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5d226c4f32d00217e0f732d46de9925e25437827
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 3 22:21:12 2019 +0200

    ocserv: create its own process group
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 72921e5cbf2e26006eb2c51ee485528c3ba1efef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 3 20:21:35 2019 +0200

    radius: parse_groupnames: avoid overflow in group parsing
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 33633560b4ad68cc2a311975771c3f50fe5a0a09
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 12 21:15:54 2019 +0100

    NEWS: doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 03cd4a198c03122414f1594153fc497ec98da58d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 12 21:14:14 2019 +0100

    released 0.12.3
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8450e3bb97d6a8758ebccf31214a61fd007efd44
Merge: 03c76eb8 6cac2252
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 12 17:59:56 2019 +0000

    Merge branch 'tmp-centos-tests' into 'master'
    
    tests: make ping cmd functional in centos7,6
    
    See merge request openconnect/ocserv!100

commit 6cac2252033081de8ab3a8e078d0bc115e740080
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 12 15:32:21 2019 +0100

    tests: make ping cmd functional in centos7,6
    
    It requires the '-6' option to be able to function with
    IPv6 addresses.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 03c76eb873bcf0392945559ddc2b1d10ef471ec1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 12 12:02:22 2019 +0100

    worker: workarounds string is made applicable for gnutls 3.3
    
    The %NO_SESSION_HASH priority string does not work with gnutls 3.3.
    This fix does not include it into the priority string.
    
    Resolves: #201
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit d9967aa63a1f5687d3a54829cb9e2304cf50c315
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 08:47:00 2019 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 0d8fd8d2b6bbbebe5dbf766cc6403a32f166bb5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 08:45:49 2019 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit b425d9f9a57d398d0115f9d6dde98f7539e1b7ea
Merge: 2d42c229 d3cb2e8f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 07:44:10 2019 +0000

    Merge branch 'patch-1' into 'master'
    
    Fix the bug of "ocserv-worker: segfault at 0 ip b76d6747 sp bf851c70",...
    
    See merge request openconnect/ocserv!99

commit d3cb2e8f53eb36ae007c6dd5cfa6a8455d741b5e
Author: Frank Huang <chuang213@gmail.com>
Date:   Sun Feb 17 08:12:42 2019 +0000

    Fix the bug of "ocserv-worker: segfault at 0 ip b76d6747 sp bf851c70", https://gitlab.com/openconnect/ocserv/issues/197
    
    It must be some caller does not add extra size for null at the end
    
    Signed-off-by: Frank Huang <chuang213@gmail.com>

commit 2d42c22919e467272a829713e494c5ad13c71762
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 31 05:56:17 2019 +0100

    main: removed unused code
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 16c48bdf38d2ae24305bbc844102843e97698fab
Merge: 020a9851 383c25e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 18:50:22 2019 +0000

    Merge branch 'tmp-coverage' into 'master'
    
    updates in code coverage calculation
    
    See merge request openconnect/ocserv!97

commit 383c25e239a482b212699b9ccab72f94c9f84d5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 19:23:05 2019 +0100

    .gitlab-ci.yml: run code coverage with -O0
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 75c8211fd6353f448b395ceff80b90141c31fff2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 19:03:10 2019 +0100

    README.md: updated URIs for new gitlab group
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 020a9851198910aaf9ba3036fb51d451a87ffc90
Merge: a1d5ec1e 385af4e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:00:55 2019 +0000

    Merge branch 'tmp-tests-cleanup' into 'master'
    
    tests: several cleanups
    
    See merge request openconnect/ocserv!96

commit 385af4e8312118fef44299c6846a1b305e370fe6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 20 06:44:29 2019 +0100

    .gitlab-ci.yml: ensure gcov scripts are writeable
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 27c83dcf421b56e310982c916c24377043fe38cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 20 06:09:47 2019 +0100

    tests: consistently disable isolate-workers in tests
    
    That is to prevent coverage reporting in tests.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a1d5ec1e1c3a55542cfab132acebde306b6e811b
Merge: bfa7682d 8ba3987f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 19:29:12 2019 +0000

    Merge branch 'tmp-fix-tls-ciphersuite' into 'master'
    
    occtl: print the TLS session information, even if no DTLS channel
    
    See merge request openconnect/ocserv!95

commit 8ba3987f4ca01d2590181fb33c161a0cc04b9d54
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 20:09:50 2019 +0100

    occtl: print the TLS session information, even if no DTLS channel
    
    This ensures that the main process receives the TLS channel information
    early and does not depend on DTLS channel establishment. Furthermore,
    we refactor to make setup_dtls_psk_keys() fail early when no TLS channel
    is available.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit bfa7682d3fb4dc82b8b400601fc00da7e8a7fcdb
Merge: ef468d6a e0f847b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 17:50:16 2019 +0000

    Merge branch 'tmp-test-aes-gcm' into 'master'
    
    tests: added tests for anyconnect's DTLS1.2 support
    
    See merge request openconnect/ocserv!94

commit e0f847b98478299da140b41fd2309afea387d240
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 17:03:52 2019 +0100

    worker: added safety check for selected DTLS ciphersuite prior to use
    
    This avoids a crash when no DTLS ciphersuite is selected and adds a
    test case for negotiation without DTLS.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 71ef4e4b6a1ebef5e8a22e3a175a5e6ce16d8eed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 17:06:24 2019 +0100

    worker: allow negotiating AC-DTLS12 with openconnect
    
    This doesn't have the anyconnect client bug with parsing the
    server hello.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7fc4e0d0ee55f94bff63b5bb5473fbd025cc4a57
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 07:28:06 2019 +0100

    tests: added tests for anyconnect's DTLS1.2 support
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ef468d6a24ae95d7a94815ea48eca5b8c72cf125
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 13:39:05 2019 +0100

    test-cookie-timeout: updated for new openconnect kill semantics
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c640ffd955f3703f8070a67d946c5e8d947db055
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 19 13:39:05 2019 +0100

    test-cookie-timeout: updated for new openconnect kill semantics
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cafd66d33d217c9bb13caaebea90bbb3f8f38142
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 20:01:58 2019 +0100

    corrected typo
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit dfc8f95ee8ea63b2e27c932eb6bfbe87ad08d152
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 19:55:15 2019 +0100

    released 0.12.2
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 19cbf2db9890d718ce4cedda2151c8c13dc35036
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 19:54:38 2019 +0100

    Makefile: allow out-of-tree builds with bundled protobuf
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit aa57ee9f3b2cc7446945581efeb571ce37497bb7
Merge: a196fd33 a67c4509
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 18:47:04 2019 +0000

    Merge branch 'tmp-harmonize-strings' into 'master'
    
    worker-http: use the same workaround string for all ciphersuites
    
    Closes #193
    
    See merge request openconnect/ocserv!93

commit a67c45099ff9de96f5eed418477806d1189d27ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 19:30:36 2019 +0100

    .gitlab-ci.yml: removed XFAIL from centos6; previous changes seem to fix it
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c02320ee50e06b48311d5aeb4a9bd50e19c3d5c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 19:11:20 2019 +0100

    worker-http: use the same workaround string for all ciphersuites
    
    Resolves #193
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a196fd33280651d4f0f292b6238b3a9c8dc4d9ad
Merge: c441017f 232de85d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 10 13:43:58 2019 +0000

    Merge branch 'tmp-dtls12' into 'master'
    
    Added support for DTLS1.2 with anyconnect clients
    
    Closes #193 and #188
    
    See merge request openconnect/ocserv!92

commit 232de85d171a411ceee680f40966c3a076978401
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 9 19:03:04 2019 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ec5ebd33a47f932882956a2cb4962378ea7d1b48
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 7 20:09:33 2019 +0100

    setup_dtls0_9_keys: renamed and updated log messages for clarity
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 21bebfff41e8836274aa48bd846163f4d2a93c43
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 7 19:56:34 2019 +0100

    worker-http: dropped txt_version
    
    All the versions checked were prior to the minimum gnutls
    version we require.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit acdd6d156b296f7a9651977b08e53d4043de7e95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 6 19:11:28 2019 +0100

    worker-http: added support for anyconnect DTLS1.2 ciphersuites
    
    This adds support for DTLS1.2 ciphersuite header as sent by anyconnect
    clients.
    
    Resolves #188
    Resolves #193
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c441017f27671de0e1306728aaa1eb5f2b360378
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 6 20:10:48 2019 +0100

    README.md: updated instructions on debian
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a5502022c2536a66600c4f93e2dfaecc5f4556fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 6 19:57:17 2019 +0100

    .gitlab-ci.yml: skip Centos6 tests that fail
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 923f697014fc6667e2c5abf7bab66cd0092a53b1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 6 19:25:42 2019 +0100

    cfg_ini_handler: notify static analyzers that defvhost is always non-null
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 2dfa37784dc86e8dbdb403448dffafc27ff04544
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 6 19:14:07 2019 +0100

    tests: moved server-cert-rsa-pss to dist_check_scripts
    
    The gnutls included in distributions is expected to work well
    with RSA-PSS.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c1cb9c02f96dcb017e94c73d8457da1c46b7c584
Merge: bba39386 34b39d21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 19 05:42:43 2018 +0000

    Merge branch 'add-logging-ipv6' into 'master'
    
    Add logging output when IPv6 is disabled.
    
    See merge request openconnect/ocserv!90

commit 34b39d213cb48f6d4688ac71712f5e676a976b84
Author: pumpkin031 <www.carrotsoft@gmail.com>
Date:   Sun Nov 18 12:54:18 2018 +0900

    Add logging output when IPv6 is disabled.
    
    Signed-off-by: pumpkin031 <www.carrotsoft@gmail.com>

commit bba393868eec414eded8d002e3487ac1fbafa945
Merge: 9fcd4d15 d4a4e780
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 18 20:22:50 2018 +0000

    Merge branch 'tmp-fix-per-group' into 'master'
    
    Enhance testsuite on per-group configuration and a minor fix
    
    See merge request openconnect/ocserv!89

commit d4a4e780fcd9f95fc1044453b7039f950fba93f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 4 11:38:49 2018 +0100

    plain: skip the empty group
    
    Previously we were incorrectly setting the '*' as the group name.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 63479d63945d72edd95b48524f28d7bc801b187b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 4 10:13:00 2018 +0100

    sec-mod: log sucessful authentication
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b181f20a2e388abd9205d9d84475f27627d9d843
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 4 10:01:05 2018 +0100

    tests: added functionality test for config-per-group
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9fcd4d1597705db069b2cd1d31e040c32e617b92
Merge: 39c6d578 4e51e2a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 4 10:40:13 2018 +0000

    Merge branch 'tmp-pam-fix' into 'master'
    
    tests: added check with empty password
    
    See merge request openconnect/ocserv!88

commit 39c6d578b54fd1b46f2f9515b9d0a9e16481b14c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 22 21:35:55 2018 +0200

    doc: clarification on cookie operation
    
    This clarifies how cookies are expired, and how they affect
    session accounting in radius.
    
    Relates #166
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4e51e2a0ac0ecb665469a1777084d531a335c81e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 22 20:59:22 2018 +0200

    tests: added check with empty password
    
    Relates #171
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8f7a416aa47921fe80b65fca2bfae48ee7b3738a
Author: Timo Förster <tfoerster@webfoersterei.de>
Date:   Sat Jul 21 22:18:17 2018 +0200

    Change documentation url for UsersFile. Fixes #163
    
    Signed-off-by: Timo Förster <tfoerster@webfoersterei.de>

commit c9c50909b9f874480c9ce08fc2651dafacbca04e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 23 21:18:13 2018 +0200

    .gitlab-ci.yml: disabled asan job as it conflicts with cwrap tools in F28
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d6271f44709dbb2cd9a7bfc5dd4732055a299f97
Merge: 5a2bed6a 4f79db43
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 20 20:31:52 2018 +0000

    Merge branch 'tmp-add-aes-256' into 'master'
    
    Added support for AES-256-CBC
    
    See merge request openconnect/ocserv!86

commit 4f79db43b67eda84ebd6d535dbe0bbde94734f1e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 20 22:15:42 2018 +0200

    .gitlab-ci.yml: parallelize make check in fedora build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3a330b8d85ce6562637aa814e015fdc6d0b5a9f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 20 22:06:11 2018 +0200

    tests: added unit tests for AES-128-GCM and AES-256-GCM
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 579cfc0ead4d8b0a3833b42c254e17427d0688c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 19 07:59:59 2018 +0200

    Added support for AES-256-CBC
    
    This enables support for AES-256 for anyconnect clients which
    do not support AES-GCM. Also prioritized the 256-bit ciphers
    higher than the 128-bit ones.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5a2bed6a58d6a13ec77e9c04495993cc5d3e66bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 26 03:26:13 2018 +0200

    .gitlab-ci.yml: updated for new debian build name
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6bc5da342ffdb2e13cf007573fa8132a6e5d5a45
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 26 03:13:35 2018 +0200

    .gitlab-ci.yml: updated for new project
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 2c460034a397e797fa8ec1e1856fd6cc9fb4fc0f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 26 02:24:34 2018 +0200

    ocserv.8: link to openconnect(8)
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 52c3a9fd09ff035e7cba1e9dc9b5496650284719
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 19 16:50:00 2018 +0200

    worker-vpn: more reasonable messages for timeout and disconnections
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 59e8dced7928e92b37641bfdd2ed17855b0531d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 27 09:06:10 2018 +0200

    radius: be more verbose with groups found
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 20f7ea1355767cb67f2144014b67e7e6e7816bd8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 13 08:37:50 2018 +0200

    README-radius.md: mention groupconfig=true relevance for Class attribute [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 68c16a56b14adc75cfd4bb7309398e793826f698
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 12 11:23:03 2018 +0200

    NEWS: updated for release
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9ca7da76896b9927393c4c4f17f6265201f77596
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 12 08:20:59 2018 +0200

    added missing file
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3dc6f95a6a0db42dccb08ea51c7df22e9ac8ee13
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 12 08:17:22 2018 +0200

    released 0.12.1
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit fefbce19dc75604e1e3d401ef2e33968f029ba6d
Merge: 107b6440 c1aee4fe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 12 05:34:44 2018 +0000

    Merge branch 'tmp-dont-break-configure' into 'master'
    
    configure: don't break on ubuntu
    
    See merge request ocserv/ocserv!85

commit c1aee4fe9a5c4df02d8a8327ff61c224ba277d6f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 11 22:10:17 2018 +0200

    configure: bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ece70b0d6cfe3007f32accfdce26ab7ab4368d21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 11 22:08:52 2018 +0200

    configure: always work-around brokenness of gnutls_certificate_set_key
    
    That is, instead of requiring the user to explicitly pass --with-broken-gnutls
    warn at the end of the configure script.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 107b6440ad66469e7ae69e50b0c33bf107011c75
Merge: e1c3ed95 807ce345
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 11 20:22:23 2018 +0000

    Merge branch 'tmp-fix-forking-behavior' into 'master'
    
    fix ocserv's forking behavior
    
    Closes #154
    
    See merge request ocserv/ocserv!84

commit 807ce345de41b2969ba76ef31812cc9beded7249
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 10 19:38:50 2018 +0200

    main: create a sec-mod socket file independent of pid
    
    That addresses the issue of not being able to run under systemd,
    or under non-forking mode. Added test case to detect proper
    operation.
    
    Resolves #154
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 579d99ee39d918269afcc4b4208b6f121e97f0aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 10 20:03:08 2018 +0200

    ocserv: added the --no-chdir command line option
    
    This allows running on the background but without changing the
    current directory.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e1c3ed95b09eef41802acd5ad820e3b723fbd5e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 4 23:37:34 2018 +0200

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 187774d5975864673e9290f858a5c31f2cd3c90e
Merge: bbc79584 094145bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 4 21:36:24 2018 +0000

    Merge branch 'tmp-fix-cert-release' into 'master'
    
    configure: refuse to compile with known dependency issues
    
    Closes #152
    
    See merge request ocserv/ocserv!83

commit 094145bf541d520cd372034b7c287b5199f7c23d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 30 17:40:36 2018 +0200

    configure: refuse to compile with known dependency issues
    
    In particular require gnutls 3.5.5 which fixes cleanups in
    gnutls_certificate_set_key(), or a recent version of
    the 3.3.x branch. When forced to use a broken version work-around
    issues (at the cost of a memory leak).
    
    Resolves #152
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit bbc79584903f2e7fb268e6e0c546dfdc9e8834ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 23 22:07:10 2018 +0200

    doc: fail safe when ronn is not available
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d989b925c4940f43a46681c79d3bbd0f58406aea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 23 21:57:08 2018 +0200

    doc: corrected typo in manpage generation
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3a74ea81ea7b8efef75b247d7ca5428df23ad0d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 23 11:16:56 2018 +0200

    doc: dist_man_MANS are defined unconditionally
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit a65b3444cbff8f4d580850b0d69eff776fb15474
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 23 11:13:13 2018 +0200

    tests: ship missing test [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 601ce35a89395d02b33b4eca1c4d536de9b77770
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 22 10:54:25 2018 +0200

    doc: added missing file
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 66656388c6859fa6f4eb6a6d4351ee05ff528036
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 22 10:42:59 2018 +0200

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5b3fc7eb03c7078d674e9b9b8259bb61b58d06fe
Merge: d49ba40f a4525385
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 19:08:18 2018 +0000

    Merge branch 'tmp-comp-tests' into 'master'
    
    tests: enhanced compression tests
    
    See merge request ocserv/ocserv!82

commit a4525385bbea7275475e1a73985664733ca6885a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 20:53:17 2018 +0200

    lzs: updated from openconnect source code
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 90e1b5cbdefe65386bf95e6c2dfe6fee9c9d94d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 17:27:51 2018 +0200

    .gitignore: ignore new tests
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4111f598b8259f6520b45c28846e92f77331bf63
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 17:24:28 2018 +0200

    tests: separated compression tests to lzs and lz4
    
    That allows testing both code paths separately.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b1e3ff580f36d55ba616ec52f6527949cac4c3fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 17:05:49 2018 +0200

    config: added options to change compression algorithm priorities
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 2ae4c2b2ed37717de393df6ea5b75d33734edbe3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 16:38:59 2018 +0200

    sample.config: the example paths reflect real system paths
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d49ba40fb20d65f9deb888a77c7436e030aed931
Merge: 55b8ce4b 03bccbca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 07:40:03 2018 +0000

    Merge branch 'tmp-maintenance-check' into 'master'
    
    address issue in maintenance cycle
    
    See merge request ocserv/ocserv!81

commit 03bccbcaefa0fef98e7dacb5e444409088e2436b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 09:13:54 2018 +0200

    main/sec-mod: handle sec-mod reload via synchronous communication
    
    This eliminates race-conditions related to signal handling and potential
    main/sec-mod desynchronizations related to cert/key pairs.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a40ac19c490d0180c6a46b1a173c5b682ed45421
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 08:47:19 2018 +0200

    ms_sleep: do wait for the specified amount of time
    
    That is, do not return earlier due to a signal.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 432c12dcce9fd0cee3eb23c39d9a05a1299388ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 08:33:48 2018 +0200

    tests: added test to unit test the maintenance cycle
    
    This allows to catch issues like crashes late in the server
    operation as in #149
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5fd5a1b349240967c976ddaef35e3ff1c05ddc8d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 08:25:34 2018 +0200

    main: allow forcing maintenance cycle with SIGUSR2
    
    This is done for testing purposes; allow test the maintenance
    cycle without waiting for the necessary time.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 55b8ce4b089ab67ae3e969cd5cd9dd056fc2644f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 15 08:15:31 2018 +0200

    main: corrected call of CRL reload
    
    Resolves #149
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b117a165a674cc84014e1c798cfa8efeba58e600
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 21:26:21 2018 +0200

    gssapi auth: set the virtual host data early
    
    That prevents a crash on its use from get_name() later
    in the initialization.
    
    Resolves #145
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 61e5d23f4816fe4f50afb122b98be39668e0fb94
Merge: b4b3f897 b4bb6c20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 19:19:49 2018 +0000

    Merge branch 'tmp-minor-fixes' into 'master'
    
    Minor updates on master branch
    
    See merge request ocserv/ocserv!79

commit b4bb6c2049609aad4a5c48bef6ec1e5f958aaf3a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 18:24:04 2018 +0200

    .gitlab-ci.yml: do not use PAM under asan
    
    PAM tests would fail due to address sanitizer not detecting
    the stack switches.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0bb085de4a8eb0a1ba86f50a39aa46c17c52747c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 18:15:52 2018 +0200

    tests: pam-test was restricted to pam_matrix
    
    valgrind and asan were indicating issues with pam_oath, so
    avoid using it in the testsuite.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cf8304cadf7008a086860e0abcbba03b969fcb20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 14:22:02 2018 +0200

    sec-mod/main: eliminate mem leaks related to vhost transition
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9af953383e97a5c3053f5ce854e7a2ebe4f3e039
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 10:05:30 2018 +0200

    tests: properly handle memory in cfg_parse_ports() unit test
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f1e3d1e0a70b479ecd36aa8f7b6767a47721f760
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 10:00:45 2018 +0200

    trim_trailing_whitespace: avoid invalid memory access/read
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 82bc4fb8418babc10ec5b17115d1a92f9e2d0c80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 22:58:07 2018 +0200

    proxy protocol: added check to avoid memcpy on zero data
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit eb41aa8f45e06d811765ae0de2bdd5841c818faf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 21:58:09 2018 +0200

    .gitlab-ci.yml: corrected run of ubsan/asan
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9ecafa9d738deaffe485f7bef65a7436ed75aa81
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 21:50:05 2018 +0200

    configure: do not warn on string truncation
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit aec511260953aa98997b34bf5d73ea32e2eed069
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 21:36:26 2018 +0200

    radius: allow more space in route from txt to avoid truncation
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f4cef63501744d69ecc855b0b7646cb11d54c3fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 20:56:01 2018 +0200

    pam: corrected check for empty password
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b4b3f8978ddbeba69397f22b189138c0cf280b99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 20:53:51 2018 +0200

    tlslib: eliminated unneeded code for GnuTLS >= 3.3.0
    
    We already require GnuTLS 3.3.0 or later.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6f70ec14642eeec8327c67a061e813df472980e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 20:57:13 2018 +0200

    proc_table_update_ip: corrected DTLS address comparison
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 90b3c439fbdfac60be204f1c36c7b4e91527b687
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 13 22:55:33 2018 +0200

    tests: server-cert-rsa-pss moved to xfail set
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 21694d54dc52d04a6433311cfd878e9db62ea154
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 14 09:53:43 2018 +0200

    tlslib: set public key algorithm with gnutls_privkey_import_ext4
    
    Previously we would require communication with sec-mod, which is
    not setup during configuration time.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9cdd2be7f0caa0de4ee9281a0461660f57b63768
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 12 14:58:59 2018 +0200

    include crypt.h to use crypt()
    
    This is necessary in Fedora28 as it doesn't provide
    crypt() prototype in unistd.h
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1566464
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 1b313b9e8062b61f890e899ef5f0c8409e1a3802
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 12 13:08:33 2018 +0200

    tlslib: added missing struct element
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit c69c702818a3fa9e9876fc05643ee19ad575f843
Merge: 6aaf3791 158b099c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 10 19:59:54 2018 +0000

    Merge branch 'tmp-replace-tests' into 'master'
    
    tests: replace docker tests with tests based on namespaces
    
    See merge request ocserv/ocserv!77

commit 158b099c9f0da83695d37b28ee78ff939588e96c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 6 06:44:35 2018 +0200

    tests: added test with compression enabled
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 017bd414f9e1c16ccac1458d4aa9a70fa5992bb2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 5 20:09:36 2018 +0200

    .gitlab-ci.yml: update code coverage
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 265e30dab79d22851ace8386859e082d63f38d8d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 5 19:28:17 2018 +0200

    tests: full-test was moved into traffic test
    
    The new traffic test only requires namespaces and no docker.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 490a2018269b325adabd48e487f04ce9b0fdd8b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 5 18:59:41 2018 +0200

    haproxy-connect: split into lib
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6aaf37913f1428a755bc04785c0563e1f21696e2
Merge: d6332cd4 86fe0fc4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 4 05:38:05 2018 +0000

    Merge branch 'tmp-haproxy' into 'master'
    
    Added testsuite with haproxy
    
    See merge request ocserv/ocserv!75

commit 86fe0fc4573a29ff1560ce17d6260338db8f56e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 26 18:02:28 2018 +0200

    tests: added check with haproxy connection
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d6332cd428f54b893953e12295a393bea98a959a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 30 09:22:40 2018 +0200

    proc_table_update_ip: do not update IP if the previous IP is not found
    
    That adds a safety net in case there is a mismatch of IPs, to prevent
    adding two entries in the hashtable for the same IP.
    
    Resolves #146
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit bd5ad4d7c3314a669f1d63d0b35ccdd434c8831e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 1 13:31:59 2018 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8eda81e0337e2469bf024025de9b74710f79d4e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 26 19:44:56 2018 +0200

    proc-search: indentation fixes
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 63b7e81e87356acbfaf8ca08253a35b26795ebfd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 25 18:56:19 2018 +0200

    tests: added test with proxy-protocol
    
    That tests operation under haproxy with proxy-protocol without docker.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5c719b4264c7f1a720532a1385fef59bb533dcd5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 25 18:44:07 2018 +0200

    worker: properly handle the haproxy health commands
    
    That is, do not close that connection, but follow up and accept
    it, according to the protocol.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e09f54ea777ead799f1090860abfefdcb4831e0b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 22 08:46:26 2018 +0100

    NEWS: document only entries which are not available in 0.11.x branch
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 348a45902eb396d10cbbd157a4dbef1b997cc2a8
Merge: e996e2fe 1aa30568
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 22 07:41:06 2018 +0000

    Merge branch 'tmp-bsd-rename' into 'master'
    
    Rename the tun device on FreeBSD
    
    See merge request ocserv/ocserv!71

commit 1aa3056849155bd419264c26d07558183b40b379
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 21 12:52:54 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d8731fbb996adfc105a309e2202aff1e52a35463
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 18:33:07 2018 +0100

    configure: warn when no worker isolation is available
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0247db65d25584b1ba319c160dbb7a4674f6dd50
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 12:43:02 2018 +0100

    tun: better separation of OS dependent tun functionality
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 511fe9a0d3ae88ccf38c2531c02e6f375110dec9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 07:20:59 2018 +0100

    combined bsd_open_tun with bsd_ifrename
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6913b1fb33df7f13e3867fbae8f75eecf68993df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 6 21:14:49 2018 +0100

    rename tun device on FreeBSD
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e996e2fe06a253e719ac5f59dc6157cd55376ed1
Merge: 7b4c1bae 1e88a224
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 21 11:40:22 2018 +0000

    Merge branch 'tmp-fix-multi-line-val' into 'master'
    
    Allow more than 128+96 configuration options
    
    Closes #141
    
    See merge request ocserv/ocserv!74

commit 1e88a224eeef4e0b0173f41f5a6b4e12a83ce3ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 21 12:24:31 2018 +0100

    _add_multi_line_val: corrected array size extension
    
    The current implementation would impose an artificial limit of
    configuration options to (DEFAULT_CONFIG_ENTRIES+128) after which
    the server would crash on loading. With that change we allow for
    an arbitrary number of configuration options.
    
    Resolves #141
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0de68ef4b1c60c06ad423885f28c15d2034014fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 21 12:14:41 2018 +0100

    tests: added reproducer for #141
    
    This tests whether more than 128 options can be read in
    routes or dns fields.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7b4c1bae5a6f6f82ab56ba9860d573c8fba8754d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 12 21:51:00 2018 +0100

    .gitlab-ci.yml: added ubsan build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit dfab7f6e302bc66d5d01f6dc11d983c87dc2d634
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 11 20:07:42 2018 +0100

    Create coverage report and depend on pre-built CI images
    
    It will be made available at:
    https://ocserv.gitlab.io/ocserv/coverage/
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 96efa890e934046594907d27153282f3d9c6b644
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 11 15:12:23 2018 +0100

    config: allow empty device name on vhosts
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 704763ac40fe79a0b3fd3462f6de3152cd3cb454
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 11 06:40:20 2018 +0100

    config: corrected check for empty device name
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c2a519572b2c3fb91d96a9e8c7e1b3cf55b5788f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 11 06:33:37 2018 +0100

    sec-mod: move variable in the ifdef block it is used at
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8b0b1e6067a0040ba512379a257c7fce5a375c0e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 19:18:25 2018 +0100

    tlslib: added support for gnutls 3.6.3 (unreleased)
    
    That adds support for GNUTLS_PRIVKEY_INFO_PK_ALGO_BITS which is
    necessary for RSA-PSS private keys.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a56d1b7900071800a1efb0b2cf1c1c3226477e03
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 18:01:38 2018 +0100

    README.md: better presentation of badges [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 71f7b81b286fbd5995de6bef4b7164c163e86f47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 17:57:54 2018 +0100

    .travis.yml: removed; ocserv cannot be built in ubuntu14.04
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3365eb8ab4eca5c1996886e77b8fdf40ccedd245
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 15:33:56 2018 +0100

    worker.h: removed socklen_t non-presence work-around
    
    The socklen_t use is spread out in the code, making that
    work around non-functional.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 56a2d4b7e4f2c9a0a5b87e041d914aa21fdfae73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 12:51:55 2018 +0100

    use casts to avoid various clang warnings under BSD systems
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 824584316687fd92239c7a518d8e7f0a3bc482ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 10 08:05:07 2018 +0100

    updated URI
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ecf913249558468798f70d19e232e8e3dafaf485
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 2 21:28:02 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5d0205332d79e471d7468b657febfdcb4852c291
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 11 22:07:05 2018 +0100

    tests: introduced test program to check basic vhost functionality
    
    This checks whether connecting to different virtual hosts
    with different authentication methods works.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ba6921ed9a98b44a355771cf3a7eeadb86412576
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 26 20:12:57 2018 +0100

    Introduced the notion of virtual hosts
    
    This provides virtualized server configurations which take
    effect after client connection when client hello is received.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 26bc26565261f9f54f17d6336e0219bfae229d06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 2 19:36:16 2018 +0100

    .gitlab-ci.yml: disabled rawhide build
    
    The fedora image is broken since long time.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d211b3d795b09179428b04a409113858ccb24648
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 2 19:35:44 2018 +0100

    config: properly warn on duplicate pid-file option
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 274415d050766240f88baa74288cd901950ba1b0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 1 19:17:35 2018 +0100

    tests: use the --pid-file and -p options in ocserv
    
    This allows detecting issues like in #143 where these
    two options regressed.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8769b2e0418edd9df8257ab12cfc7fc59f9fdd35
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 1 19:13:46 2018 +0100

    ocserv: avoid crash when --pid-file is used
    
    Resolves #143
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cc12fe7131600da1b3ebeeb24ac7e402abad13b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 27 07:04:28 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9bb7799fc21cc773728c48b3568c55c5081e860e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 16:41:56 2018 +0100

    worker: only switch to GSSAPI authentication if not already used certificate
    
    That allows using gssapi as primary and certificate as fallback.
    
    Resolves #108
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d3c29765a302bbe998f40e6388f2a9b61f970321
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 16:35:11 2018 +0100

    worker: use explicit parenthesis for clarity
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 15fd4c9fbb67e630d342fc1255283619d13f8a53
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 16:20:17 2018 +0100

    tests: introduced tests with gssapi falling back to pass or certs
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 55bf469dce218b786d9a8024f0ac8a2c2a00debe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 15:52:49 2018 +0100

    worker: simplified fallback to next authentication method
    
    That, also allows falling back from certificate authentication
    failure, allowing it being listed as primary, with alternatives
    present.
    
    Resolves #108
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b59a12591c9a43ec0983fceca5b0eb1716b732cf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 15:23:52 2018 +0100

    config.c: clarify if clause
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4ecfed7ed049129781af0bf893ab0ca55d1d89e0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 15:17:40 2018 +0100

    tests: added check cert or pass auth
    
    This is the similar to the test case (test-pass-opt-cert) of pass or cert,
    but in that case the certificate method is set as primary.
    
    Relates #108
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 30d4b4e677a0a442d787f05e61c65407a3fd8fd5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 15:13:08 2018 +0100

    test-pass-opt-cert: modified not to require root access
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 86ae99864bf81f0bca69dcdca59d87d78745239a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 16:03:33 2018 +0100

    tests: check whether ocserv is build with oath support prior to running otp tests
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 66f9f97d1daa948812c5db446a32ea7826710a4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 14:37:23 2018 +0100

    test: replaced docker otp-test with cwrap test-otp
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 00c6f566cb0ab5b5d63bc51ae45573b800afd0c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 13:46:01 2018 +0100

    tests: introduced test with OTP-password and certificate auth
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9dfe964defd676068624170883e3949cd4ae5d55
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 25 14:16:13 2018 +0100

    amend: plain: avoid crash on locked accounts
    
    The null pointer dereference fix broke plain OTP setup of
    ocserv.
    
    Resolves #114, #137
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 31854eb2088bd76ee1dc2dd81dc5caa50e6c703b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 22 22:26:15 2018 +0100

    unix: corrected header size when receiving events
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 896894a6b62ab50b1a5acc463eb24574cbf083ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 18 20:54:10 2018 +0100

    README.md: removed references to autogen
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5ebea1e47585efc73a14f633ca36333be63580cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 22 19:59:06 2018 +0100

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 53a166500fb7a37ec8dea1bcefe48e26a6ceb128
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 12 13:49:22 2016 +0200

    Hash the peer's DTLS IP separately from its CSTP IP
    
    This allows keeping track of clients which have their DTLS
    stream come from a different IP location than their CSTP
    stream.
    
    Relates ocserv/ocserv#61

commit b7a14f1c4ac430085dab8112e1d1cb9ee71816ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 19 20:18:38 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 83d37ace16a52c3a8a671143807ae4c93d9cb98d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 19 16:07:41 2018 +0100

    .gitlab-ci.yml: rawhide: do not rely on tcp wrappers
    
    They are no longer part of Fedora28.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit a157fc706831640527359605fde2f9d2fbfa5948
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 19 15:39:12 2018 +0100

    doc: clarify auth and enable-auth
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e2a0be65e4c658ab80e3bc58e29478ceb2e72099
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 11 12:01:31 2018 +0100

    worker: mark new UDP fd received as UDP data reception time
    
    That prevents errors such as switching to TCP when no UDP packets
    are received immediatelly after connection establishment.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e61029445cbfaa25a11f34db6b32431f4cf544fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 4 10:37:05 2018 +0100

    gnutls: increased dependency to 3.3.0
    
    That way PKCS#11 reinitialization and global initialization are
    implicit.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7d762748db72332ab2e8fc92f712ac75df8a002e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 30 20:19:58 2018 +0100

    .gitlab-ci.yml: corrected artifacts dir in builds
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 553dbd3df77c430d7f4038519a0cc2645f98d68a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 29 17:10:12 2018 +0100

    ax_code_coverage: updated to latest version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 85fe81d0e0ba520855e1f05659076812e2240354
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Jan 28 23:14:45 2018 -0800

    Set AGENT_OPENCONNECT for Java/Android clients
    
    These use a slightly different User-Agent string.  If they are not
    detected correctly, then IPv6-only VPNs will not work.
    
    Since the Android bindings did not exist until 6.00, the V3 check is
    unnecessary.
    
    Signed-off-by: Kevin Cernekee <cernekee@gmail.com>

commit e6c4d5e492d65ffafff602c89b1c2f801be6f8e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 23 21:11:57 2018 +0100

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit dbaecfa80ea4883c33e4adad2f2d7bbb5966526c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 23 21:11:39 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 760199a33c624f07a9612e62a6b38c66e4962bbb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 14 16:54:27 2018 +0100

    doc: man-pages are modified to be generated using ronn
    
    That eliminates the need for autogen and also combines
    doc/sample.config and manpage contents. Now the doc/sample.config
    is the primary config documentation location.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 894cdb7a5263b3fade50da66206780ec010dccfe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 14 14:57:05 2018 +0100

    config: skip unknown sections
    
    This would allow future extensibility, by making clients which
    don't support a section to skip it.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 1b8079a11a24c0a1a6f468acaf23ba6f26f5dece
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 13 19:34:33 2018 +0100

    Replaced the configuration parser with inih parser
    
    That eliminates the dependency on libopts as well as autogen.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 533677bd73987f0d2b4fb8194f35e5456088ec1b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 13 18:46:51 2018 +0100

    ocserv: use getopt for command line parsing
    
    The complexity of its command line options didn't require
    the use of libopts, and by eliminating that dependency for cmd
    parsing, we can chose another parser for config file parsing.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6b7d09485ebcce46219c0a9a80f1d9d98676f2b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 13 18:13:27 2018 +0100

    ocpasswd: removed dependency on autogen
    
    The complexity of its command line options didn't require
    the linking to yet another library.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cbac133b0718ac0d998fc8d5ed0ced07a078a011
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 14 18:49:13 2018 +0100

    .gitlab-ci.yml: added a -Werror build under F27
    
    That helps catch any potential issues early.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8ebe287f1c452f4db0262bd35798ce737222c4f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 17 20:50:54 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ee1cada66afca571266e45f7b4569d2a7970c9c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 16 16:17:57 2018 +0100

    worker: check for POLLERR condition
    
    When checking the events returned from poll, handle the POLLERR
    condition. This fixes an infinite loop on the worker's main
    loop.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit ba92389b0cfef16c20a8e3c6116e5665c3bf5078
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 14 18:47:06 2018 +0100

    .gitlab-ci.yml: correctly point to scan-build artifacts
    
    Also added missing gperf package.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c578c787b2097b104d617f8d8ec0cd25e18dc2b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 14 13:53:44 2018 +0100

    .gitignore: ignore static libs
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 2559d68366f0b57c72c2486f570f5a03eb320071
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 14 18:43:23 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit fbdf8f875ece3748a34918bb98e4f89bf7f6aa19
Author: Daniel Lenski <daniel.lenski@finalphasesystems.com>
Date:   Sat Jan 13 13:11:33 2018 -0800

    Make escape_url() percent-escape fewer characters and escape ' ' as '+'
    
    Per RFC 3986, neither ASCII alphanumeric characters, nor any of '-', '_',
    '.', '~', need to be escaped anywhere in a URL or query string.

commit 38ebf44620c1307c5dcfdbbf394eb9f25973f423
Author: Daniel Lenski <daniel.lenski@finalphasesystems.com>
Date:   Sat Jan 13 00:24:00 2018 -0800

    tests for unescaping decimal HTML escapes and '+' in URLs

commit 92f4d5076e0f2cda4e71c7866f9958ece97c5716
Author: Daniel Lenski <daniel.lenski@finalphasesystems.com>
Date:   Fri Jan 12 19:41:52 2018 -0800

    Correctly unescape '+' in URLs and decimal escapes in XML (e.g. '&#32;' instead of '&#x20;')
    
    This patch changes only URL/XML unescaping, not escaping--changing escaping
    would remove the reversibility of the tests.
    
    I've been meaning to submit this ever since
    http://lists.infradead.org/pipermail/openconnect-devel/2016-October/004042.html
    but didn't have a particularly good reason.
    
    However, I recently ran into a (weirdly-customized) version of AnyConnect which
    actually sends '+' in one of the authentication forms. So this should improve
    AnyConnect compatibility in some corner cases.

commit b0f217ce436fba671da3aa42f64583cb4732fbfc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 12 13:45:05 2018 +0100

    replaced 'const static' definitions with 'static const'
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 924ebdf143fc242e70c1f9fc9ada4dbbea511bc6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 12 13:41:54 2018 +0100

    configure: use the -Wextra gcc flag for warnings
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit fb299001ea73bb5d3a5f3034f71a4ef4b98888a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 12 13:39:23 2018 +0100

    config: fixed incorrect sign check
    
    Resolves #132
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 647b44343f3da12c706628e2338d75b40be3af58
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 16:47:11 2018 +0100

    README.md: updated link on technical info
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d8b507f68d2ea7056a453ed9fbb9a0590dd92597
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 16:36:06 2018 +0100

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f6a6f0bc342acb81816e1ea02b8c8112deeda40e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 16:34:37 2018 +0100

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ea6b0d5da9df36d64d3e157e7f39b87b54dd2f05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 11:47:19 2018 +0100

    occtl: sessions: print the location when printing the remote IP
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4c4b60a5b68040506ba7605ca34b41d3c9a0839c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 11:43:37 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 907c34c52059b1cc6656bd788035f533238c57d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 11:39:57 2018 +0100

    occtl: improved session output
    
    That is, do not print expiration time in sessions that are in use
    (they don't expire during that time), and print whether a session
    is in use.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a680af6a500067fc99cfabeb67d393a08227c9af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 7 11:27:02 2018 +0100

    ocserv: improved session disconnection due to re-use messages
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6abd2dc5e662364266032e80b0b07c6661258fb2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 20:26:19 2018 +0100

    occtl: introduced 'show session' option
    
    This allows printing information related to a session.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c027d4165b1916a93416594f5dd4c8341e19b2be
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 20:35:20 2018 +0100

    sec-mod: always mark an active (open) session
    
    Previously it was only marked when an accounting module was present,
    though now that we export data to occtl, that information is useful
    even without accounting module.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3bdd6bc7dc80a9a0f22a95147dd420f018fe45d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 18:46:05 2018 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit fbd760372cc8ae5d197dafc708d6603441f57644
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 18:44:54 2018 +0100

    occtl: don't print compatibility fields by default
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b19dda27c3d29081bf8fd0437568a4c10ddf55a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 18:35:22 2018 +0100

    sec-mod: avoid infinite loop in listing for sessions
    
    When having only a single expired session, the security module
    could enter an infinite loop attempting to list it.
    
    Resolves #130
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 324f01f5bad1a055b985a8e745c8e4a47ba1d882
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 18:31:27 2018 +0100

    occtl: Last-Modified session printout moved to compatibility options
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7a1929611932f8c4a3004797e56beab3fdb170c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 6 08:53:57 2018 +0100

    tests: updated for increase in slack time
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit bb4058663099a0b61fbb5004b31e8a82ba75f06e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 5 15:23:14 2018 +0100

    forward_udp_to_owner: reduce the error log severity on bind error
    
    There are case cases where binding on the received address is not
    possible. As this is not a critical error, reduce its logging level
    to info.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit ac065d871b41509c94eea16e3c41d0a80f1ddbe5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 5 15:21:51 2018 +0100

    ocserv: pass cookie expiration time to occtl
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 241aa06c3aac49ba02b7a9d7b7ba2e439cea44ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 5 15:17:05 2018 +0100

    occtl: ensure initialization of printed expiration and creation time
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 8e3d89eca592aaf0f63c338ac8eaead7ea9c5a6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 26 23:24:23 2017 +0100

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f6f2351feff4a24876b8bbc62ad685430fd0be3f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 17 17:44:40 2017 +0100

    vpn.h: increased AUTH_SLACK_TIME to 15 secs and documented its use
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit bdb5ae4516a5adde2f7694a829ef4e57edc21b86
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 21:59:56 2017 +0100

    sample.config: added session-timeout parameter
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 97fb12de51a4b8b5d6a8e33f9c86953cb96600f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 9 11:09:54 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 705b65d1680deb8359b384b8479f7128e5078f8f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 14:21:40 2017 +0100

    tests: updated to account for changes in cookie invalidation
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6cb4b3715343554353ad6ca186455e174cd8f4b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 10:43:15 2017 +0100

    occtl: print cookie expiration time
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 20fbbdbcd063a686cae8173bfe1c9f8c92f80a0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 9 11:16:59 2017 +0100

    occtl: replaced last_modified time with created
    
    ocserv no longer sends the last modified time, but rather the
    cookie creation time.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 8253cc2920a490ebbd8150ffdf326e6975d4786f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 9 10:56:41 2017 +0100

    sec-mod: separated expiration from creation time fields
    
    That allows to set explicit expiration of the cookie, and
    ensure that we can close a session in a way that we provide
    a limited time window for it to re-open. That handles anyconnect
    client compatibility; this client terminates and reconnects
    using the original cookie, multiple times.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c4a8b21aad7289e60b106924bc765cf9ad4a65f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 15:06:40 2017 +0100

    base64-helper: use casts to avoid warnings with various nettle3 versions
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 414e5d4c58fcd72c8feb5a09f193ca6e652c163d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 15:05:28 2017 +0100

    lz4: use LZ4_compress_default instead of the deprecated limitedOutput
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7bc61b1d56c270df3be97d66b88096f734998b59
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 14:53:59 2017 +0100

    Avoid gcc warnings due to snprintf truncation
    
    Detect such truncation and act accordingly.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0616435ec9f7b96e1379ef1db25642bade965787
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 10 14:41:52 2017 +0100

    tlslib: eliminate warnings due to unused functions
    
    These warnings were related to gnutls 3.6.x support.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 289a250864cbf175c82f89405b946876b0db75bb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 27 18:28:30 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit d5a4c2914c125b477d1b69df82ea835e523e1eb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 27 18:27:08 2017 +0100

    dtls: do increase handshake timeout and decrease retransmission time
    
    That in effect enables the default timeouts described in
    gnutls_dtls_set_timeouts which are 60 seconds, and sets
    retransmissions to occur in half a second.
    
    Relates #122
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 55cd8f4247a96af45db2fd39891d48795b50fb7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 22 07:52:19 2017 +0100

    cmd_request_to_str: print the name of list cookies msg and its reply
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 2134f139a21478b471e73cdea3fc2f9520047bd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 19 16:42:58 2017 +0100

    .gitlab-ci.yml: added fedora rawhide build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b73c50ab2d0c30c705264d5a8a95f60594f266c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 21 19:59:26 2017 +0200

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 803110634f568e5ec9481d70ca4ed90978a3e7e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 9 21:48:16 2017 +0200

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3d1598cfeb9573cdf53e8c7fe19165b647c4d487
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 9 21:47:50 2017 +0200

    released 0.11.9
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7937fe2533a231f9149dccc5f1a8ef43a2b22d65
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 9 21:45:43 2017 +0200

    bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit edfff8d2b28c67adf48d0118cfde2a6f171c087a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 9 21:45:19 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f10c5bc73e0ce2f3c676a752ee5f6badf3075fad
Author: Frank Huang <chuang213@gmail.com>
Date:   Tue Sep 12 15:54:18 2017 +0000

    Update ocpasswd-test
    
    Signed-off-by: Frank Huang <chuang213@gmail.com>

commit fd8d87e8e65c077f850dc7b065341bde9e08f8a7
Author: Frank Huang <chuang213@gmail.com>
Date:   Sun Sep 3 15:28:33 2017 +0000

    ocpasswd: the lock command -l will add multiple lock mark to the password file
    
    The changes will check if it is already locked before apply the locking.
    This would be consistent with passwd like facilities.
    
    Signed-off-by: Frank Huang <chuang213@gmail.com>

commit a779b18a81bd229edbec415d64f612cacbb45855
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 11:49:57 2017 +0200

    tests: test-pass-script: only run when openconnect supports --local-hostname
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ba1338d8af6b6c39f03f2577c36cbef29f50b1ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 11:37:23 2017 +0200

    README: updated to reflect the fact that more tests run under CI
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6bf1341c218775b98269190c24df6216162fb5ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 11:09:31 2017 +0200

    .gitlab-ci.yml: root tests are run on CI systems
    
    Because these tests can only be run in-tree, the CI builds
    were switched to be in-tree, except for FreeBSD build which
    now runs out-of-tree.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b5d77da7f45b428d385ece8eac7dc2542bfc8c98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 11:08:23 2017 +0200

    Separate root from docker tests
    
    This allows running the root tests under CI, even if the
    docker tests (which cannot be run) are not.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9ded09293e2021ab787771e079044eb1fb184860
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 11:24:53 2017 +0200

    clarify coverage report [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3b01e2addc547196f429fc3d5a5ebc0bb082767b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 10:56:29 2017 +0200

    .gitlab-ci.yml: use fedora26 for address sanitizer
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d710b5862155c9c2287b46d01d35c65fc781ca6a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 9 10:55:17 2017 +0200

    .gitlab-ci.yml: centos7: skip tests with gssntlmssp
    
    They do not seem to run reliably.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7fcb1d835d4cc0fc07b3b08c6377c66ce9b2bac4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 8 12:09:09 2017 +0200

    configure.ac: also check /lib/security for PAMDIR
    
    This is the path used in Debian.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 8eafacf2a9734db71f8a1c27c2bdcbfb2fa01550
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 8 12:04:31 2017 +0200

    tests: test-gssapi is now run as non-root
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 834326fe7014e1138af98acfdd51cc241c247a1d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 8 11:02:14 2017 +0200

    tests: provide more verbose output on test-pam
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e1f4d1229c881d3e064d68762c5e251e40b828df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 8 10:36:28 2017 +0200

    .gitlab-ci.yml: use fedora26 builds
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit d5d1c2f780d0858698d885b019d0421a15b5ad90
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:13:07 2017 +0200

    .gitlab-ci.yml: added static analyzers
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a10376d75055fcc1e7fc2899556e70772701dd27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:45:45 2017 +0200

    occtl: disable code during static analysis that causes trouble to clang
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 83770bb45d448e0f632c254bba4d0f0b5791c127
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:42:21 2017 +0200

    config: avoid compiler warning
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6b6b86c14c0a3c2faa4349bf71a0b862710890ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:35:12 2017 +0200

    sec-mod: avoid null pointer dereference
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ba37feed5b3d1fb582ec3d1236a73d429d45e7f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:33:09 2017 +0200

    occtl: avoid null pointer dereference
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ce297aed4b8be2d9536069774a3a10b108e288ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:31:57 2017 +0200

    occtl: removed unused variables
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 67991e696058e6319b644d4c09b1877afd38134d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 7 21:26:00 2017 +0200

    removed dead assignments
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 41041609509b327c9aa2198c38374d88a508616b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 11:29:58 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 077e16e36d20592b212e84b6dfa3c70ddd8b9113
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 11:25:52 2017 +0200

    tests: check server functionality with Ed25519/RSA-PSS certs
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit af2a64df2f1efbd236dbf29acb9a62fd60c7e96b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 10:10:42 2017 +0200

    ocserv: handle RSA-PSS and ed25519 key types when compiled with gnutls 3.6.0
    
    That is, enhance the security module to accept and understand
    more elaborate signing commands.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit aaf2c0265f166b24bab90118b834e5554c941fba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 11:59:53 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 4527e5f864a71b6b6785750ec42c44be6c204714
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 11:58:42 2017 +0200

    is_ipv4_ok: corrected access to mask
    
    This prevents the acceptance of an invalid IPv4 address
    as valid.
    
    Resolves #112
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 5d74492a5901d70f250cfd4578ce29dc0f6d08cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 09:26:55 2017 +0200

    tests: verify correct operation with locked account
    
    That checks whether connecting to a locked account will have
    unexpected effects (e.g., login allowed).
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 4fcea8ae068df3c7c97d3d23af5a1934dc672e51
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 09:19:01 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 084fff84252458d802e85115465f3c9b08ae512f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 23 09:18:01 2017 +0200

    plain: avoid crash on locked accounts
    
    That is, avoid a null pointer dereference when crypt()
    fails.
    
    Resolves #114
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit a62fe8791d3f3c32928705ac89a0febf2f6c1071
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 21 18:18:53 2017 +0200

    .gitlab-ci.yml: enabled build for freebsd
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit fd3f41500024e50386fdb18246e927fafac44558
Author: Aaron LI <aly@aaronly.me>
Date:   Sat Jul 8 15:43:31 2017 +0800

    Fix build on DragonFly BSD
    
    With this fix, I can successfully build `ocserv-0.11.8` on DragonFly
    BSD (4.9-DEVELOPMENT) using the `net/ocserv` port from FreeBSD [1]
    without any further modifications.
    
    [1] https://github.com/freebsd/freebsd-ports/tree/master/net/ocserv
    
    Signed-off-by: Aaron LI <aly@aaronly.me>

commit ae11fced53960a057ccf7813b1ee6769d85a39ba
Author: Lele Long <schemacs@gmail.com>
Date:   Fri Jun 16 18:49:28 2017 +0800

    Update --load-ca-certificate argument to ca-cert.pem in examples
    
    Signed-off-by: Lele Long <schemacs@gmail.com>

commit ae3e52c25230e58998d67b98700c2f3169dc24bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 14 15:58:08 2017 +0200

    .gitlab-ci.yml: disabled freebsd builds; system no longer available [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 6ac543e3a065534cb096143d6d3dafbad80813e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 31 09:34:23 2017 +0200

    document that not all methods can be combined
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 89ba65922af1c9e34403b4605349729de3a34391
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 18 08:26:26 2017 +0200

    Avoid the use of the VERS-ALL priority string when gnutls < 3.3.24 is present
    
    That priority string is only available on gnutls 3.3.24+ versions of gnutls.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 954774d43ea495e52406075429cd0dceff41116c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 3 02:34:43 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 48f59f1b94b8f2a7298f4050b23c39b8a1fefc6a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 3 00:15:46 2017 +0200

    .gitlab-ci.yml: compile using GeoIP-devel in F25/Centos7
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit a332788bd4bea574f59c0a9fdff78fc9b1cd0685
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 3 00:13:30 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit f0969ffd3f1f5a869b89e71d90ba7d893bd0d1ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 3 00:12:23 2017 +0200

    configure: allow disabling libgeoip detection
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 1c236a8abb3b6fc942504fbabdfaf1607df7eecd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 2 07:40:47 2017 +0200

    occtl: print peer location on show user info
    
    That utilizes libgeoip.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 2664d1c42c1e2bc88d06ea0dd35f35478f4b71e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 2 07:02:42 2017 +0200

    occtl: print Status grouped with general info
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit abd621b30ca7cfd12080a89c0daf96755d3a5806
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 29 13:01:30 2017 +0200

    kkdcp: increased read timeout and made it a definition
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 373af80d60f5e720588e79ba915df69fcd8a23e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 28 16:04:59 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 02471bd0cb0a2251fdc30c3363c42f6450522e74
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 28 16:02:30 2017 +0200

    kkdcp: increase maximum packet size to 64kb
    
    There are cases where our previous limit (16kb) was insufficient
    (see #100), and it is reasonable to switch to a limit related to
    maximum UDP packet size.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 9dae1ecedca1cd2c7a79039c9b1ac2b2598faaa0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 27 08:59:00 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0b9ce68c17164f5ccbaa01428b8884ef1a31b9ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 27 08:57:07 2017 +0200

    handle_worker_commands: fix use of send_msg_to_worker
    
    Relates #100
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit f932e61e46aebf32286c5419c4409ad7877383ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 25 19:02:18 2017 +0200

    updated auto-generated files [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 1627f09cc927491d54afec154f3961f27929c6ac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 25 19:01:27 2017 +0200

    configure: bumped version
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5c20ad2c6115a8d138a94e3ef850a635148c25d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 24 19:35:38 2017 +0200

    occtl: combined stats and status cmd
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 03c81b190a3e539640c5119f3b5fa7878bf76df1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 23 19:09:11 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0d8ee5e6a95d767e432e8f696fbc95e9a04de24c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 23 18:57:45 2017 +0200

    config: increased the default max-ban-score to 8 wrong password attempts
    
    This still prevents abuse, while allowing few more attempts than 5, which
    are typically easily reached through software which remembers passwords.
    At the same time increase the default ban time to 20 minutes.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 53fe6218e64ee90c66916cbaa82bc43b0b86b53a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 19 19:57:30 2017 +0200

    occtl: always print the stats reset time
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5e7f416e7274767f48d8cca8f26b0f893d0d3c75
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 14 17:23:00 2017 +0300

    doc update [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c99ca67354e299daf380ee5130e88c69a885c6d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 14 16:56:51 2017 +0300

    reset_stats: print session statistics prior to reset
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e135f8a54e2d924702aa806b9b4a864499d540eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 22 11:59:13 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e8b19309f11b51e742f7aab0de5e3b126f4be68b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 22 11:52:34 2017 +0100

    sample.config: added server-stats-reset-time
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit ccb80b5d4fdc86a5367bb75c61497197d3e997fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 22 11:49:21 2017 +0100

    occtl: improved presentation of printed statistics
    
    Also added different values to keep authentication failures
    and closed sessions, in total and per accounting period.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 99b2fdcd066aab499a8dd94568b15b23a8e75d4f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 12 09:43:14 2017 +0100

    Reset periodically the server statistics kept
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit d6ff62048710eb5b55bb516941c348b66c22f4fe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 11 22:57:39 2017 +0100

    secmod sends periodically stats to main
    
    That ensures that statistics will reach main even if no
    users are logged in/logged out.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 538d1bca21ef84ecff7c8fcd396985c77ca4644f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 11 22:22:35 2017 +0100

    occtl: print statistics provided by main
    
    Also introduced the --debug option.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e9cf88f8c2c6d79a23e1c504853d78e2ba4c93de
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 11 22:03:35 2017 +0100

    main: store additional statistics globally
    
    That is, store:
     * number of timed out sessions
     * number of timed out due being idle sessions
     * number of errored sessions
     * total number of session handled (closed)
     * total number of kbytes sent
     * total number of kbytes received
     * minimum MTU seen
     * maximum MTU seen
     * total authentication failures
     * average/max authentication time (in secs)
     * average/max session time (in minutes)
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 81d2a86eff0b3b00eebb979dbb2a2d6e00a8422b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 14 16:27:02 2017 +0300

    tun: defined undeclared variable 'e'
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 6e433a3bc509ff8a73c5fb07009137c10727e46d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 14 12:12:51 2017 +0300

    update fedora build to F25
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 1ac9c5bc49c2ab16166f5d1c4c97f108f4f25d9b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 14 12:12:26 2017 +0300

    .gitlab-ci.yml: explicitly install make in Centos/Fedora
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b2e199577daf5d40e3d64ae7bc0eafe02fbf2329
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 14 11:36:34 2017 +0300

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cf74746fb740e96a676f7b70cce7bd6efdd7dbed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 30 12:06:12 2017 +0200

    tun: be more verbose in bsd tun device creation errors
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 37f8ebc8c923864665fc0156b93d464c6169a502
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 26 21:01:51 2017 +0200

    tests: added unit test for proxy protocol v1
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0c18e122e674fc06789b02f5d7aec47675951fcc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 25 19:59:40 2017 +0100

    tests: added check for proxy protocol v1
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 18fa25fea29bd87b3cb0d70674a40dee5f1d5f08
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 25 19:55:21 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a45f358af36161c2801f60669c24d1619678dfb3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 25 19:42:22 2017 +0100

    worker: added support for proxy protocol v1
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit fa3dad2e37826c27357590560289837e96b35eea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 25 19:03:02 2017 +0100

    doc: document limitations of listen-clear-file
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit de0823f01e7ad3fc31c5d35892d678b63070f79c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 24 19:27:16 2017 +0100

    worker-proxyproto: improved error message
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 83bea71e389d05d582da69e6528c98180d77aa18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 24 18:39:48 2017 +0100

    tests: added unit test for cstp_recv_nb()
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 0792d7a13525f6145e70dbce0abbe59e44383350
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 18 09:33:32 2017 +0100

    cstp_recv_nb: improve operation under receiving from UNIX socket
    
    That is, ensure that all possible packet size combinations are
    correctly received.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 50c551b56edfe9cd8015acf7821ee29e11765f26
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 23 09:31:14 2017 +0100

    tests: kerberos tests use F25
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 8e66136a1b8a28a8cb94debba01beb09735407fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 23 09:28:43 2017 +0100

    tests: test-user-config: fixed check for 401 error
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit e8a07e402e4841ef21592c21649000b73dbe6438
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 23 09:06:40 2017 +0100

    Revert "cstp_recv_nb: improve operation under receiving from UNIX socket"
    
    This reverts commit 409f114d9ee8aa556059163b612cb8cb45c9aed3.

commit fa00c5280927752990dd3e3d60a14a64c085402e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 20 09:28:01 2017 +0100

    doc update

commit 9938056f6cc070364cecf6af0a57a95499a54fde
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 20 09:24:29 2017 +0100

    Disable DTLS-PSK protocol when run under a unix socket
    
    It is not possible to derive PSK keys when only the TCP CSTP session
    is available, without the TLS session.
    
    Relates #22
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 409f114d9ee8aa556059163b612cb8cb45c9aed3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 18 09:33:32 2017 +0100

    cstp_recv_nb: improve operation under receiving from UNIX socket
    
    That is, ensure that all possible packet size combinations are
    correctly received.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit aa28f0b9d2a8860a01884d9604686075d839a2fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 11 21:25:39 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c1d86d5577b439586a3a675f5e983c052953a4cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 22 22:04:03 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4d9cdf76101c7c902622e1f2994824926f3b2d79
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 23 09:54:05 2017 +0100

    worker-vpn: use TCP_INFO on linux to obtain accurate MTU information
    
    This provides a more accurate value than the one obtained using the
    TCP MSS value. The latter is affected by many factors (such as tcp
    options), to provide a reliable value.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit fdfad2fa7e24674544a75016722622f070279cdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 22 16:22:55 2017 +0100

    worker-vpn: corrected calculation for MTU via TCP MSS
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 6986a97d12927fed9b06c056a20ee678e15a5fbb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 12 10:16:37 2017 +0100

    tests: added missing file to dist files

commit 996f6068be15766f9572afe35bcdd7648e2a997c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 12 10:03:50 2017 +0100

    updated auto-generated files

commit d23215b584cc19087816b7ff2c4bb3d81429957f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 12 10:02:12 2017 +0100

    bumped version

commit f2714d1950b7c5ddd6fc86e52964ed6a0d94aa51
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 23:18:32 2017 +0100

    occtl: added compatibility with the 0.11.6 output
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit c59cf15052ff9a389e8b0e84c9e0e5fa6ac97f7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 23:10:49 2017 +0100

    occtl: renamed cookie to session
    
    That reflects more close the actual use of the printed identifier.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 4bbf5129eee0b3ebc50e28f454d0ab3885f8da0b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 23:00:18 2017 +0100

    worker: do not log real session ID but rather the masked one
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 145ba5c14d18913955a18f6b9d45e068671f400a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 20:15:48 2017 +0100

    Explicitly specify the protocol buffers syntax used in .proto files.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit cb60edcf84f98fb0abb72d38d4cfde889d0c1276
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 22:52:10 2017 +0100

    sec-mod: Do not log any received invalid SID
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 12c4970c9ebe2107d0e8c67636348a80b8e1cb1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 6 01:52:26 2017 +0100

    tests: removed firewall tests
    
    These were no longer up-to-date and were not checking the provided
    functionality.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 66f8b57af95b111da9b46a98ff24ba5a782d2d9b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 15:54:54 2017 +0100

    doc update

commit fdea01f4f56bbdd9450a0376733d19708492736a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 25 20:07:00 2017 +0100

    Do not log the internal session ID nor re-use it in radius
    
    Use instead a value derived from it, to avoid access to the debugging
    log files, or radius result to access to the server.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3033591343c044fa51ee875f692aeec83d3a1aae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 29 15:22:22 2017 +0100

    doc update [ci skip]

commit 550599e098fd5f0c9a4c92a75ebccc05fb2771ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 28 16:03:21 2017 +0100

    doc update

commit bc6f3dc69c3acee97fec34a2963c8d89115f5ecd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 28 15:56:05 2017 +0100

    radius: use the reply message from server on rejection
    
    That is, log it, and forward it to the worker process in order
    to deliver it to the user.
    
    Resolves #72
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 23189a177a24c0d2201b24c18e0c7d45901612da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 28 15:32:24 2017 +0100

    auth: pam: minor cleanups
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 741f8b22da2b308bec146e31b4f64deb3030e07b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 28 15:25:28 2017 +0100

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit b3cbfbbcd52becb80fba47884f42d252c40aa497
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 28 15:22:55 2017 +0100

    tests: Added check for certificate alternative name checking
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit ae2fd78580b1e0ced128dff0c636d1f55d358086
Author: Johannes Sjøkvist <johannes@konsept-it.no>
Date:   Tue Jan 24 12:49:16 2017 +0100

    Add support for oid 2.5.29.17 RFC822Name
    
    This is needed to be able to retreive email from the Subject
    Alternative Name from the certificate.
    
    Signed-off-by: Johannes Sjøkvist <johannes@konsept-it.no>
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 2f65c8c4e90ea9fecb5213592319219796fba6bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 26 15:04:00 2017 +0100

    radius: removed error checking from rc_avpair_add()
    
    When a dictionary misses an element, we would previously bail
    out and not send any following value pairs. With that change
    we ensure that we send as many value-pairs as are available
    in the dictionary.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 3feec67070ff51ff36af5701b0f16c7148572431
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 19 17:21:34 2017 +0100

    worker: avoid sending an X-Reason header
    
    HTTP/1.x allows sending any arbitrary reason we would like
    after the error code. We now do that.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 43fb150de969c9255821013029fe05353aa234e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 19 17:26:37 2017 +0100

    sec-mod: reduced level of error processing ... in worker commands
    
    This was providing virtually no information since more specific
    errors are typically printed prior to it.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 2e65196f1e1b12fb136d5ea1ee83f8d3cfccd8e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 18 15:20:12 2017 +0100

    doc update

commit 2ceb0ffb47495a9b2fb107a0eedb56bd3e1c2c0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 18 15:16:10 2017 +0100

    radius-test: check whether the special IP values are handled
    
    In particular we check whether 255.255.255.254 is correctly
    and the expected IP is assigned to client.

commit d2f07e7c7087e3796a8efe22b843492d0080cf34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 18 14:16:15 2017 +0100

    tests: use fedora 25 for docker tests
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 3f87a93d38a1804f4f8136c39702867eba9e1bbb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 17 16:22:33 2017 +0100

    radius: handle the special Framed-IP-Address values
    
    That is if 0xFFFFFFFF or 0xFFFFFFFE are given ignore the value
    and ensure they are allocated from our pool.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 3d940695d804ac2ff2f02e3fd7e3b77889d35881
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 10 16:52:11 2017 +0100

    Added contribution guide and require DCO
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit dc2994fd4029e62f68d1afc4dde96ecbfe1e7d67
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 10 15:06:25 2017 +0100

    doc update

commit 7e3c628785aa64b55f1f8c4e2478d83dd4686593
Author: John Thiltges <jthiltges2@unl.edu>
Date:   Mon Jan 9 15:45:22 2017 -0600

    ocserv-fw should send all traffic to the device-specific forwarding chain
    
    After adding port-specific rules to FORWARD and creating SEC_FORWARD_CHAIN
    with route-specific rules, send any remaining FORWARD traffic to
    SEC_FORWARD_CHAIN.

commit fa65740a4c40c99e24c8a5b7be004df1d3ea37e2
Author: John Thiltges <jthiltges2@unl.edu>
Date:   Mon Jan 9 12:28:19 2017 -0600

    ocserv-fw should still create a chain if restrict-user-to-routes is set
    
    ocserv-fw only creates SEC_FORWARD_CHAIN if ports are being blocked. This
    leads to an error if restrict-user-to-routes is used without any port
    blocking.
    
    Since ocserv-fw is only called if restrict-user-to-routes or -ports is set,
    remove the conditional check for creating the chain.

commit 83f600afdafe730fea0ca499f6a755c232470e33
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 4 16:16:32 2017 +0100

    worker: increase the waiting time of cookie auth message
    
    This allows the connect-script to run for more time than
    the default socket timeout, and be limited by the configured
    authentication timeout ("auth-timeout").

commit 176ba796c528068ed67d7df74c84705756e696cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 4 16:24:57 2017 +0100

    doc update

commit 0b47b305def1cac917a775290eceb2f8b61f21a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 21 09:04:50 2016 +0100

    improved documentation of user-profile option

commit 3c8cdaedb1162c39cc4d70a5c79943a0d8ffddf6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 21 08:54:27 2016 +0100

    Send "config client" XML field after successful auth
    
    This allows to advertise the XML configuration file for the
    client to download, in recent openconnect clients. In addition
    made support for the client XML file unconditional (no longer
    depending on the anyconnect client compatibility flag).

commit 62bce8ddcf76bd92fe96d76c48b5c3bbe59150ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 23 09:22:50 2016 +0100

    improved message on file limit update
    
    Relates #85

commit 442ceda8c0e04f034243ab5bd4629935a6fb5fc8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 23 09:21:52 2016 +0100

    when setting limits keep untouched the maximum number
    
    Relates #85

commit 1f8304fc042f8b79b070a80aea30a7c5b7b02ae9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 21 09:01:07 2016 +0100

    Improve output of --version

commit 18f003805b080e11561817fd0fd4720ca70d0305
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 23 08:35:47 2016 +0100

    optimized loop in check_multiple_users
    
    That is return early, once exceeding entries have been
    detected.

commit e69a07ed6e46c92b81dda2a8f9bb1b454cf8c433
Author: Mike Miller <mtmiller@debian.org>
Date:   Thu Dec 22 19:58:35 2016 -0800

    tests: allow running tests with alternate OpenConnect
    
    Allow $OPENCONNECT in the caller's environment to override the default
    openconnect system installation.
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit 3af590bc6cd015c1b06ef971fc4fd758c54d0849
Merge: b6a2e26f 888cbeab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 23 07:04:02 2016 +0000

    Merge branch 'preserve-user-libs' into 'master'
    
    configure: preserve LIBS from calling environment
    
    See merge request !27

commit 888cbeabc79915d0523f37edbba9899a0f65b469
Author: Mike Miller <mtmiller@debian.org>
Date:   Thu Dec 22 18:48:23 2016 -0800

    configure: preserve LIBS from calling environment
    
    Use the existing oldlibs temporary variable that was used but never
    populated.
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit b6a2e26f1a16395f63c4f3e657160c4295e1b9e9
Merge: f0c11be5 dc222463
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 18 12:05:32 2016 +0000

    Merge branch 'no-more-no-cert-check' into 'master'
    
    fix test-sighup-key-change for current OpenConnect
    
    OpenConnect 7.08 removed the option `--no-cert-check`. Pass the actual id of the newly generated server key. Fall back to the key fingerprint on CentOS 6 with an older version of GnuTLS certtool.
    
    Resolves #81
    
    See merge request !22

commit dc222463e0a18292c82143ed308f94c2fbae4340
Author: Mike Miller <mtmiller@debian.org>
Date:   Thu Dec 15 15:01:39 2016 -0800

    tests: fix test-sighup-key-change for current OpenConnect
    
    OpenConnect 7.08 removed the option `--no-cert-check`. Pass the actual
    id of the newly generated server key. On systems with older versions of
    GnuTLS, pass the server key fingerprint instead.
    
    Resolves #81
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit 273024c7ce2511e86b2c5917b4fdb0a689c99f1a
Author: Mike Miller <mtmiller@debian.org>
Date:   Fri Dec 16 16:14:48 2016 -0800

    .gitlab-ci.yml: add gnutls-bin to Debian build environment
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit f0c11be578b41076c808ee7a27ecfdcbcf065376
Merge: d3370ccc b18cd679
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 16 08:53:30 2016 +0000

    Merge branch 'tmp-host-update-test-fix' into 'master'
    
    tests: make test-pass-script pass with new openconnect
    
    The new versions (7.07+) do not automatically send a bogus hostname,
    they require the --local-hostname parameter to be passed.
    
    Resolves #80
    
    See merge request !25

commit b18cd67917be218e154868dbdb30516f2cf7d6bb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 16 09:37:40 2016 +0100

    tests: make test-pass-script pass with new openconnect
    
    The new versions (7.07+) do not automatically send a bogus hostname,
    they require the --local-hostname parameter to be passed.
    
    Resolves #80

commit d3370cccd0f1648d3b5811845e0ea1c19ac9180a
Author: Mike Miller <mtmiller@debian.org>
Date:   Thu Dec 15 15:12:04 2016 -0800

    tests: allow test-gssapi to run on Debian
    
    Check for alternate filename of ntlmssp.conf on Debian-based systems.
    
    Resolves #82
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit 9f0776e6aefe657671fdee5fcb5301053168e285
Author: Mike Miller <mtmiller@debian.org>
Date:   Thu Dec 15 16:23:17 2016 -0800

    tests: ensure unique temporary config file names
    
    Some unit tests share the same ocserv config file. Ensure that the file
    written and used by each test script has a unique name.
    
    Resolves #83
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit cd39da8ae1beb55b345f680b1cc4eaaa62358919
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 15 21:23:17 2016 +0100

    tests: coverted to bash tests which had bashishms

commit 2da126a5856d35df8db7288313aa4fe869537cba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 14 08:30:32 2016 +0100

    .gitlab-ci.yml: added Debian:stretch build

commit e3ccd247a092d99fb669b82cc6b2aa49d56be69c
Author: Mike Miller <mtmiller@debian.org>
Date:   Tue Dec 13 18:37:49 2016 -0800

    configure: discover pam_wrapper directory from pkg-config
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit eed6ff69020db34039b71b9e769a8b260a170cd7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 14 09:00:59 2016 +0100

    Makefile.am: corrected typo

commit 98d0ae62f6ad9cc8442396f535b0b40bf83ee78a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 14 08:37:08 2016 +0100

    README.md: corrected name of pam-oath in debian
    
    Also added packages where were not previously mentioned in
    Debian.

commit 34fd11d3a80ac4f4ac5ec2f69521012eebef10ac
Author: Mike Miller <mtmiller@debian.org>
Date:   Mon Dec 12 15:17:25 2016 -0800

    Fix typos in man pages, config files, and comments
    
    Signed-off-by: Mike Miller <mtmiller@debian.org>

commit 2c64c99baa975514edf3d66dfa3cba452a074362
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 13 08:37:19 2016 +0100

    Reverted recursive make in src/
    
    This simplifies the make process and allows for greater parallelism
    during build.

commit 1b7e00ed0216e4c68ac6a5fcec42e4f81e556ea3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 13 08:27:05 2016 +0100

    Use unique names for autogen files
    
    This addresses issue in parallel builds caused by autogen
    using the same temporary files for both occtl and ocpasswd
    files.
    
    Resolves #76

commit 7fea131d006e11584566fb8233a87a71b8a4ca9f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 10 14:30:15 2016 +0100

    use stamp files to allow parallel build of autogen files
    
    Autogen seems to output on the creates files gradually, something that
    makes 'make' believe that the command is complete prior to the output
    file being fully populated. The current approach uses stamp files to
    ensure that no incomplete files are used for compilation.

commit 729b04b00bf90a4c358817d85db72cfcf745ddaf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 17 08:43:41 2016 +0100

    doc update

commit eb9c86218e22d3a5237c5ca9bb1c51b772e8c0b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 17 08:33:41 2016 +0100

    .gitlab-ci.yml: update autogenerated files prior to make dist

commit 63e924b6217934a05de984ba87edfa03bae3a47a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 17 07:56:40 2016 +0100

    .gitlab-ci.yml: cleanups

commit e42c5ed7e737ce84e13150aed9a3fe2da1de9934
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 16 19:10:16 2016 +0100

    autogen: store and use auto-generated autogen .in files in git builds
    
    This simplifies the generation of the files (delegated to configure),
    and allows systems without autogen to be used to compile git sources.

commit 1f940f04c546a77a3430cef7aab8de9195b8c307
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 16 18:56:44 2016 +0100

    Revert "autogen: store and use auto-generated autogen files in git builds"
    
    This reverts commit d0908f2c522d82126f5482b59a14175d4f47fd9d.

commit b5c39e2edfd8f827113163589b449d69549e7c78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 15 14:57:48 2016 +0100

    sample.config: include switch-to-tcp-timeout directive

commit fce7610aa5e5ac775d5b00d13f691c83c6208ad4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 14 19:17:16 2016 +0100

    released 0.11.6

commit 943e2fb597041ed15bc31be136d98a07a97ddb17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 14 19:16:50 2016 +0100

    bumped version

commit 7606842d995578758d21eddb7becc14e41a0c9fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 14 14:15:50 2016 +0100

    occtl.8: Added examples of usage

commit e7b1636de47d6b2fc34a8d371144f72825cbca94
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 14 14:10:49 2016 +0100

    occtl.8: added more info on JSON output

commit 7b0e84a36ee14ec59f35331f648908c6db6dafeb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 17:56:20 2016 +0100

    doc update

commit c8ea2a9183228da8938ae74bf193a6178d696681
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 17:55:01 2016 +0100

    .gitlab-ci.yml: added centos6 build

commit b7b8c084d01e023501313320cde0dfc26f41b184
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 17:34:45 2016 +0100

    common.mk: corrected path of generated static libs

commit d0908f2c522d82126f5482b59a14175d4f47fd9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 11:11:19 2016 +0100

    autogen: store and use auto-generated autogen files in git builds
    
    That is, if autogen is not present in the build system use the
    stored files.

commit 813a3a2451361fd0dc1b4f3730a4540649b99303
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 09:53:50 2016 +0100

    configure: require automake 1.11.1
    
    This allows ocserv to compile on Centos 6.

commit 2c6f73222d6c9963351095e66f9ddbf6c2d78387
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 09:37:12 2016 +0100

    when compiled with gnutls 3.5.6 or later use its pre-generated DH parameters

commit 76ddc60c249610fb073b0196f51cd8a264566e1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 09:26:09 2016 +0100

    doc update

commit 41a896fbe1d994d1f3b59718c91ea57daab9496f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 09:24:54 2016 +0100

    doc update

commit bcb2ec6505c9612898c36cade8753ec8faf14b18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 11 09:17:29 2016 +0100

    ocserv: pre-load the OCSP response file
    
    That allows the worker processes to serve OCSP responses, even when they
    have no access to the actual file.

commit e9ea737707805f2eaf0e14b5df0a9b13f57d4bae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 4 10:07:34 2016 +0100

    doc update

commit 69261b6aa8b7b32c0587b303f0347d897cfff4c4
Author: Andrew Patrikalakis <anrp.gitlab@anrp.net>
Date:   Fri Sep 23 15:19:19 2016 -0700

    Automatically switch to TCP in case of no received UDP traffic
    and enable by default

commit 135ee6dd75e8947a46dd671845282de15d87dc57
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 20 16:28:49 2016 +0200

    doc update

commit 9ca37523c7b38a4372176388ab56bec22c479f7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 20 16:23:17 2016 +0200

    doc update

commit 9462dfd8c398e6d31cc33d9bb50c8a754d623e57
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 16 17:08:49 2016 +0200

    html: enhanced HTML decoding with decoding of explicit unicode chars

commit 34caca57b00cfa6f5b600f9037dfc3dd665599e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 16 16:58:49 2016 +0200

    tests: added basic checks for HTML escaping/unescaping

commit 32e9766fe811cc2dc8a93301fd34430dfd3781ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 16 15:48:42 2016 +0200

    tests: added basic checks for URL escaping/unescaping

commit d743cf7bddf389bc20e20f0da0bbe5d0a1c58c84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 16 15:48:17 2016 +0200

    html: fixed URL escaping

commit f0f25dde00a423af0c87f5c00a14cf1d78d9d5a2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 9 17:37:46 2016 +0200

    doc: point to README-radius.md for radius configuration attributes

commit 7f1297959b289d32a623f44a39a7b566c430a8ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 27 15:41:48 2016 +0200

    doc: mention about NAS-Port in radius README file

commit e474a15598a09a50fb9e8f8bc6707e64d96a2bfc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 27 09:06:16 2016 +0200

    radius: update the worker's pid on subsequent updates
    
    That is, even if we initially advertize the PID of the worker
    handling the client as NAS-Port, the client may eventually end-up
    being served by another process. In that case we make sure that
    the radius server is notified on the next accounting message.

commit 2c308e3a8692cd0adcc51d0f956001811d7a47d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 25 15:46:54 2016 +0200

    doc update

commit 5fce6c8c866b0a8b3e127633ba4d94e61ac9af32
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 25 15:44:43 2016 +0200

    Use the X-AnyConnect-Identifier-Platform header to identify mobile clients
    
    That is, if the header contains "android" or "apple-ios" mark it as
    a mobile client. The header X-AnyConnect-Identifier-DeviceType is only
    considered for logging purposes and appended to the user-agent name
    if present.

commit d30c5616af2cd9678493b8eb6a825926e8055609
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 24 13:20:19 2016 +0200

    .gitlab-ci.yml: restrict freebsd build on ocserv branches
    
    This runner is not shared and cannot be taken advantage outside
    the ocserv group.

commit 047b70e1bbca0ca4839fcb8f301910144a3d0360
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 23 09:38:40 2016 +0200

    bumped version

commit 17122fe364bc3259a4822444d9a511d71d282ed0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 17:55:59 2016 +0200

    bumped version

commit 8f8ff565afa4599b55c3a8eb9a34aafca9c4fd3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 15:56:14 2016 +0200

    get_session_id: added explicit casts

commit c53b97367ebee5fd5712abc74b4befd52cb950d5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 15:52:17 2016 +0200

    config: more consistent printing of startup error and info messages

commit 445b9070a6747f778bd0ba360d92996e36895858
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 15:39:41 2016 +0200

    untied the cisco-client-compat option from the DTLS-LEGACY protocol
    
    Introduced instead the 'dtls-legacy' config option which can be used
    to explicitly disable the legacy DTLS protocol.

commit bd87c7607ed77956ae49af6458f41471775511d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 15:26:02 2016 +0200

    renamed match-tls-and-dtls-ciphers to match-tls-dtls-ciphers

commit 22a01d2981d5655efc32dc1c974707c4c4b8dbdf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 15:21:57 2016 +0200

    doc update

commit 4c85fa97f00173eb3c19a6d8a38fb6f1a945e01b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 22 15:16:34 2016 +0200

    Added configuration option 'dtls-psk'
    
    When this option is set to false, the DTLS-PSK protocol
    will not be negotiated by worker processes. The process will fallback
    to the legacy protocol in that case.

commit 33089ab74e3e08b22c792407d7c8c6bcf822defb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 20 16:04:37 2016 +0200

    Updated the new DTLS protocol negotiation
    
    The server sends the X-DTLS-App-ID header in the new protocol;
    the X-DTLS-Session-ID is only used in the legacy protocol. The
    server expects the Application identifier to be placed in a TLS
    extension.

commit a5a80f8236a466bb6c91b502bfcd6e1a70d3c421
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 21 08:53:05 2016 +0200

    seccomp: add getrandom syscall to filter only when it is available

commit ede5d97be86cf94f5e88cccc850f3626295f9028
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 15 08:36:30 2016 +0200

    worker: increased the wait time for the SEC_AUTH_REPLY message from sec-mod
    
    That is, to allow for authentication methods which require the user input
    prior to returning a reply.

commit 0a4e06b3545b4edd63ba0884c371b9cc5ddf0c2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 14 13:11:02 2016 +0200

    Only send the X-DTLS-MTU in the legacy protocol
    
    There the DTLS ciphersuite and DTLS version are negotiated and
    we cannot accurately predict the actual tunnel size. In that
    case the client must rely on the Base-MTU.

commit 284af95d7969302f8e0560ad3f0d864d00cbd03b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 14 11:35:30 2016 +0200

    tests: link valid-hostname with gnulib
    
    It is used by its included file.

commit c3c54cd9581323ebe9517cdb44290b9e06810525
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 14 11:29:08 2016 +0200

    ocspasswd: compile with LIBGNUTLS_CFLAGS

commit 646449743cf727f9c703f9277990517d95f297d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 14 11:12:14 2016 +0200

    added defs.h containing definitions from vpn.h
    
    These are the definitions used by common/ library and
    a split from vpn.h to reduce the dependencies (in headers)
    to common library.

commit cc74e66f755b3d286cd5c01a456cc627c7cad22b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 14 10:21:20 2016 +0200

    doc update

commit cc1dbf1c246375c175b4392e3c6ca2139b0c355a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 14 10:20:41 2016 +0200

    seccomp: added getrandom() to the accepted list of calls

commit 58b447c4135f6bd2cd530314fa1b679ba893be16
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 13 14:09:53 2016 +0200

    Use a macro for the DTLS-PSK protocol indicator
    
    Also corrected its usage in worker-http

commit b0dcea76ca5e9c37611644cf97b9fcc525000b4a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 13 13:39:52 2016 +0200

    Modified the X-DTLS-CipherSuite parameter for PSK to PSK-NEGOTIATE
    
    This was changed so that it is explicitly made incompatible with
    existing openconnect patch. The new openconnect client patch for
    PSK negotiation is incompatible with the protocol as implemented
    in 0.11.4 and requires the option match-tls-and-dtls-ciphers for its
    openssl variant.

commit 2022ee4270162b298f7c561d55617fb040a15f01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 13 13:35:14 2016 +0200

    doc update

commit 555d2cb03e4dad17dae0c35ccae855ef8965c99e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 13 13:25:35 2016 +0200

    Added the match-tls-and-dtls-ciphers config option
    
    That when enable, it will prevent any DTLS negotiation other than the
    DTLS-PSK, and will ensure that the cipher/mac combination matches on
    the TLS and DTLS connections. The cisco-client-compat config option
    when disabled, it will disable the pre-draft-DTLS negotiation.

commit 56e82a2f31aa565fd8133789aeadd2f312e19e7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 5 13:00:46 2016 +0200

    test-gssapi: use an unlikely username to avoid clashes
    
    That prevents the test from failing if the host system contains a
    user called 'test'.

commit 324c70d4e4fea2ccd4be4422a73d2ed0cb560fb5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 4 02:27:13 2016 +0200

    .gitlab-ci.yml: use gitlab.com shared runners

commit 9fadbc89f9d55be9b7662184f5831e5970c9d39b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 4 03:09:52 2016 +0200

    README.md: added coverage badge

commit a1889e100de763c217a5d48b524b425a59e8ba49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 4 02:49:43 2016 +0200

    Allow disabling the tests requiring root
    
    This allows seamless operation on the CI.

commit 32d1bafece6a749bedd9fd9b443f62e88cdb8033
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 27 16:51:09 2016 +0200

    doc update

commit ca5dfc26ef82d0758d6b908caaeef3bd4837b16c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 5 09:48:04 2016 +0200

    released 0.11.4

commit a581d0babb22897bc77ee8057d72281177ac2c1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 5 09:04:33 2016 +0200

    removed support for chacha20-poly1305 using the legacy protocol

commit 068548e83f86d2462584f86be95cb069b5f1378c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 5 09:03:21 2016 +0200

    doc update

commit b5f5f2a0c0e03645eec1f501d3986194f93bf8fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 27 10:27:46 2016 +0200

    Enhanced the openconnect protocol DTLS negotiation
    
    If the client's X-DTLS-CipherSuite contains the PSK keyword,
    the server will reply with "X-DTLS-CipherSuite: PSK" and will enable
    DTLS-PSK negotiation on the DTLS channel. The ciphersuite set
    in the DTLS channel, must match the one set in TLS one. That,
    makes the protocol consistent in security properties (DTLS and TLS channel
    will match cipher/mac combinations), and allows the protocol to use
    any new DTLS versions, as well as new DTLS ciphersuites without
    any code changes.
    
    That change still requires to client to pretend it is resuming
    by setting in the DTLS client hello the session ID provided by
    X-DTLS-Session-ID.

commit 5825a2cd3e6d429e732b01870818c83bd6d1035a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 4 14:13:14 2016 +0200

    NEWS: corrected typo

commit c2ae0f6cc2ba937f97497fef2ce46708a3e85c68
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 4 08:11:22 2016 +0200

    bumped version

commit 5a0c6caf659b7d9af8496e540081ba47ec69fa92
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 4 08:05:34 2016 +0200

    improved config macro CHECK_TRUE

commit 982348df88326174e4c55d089fadd7f015fb6ee3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 11 17:00:24 2016 +0200

    Reworked MTU discovery
    
    Disable MTU discovery when not requested, set the minimum packet size
    to 1280 for IPv6 and 800 bytes for IPv4. When MTU discovery fails to
    calculate an MTU over the minimum, it disables itself and ocserv will rely
    on packet fragmentation. This also enhances DTLS connection detection
    (due to MTU issues), by setting the DPD packet size to equal to the current
    data MTU.

commit 22d285949c9fade1ca59d8acac72d9af67a97fed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 1 12:01:38 2016 +0200

    update the IP and the proc table hashes when updating the proxy protocol IP
    
    This prevents stray pointers to the replaced IP being present in the
    proc hash table.

commit 8163e5c48644af025ec7932c1eced303dcbeca74
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 28 16:23:34 2016 +0200

    tests: use fedora24

commit 37a369aec67e30aae125d9e0972882a191904678
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 26 13:32:40 2016 +0200

    ocsignal: memset to zero the new sigaction

commit 99c9b6749b7c31342723e4ec8838527909c04280
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 19 11:35:24 2016 +0200

    recv_from_new_fd: changed to unsigned type

commit 6510ef06cf251b9d09f0de0b975751252f57fdd0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 19 11:30:34 2016 +0200

    doc update

commit 2ffd80509d7b0f8b07e3f978fbdabb34c08b414d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 19 11:27:16 2016 +0200

    recv_from_new_fd: update tmsg pointer
    
    This addresses issue where tmsg was free'd by the dtls_pull
    function, and free'd again by the caller of recv_from_new_fd.

commit c346f29860af1938042a3bb4f3068888ed8eee53
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 19 11:24:43 2016 +0200

    worker: use the main buffer for receiving commands from main
    
    This avoids large stack allocations.

commit 53a54b0e39ea64469c2947ae1051f82e5bfca7f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 13 09:08:44 2016 +0200

    doc: documented about krb5-k5tls plugin
    
    This plugin is required in Debian and Ubuntu based distributions
    for kinit to be able to use KKDCP servers. Suggested by Jochen Hein.

commit 23558aff310e33c171f71ec10c25f98419c3c345
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 9 10:57:53 2016 +0200

    doc update

commit 4015a19a296790a29a54bf02dd92dd0e7848ad21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 9 10:55:54 2016 +0200

    open_tun() ignore EINVAL error in TUNSETGROUP ioctl()
    
    This allows ocserv to work with kernels prior to 2.6.23.
    
    Relates #60

commit 5964c31d68b9bf561a11fb4d685546ad9eeaec85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 4 13:31:42 2016 +0200

    tun: enable multicast mode for FreeBSD systems

commit 6aafcc0bf5f5b837a8ae03733571f08f3510145a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 4 13:20:10 2016 +0200

    tun: move bsd-system-specific tun code to bsd_open_tun()

commit 7254f3b2e725149a953cdb1cf3c7c1812c79293a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 4 10:48:54 2016 +0200

    document how a certificate may hold multiple groups

commit b4d04878a66ad4905486ab0dc22befdd127e7772
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 4 00:20:06 2016 +0200

    doc update

commit 085df882ab9dfa2de2e578c63ae7c075246d59b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 4 00:19:27 2016 +0200

    tun: corrected tun device group assignment

commit e12d2e6818c4b860916cc96b8f53062ff1f542bb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 29 10:05:00 2016 +0200

    tests: made pam check independent of builddir

commit 0eb8aac9bf153ac497187264d58603788a2d6556
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 29 09:50:41 2016 +0200

    README.md: mention NSS wrapper

commit 0d1358edf2c01f990356534b043daceedaae54c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 29 09:49:24 2016 +0200

    configure: enable pam tests only when liboath is present and PAM compiled in

commit a80abeb888a3e48bfe4cd96aad74e2918e6279c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 28 09:05:09 2016 +0200

    tun: use the same prefix (from the lease) in Linux and *BSD

commit ae3c20c3edc521f86e13fa69143804c61fa862b7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 25 22:04:23 2016 +0200

    tests: pam tests were converted to use pam-wrapper
    
    This allows running the PAM tests without requiring root access

commit dcab477d52ad831aa2c846050046d2539b0b665a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 20 23:22:11 2016 +0200

    radius: corrected the accounting of gigawords for outgoing data
    
    Previously the incoming bytes were accounted instead of the
    outgoing bytes.
    
    Resolves #57

commit 954607e88a46accef719738d3e66bfc4676f492a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 20 23:02:38 2016 +0200

    When sending auth_id reply to pre-3.x clients use a different auth_id for username and password
    
    That is because some modified v2.x clients require that any response
    that asks for information does not have an XML form with auth_id set
    to "main".
    
    Resolves #55

commit bcef7c58cfe605c3e60715d728913903cbe7a865
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 16:09:07 2016 +0200

    worker: always honour the DTLS ciphersuite that matches the TLS ciphersuite
    
    That is, do not consider the ciphersuite priorities at all, but rather
    prefer the DTLS ciphersuite that matches the TLS one (if any).

commit 3d4fb9b3e6605ea3926e05b9f8dc342a3b39138c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 14:27:40 2016 +0200

    tests: added unit test for valid_hostname() function

commit f7e057a6dd5381866eeb1ed243fe3ac71be02534
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 14:18:15 2016 +0200

    tests: check whether the hostname is overriden by per-user conf

commit 1f809f5e64ec48a8811961496f617b1f28a846ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 14:13:44 2016 +0200

    ocserv: check the hostname value received by the client for validity

commit ed31709e75c642393951346564b3440ce3e5e97d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 14:05:24 2016 +0200

    ocserv: notify back the client about the hostname accepted (if any)
    
    That is, the server will populate X-CSTP-Hostname and send it
    back the the client.

commit 4124b9c089c1f8e90f86c665d03c45332fe24cd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 11:17:02 2016 +0200

    doc update

commit 0c093ad8f3a4b58b1d89394172753468dcddf84a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 11:08:44 2016 +0200

    ocserv: allow overriding hostname on the per-user configuration
    
    This allows for the administrator to set specific hostnames, or even
    empty hostname for specific users.

commit a81652a4115a53bc76dc4bf3ace81368f2580b9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 10:47:08 2016 +0200

    doc update

commit 966206ecead91bbd3f80417ff8e1b0a733b4f689
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 18 10:45:23 2016 +0200

    worker: when advertising the IPv6 address/prefix use the subnet prefix
    
    That is, instead of advertising the address with the server's prefix
    advertise the IPv6 address with the prefix that is assigned to the client
    itself.

commit fb1430f95ec6338146c1aab1f81629e82bc3bdab
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Fri Jun 17 22:06:15 2016 -0700

    Zero out the whole sockaddr_in6 struct when parsing explicit-ipv6
    
    This initializes sin6_scope_id to 0, so that $IPV6_REMOTE doesn't
    get strings that look like: "2001:db8::1234%932152953"
    
    Signed-off-by: Kevin Cernekee <cernekee@gmail.com>

commit efafdd9e733a077443ceb9cc84181855689a6fdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 17 23:11:21 2016 +0200

    tests: added missing certs

commit a0ffa818c085f2ac108a696fe6ef26163618ceb9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 17 11:56:43 2016 +0200

    tests: use the .tmp suffix to pid files

commit f2bef25cdc47b909fdfec7da352ed595a3213aaa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 17 11:07:32 2016 +0200

    sample.config: use new paths

commit cbc4dde44b684704339c1355580e72e1781a8161
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 17 11:11:12 2016 +0200

    tests: moved passwd files to data/

commit f3a182dbdf276cd7011a94275660c3da6695efb7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 17 09:53:45 2016 +0200

    tests: moved config files to data/

commit 5c88ee7715ae908293e9daac41416057b3329251
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 16 12:59:08 2016 +0200

    tests: moved all certificates and keys in certs/

commit 0810cc0aa7fc7950257024972335d20dece6fb90
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 16 08:48:26 2016 +0200

    doc update

commit 05badbea7a64dd6bf275cd4d4aafe9858ef016bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 16 08:28:42 2016 +0200

    doc update

commit bb1ba34bdc1916d6c188dbc5c0e0ba921af33ac1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 16 08:27:22 2016 +0200

    ocserv-fw: updated with Lance LeFlore's version

commit c49b395a547566dc99ec79ae5b31d9eb81a5d8e1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 8 19:37:17 2016 +0200

    ocserv: better log message on terminating worker processes

commit aa27271f3b84dd2f8777a8a06e4e54bbbef49c6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 8 17:01:48 2016 +0200

    tests: remove the explicit docker pull commands from docker-common.sh

commit 7a6a7c707af1a78a769a00d091d097ec990e98df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 5 11:35:51 2016 +0200

    worker: wait for confirmation on messages sent during disconnect
    
    when disconnecting and sending stats and info to main and sec-mod
    ensure that messages have been processed prior to exiting. That makes
    sure that these messages are accounted and are not lost. This addresses
    issue where the stats on disconnect were not properly reported to
    sec-mod.

commit d83c523661655c2c5d9e780fb5a02df6501d8d98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 5 11:25:52 2016 +0200

    sec-mod: process_packet -> process_worker_packet

commit 1276ebeb48f65530acf609f1e1e709c1c1641d93
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 5 10:38:32 2016 +0200

    ocserv: eliminated race condition with up/down scripts
    
    If a user is disconnected while the connect script is running,
    kill the script and wait for its termination. If it successfully
    terminated (exit code = 0) then run the user disconnect (down) script.

commit ceed05b030cac4ebf1ec6b6f6928a86dac5cd409
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 5 10:14:34 2016 +0200

    doc update

commit 55cb72522a7859f2b104b4a4c77ccacf9bd8a05a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 4 20:03:40 2016 +0200

    doc update

commit ab5d22c00535b54143302a92dd3760379380fe04
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 4 20:02:15 2016 +0200

    tests: added check for host-update-script being run

commit 5c9cda67fbb2a6ec4ec22154f6867bde627c1068
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 4 19:13:09 2016 +0200

    ocserv: added a host-update-script config option
    
    This option will set a script to be called once the user is
    connected and provides a hostname to be used with his IP. That
    script can be used to update a DNS server or so.
    
    Relates #39

commit db31e9def3078d899e3c43065fd86ad49deb6f83
Author: Andrew Karpow <andy@ndyk.de>
Date:   Wed Jun 1 19:10:15 2016 +0200

    ocserv: fix ipv6 tun control on OpenBSD
    
    This fixes ipv6 tunnel support on OpenBSD. OpenBSD network stack doesn't
    enable the multicast flag on tun devices like FreeBSD - but this is
    obligatory for ipv6.
    
    Error message without this patch:
    main: tun.c:260: tun0: Error setting IPv6: Invalid argument
    
    Signed-off-by: Andrew Karpow <andy@ndyk.de>

commit 8c3990cfde1e1f4b6a64a45c9bc8d97262383ca0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 1 15:41:13 2016 +0200

    doc update

commit 9e4ee0551a76b6512f198d49eaf00dbdcf85c818
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 1 15:35:26 2016 +0200

    ocserv: improved old openconnect version detection
    
    That is enhance detection to detect openconnect version 3 and _earlier_.
    
    Resolves #51

commit 63e4500f09b3cb9babbdb88af113b9f38534dacd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 29 11:57:33 2016 +0200

    bumped version

commit 0c9feb2b8bd6ca771897e939891f5edb8bc10114
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 29 11:32:29 2016 +0200

    Added travis automatic builds

commit c7200bb3cf1a7e36b112eb77d40418e8d580bfb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 29 11:41:13 2016 +0200

    configure.ac: reduced libtasn1 dependency to 3.4
    
    This allows building in travis systems.

commit 0ee0ef79fbacf61e355a0a1b105704732ccdd8d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 17 14:50:52 2016 +0200

    documented the available URL handlers

commit 788f40253b87b46a24c358b417899cfad8fe77c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 17 14:47:36 2016 +0200

    doc update

commit a9c5a8271c41a3206aea88f23295185b9e1af2a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 17 14:46:12 2016 +0200

    tests: added check for the CA certificate handler

commit f87871fc4874f78c93213554b5ec1afb74c3a216
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 17 14:42:03 2016 +0200

    ocserv: added '/ca.pem' and '/ca.cer' HTTP handler
    
    This handler will return the server's CA certificate to the requester
    in PEM and DER formats.

commit edabd11b4aade64e99b14281b543c4bd67089e70
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 17 13:08:25 2016 +0200

    strcasestr.m4: explicitly unblock SIGALRM
    
    This works around an issue in the freebsd CI which fails on this test.
    For some reason that signal is blocked while running the test.

commit 7b8e8865022911066bb6e48b626ff5c4ee57bd75
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 16 14:48:55 2016 +0200

    ocserv: avoid calling exit() on signal handlers

commit 7f65577fbddf49d32416d3004f6fb40e70027de3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 16 14:47:13 2016 +0200

    ocserv: enforce a default auth timeout value
    
    That is to prevent processes hanging on inactive sessions.

commit 465389a82a616a5263d299c26d9c6a870a29db43
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 15 09:49:46 2016 +0200

    main-worker-cmd: more precise messages

commit db5b81c1b7db93582052ef254bd4ed03554f4bfb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 14 20:39:58 2016 +0200

    doc update

commit 3a834fad2682d323708a65bdb465b47c22ec4a2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 14 20:16:32 2016 +0200

    occtl: print the cookie associated with a user on user info
    
    This allows to map existing cookies to connected users.

commit f08b1433985c3f1ea31689bf702b723b9160db05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 13 11:14:55 2016 +0200

    memmem/strcasestr.m4: don't call exit() from signal handler

commit cb01bed65eef36b9d686157e46cbc68d88c6de45
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 11 08:52:36 2016 +0200

    Increased the minimum acceptable MTU size under IPv4
    
    This is because lower MTUs than 576 are unreasonable today, and RFC791
    (from 1981) requires that all hosts must be prepared to receive 576-byte
    datagrams.

commit 2a59aa87eae952019a0e70b4ad6764bf70df046c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 11 08:42:58 2016 +0200

    ocserv: on DTLS rehandshake or new fd reset the MTU
    
    This allows to avoid an indefinite drop of MTU without any possibility
    to reset.

commit 4dabfe0afd5476ddb62bf5998c6835b0e8bcc7ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 9 14:04:24 2016 +0200

    doc update

commit a15fb587c833951f903fef619a135fccdc5eb8f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 9 12:44:49 2016 +0200

    doc: mention that restrict-user-* are experimental options

commit becd51e799e5239c3e1ba5df718fbc9569e5f507
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 9 12:12:09 2016 +0200

    ocserv: corrected setting of UDP socket options

commit 6b9b80e4878bccf8453c5bcdb711ad9a4b1ffbcb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 1 00:39:30 2016 +0200

    README.md: doc update

commit f77217f0f5e82b8c1fc1e21a155c5eee4f7d01ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 30 17:50:58 2016 +0200

    gnutls_pem_base64_encode2 was replaced with gnutls_pem_base64_encode_alloc
    
    The latter version is available in older GnuTLS versions than 3.4.0.

commit 106f0a4f5b20d7dc65de435207ae693034f944b1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 30 13:53:11 2016 +0200

    doc update

commit 6687220e48af9bdbd4b6ea0a094ceaf1230266ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 30 13:45:25 2016 +0200

    tests: added check for cert handler validity

commit 9a27c0537b11719224a7946ef8a2da7030d8587c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 30 13:38:05 2016 +0200

    sec-mod: when receiving invalid headers from main, bail out

commit 43a7fe41b33db4b55dda43739d32fc02eba746be
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 30 13:12:25 2016 +0200

    ocserv: added '/cert.pem' and '/cert.cer' HTTP handler
    
    This handler will return the server's certificate to the requester
    in PEM and DER formats.

commit e6c566ac7612aa357e065cbb0a7b0099f733a20b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 29 16:11:33 2016 +0200

    doc update

commit 5caf3f82ad76b27d41518fa337b46509009051cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 29 14:49:18 2016 +0200

    .gitlab-ci.yml: enhanced separate build dir check with code coverage output

commit 3f367c36bc265630eab4c26c697ca14a774bd994
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 29 14:53:01 2016 +0200

    ax_code_coverage.m4: updated to latest version

commit e142202583fff93ae3ece6b0163e90f371d84b71
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 26 21:46:00 2016 +0200

    README.md: updated build badge

commit 4779fb0fa57ce0f78247be1b56f43c2507d31c28
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 26 21:45:27 2016 +0200

    doc: updated copyright dates

commit 3bc5c0607c2f30ede42a0bbebaf3ae373ac89d2b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 25 22:55:52 2016 +0200

    doc update

commit 46a53437d0dece90800e7ced4c0e21ca0cf29166
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 19 16:57:08 2016 +0200

    ocpasswd-test: updated grep check for more portability across systems

commit 00b631e01e163bc26eae4c03f0c98a99dd8b9022
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 19 15:53:49 2016 +0200

    .gitlab-ci.yml: added build rule on freebsd

commit b706ab787183443b00323400e0dfda9345a7a7f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 19 14:16:51 2016 +0200

    main: reduce UDP_FD_RESEND_TIME to 3 seconds
    
    This allows a client to reconnect the DTLS session as soon as even
    3 seconds. This addresses issue with clients turning the wifi off and
    on again, not being able to reconnect with DTLS.

commit 51f3c7b1eb89a8f15a322cd900e3ffd870be7c10
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 19 13:25:45 2016 +0200

    Moved libev initialization after daemon() and sec-mod process init
    
    This is because libev uses a file descriptor in FreeBSD systems
    (kqueue) which is closed by the kernel on fork(). That means
    that on libev deinitialization after daemon(), libev will close
    another unrelated descriptor.

commit 2a7d8ac30377ea48c8a0d93660fe0eaff9adf193
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 19 13:23:54 2016 +0200

    Revert "FreeBSD: restrict to poll or select the main event loop"
    
    This reverts commit 659c903369d418abf5f413b9a5275680994309b3.

commit a092673dc425a49750429188497a65ab7e8b09f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 18 16:59:40 2016 +0200

    set_socket_timeout: be more verbose in error conditions

commit 2debbde9a34a70c024cf74655c6fab580ed57e5d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 17 13:43:33 2016 +0200

    ocserv: initialize ctl_fd to an invalid value
    
    This prevents issue with clear_lists() closing the 0-fd
    even when ctl_handler is not initialized.

commit 359ec5fe2e62b2df2843de0e46ce7508c785bb93
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 17 12:52:17 2016 +0200

    sec-mod: simplify the name of the security module to ocserv-sm

commit 5ea4b32f4d4dd9e399ba319ff39c3c786b2bc78f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 17 12:13:38 2016 +0200

    tests: use 127.0.0.1 for debian radiusclient conf
    
    That is because freeradius listens to IPv4 by default.
    Also adjusted the default log directory to match the
    Fedora's one and simplify the test.

commit 056153463925d449953d05cc2ef00ce5a6169f71
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 17 11:05:32 2016 +0200

    tests: updated debian tests to use libgnutls30

commit 3eb5dd360e7fb3f5cca15e8d87285cc292f9896d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 17 10:45:26 2016 +0200

    doc update

commit 795730a681b21f95d24b23b2cee4f4133c472161
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 16 10:27:24 2016 +0200

    configure: Add a code coverage option
    
    Configure with:
      ./configure --enable-code-coverage
    Show coverage output with:
      make && make check && make code-coverage-capture
    
    It does not take into account tests run under docker.

commit b088d2df7363fc026594842ac8757fdb15c5761c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 16 10:13:22 2016 +0200

    Makefiles: combined the rules for local libraries

commit 3b844bf3f0fdc0d3b777aa49c0d0adbd6fcfe08a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 16 08:56:23 2016 +0200

    bumped version

commit df36a4c0bab64e0827f3bf7746e17a5668fbb15c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 15 16:51:35 2016 +0200

    main: close stdin and stdout as early after daemon()
    
    The reason is that in some systems daemon() may close stdin
    completely. If we delay this close and another descriptor takes
    the stdin fileno, we may end up closing a legitimate descriptor.

commit 8ae0d044f2caf8f218832bc5f7a815a16b9494a1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 15 16:45:13 2016 +0200

    doc update

commit 659c903369d418abf5f413b9a5275680994309b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 16 08:45:54 2016 +0200

    FreeBSD: restrict to poll or select the main event loop
    
    This addresses an issue with FreeBSD and the kqueue interface.
    When used it causes the sec-mod spawn to fail. Enabling it, it possibly
    affects the pipes generated for communication.

commit ca4e281c1d2b941db6a9b2dcef50548274009d3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 15 14:22:47 2016 +0200

    setproctitle: fixed compilation issue in Linux systems without prctl

commit 70d78f39d9137ea2190bd64f326bd54ad708203e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 15 14:16:51 2016 +0200

    updated comment

commit 9a125c3abad53d8de80ae6bf32e1e1362a23043d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 15 11:15:32 2016 +0200

    tests: update tests to include the running username/group
    
    That removes the requirement to keep a uid_wrapper specific
    hack in check_upeer_id().

commit 4c43f06ab5578bcebc08a8477640628d349d6b3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 12 22:13:54 2016 +0200

    tests: added check for connection using invalid certificate

commit 34d059c43a4aa6b08da0058c067fee592fd8d7f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 12 21:54:12 2016 +0200

    sec-mod: corrected comment

commit eb9cdf1933b2b8fec19e0a2a7fb8662b57aeb47c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 12 21:48:07 2016 +0200

    TODO: mention hostname override

commit 01cde787d3270f5515337a6616d96b089f870b40
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 28 23:30:46 2016 +0200

    doc update

commit 071a37aaa417e1d74cf31f541314807342586738
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 29 21:06:51 2016 +0200

    tests: Added test for radius group receiving
    
    This tests the receiving of groups using "Class" radius attribute
    in the format "OU=group1;group2".

commit e798493d0893d455f0caa312819f1a1efc597167
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 29 20:51:51 2016 +0200

    sec-mod: perform group checks at auth completion stage
    
    This allows to retrieve allowed groups from radius response.

commit b5cabb9589a8e65024b409380dc70ef5d7a57110
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 29 19:16:19 2016 +0200

    tests: added check for trim_trailing_whitespace()

commit ade786a0f1f27ed486e1ea887f95174f7c55dd70
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 28 20:25:50 2016 +0200

    radius: replace experimental Group-Name with Class attribute
    
    The current format allows to handle multiple groups and is used
    by several radius servers.
    
    Suggested by Yick Xie.

commit 0b4333d7eea68d844407be5a15cf3b91bd8e6a49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 31 14:59:16 2016 +0200

    ocserv: warn when conflicting supplemental config options are specified
    
    That is, do not allow radius' groupconfig=true option to be combined
    with config-per-user/group. This reduces frustration since these options
    are incompatible.

commit 34857ff5a57c28b96ac03572a6e1464437c7305f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 31 14:37:29 2016 +0200

    tests: check for DNS information propagation in user config

commit 6bd1d0b0e0cc49e1e9e6a711255cf27e9bc3e908
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 28 15:49:48 2016 +0200

    worker: always free the previous msg in an fd update

commit 2f684a227bec4dc63677ec77c8aa53bd9a1b6d9e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 23 19:53:38 2016 +0100

    doc update

commit a037174a87dc133f5138e1108955435a97d8a26a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 23 19:52:40 2016 +0100

    occtl: use '?' for unknown time

commit 1b1fab8c3cc11d9bc80e16c6fce7b0e137aa1018
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 21 21:48:48 2016 +0100

    occtl: add newline into print iroutes

commit adc4aa40af601d327cf66596850d742bb039eabe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 21 21:44:45 2016 +0100

    sec-mod: don't set negative time into last_modified field

commit cd4fe99a5743e2ec3dd801af5e6f6e13189d805b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 19 23:20:40 2016 +0100

    main: don't require a full handshake packet when forwarding UDP session
    
    That is, to allow any small DPD packets to be sent to the correct
    worker process.

commit 441c1125755430d42895e1042e47ef7d17594f91
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 19 13:05:34 2016 +0100

    bumped version

commit 8bfc3f6e2deb94dec03c4239e132334c6e5233bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 13 10:24:20 2016 +0100

    reduced logging verbosity in certain common failures

commit 76e6aef74dde70986a8001e50f911f2c62b4e12b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 8 12:27:07 2016 +0100

    doc: mention the ip_address option

commit 98647dc117b79e8dc496f3dcbf2906bc16726090
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 7 16:12:36 2016 +0100

    occtl: correctly print last modified field

commit eb71a8221094809f8f811666f21d268f289dd305
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 7 13:56:12 2016 +0100

    worker: improved exit reason reporting for server disconnects

commit da4e4fcf2ae90d9ecbf0e0e2dee5151abcc93b8d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 7 13:51:26 2016 +0100

    Improved error message propagation due to new combined APIs
    
    This amends 8892eb19343be110cb38ff783620b252a6f0a409

commit c213a8b8fcb17eff6ba3c91e66d9b461588cb967
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 7 13:35:45 2016 +0100

    sec-mod: do not export expired entries to cookies list op
    
    Also combined macro to determine expired entries.

commit e4dbeb6bd3ac740bd0d318587b12b4a3543d3739
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 6 16:48:22 2016 +0100

    more files to ignore

commit 94b2da514c6da41a3116fd67074f41f4a4b6f44d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 6 17:10:56 2016 +0100

    occtl: split show cookies to all and valid

commit e0947340bb4d25e75df4fbec281169b74332f3e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 6 16:58:08 2016 +0100

    ipc: pass the connection status as integer
    
    Conversion to textual form now happens at the client (occtl)
    instead of the main server.

commit 8892eb19343be110cb38ff783620b252a6f0a409
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 6 16:45:13 2016 +0100

    use a single format for all messages simplifying server
    
    That patch also combines all the message generation or receiving
    functions for to allow easier modifications to the format.

commit 8a99ed78db01cf0c63e3c0dd6078f8795c8a9ffc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 6 12:06:44 2016 +0100

    doc update

commit f3338e84f7246a71c065c1eff2df41c4019f475d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 6 10:43:27 2016 +0100

    Added occtl command to display cookies
    
    This allows to display and examine valid cookies from occtl.

commit 4541a73d3da3cbf10b9760116711b5ff06d4c4a4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 16:58:17 2016 +0100

    tests: fixed proxyproto test on debian

commit 435c78fa3d369b5966ecd2a5dd6199ba0bb68f9e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 16:45:35 2016 +0100

    doc: eliminated references to HOSTNAME
    
    It was never available in the up/down scripts.

commit 4a1d8ab2469a2ab7426f966ef84df34f83a5ab17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 16:43:20 2016 +0100

    doc update

commit 94e44d2eda783eb0a4910beb2f12b7ce73a7cdbf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 14:10:30 2016 +0100

    tests: updated debian docker file

commit 63d3b98cad7688c3fb5484d4e1499be5c63af2a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 13:43:48 2016 +0100

    use more consistent naming in internal messages

commit 76e602a4ca8260d2b193c8a51280eb588d6d8264
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 11:20:54 2016 +0100

    worker: don't log the SID in normal debugging levels

commit a2d62c005d2f98403dd793a1876db6c9b2a0cb5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 5 11:11:12 2016 +0100

    worker: censor the DTLS master secret header as well

commit 33a11af1b83f953e06e9d92137888532ad7ef4ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 4 16:52:48 2016 +0100

    worker: pass received hostname to user via SESSION_INFO msg

commit 9d144c89a91ddcfb29928589e7b8d13f0b48be0a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 4 16:47:50 2016 +0100

    Eliminated hostname handling in sec-mod
    
    This value never reached sec-mod as it is only get known
    after session is initiated by the client (i.e., after
    auth_rep message is received).

commit 2659d555ac2d2cc488fc17c372ed60ea2ed4e2f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 4 16:31:36 2016 +0100

    main: overwrite the SID after removing a proc struct and on received packets
    
    That's because it is a sensitive value that can be used to resume
    existing sessions. I should have used the fork+exec model in main.

commit 5ee78fec1476c9651fec2dd290c466f9a43d7bc9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 2 09:19:06 2016 +0100

    run_sec_mod: close unused sync fd

commit 2fa8ed478e82fca92300cbb46c887b902157796b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 29 14:22:03 2016 +0100

    doc update [ci skip]

commit 993df97b9ba760e194532ca31d55ac50be37f444
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 27 17:54:24 2016 +0100

    worker-privs: added getpid to the list of allowed syscalls

commit d64431ab835aba859f36932326b08fcd1c0b6af8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 23 16:09:06 2016 +0100

    doc update [ci skip]

commit f41b425f234f3696d43b5cf64233483f34688107
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 15 18:37:27 2016 +0100

    worker: replaced the timeout-based session forwarding with a validity checking
    
    That checks whether the first packet received in the new session is valid
    and if true, accept the new fd. This avoids the mess with validity detection
    based on timeouts.

commit 4fd259928d6d589baf50d38ab68becd6e26f0a3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 23 15:35:59 2016 +0100

    doc update [ci skip]

commit fccaca16bd09f61ab0a31035ccc69d7584c61249
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 15:11:07 2016 +0100

    Increased the SID (cookie) size to 256-bits

commit 0be5ada07b10d2f3cb22f5ef04fde23ba38d3b4f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 15:10:17 2016 +0100

    tests: removed cookie key rotation check
    
    It is no longer applicable.

commit 010257c6a21c205df75f206c86a61194cb5f004f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 12:13:12 2016 +0100

    Simplified cookie handling
    
    This change set eliminates the need for cryptographically authenticated
    cookies and relies on sec-module providing accurate information on
    the SID provided by the client.

commit 88101dc9fd0ffdd65c8c836431453af580a30eb0
Author: Björn Ketelaars <bjorn.ketelaars@hydroxide.nl>
Date:   Sun Feb 21 17:54:52 2016 +0100

    strerror was declared implicit. Pull in header

commit 6443b6e24565d89d56beb699959412e063ca55c4
Author: Björn Ketelaars <bjorn.ketelaars@hydroxide.nl>
Date:   Sun Feb 21 17:51:53 2016 +0100

    remove unused variables

commit 43931c8c887c295a8069c97b9f4cb0ed67905a06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 23 14:50:37 2016 +0100

    doc update

commit 220a6c2c4d611b633d222c3ec660e129236d7611
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 23 14:49:20 2016 +0100

    tests: check the ipv4-network directive from user config

commit cbcd4c8279be99e6674319ac2202d777431144e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 23 14:46:13 2016 +0100

    sup-config/file: Addressed issue with ipv4-network not reading prefix
    
    That is the syntax now accepts options such as:
    "ipv4-network = x.x.x.x/y". Reported by Frank Rosquin.

commit 260b07955c028e893319df60b1c84077d6f41233
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 23 14:19:02 2016 +0100

    tests: allow compilation with included protobuf

commit a2f031a0185baaaf768509247f44de18590da839
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 22 14:07:15 2016 +0100

    Allow compilation with local libopts

commit ef2456ab859de32b4d4da332d6ad2d89717d616d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 22 14:02:09 2016 +0100

    allow compilation with included protobuf

commit f6f957487e706af9288ac58be3fe78fe441fe74e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 15:23:17 2016 +0100

    main: fixed issue with disconnection reason logging
    
    It was logged before it was made known.

commit 96796fc6e2ce8c8c943711c09c5d54ba0f0e2a23
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 13:24:09 2016 +0100

    Renamed proc_search_ip() to proc_search_single_ip()
    
    This better reflects the purpose of the function and will
    prevent misuse.

commit 06d8d65249ef5805117c5dff3becc88f269ab165
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 10:48:23 2016 +0100

    overwrite the memory of every packed message

commit d9a72ce62901a3f6d10936a9e8641fe493bc8fd4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 08:57:39 2016 +0100

    doc update

commit aa6bd829d4943e825874f6591a1752f57e2c516c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 21 08:55:06 2016 +0100

    increased the default cookie rekey time to 3 days

commit 796b5e0648b4f9fb0b2c017c8485c11a556d7c86
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 20 18:33:27 2016 +0100

    doc update

commit 5dce846fefb722fa9d5234b5cddcc7eb4b11ae66
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 20 18:29:32 2016 +0100

    occtl: fixed compilation issue in OpenBSD
    
    Reported by Björn Ketelaars.

commit fc0b90f8894bd2d5e5061331a87cd437db464884
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 20 18:26:14 2016 +0100

    tun: fixed compilation issue in OpenBSD
    
    Reported by Björn Ketelaars.

commit 176bf532ec48aa0903273795ee46e65705f2dda4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 19 10:57:33 2016 +0100

    released 0.11.0

commit a2655972e89c03a1c36da79da7edcdeaa3a1c80d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 19 10:51:44 2016 +0100

    bumped version

commit 837b5989f87b782fa05be455ac4ec32224cc454e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 19 10:50:16 2016 +0100

    configure: depend on radcli 1.2.5
    
    Previous versions have a bug which caused crashes under certain
    circumstances.

commit 0d918346246f46a2ac94bdc571d5aed948287470
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 19 10:05:48 2016 +0100

    tests: allow compilation without http-parser lib

commit b3fe8afe3adc8f2226c590fab6194b46e87e2e4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 19 10:04:21 2016 +0100

    tests: added check for human_addr() output

commit 029e42d07dcfdd1345a3b8cdfcb3999678210d17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 19 09:56:21 2016 +0100

    moved human_addr2() to ip-util.c

commit 007e390d631d48740f0aa591d9bb99890fa23ced
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 18 17:06:36 2016 +0100

    doc update

commit d3ebbe6afb010dc4fded6e0579bfbd28db5952cf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 18 16:50:02 2016 +0100

    tlslib: don't use GNUTLS_X509_CRT_LIST_SORT; it is buggy

commit 83dde24620dfb77cbdcbfee48b8de2c997cae1c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 14 14:50:49 2016 +0100

    tests: reference debian testing by name

commit b130bd92142f5034648c112a28137a66f05b4783
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 13 14:48:16 2016 +0100

    config: increased the default auth-timeout value to 4mins
    
    This provides slow users more time to enter their username,
    password.

commit 57d79d524b622e7d59c522c502768c032f7a06d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 10 13:09:15 2016 +0100

    Allow compilation without http-parser library

commit 89f02bad02e40156b94f929e6d9e41634ef06c20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 8 19:26:15 2016 +0100

    config: put kkdcp options into brackets
    
    That is not necessary for the existing examples, but may be
    in future ones, as they may contain characters that libopts doesn't
    like.

commit fb790086952cff214ba54da77b037bb6333a6cb3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 3 09:44:45 2016 +0100

    released 0.11.0rc1

commit 5dbe753512732dff805e4f93073c510fddb82b24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 28 15:22:22 2016 +0100

    tests: increase timeout for radius accounting report

commit 9b165b9e061afe595890f591d6100efd3daef7a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 28 13:57:32 2016 +0100

    doc update

commit 336c2dc8cddbc459d34f9358794c807db352f098
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 28 13:57:27 2016 +0100

    bumped version to rc1

commit ff5b2b7aad7760b15f0d5f978d0c226f23a972c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 28 13:12:21 2016 +0100

    Use 32-bit length variable for transferring between occtl and ocserv
    
    This allows to handle the transfer of long data between ocserv and occtl.
    Reported by Liviu.
    
    Resolves #29

commit 353bd39686fea0f0f5bec17bdfb334b12baf5913
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 18:11:55 2016 +0100

    replaced select() calls will poll() calls
    
    This allows to handle descriptors more than the maximum limit
    allowed by select(), and thus handle more clients than 1024.

commit f035ae170da76e091b6128193c212d3cc1a59f8b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 16:01:37 2016 +0100

    human_addr2: Avoid the usage of getnameinfo and use the simpler inet_ntop
    
    This simplifies the function.

commit 1e3171685bd5a8a0253f82b59cc16e9c7df64e45
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 15:54:00 2016 +0100

    Added sanity checks to CMSG_DATA() access

commit 43a8ba526fe08a66dba3582c2b02cc117735f6b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 14:36:39 2016 +0100

    main: fixed IP unbanning

commit 3389286f340842d2477aebf2cf71a7dba45e4090
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 14:32:46 2016 +0100

    occtl: corrected the printing of IPv4 IP ban points

commit 06b855533b8b6f09575bc223e92a4b4fa6062eb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 14:17:48 2016 +0100

    main: don't exit on setrlimit() failures
    
    Exiting would prevent operation under valgrind.

commit b66b1f6390fa777ff4872ddf60f6ba2b30c97c11
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 14:22:20 2016 +0100

    main: don't attempt to access client configuration if not already set
    
    This prevents crash introduced by cefd77b6336fd358f1d3c4c8731a28ac6b91d5b0

commit 22b7df3131638ce76821c145b6f2c049991d2813
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 14:03:11 2016 +0100

    ip-lease: do not attempt to calculate more than FIXED_IPS predictable IPs per user
    
    That allows to have an unlimited number of connections per user.

commit 727fc31edec0071b0f36d089a68cbb87e4a19b47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 13:52:59 2016 +0100

    Immediately terminate on session_close() error
    
    This is not a recoverable error.

commit 0315aa7c4f9736e14987614953dfa6f772e2e1b6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 13:46:55 2016 +0100

    main: terminate sec-mod after every worker process has been sent a signal
    
    That is to reduce any possible timeouts caused by a defunc sec-mod on
    termination.

commit ced5e9b3f48af18a004be860835f6727fa4d6ee5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 12:08:21 2016 +0100

    sec-mod: ensure keys are always initialized to NULL
    
    Addresses crash due to b6df22c8c300b4aa7f2c678bce2b4dd7b55e1779

commit d49d3f22536d5486e3ec73bbb9733f08d3ec9d46
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 11:56:45 2016 +0100

    tests: fixed test-sighup-key-change to be able to cope with diffent build dir

commit d6b2d1696cf3e7de034960daef2828fe6f5d15ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 11:20:00 2016 +0100

    doc update

commit 1941c52c2417775b62371d5ec1a06786cb4296f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 11:18:43 2016 +0100

    main: destroy the event loop on fork
    
    This reduces memory used by worker processes.

commit a1d67c48ba3235e25ae80c134bd443af92177bed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 27 10:54:00 2016 +0100

    main: ensure we call ev_child_stop() on child cleanup handlers

commit 8c2d6adde175835c6e47ac83d61e601035631f27
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Tue Jan 26 22:47:52 2016 -0800

    Return HTML error message on 404
    
    Currently ocserv's 404 errors show up as a blank page in most web
    browsers.  Add a simple HTML error page.

commit 8bf668c0f7dd35124889878a65eee16fd5f92da0
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Tue Jan 26 22:47:51 2016 -0800

    Use helper functions to send common HTTP headers/responses
    
    Factor out duplicated code in the AnyConnect compatibility handlers.

commit b3c9da4ce1fce5d3a713deb7b30e14ab3434642a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 26 12:51:33 2016 +0100

    doc update

commit ed2edd65c515f4ec3803484b1715f87c8534390f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 26 12:46:38 2016 +0100

    tests: added check for certificate update on reload

commit b6df22c8c300b4aa7f2c678bce2b4dd7b55e1779
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 25 16:07:40 2016 +0100

    Reload the certificates and private keys on SIGHUP
    
    Until now this part of the configuration was static, but
    there is the need to reload certificates and keys, e.g., on
    renewal.

commit 0681aa1e3c891df0974843898faedfd10c9d401b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 25 11:23:10 2016 +0100

    main.h: corrected typo in comment

commit c61e5eb47be1a4dd9024342714feea843931385d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 25 11:16:06 2016 +0100

    doc: document that ocserv-fw requiring options are available in Linux systems only

commit 05960f17513a1912d6a125e20194ced8578b40a4
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Jan 24 13:11:38 2016 -0800

    Add default case for 'restrict-user-to-ports' switch
    
    This fixes a compiler warning:
    
          CC       main-user.o
        main-user.c: In function ‘call_script’:
        main-user.c:215:7: warning: ‘ret’ may be used uninitialized in this function [-Wmaybe-uninitialized]
            if (ret < 0) {
               ^
        main-user.c:66:6: note: ‘ret’ was declared here
          int ret;
              ^
    
    It's not really necessary because proto gets checked when the option is
    parsed, but gcc doesn't know that.

commit a55cf312caa7fa9c4597eeab83fdccac32283f01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 21 22:25:44 2016 +0100

    README.md: moved radius to main dependencies

commit 655df51655f0c071b47706574b61eb1b844aca5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 21 11:18:58 2016 +0100

    occtl: updated copyright text

commit d0fc4ce92bd539fb7597195eaac3dd10f635cc4e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 20 13:12:37 2016 +0100

    doc: added more info on isolate-workers

commit 7fcd989d6af9bb69e480e189c4ac3c3f31217e85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 20 11:58:44 2016 +0100

    TODO: removed already handled issue

commit f80f513e4ad621e71f294e77f785183d77e7f34d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 14:16:08 2016 +0100

    tlslib: abstracted the recv_packet functions

commit f5e5bde86271617b51cd05312d896d68b6501637
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 14:02:21 2016 +0100

    tls_recv -> cstp_recv

commit 3e556f21df95015b552dbcbd008a17be3e67e412
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 13:56:17 2016 +0100

    worker: use DEFAULT_SOCKET_TIMEOUT and remove SOCKET_TIMEO_SECS

commit 96febbaf61c4df42baa54a414d106c50419e1132
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 13:55:56 2016 +0100

    proxyproto: use force_read_timeout() to ensure reconstruction of packets

commit 9b6c4f3a263e97bd72eaad104903e7a7c4130a83
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 13:19:10 2016 +0100

    cleaned up the fatal error checking in TLS/DTLS sessions

commit 507e725189065bf17ebac27fcf7608d827526c21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 11:59:37 2016 +0100

    tests: fixed issues in radius-test-config

commit af95a6718257d1e974d479a26f4260fb27796914
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 11:37:05 2016 +0100

    tests: enhanced the radius checks to test for Connect-Info presence

commit 72a71d21d1d040d36e6fbba6072613549d4a47b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 10:27:55 2016 +0100

    ocserv: added the --test-config command line option
    
    This allows to test a configuration file for being valid without
    starting the server.

commit 9cd8562fd4ddac45c9fea581aa1621c6162a4356
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 01:03:40 2016 +0100

    worker: handle EOF during HTTP header parsing

commit 7725d53e8df62181752e5b12d8f0039479063dcb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 19 00:51:10 2016 +0100

    tls_recv() will retry on EINTR

commit 40185fe0c26c14c879ecc856f90f5ae269ca2dce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 18 11:55:13 2016 +0100

    radius: send user agent information as Connect-Info on accounting start
    
    Relates #26

commit 271ce75574d23f6b307d523680f45cdaa068da22
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 15 15:18:14 2016 +0100

    doc update

commit 17473a734c5c272868fa8da2da4fb96c5b21971c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 18 00:01:14 2016 +0100

    tests: updated radius tests for Debian

commit 55b1cbec918274335be2e794f832ea5817cd19eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 17 23:18:24 2016 +0100

    radius: more careful checks around the user_agent access

commit c662641768af2979a0107b48584645aa6c932c49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 17 23:13:04 2016 +0100

    README.radius: added Connect-Info attribute

commit dfc4124d7af149dd35993e14b234d7ac064f1ac2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 16 23:48:37 2016 +0100

    NEWS: doc update [ci skip]

commit 6c6481de40b4dac32cd4e8f3b9799b51fdb4836e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 16 23:00:11 2016 +0100

    radius: send user agent information as Connect-Info
    
    That allows the radius server to store information on particular
    client. Resolves #26

commit 8aa55db2393bf04788ecf718d093187b6a1b5427
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 14 17:22:39 2016 +0100

    send_stats_to_secmod() is called as soon as possible
    
    This allows us to send the client assigned IP to radius server
    as soon as it is available, rather than waiting a full interim_update
    cycle.

commit 1fc9e31f3eb25b17d0dd371368e4fca334a40f16
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 13 11:44:17 2016 +0100

    Updated support for chacha20-poly1305
    
    It was modified to support the PSK variant of the algorithm because
    draft-ietf-tls-chacha20-poly1305-03 doesn't define an RSA variant. It
    was tested to interoperate with openconnect/gnutls.

commit 3eb2b903ed8c9cd4e10304e319465e1e50424f97
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 11 13:33:23 2016 +0100

    worker: Prevent any frozen worker processes by killing them on inactivity
    
    That is, introduced an alarm() call at the worker periodic check, which will
    only get triggered if a very long timeout has occurred without the loop being
    completed.

commit 43d55261e65b280facc09b48dc3b8159214c68de
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 11 13:09:34 2016 +0100

    main: introduced main-worker-cmd.c

commit e1dea8ae71fd4697e2e69e31c4428ca9f674abeb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 11 13:07:15 2016 +0100

    moved run_sec_mod() to main-sec-mod-cmd.c

commit 3002645108b29e5c2c86a0386efa8fe702987822
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 11 13:05:55 2016 +0100

    moved proc creation and deinitialization at main-proc.c

commit f2bd0a0ec7ac50467113aa377dcf5f3dab0e02c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 8 13:39:16 2016 +0100

    released 0.11.0rc0

commit 22a4ab8a9bab4ab62743f583c75e22f2552f3726
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 7 13:24:15 2016 +0100

    worker: use the state buffer for HTTP requests

commit 79cfacf0fe32fbe1ab8222ff0645638ab8a62fa1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 6 23:47:06 2016 +0100

    worker: enforce a default socket timeout for TCP and UDP sockets
    
    That is because, although we  use select() to see whether a call to
    recv() would block, there are certain cases in Linux where recv() blocks
    even though select() notified of available data. Reported by Yick Xie.

commit 5bb19cae39e67563c78393d30dfe85b1d449462e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 5 21:37:35 2016 +0100

    don't attempt to open per_user_dir if it is NULL
    
    Nor attempt to close a NULL handle. This addresses a crash in certain libc's.

commit 1955394cfa70a34aed010a85826745cfed3184d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 2 00:09:51 2016 +0200

    When receiving from unix socket attempt to reconstruct the CSTP packets
    
    That is because it may happen that the sender sends a complete packet
    into multiple chunks. Resolves #22

commit bee0d57323d0ab01e43e410e3366b0f3ed612e9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 1 11:30:43 2016 +0200

    set_tun_mtu: print the mtu size on failed assignment

commit e4cedfb898b67f99c08730ceaecb886c6d737efb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 31 19:49:40 2015 +0200

    README-radius: added more text for Framed-Route format

commit 0ad8a3a46a2212e270d4b33f798708d912819d89
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 23 19:33:14 2015 +0200

    correctly print the IP of addresses added to ban list

commit 34fa33ca15b65f10b7347d4166945c9288f7aea8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 22 00:29:45 2015 +0200

    README.md: added radcli dependency

commit ca5cae6f01821946498099d2c3e7329cddd07d5f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 22 00:27:30 2015 +0200

    tests: use libradcli4 in debian builds

commit 3e82a965a8a8d7e886a3e0ec48ef425f6447d4e0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 21 23:56:35 2015 +0200

    Prior to sending profile files, perform cookie authentication
    
    That allows to read the per-user config file, and prevent
    a null pointer dereference. Reported by Yick Xie.

commit 97a49138e68a2de9cdbee6ea52d0a0d406987cd8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 20 12:43:09 2015 +0200

    improved logged messages for certificate auth

commit 7b086fb3f9007cfa324fd92ab67d716979d3c157
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 18 11:20:27 2015 +0100

    Don't print any cookie data unless debug level is set to be over 8
    
    That prevents adding into debugging logs sensitive data which can be used
    to resume sessions.

commit a52ffc4d06578d0209397753eb6ad3b778ed581e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 8 16:29:14 2015 +0100

    When max-clients is set adjust the file descriptor limits accordingly
    
    This also increases the default number of descriptors to 4k.

commit 3b0342c6784d9eeb4a04c35df14831d4906fac69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 8 14:35:30 2015 +0100

    doc update

commit 4f4fa817b66fe000da3c96b3e001d3c33d7128b6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 8 14:28:16 2015 +0100

    doc update

commit 01706859e010b4d02204372e964893fa5b1be783
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 8 14:14:23 2015 +0100

    occtl: print the restricted ports for the client

commit cc4848fa6a2c056ccd5dde8edf65820e74c044b2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 8 13:48:11 2015 +0100

    protocol buffers generated sources for ctl were moved to libipc

commit e1fc1f3c45f89712c504d9ce9c0f41ec74eeb222
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 19:51:11 2015 +0100

    TLS session resumption database was moved to sec-mod
    
    This reduces the number of sensitive data available to main process.
    Resolves #21

commit d378ce0709abc1456564621008d4d22e3d48db9c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 19:12:31 2015 +0100

    doc update

commit 9979b8cde0fee8f29b13b9358fc5f3aceac1a7e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 14:40:36 2015 +0100

    tests: kill politely openconnect in all docker tests

commit 4fad865864096f146c579116f2ca21a9468c3099
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 14:35:30 2015 +0100

    tests: proxyproto-test: kill openconnect more politely and give it few seconds before checking output

commit c9e3911eaf96658fa090afdc844c8f5b64d181ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 14:20:35 2015 +0100

    tests: use consistent name for PID file

commit 4539bd2ef54bea0105f2dac04d1941dd1aef0d99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 14:14:05 2015 +0100

    ocserv-fw: removed unneeded variable

commit 420b003a23f39c5ac340eb0aac91b8e824c4dad9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 13:54:04 2015 +0100

    tests: corrected routes in ocserv-fw-neg and ocserv-reload tests
    
    Also simplified the ocserv-fw-neg test by not checking whether the
    follow up script was run. This is part of the -fw test.

commit 3dcf18d7b4578d0366a09fa31700f6a4a74235ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 13:32:44 2015 +0100

    occtl: added command 'show iroutes'
    
    This command will list all iroutes currently available.
    Resolves #20

commit 75ad8a4359cb511895d9f604ea2035ef9f136048
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 13:10:45 2015 +0100

    ocserv-fw: added license

commit 4df69f49b94aca75501f68690c9191fec08f7e20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 11:34:27 2015 +0100

    tests: added check for restrict-user-to-ports negation options

commit 14d19b3e9a3e8bb4da5e2d8097ccf3c0693f8108
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 11:15:54 2015 +0100

    Enhanced configuration option 'restrict-user-to-ports'
    
    This enhancement allows to negate the rules and allow the user connecting
    to all ports except the specified.

commit 8019490511a68a29803cdfd58e40a5025f040a10
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 7 10:35:15 2015 +0100

    tests: added check for proper operation after SIGHUP
    
    This test checks whether we can retrieve user information
    even after a SIGHUP (the time where the old config is invalidated).

commit 7db767599a227a0be25d868b2c3332ab908660e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 6 10:07:39 2015 +0100

    Added /VPN to the list of known URLs for auth
    
    This URL is used by certain versions of the anyconnect client.
    Reported by sskaje.

commit 4e71afbf6f33a689f7d558d622653118456f0a28
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 6 02:10:26 2015 +0100

    occtl: use dash for no-dtls message to make it more consistent with other output

commit 2588e617c09a0ed2caa932ad1c592ac3c77f7923
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 14 10:53:45 2015 +0100

    configure: don't issue warnings that make compilation with libev impossible

commit c053474be9f52705cb22eef22dc4709990ca513f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 13 23:27:28 2015 +0100

    doc update

commit fe28fd15cdaa735524b9cac4e3a4a6c70a05638a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 13 16:00:12 2015 +0100

    Added occtl command 'show events', as well as the corresponding command in main
    
    This allows the main process to handle a single listener which will
    get all information about new and disconnecting users.

commit 12bc8955bdb4338ecd8733bd821fb2ac43feb458
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 13 14:04:32 2015 +0100

    main: allow multiple clients in control channel (occtl)

commit 0e604b8a9f3eb2421779fe8fa1314708b4011b78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 10 13:57:33 2015 +0100

    Master process was converted to use libev

commit 9252e2229877141beb542bc180fd366bddcd0e70
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 14:58:34 2015 +0100

    Added reference counting to configuration values.
    
    That is, to allow referencing to these values from proc_st
    without fearing of them being invalidated on a config reload. We
    perform a cleanup of these values on the server periodic check.

commit 2e68ba115854a7981b589f6b0040c14b19e8024c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 3 14:48:33 2015 +0100

    config-ports: added error checking on talloc

commit a580303e95166b16b34a76832463b8c22d8a20f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 2 13:59:58 2015 +0100

    README.md: added liboath dependency

commit d910c8952b628c25ddcba83e4a97d4647942854b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 2 10:19:27 2015 +0100

    doc: list 'route=default' as an example

commit 446baaf95a468c05a9cb4e1fc9bcc68637aa44fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 17:47:10 2015 +0100

    tests: use a common macro to obtain docker image IP address

commit 34ac6bce563ea13b4d71748b3af9cdecec75ca15
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 17:44:06 2015 +0100

    tests: check restrict-user-to-ports in firewall-test

commit 2bb25347d0747a2722b601823da2778ef15fda87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 15:47:32 2015 +0100

    tests: Added check for port parser

commit eabfbe8473688790832babcb3fb59e5358fe658d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 14:05:28 2015 +0100

    Added configuration option 'restrict-user-to-ports'
    
    This option is intended to allow restricting users to accessing
    specific ports once they enter the VPN. The rules set using this
    option will be enforced by the ocserv-fw script.

commit 0a38b70cc3ab6367bbce37626a1a24efc3c69f38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 13:51:30 2015 +0100

    removed unused structure

commit 8990ee74484bfa3c15c8508e94dd977610b4f642
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 1 11:46:30 2015 +0100

    eliminated double null check

commit a0ca61c9a8305413620c03d7e270ad98974348ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 27 09:58:31 2015 +0100

    README.md: added gssntlmssp as a dependency

commit 53376c96a2e4f4e7f153c44fb4e2ccb5fbf52d61
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 29 20:24:32 2015 +0100

    doc: document the behavior of restrict-user-to-routes in case of defaultroute

commit b11567dd643a98f4cd914d60a27dcb6b8664ea97
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 23:11:14 2015 +0100

    include ocserv-fw

commit e215c77112e97ea12b257d887c5c85716e43c0b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 22:13:17 2015 +0100

    tests: check for %{RI} validity in test-iroute

commit d9fc3b465a02dafa35a77f9069c8e9d5d36b9c41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 20:25:28 2015 +0100

    tests: check for sever exit in test-cert

commit 0ba6330d3722da58645222cfa0cd32cd4fb7185f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 20:03:09 2015 +0100

    libopts: updated to 5.18.6

commit 3e5a78d500929cde41f490d4701a2ac0b924e7f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 19:42:53 2015 +0100

    .gitignore: ignore more auto-generated files

commit c40b0aed135eefb119afdb4014e8fe21f7d6589c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 19:41:39 2015 +0100

    tests: check whether append-routes directive works

commit 2d823aa2004e9f6576da6b302809ea64a5959fee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 28 19:27:44 2015 +0100

    Added config option 'append-routes'
    
    If set to true it will restore the old configuration semantics
    of appending the global routes to per user/group config.

commit 6ac03c0c8055cb4abe8bcde7a084b19fa5864c0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 27 09:42:19 2015 +0100

    tests: removed ipv6 functionality check from kerberos test

commit be77cdf671c9bf6007c5ab1cbe60e6b71a776040
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 27 09:36:39 2015 +0100

    tests: test-cookie-invalidation add a time wait after client termination
    
    That ensures that the client is already terminated when the final check
    starts.

commit dad2181261bc47c41e692c450bd2e02eb72aa0d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 26 16:00:52 2015 +0100

    doc update

commit e41d6b6e750967f876edb0d63a1bf9cab7844fbe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 26 17:24:00 2015 +0100

    tests: updated radius config files for f23

commit 2484d81aadda66eb4638adada90c60e89784eef1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 26 16:00:09 2015 +0100

    Allow matching passwords of format <xxx_password> in client's login message

commit cefd77b6336fd358f1d3c4c8731a28ac6b91d5b0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 26 15:03:08 2015 +0100

    Simplified per-user/group configuration handling
    
    We now use a common structure in SESSION_REPLY and AUTH_REP
    messages. That structure is generated by sec-mod and forwarded
    by main to worker, thus eliminating the need to create passing
    code for each new user-config variable being added.

commit f86fb99b509db0d14f204f36fbbc530ffa2a1a84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 24 00:29:31 2015 +0100

    doc update

commit fa6c7ac0e614d45e983b6631d1f35413817c819c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 18:12:09 2015 +0100

    ocserv-fw: when called with --removeall exit immediately after action

commit ddddaee5be8f8bac8669dc28cf1a39642cf3fcf1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 17:26:57 2015 +0100

    tests: check whether the firewall rules have been applied with restrict-user-to-routes

commit 5952dfbecec01febd8d14a25c367c456e4825124
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 17:25:42 2015 +0100

    prior to execl() scripts set stdout to be our stderr to avoid confusing scripts

commit f5fca982dce784a982ebb398c9548c60e3c8934d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 16:25:59 2015 +0100

    Added configuration option restrict-user-to-routes
    
    This option, if set, will call /usr/bin/ocserv-fw for each user
    connecting, i.e., adding firewall restrictions based on its allowed
    routes.

commit 183820ae3c81f386f1b71a8b7f4e64c4346f66cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 16:01:43 2015 +0100

    ocserv-fw: Added script to restrict clients to their allowed routes
    
    That is when called as a connect/disconnect script it restricts the client
    to the routes it is allowed to see, and prevents it from accessing anything
    else.

commit a556837f2b78fda6cb562d1b93084666fe96357b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 10:52:23 2015 +0100

    tests: check whether the routes and DNS servers are set in scripts

commit 6f794a287e399e1afc3ed1b71dec15e970773967
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 23 10:47:09 2015 +0100

    If running the local script fails due to signal handle that as non-zero exit status

commit c7fe48f372f9f84f268712fa071e439906d4ddb1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 17 11:15:49 2015 +0100

    scripts: export the routes,no-routes and dns servers

commit 45c2fb55c8685d454b984ca4c57997e80f8371ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 14:35:13 2015 +0100

    tests: avoid source dependencies from other dirs in Makefile
    
    That causes compilation errors under certain cirquimstances.

commit 854fd8f421fa431fe8beb5ce4edfff513422cf85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 14:31:05 2015 +0100

    added cwrap libs as dependencies

commit e91a56117b452fbb15c6002716e8f59df40b2c56
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 14:30:48 2015 +0100

    tests: modified cwrap tests to run from different builddir

commit ba44c2a6c187083760aa0b5de328ede6dccd9eeb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 12:21:37 2015 +0100

    pass DPD and keepalive values to occtl

commit 01a6435fad7e1a2be4a329940cddc4cff2600cde
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 10:46:22 2015 +0100

    .gitlab-ci.yml: run all checks on build systems

commit 345a7526767ee214265361e7f699cf7fab07efd8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 10:44:31 2015 +0100

    tests: converted part of the test suite to run with cwrap
    
    That allows several tests to run as non-root.

commit a09d4f51ab4ed90ecf5d0bbbd3ec50a62651f267
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 19 10:09:38 2015 +0100

    relocated confusing message on user logged in

commit 8d03519fb2cbfac94ef14ed6ffa2bd57aa8ac3b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 17 11:02:26 2015 +0100

    doc update

commit 2b0102d1c5e877b02a1840f0b01c0feb53806d2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 14 16:02:49 2015 +0100

    tests: use more sensible names for pid files

commit f770e0000c595e3282b576323df3768d6ca15e99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 14 20:26:27 2015 +0100

    tests: added check to verify the proper operation of cookie key rotation

commit 2473633b8d91c3fcd3c933130aecd13890f0a354
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 14 10:41:22 2015 +0100

    Added cookie key rotation

commit fd5f9df89830977f9a2528b9bd7d1ae7664d1ced
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 16 22:30:56 2015 +0100

    route-add: added more sensible version of system()

commit 9f93c318a3a2a9b23e7e8a39cc7872b683b6503a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 16 18:14:16 2015 +0100

    prior to calling system set the default signal mask

commit 684f7793811b1e46a3fd70df1bdb514f76623291
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 16 17:49:21 2015 +0100

    tests: use fedora 23 for docker images

commit 850dd24be303f0472ffea328413649d0443e98de
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 16 17:48:52 2015 +0100

    document testing dependencies

commit cc48b0808a303a1de030b8dc52c97171569bff63
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 16 17:22:12 2015 +0100

    A failure to apply iroutes is propagated and login is denied

commit 8cb807d27d901b26630b2c27a7e60f356519157a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 13 12:46:32 2015 +0100

    design.md: document a possible optimization in IPC protocol

commit 3c653fa7473cebf57960fbcbc37c970c63fe1797
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 13 10:24:02 2015 +0100

    worker-extras -> worker-http-handers

commit a53ee64472780bd14b0e2bcae28fc77146a98625
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:30:27 2015 +0100

    occtl: include files from generated common dir

commit 0d9d283b127b1e3f57fd39fb17514c59d32a20a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:26:47 2015 +0100

    tests: remove CCAN sources - we already link to libccan.a

commit 8d17358c8bd6238e815f49f283d2f50ef2d0ee71
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:25:45 2015 +0100

    don't export LIBTALLOC_CFLAGS when using the included

commit b2881375af07f705bc9b820c0f9f678be9152657
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:16:02 2015 +0100

    tests: use proper cflags after code refactor

commit ba81d998e97c258867cf964e79dcab7c21d86f2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:12:54 2015 +0100

    common: include upper dir for auto-generated headers

commit d9d246a37513571d41e0e2af9a36def466eb3ccd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:10:28 2015 +0100

    finish move of ctl.proto to common/

commit 113c26503026c70bb82dbde4e61e52ab36b93ae3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 16:00:44 2015 +0100

    common: Added missing file

commit b5640d61fbf93a3f1a2a194c4e5d747b6b17009a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 15:58:20 2015 +0100

    cstp_send_file: use system calls instead of libc for open/read
    
    That simplifies the handling of seccomp rules.

commit 3ba4c2b618e1360e599b9a63cef8a57ce91c91ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 14:59:12 2015 +0100

    move common sources to common/

commit 2ef8d5a4c2085ca9b7e25e7e4ed1b00614843a40
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 14:53:17 2015 +0100

    gnulib: remove all fcntl/open/etc compatibility functions

commit e6b942b5f8e749041e62b7e5e33f5218f7f146c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 14:10:50 2015 +0100

    .gitlab-ci.yml: cannot build with --with-local-talloc - it conflicts with system header

commit 75b3461f70179085fa3e95210ee70427245d0bcf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 14:04:31 2015 +0100

    .gitlab-ci.yml: don't use --enable-local-libopts on minimal build
    
    It cannot be used everywhere.

commit 6c3e5d31a76ca19db46611467e08833ac565f453
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 13:43:25 2015 +0100

    ccan: build as an included library

commit 805db4f9f6e34807eabbc04908e074dabdcbf21c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 11 13:35:25 2015 +0100

    use an intermediate protobuf library for the included protobuf sources

commit e618f2891a390f733ff0e7bb569b27f474b69faf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 10 15:57:00 2015 +0100

    .gitlab-ci.yml: added build check with minimal setup

commit 65004a55df0cd98d5d30c38e4c2e834a943a39bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 10 13:19:17 2015 +0100

    Added configuration option tunnel-all-dns

commit f10b7e0055679d923e42196c0aad2dcb8981cefd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 10 10:57:59 2015 +0100

    use 'secondary_password' as name for any additional XML password fields

commit 5138a39116bf1897cd14771e2c23eb7d2a648328
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 7 11:24:34 2015 +0100

    Added a draft design document

commit e8484a2aeafd6a1f830b640019925e95123212d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 6 15:10:17 2015 +0100

    .gitlab-ci.yml: compile and run make check with libasan

commit 1782dcb2644d427a2fda4da269c36680eccef5a3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 6 15:09:33 2015 +0100

    tests: ensure there are no leaks in ban-ips

commit 14faa4f1001a2d23a5c63fed28d6e5f8d684949b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 6 15:08:05 2015 +0100

    ocpasswd: ensure there are no leaks

commit d2dd7f124f6481def240ee8735aa93d13a7ce11b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 6 13:13:30 2015 +0100

    tests: added unit test for IPv4 and IPv6 address banning

commit 532b751d9dd796052555ae5a486b28aadc8e1f86
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 6 12:40:13 2015 +0100

    tests: check whether max-same-clients is considered in per-user-config

commit bc0131301e8e1b5faabe394a5301dd1001e7fae7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 5 15:46:43 2015 +0100

    tests: provide a correct route in radius test/fixes ipv6 ping issue

commit f73b6328d0ff5885314e563f2b3444145e64a0b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 5 14:49:45 2015 +0100

    more files to ignore

commit 5ab5c87d59d896266b48578f2ad0d446d3df308f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 5 14:46:36 2015 +0100

    tests: added check for setting user-specific configuration options (DPD, Keepalive)
    
    That also checks whether the 'expose-iroutes' option is working as expected.

commit 0b8f4beb8bc63a706ed3d2296e83d179b93f059d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 3 11:24:45 2015 +0100

    Added user-specific configuration options dpd, mobile-dpd, keepalive, max-same-clients

commit 598e7ea9a240b438dc518732259d341b8f93c3dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 2 19:00:12 2015 +0100

    corrected usage of human_addr2()

commit 87cdfdb4b7f3bc33b63f5e3ac50b3e8d237596dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 2 16:09:19 2015 +0100

    bumped version

commit 1dff40e1c408afc8619bd6c7ef478d83f56a1ffa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 2 16:08:07 2015 +0100

    treat a /64 block of IPv6 addresses as a single address
    
    That is, for banning purposes. Note that this is absurd but
    that's the current best practice for IPv6.

commit e42ecb6619c4c8cdff34a8059bb216ae7031ff9a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 2 13:20:51 2015 +0100

    tests: corrected header in ipv6-prefix

commit 9c782574558f32046f528f93d168985a785167cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 2 15:59:31 2015 +0100

    for the default IPv6 address, ensure we don't use the network address
    
    The former seems to confuse the linux kernel.

commit aed34ebd62b0da066293fcc8d98fd30ddeda7d55
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 2 13:22:46 2015 +0100

    ip banning: entries hold in raw IP format rather than textual

commit 518d8679d13c0721271b8f0665408052e9281685
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 1 17:31:43 2015 +0100

    tests: use debian:testing for tests

commit 4985fc0013cda1029d10c8b804b050f3f451d564
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 1 17:18:49 2015 +0100

    Use /128 as default IPv6 prefix to be backwards compatible

commit 179d443bae22c8720b9a30bbf14dba077b04ab37
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 1 02:09:19 2015 +0100

    removed text on sending profiling info

commit ac134a4a5b83c6a659ff83742b3b078e6ea00bf1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 31 11:30:19 2015 +0100

    route-add: corrected CIDR route macro to conform to documentation

commit 4164015ae9a19dbdf8f4fbc9568c42eca1ad21f4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 31 11:27:36 2015 +0100

    occtl: restrict common sources to minimum necessary

commit 27ecf50ca5d4525721ff9d9fdec2aff4805a79e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 31 11:25:04 2015 +0100

    moved JSON functionality to occtl/ as it was the only user

commit eecb24927f669c99b60f7283ffc155306118e68f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 31 00:18:07 2015 +0100

    doc update

commit 90da5ee1ed00445deb7ab3409a0f7bc654ef2fc2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 31 00:12:04 2015 +0100

    updated Makefile and configure for new .def paths

commit 33f9b577149c1cf91e231d74d4be3df52438f8ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 31 00:08:58 2015 +0100

    occtl: move ctl.h in occtl/ and fixed args.def to include version.inc

commit 30c75df77f653bcf203cb55bcc3a6d4c79fcd94a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 23:53:57 2015 +0100

    Added check for nettle < 3.0

commit faf83871b4a8be87247b21fd281ef52915e9d142
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 23:42:22 2015 +0100

    ocpasswd: include builddir and include proper header

commit 59e35d753d481f69096851d331f165d3f59d0dab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 23:36:45 2015 +0100

    tests: copy ocpasswd and occtl from new paths

commit 22d712bec0261919f52d60eee1931e2d2ebc8d9c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 23:35:12 2015 +0100

    occtl: include builddir/.. into CPPFLAGS

commit 037225a6dac3d8de30b98de3e54b04560d1f33d3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 3 15:41:23 2015 +0200

    use nettle's base64 implementation

commit 413407c394159f1d28e4af0935f36279eb28e7fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 3 13:42:50 2015 +0200

    gnulib: updated and removed base64

commit c26f11b67ff72c524e7e3fbf8fe96cc4607dfdc0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:42:52 2015 +0100

    str: explicitly deinitialize temporary value, instead of relying on talloc

commit d72424b9c0d0c0e4776106ec13c31a7e7400c6ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:40:49 2015 +0100

    doc update

commit ae1457f49bda381ef2f023d38cc881596ade925e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:39:38 2015 +0100

    tests: ipv4-prefix: added checks for ipv4_route_to_cidr

commit 1e764e43db1c779ae54d8dbe2b6cc793d014069a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:37:05 2015 +0100

    tests: added check for function-based str replacements

commit ede824ce44b171bd5a1bf4e01b674b7a8dbf5842
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:36:12 2015 +0100

    str: str_append_str was made more safe and tolerate null

commit 820bc35c6ead43a51db1c578d66f032716fa803a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:21:54 2015 +0100

    tests: ip and ocpasswd were updated for reorg in src/

commit 411d9988e026c4568bf5e7688d0d30ae0a468527
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:20:24 2015 +0100

    Introduced %{RI} macro for route-add/del-cmd to get route in CIDR format

commit 7a4fc3b0aa84a9af05503e74ad975581035bb3e1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 14:03:24 2015 +0100

    moved ip-related macros to ip-util

commit 4ae1c3e2ff065dd991ba94c47dc23f8468fc6325
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 28 14:46:09 2015 +0100

    occtl and ocpasswd were moved into separate directories

commit 4dd2fdf7b6c1a1adf0a8a8c9f30eaebad4ffd170
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 30 13:32:29 2015 +0100

    tests: enhance str-test with a negative test on str_replace_str

commit 187989121070eacac4614bf1baa7c07af9ae60af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 29 23:22:18 2015 +0100

    tests: ipv4-prefix updated for new function name

commit 40dfa641664786b16e3e6073f0fa3b1d9a023d7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 29 23:21:37 2015 +0100

    tests: added small unit for str functionality

commit 12208b4d3d27d232a34ba54016b3423d0e255788
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 29 22:52:36 2015 +0100

    optimized str_replace_str

commit 7d4a8f1551050e06e951c592fd0ad9da50f7f4f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 29 22:13:03 2015 +0100

    renamed ipv4_prefix_to_mask to distinguish from the ipv6 function

commit de01c9d5c3721ea35b29e5f73b9cdd0cea45d764
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 29 19:21:52 2015 +0100

    configure: removed debug message

commit 97d6074ed38d0b5eb2306ff28414aaa6dc83fc9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 28 13:54:38 2015 +0100

    when reading IPv4 routes ensure they are read/converted to proper format

commit f55ff1dde5dd567d23230c4187defa62828b964b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 28 14:02:24 2015 +0100

    bumped version

commit 8ac3aea3ef666dca80305741b2ec560f5154b53d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 28 13:59:14 2015 +0100

    use correct types when printing u64s

commit 263afc022ad430f85c357d698c7594289ce68a1d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 28 13:02:05 2015 +0100

    doc update

commit cfd224c9c83ebf8c0c652861c1bfef4144230bf3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 28 12:56:27 2015 +0100

    occtl: allow empty pager to be specified on compile time

commit c1e66c181f7baed00ff039eb7be8be000faf29e0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 25 22:47:38 2015 +0100

    doc update

commit 5a10283125d27842c2af74f0d05e7d9358fb590d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 25 22:42:22 2015 +0100

    Added the config option expose-iroutes
    
    This allows the server to advertise routes offered by few clients
    to all clients except the ones offering them.

commit c47a843825e617d47a7b89be2034ed7c42616d89
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 25 18:58:20 2015 +0100

    tests: updated ipv6-prefix check for new internal functions

commit 10437b8db110556dc8cedb692d5b8a562535535c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 24 18:59:01 2015 +0200

    doc update

commit afa54915130d0c5478ff5069e8ec5ce3934fc37d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 24 16:50:51 2015 +0200

    tests: updated test addresses for IPv6

commit 40bd1550c18fba01c902566e4f2b6b8d924180a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 24 16:38:05 2015 +0200

    ipv6: introduced ipv6-subnet-prefix config option
    
    That option allows to specify the IPv6 subnet prefix to be given
    to client. That is, allow providing the clients networks larger
    than /128. Set the option to 128 to simulate the previous behavior
    of ocserv.

commit ffe541e6125e87b9b4c136bc96d784c43c540d2d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 23 16:26:11 2015 +0200

    doc update

commit 6ec39635eda582b0a5b62c851b7e919f21415c7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 23 16:17:19 2015 +0200

    increased the priority of messages that may be of interest to administrators

commit 6128b5f06178e5295000d6b4dde6d16f360d35c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 23 16:08:33 2015 +0200

    added more detailed session information messages

commit 221b165918368983d109313e909e1a08ff3a47d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 13 19:38:11 2015 +0200

    doc update

commit a2c3645742e0aea5a0a5200b202dbe5d489777d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 7 10:57:34 2015 +0200

    bumped version

commit dcbda2af5d2bd15b7e889d18bb9c9a871c396c34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 7 10:50:57 2015 +0200

    tests: install liboath0 in debian tests

commit aa78ebb559acac01c0a153e524ff02477e83d6c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 27 08:33:32 2015 +0200

    doc update

commit ba656a05d5c5675d58ee3e56b3fa1ec50e642417
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 27 08:30:36 2015 +0200

    When checking for the existence of IPv6 addresses, check on the final address form
    
    This resolves an issue where randomly generated IPv6 addresses which were
    odd, could not be detected on the duplicate checks.
    
    Resolves #5

commit 17e0772822d43c3e5d222da98bf3393d2d438276
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 25 16:28:20 2015 +0200

    plain auth: increased hotp trial window

commit 9921d64becb25a8a10a531375e65e10661b581eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 25 15:07:04 2015 +0200

    doc update

commit a63134e350e49c2ef35eb81ce1f20c9431e0f93f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 25 13:31:40 2015 +0200

    tests: Added checks for OTP support using plain passwd

commit e5d02eb228304bdc12df8dddba6e7a731d583dda
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 25 11:38:56 2015 +0200

    plain auth: support OTP authentication using usersfile
    
    That adds a dependency on liboath.

commit 568d6fa7672b637fdfb3c5f23ae02a5bc9dc4d9b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 24 09:52:18 2015 +0200

    mention the possibility of proxy arp

commit 78c3b387a51cee25987248f1dc13ee919d9d43d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 23 20:30:21 2015 +0200

    doc update

commit a135c90e548c49e1335e5d86c8f8f9a07889cb10
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 22 23:18:48 2015 +0200

    README-radius: use /etc/radcli for paths

commit 43ebfb998689c19a6f47519d950d223b0142b55e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 22 23:14:03 2015 +0200

    .gitlab-ci.yml: don't check libopts match in make dist

commit 5dd511d0aa1ebe7bcb804ba15f64ea2097062869
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 22 10:40:29 2015 +0200

    Makefile: use srcdir to reach libopts

commit fd35c4e0e24d71534c908352616ad30197f876e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 21:33:54 2015 +0200

    doc update

commit a28fc4ea844b643deed4095fab20cfb69eeb423a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 13:14:19 2015 +0200

    tests: added missing pam-noauth-test

commit ab923f8aafe50508c8c78f7bbab805708618f7d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 21 12:27:05 2015 +0200

    corrected build flags for out-of-tree builds

commit 8b747fd960c2129e90ad696bdddaed2fc6be7a63
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 19 20:44:21 2015 +0200

    .gitlab-ci.yml: include make dist into test suite

commit a8ea052bbf4b38676f15913bd24505f70845bab7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 19 20:37:31 2015 +0200

    doc: converted README.radius to markdown and link it from README.md

commit 1f29345d42a23e068710dc4ff3ffe1f4b8763d66
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 19 12:47:32 2015 +0200

    Makefile: use the foreign automake rules
    
    That allows to compile without following the strict GNU standards.

commit 101a3cdd0f377f0f4d1f013a2166e1b0d8f936d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 19 12:42:54 2015 +0200

    README.md: added build status

commit 9ab3629da56e049cf2cb55f9a2ece49b620200eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 19 11:53:30 2015 +0200

    Added .gitlab-ci.yml

commit d5ae3fd41d0caab13ccf38ef96885a104d5fba77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 19 11:47:37 2015 +0200

    converted README to markdown

commit 534ebffa08d44bb8fc126c54f32e16d7cdaea1b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 14:57:29 2015 +0200

    tests: radius-test-config: kill openconnect process on failure

commit 6d951bb59eb73642c0078a87d29ff75a77b53a7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 14:53:09 2015 +0200

    tests: fixes in test-cookie-invalidation

commit 845fcbc891d8254f64c0000ba1af87f2de17eda3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 14:37:48 2015 +0200

    forward all routes sent to client to occtl

commit 32ebf41ccc9268ad0e69557a20c690c523d9a9f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 14:12:09 2015 +0200

    don't pass the authentication context to accounting methods

commit 7a209aad84bad31067b1546175e3f42ba2e439e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 11:05:44 2015 +0200

    Force sending stats message to sec-mod from worker on disconnect

commit 0461787fcc621e64727c0fb5fd746dc7ff6997b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 11:08:17 2015 +0200

    doc update

commit f5a82629441a364c28dad68e945ca891abe1d507
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 13:23:30 2015 +0200

    tests: use background option in openconnect for radius-test-config

commit 1eab665b50610756cfff64fc9671c3cb84c469a2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 12:11:59 2015 +0200

    tests: fix route check in radius-test-config

commit b5c3363af7bb04d5f4ffaf32ce967df240755be8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 11:40:56 2015 +0200

    tests: removed IPv6 checks from pam-test

commit fb0765bf22d1426d6ee3dd5591f33398d35ea17d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 18 11:15:53 2015 +0200

    tests: move test-stress outside the set of test scripts

commit 50f0e11cec7e764e69bd63fc06b6dec93725f200
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 17 15:18:25 2015 +0200

    tests: added check for pam acct config option

commit 1bfa6e76484cb41af476183166d4498f9638b752
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 17 15:43:08 2015 +0200

    Reinstated the PAM accounting method
    
    It can be used to check for a valid PAM account, even when
    certificates or another authentication method is in use.

commit a8f852c1782af0070f435b612dad2331444904b6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 19:34:02 2015 +0200

    optimize CRL reloads by avoid auto-detection of the type on every reload

commit c093480765a9b33113463fb9c9ee995aecc33599
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 18:52:20 2015 +0200

    doc update

commit 8c349b9b88bb7bb3e60929c74e0af7d78dfb5c39
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 18:51:36 2015 +0200

    tests: check whether DER CRLs are being read

commit 9ef5569c7c28d9108fe000639c5331da7a4ecca4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 18:46:20 2015 +0200

    Allow loading DER-encoded CRLs

commit 998c0dae4b5280850a89dd8f670f49e947101da2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 18:20:31 2015 +0200

    tlslib: correctly determine the presence of GNUTLS_X509_CRT_LIST_SORT

commit f2caadbe8323056be6be0e79692a561bde40f31a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 17:58:57 2015 +0200

    updated documentation for CRL reload

commit 090c51cf1f6b97ccebb48f6aea6c85fba99c5cdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 14 17:55:59 2015 +0200

    check the CRL periodically and reload it when modified

commit 87ab853b4fb7c6c48722d2f1947984f7738d30dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 11 16:34:37 2015 +0200

    doc update

commit f889713df1159e353a161a505bda5909edb8d062
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 11 16:33:10 2015 +0200

    When importing server certificate(s) sort them when supported by gnutls
    
    That avoids the "unsorted chain" error.

commit edba5fc23e0088dbe270b464a0029a27d7b893b1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 5 00:16:04 2015 +0200

    removed pam accounting method from config file
    
    Reported by Stuart Henderson.

commit 95684e90565c0dc29f5880205a25a65ab25bb658
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 4 21:28:43 2015 +0200

    released 0.10.8

commit e5f297af09246d5e37748660954d7b1dad8ecfa7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 4 16:05:05 2015 +0200

    bumped version

commit 82424ffd8242e3c93710786642b4ead439fb5c08
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 4 15:45:16 2015 +0200

    added informational message on KKDCP request processing

commit f9daea3f3b06c1c200767cd4ee54f795f84db27b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 4 15:29:32 2015 +0200

    tests: kerberos: updated to account the change in IPv6 address assignment

commit 199b3fdfceecd90a43fa029e72b9e00a5250a10d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 4 14:17:36 2015 +0200

    Store the configuration file internally to avoid dependency on cmdline arguments
    
    That allows reloading the configuration even after our setproctitle()
    has overwritten the argv arguments.

commit e2d2d033f2dcf81b0b3842416e8a6c6f7ed2e839
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 3 17:00:16 2015 +0200

    tests: updated for change in IPv6 address assignment

commit bed8335145cf7b64920703fbbd78f0778da9fe88
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 3 16:00:11 2015 +0200

    doc update

commit cb759d966c6a3f4e64c16c8abf52faa292b6fa9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 3 15:53:31 2015 +0200

    use the complete mask when assigning IPv6 addresses

commit da830ab3e57c046ddd633901398813725faf4db1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 3 13:42:15 2015 +0200

    .gitignore: ignore binaries in tests/

commit 76712ef87f79209108cae366aed5400be9fe7dd4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 31 16:37:59 2015 +0200

    Keep PAM in the accounting types but simply ignore it.
    
    That requires no configuration changes for system where this
    was accidentally enabled.

commit ddd5ebc743f748f7c3a2503aa9d9da41ae252c49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 31 16:35:19 2015 +0200

    setproctitle: overwrite argv and argc

commit edb0cc3039b68dc6025d02823212d1490bf58770
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 31 16:26:06 2015 +0200

    doc update

commit 1c64073cf2c0a65538250e7e7de71dfd142353d5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 31 15:57:00 2015 +0200

    pam: removed accounting; it served no purpose
    
    In fact it could even cause issues in the security-module
    depending on what was configured in PAM.

commit 144c6454e00245de816353ecdd1c566014f59fd9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 28 11:42:31 2015 +0200

    doc update

commit b674a46af66d5f03a63dd82079043c5415b6bc73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 28 11:41:58 2015 +0200

    occtl: print the configured split-dns domains

commit 35ed4811e53b4a6d678554077e0d5a743634b9b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 28 11:11:27 2015 +0200

    config: avoid crash when parsing empty subconfig strings
    
    Reported by Niels Peen.

commit 15d637db9697ccaaca994a02e656a5afd60fe201
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 25 17:47:01 2015 +0200

    tests: connect script fixes
    
    The connect script used for proxyproto no longer needs /tmp/connect,
    it will create it.

commit f63e0cf65ef2964e91279b78bc882eee9ab1aa41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 25 12:48:44 2015 +0200

    human_addr2(): only attempt to parse INET addresses

commit 91926c3d573c04d4ab8ae8c0a8f9d0eb0a3f4dc9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 25 10:12:15 2015 +0200

    Enforce banned list even when proxy protocol is in use
    
    That would be later in the authentication process by the time
    main is notified of the peer's IP. That is a compromise between
    terminating a malicious client early (before fork), and handling
    the proxy protocol in the privileged main process, which may
    reduce the overall security.

commit dca5fb3d9bb3eee50a83223043d0572b93b02279
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 21:48:54 2015 +0200

    prior to release check that the version of libopts matches the included

commit 4f8afab8f17cacdfb65b03e32320d334a35f9055
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 20:19:41 2015 +0200

    tests: include proxyproto-unix-test to the test suite

commit 1b7e4c107553b221c09e8c4e0cd996902f38615e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 20:12:19 2015 +0200

    doc update

commit 8ed48a14bba4c85b14b25f1f6ca8af0175e56856
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 20:07:59 2015 +0200

    tests: check whether IPs are being passed correctly to script when in proxyproto
    
    That is check whether the remote IP passed is other than localhost,
    and there is a non-empty IP_REAL_LOCAL.

commit f8c7bccfa1fa47596195789a744973b537f2be3e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 20:06:55 2015 +0200

    occtl: print the Local Device IP (the IP the user connected to)

commit d03f364058983a76db2d2af500d80aef2571da85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 20:00:09 2015 +0200

    proxyproto: corrected address type setting in our address

commit 8ae336f2ba3ba9e72cb998b9873e84d30f4565bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 22 13:11:02 2015 +0200

    worker: notify early main on session info
    
    That allows to pass TLS information early, but more importantly
    to pass information on the IP of the client (and our listen IP),
    to main, which will be provided in turn to the up and down scripts,
    as well as occtl.

commit 344167fd5cc1bf3c1479dc9f45afe05f5dd921d5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 21 11:45:45 2015 +0200

    Be more verbose when CRLs are being loaded

commit 0dbcb02861287aa905e45a7cbd2b1fe16aea95cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 17 14:31:36 2015 +0200

    doc: mention the facility log messages are sent to

commit ab93ea4d82d219760a1fb39f921ef5da00a57ae5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 17 14:27:11 2015 +0200

    Log info message when the control socket is disabled

commit 6085ec6ef3164f4be2123341f3c080db5fb93ddb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 17 14:24:35 2015 +0200

    On BSD systems only set IP_RECVDSTADDR when using IPv4

commit 2a949e99c4c2f50171ca3c94f39a7334e1dc14e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 17 14:20:41 2015 +0200

    configure: discover suitable sed program

commit af6a44c34683f0cb566560e4a7aa41bfe40a79b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 17 14:13:12 2015 +0200

    config: remove whitespace from the end of strings

commit 7b53d4063b59b490f7518b208b224a5b94c08a66
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 7 10:34:29 2015 +0200

    use ':' instead of /bin/true for non-existing programs

commit c43d2ba82f1628a46e71ea999ca2b3aee631dbc6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 6 18:43:24 2015 +0200

    bumped version

commit 6586d39ed3f0fdbd8933e1bcb594fc4ea908e26a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 6 14:41:56 2015 +0200

    tests: don't expose any ports in docker tests

commit 584c2dda5b6399f2053beeb06e27fb58e0ca283e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 5 15:34:19 2015 +0200

    proxyproto: use it to figure our IP
    
    Also made more precise the length checks in proxyproto values.

commit 67f6be9e9b44529dda9ee3120fab956f7e61bc16
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 20 11:53:31 2015 +0200

    proxyproto: allow for headers which have precisely 520-bytes of data

commit 27509d267b131c7e0e0d18734ab9f939f7fb2dde
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 23 20:54:38 2015 +0300

    tests: allow compilation without libopts

commit 4468b64fb4c48f0a8102c25217078ec36495ae72
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 11:53:21 2015 +0200

    doc update

commit d9a80b184f64f76c363fd506116a8272ede322d5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 11:51:51 2015 +0200

    tests: increased waiting time for radius-test-config
    
    That avoids random failures of script.

commit ef761cfdb7f9f696fb21b81874a670d56fdc324a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 11:51:23 2015 +0200

    doc update

commit aa3bdc03d2dbead9d664df36c12e021471674a2d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 11:43:41 2015 +0200

    doc update

commit 587fcdfc36ba166e2145c0f7316e6be6103a9458
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 11:40:49 2015 +0200

    Separated the proxy protocol code

commit 20937ee29a215ff0e7f19f6fd7566bd2372858ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 10:01:13 2015 +0200

    tests: Added check for proxy protocol with certificates

commit b75c3ecf30194f37b9d2a2065ffc0f3682680084
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 16 10:00:50 2015 +0200

    make explicit the rejection of certificate messages

commit bc4f866ec07d3bca4b9950c40fcd6d9176e6d6b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 15 16:15:29 2015 +0200

    Added support for reading the client cert verification status and CN from proxy protocol

commit 3d36aedb6cfbe81ab47b3d8bcec4d2cd32f9d201
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 15 13:06:43 2015 +0200

    doc update

commit f7c9379971195dce549cf14bcab3830aeb2ddb32
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 15 13:05:31 2015 +0200

    tests: added check for proxy protocol

commit 17e71dccd8876ec7b748752bdcac3cf3488b1cbe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 15 11:00:30 2015 +0200

    Added support for proxy protocol (v2)

commit 7992d58fc7433b289db26b730150c2498afba584
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 10 10:59:08 2015 +0200

    doc update

commit 8b4bc75b3f442d85504428656f7d4d5074df0bbc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 10 10:54:03 2015 +0200

    tests: fixed unreliable password entry in PAM test

commit 48dc6c8ca1f16e7f23e6cf23dd8f5f998069e2c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 10 10:28:13 2015 +0200

    radius: set the NAS_PORT via the rc_aaa() API
    
    This avoids a duplicate NAS-Port entry with the
    freeradius-client library.

commit c342fc6f0933425c171f67651f4cbf23259ef2fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 10 10:06:50 2015 +0200

    tests: increased waiting time in radius tests to account for time fuzz

commit 5d19fde60e1f60e6d9013dcc7b3982efd252a593
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 9 14:57:54 2015 +0200

    tests: fixed unreliable password entry in radius tests

commit 68f00582dd8b9c585b673911e806b7dae5527978
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 8 15:20:29 2015 +0200

    Apply a fuzzying factor rekey_time and stats_report_time
    
    That factor would prevent the case of all worker processes
    contacting main or sec-mod at exactly the same time.

commit c36d2acb79f05f7dbc052f479f9c80a76b054a20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 8 13:26:07 2015 +0200

    removed duplicate header entry

commit 747346c7e6c56f91757b515dd20be6517a9e3b5c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 8 13:14:23 2015 +0200

    avoid including linux/in6.h, it causes issues in several systems

commit 63fa6baa85b622ddabe60c147985280c54087332
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 16:52:35 2015 +0200

    doc update

commit 04f3923ca250ec4ba63c70e3d5f3a2895c7ca32a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 16:22:10 2015 +0200

    occtl: fix json output in show status

commit 49de6d058679fc1826ce21f6f7733bbd172ab991
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 15:36:38 2015 +0200

    occtl: added option --no-pager

commit 7b87fa445911b4c23782d13e3f3421ee7a3120d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 15:31:41 2015 +0200

    occtl: document -j in manpage

commit 6e77f14bad74639f82f3489f1d24a7f4617c331a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 3 14:24:14 2015 +0200

    corrected JSON array output

commit f895ff54fd833b6e08d66d773a5b62984c0a674b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 1 20:59:54 2015 +0200

    Only include grouplist functions when they are needed

commit 2911ad5047852434f8a8dda69c9d96e5325b35b2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 1 20:51:19 2015 +0200

    released 0.10.6

commit 62050bec879cc2f7fec733a8174d9c090974a28f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 1 11:37:54 2015 +0200

    occtl: corrected bug in json checks

commit 800021234cb4b721ca46f10e091769b2b4c5b20d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 29 15:59:41 2015 +0200

    don't set the wr_set in select (previously it was only ignored in pselect)

commit 1d3bf55609b69a6bab5f32897e979898bf5f3355
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 29 15:55:34 2015 +0200

    bumped version

commit 3f48b31a9e9bcb1173161fa2b5b1414c9ad2f94d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 29 15:33:16 2015 +0200

    use quotes in all examples to avoid issues in modifications

commit b2ca1cd0693e7d1ea7cab0b2ee102ab3bd63d5d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 29 14:40:28 2015 +0200

    tests: verify that groupname is read correctly when in kerberos auth

commit 7716f725ff57dc5f3593f4a91932410a50ae0b7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 25 14:15:38 2015 +0200

    doc update

commit e007a20e423fdb93026e84c42fba041d4ae5ed55
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 25 14:14:46 2015 +0200

    tests: check the ability to load encrypted key files

commit 8b186fb53a982fd6e9d1fc32fba1095ee48098ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 25 13:51:34 2015 +0200

    Allow specifying a PIN and SRK PIN in the config file
    
    That pin will be used to decrypt encrypted key files as well.

commit fc5ce78ed20f20f4609d2aa7b8f7aaaa64b29c37
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 25 13:32:40 2015 +0200

    tests: kkdcp-parsing: fixed header include

commit 9d621d2b5d60b4a7ee4e4e77e6d46e7adc2f40ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 25 13:31:50 2015 +0200

    certificates and keys were moved to permanent configuration

commit 696b64dd9851e88c173e3251ffdf0c71f756d06e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 23 09:59:01 2015 +0200

    worker: provide log messages in more failure paths

commit 38b771cf08334381ea7a8f76fae22278cc1190f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 17 10:44:19 2015 +0200

    require radcli 1.2.1

commit dc118a8d4c113d0431c66023ae99331ede195bda
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 17 09:56:58 2015 +0200

    doc update

commit 321bb72edef2ac3dbcbe400e37f7e4031988a353
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 17 09:56:50 2015 +0200

    combined cfg.h and common-config.h

commit 59e0d574fce496f3a79ca5ab4902e85c086d4f92
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 17 09:54:00 2015 +0200

    improved variable name

commit a5b2175219f3a45a1135eed3ce307d308ad98200
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 17 09:47:56 2015 +0200

    Lifted the limit by MAX_CONFIG_ENTRIES
    
    Now entries in the configuration file are limited by available
    memory.

commit 042a0729f355e93fa9a46cf515a11d658ee367c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 11 15:54:10 2015 +0200

    gssapi: allow auto-select-group option to work

commit 005d3f43763e56e45a11d39f599b926348d99bc7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 11 15:40:42 2015 +0200

    gssapi: allow group setting using getpwnam

commit d1a209c36944c2b19fbf404612c0ebba5908d64a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 9 09:24:12 2015 +0200

    radius: add PW_ACCT_INTERIM_INTERVAL when compiling against old implementations

commit e143f2ad6ed302eb554fa1c3c011eb191e9b6683
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 8 14:43:06 2015 +0200

    tests: radius: expose the radius ports

commit 08f0dcd66acefdb977278c214dcbbc8e706552d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 8 14:40:56 2015 +0200

    doc update

commit 745b7984ea1e2702fcef02689ca6adffe3e2c967
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 8 20:49:06 2015 +0200

    doc update

commit dac92f89df9f0d78f5b78decf11112af7c7baa42
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 7 12:53:44 2015 +0200

    doc update

commit 808832d40ebe98b4496fbefc26be0006742ab72e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 7 12:46:48 2015 +0200

    radius: updated radcli header

commit ac3945268ae4f3c490f0b245f38781c8c6d7ddba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 8 09:22:41 2015 +0200

    define perm_cfg_st as struct in cfg.h to reduce warnings

commit 29acc1f5240939711e2f7e5280a742013c514058
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 8 09:18:18 2015 +0200

    when using a UNIX socket get our IP from the UDP socket
    
    That is only for DTLS clients, and for the IP the worker advertizes
    to the security module.

commit 21f08be56a0f205083c93059a0233e1441d2e623
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 6 08:37:22 2015 +0200

    improved error messages when radius packet forming fails

commit 3e6b8fadb30bddb0918a528404c8e32e8daa0302
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 5 23:57:03 2015 +0200

    updated radcli URLs

commit 2bce9455a03482db0515a601f9a0a26c0434d311
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 5 22:35:47 2015 +0200

    use radcli as the radius library if found

commit 16ea4a059fa9ce280100d12f5292285453e259e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 5 14:55:39 2015 +0200

    When we receive a data packet in the CSTP channel switch communication to it
    
    That will reduce delay time if the DTLS channel is unresponsive and our
    peer switched to CSTP already. That switch will be undone if our peer
    switches back and starts sending DTLS.

commit d5c9fe7b02f6b8933a076db5be43a3f2b31200ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 3 19:52:33 2015 +0200

    added NAS-Identifier into dictionary

commit efbf77981066dc787765f33adf1071ac752b8fde
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 29 14:01:32 2015 +0200

    tests: use non-common IPs in full-test

commit 5178913909c5f1cc94cbcd427c802af84e23a451
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 29 09:53:25 2015 +0200

    tests: added unit test for JSON escaping

commit 54ad0a413cd39ac8a89dd8f9d601314abcedc384
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 29 09:31:39 2015 +0200

    occtl: properly escape JSON strings

commit d59f5ad38c16c77c33887e30fc4c15008e794422
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 28 15:59:55 2015 +0200

    tests: use f22 for docker images

commit 1e4463749a91c917b0abd5a4f004f4430b7f293e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 28 15:53:53 2015 +0200

    tests: added unit test with KKDCP server parsing

commit 374ae17a4db2991cd3f8783068adc678a543f865
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 28 14:50:12 2015 +0200

    split KKDCP config line parsing from config.c

commit 70f9256d8ceb4477dcd1e520b3cbbe45f5fc8086
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 28 14:36:14 2015 +0200

    Allow IPv6 addresses in KKDCP

commit b63f0b4cce77ad3869d872da8b701fa1aead0cf6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 27 11:36:24 2015 +0200

    ping: check for ICMPv6 unreachable packets when in IPv6

commit a0c2ac4c3f26339df4b37177b9746aa5168cc344
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 27 11:06:07 2015 +0200

    ping: cleanup code

commit 394933afb070debd0e183c5bc382f6fb95eac6f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 16:19:56 2015 +0200

    doc update

commit 89500cb2054a45c1653c160b75e180b753ecaa5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 16:12:49 2015 +0200

    removed dbus option

commit 1ca573ff16515bb0278c0c83bd4d52edc931e731
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 13:46:57 2015 +0200

    occtl: added --json option
    
    This allows to parse the output data using automated tools.

commit 542b9b6f24f0bbdd77d64b0272ab199ad34117f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 10:45:08 2015 +0200

    plain auth: use strsep() to allow an empty group string

commit 647f36041ad72778768ac90fac2142b213e37141
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 10:25:14 2015 +0200

    pcl: include headers for getpid and memcpy

commit 26e25344046e35dac2128b777d39df9a309b4b56
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 26 10:24:14 2015 +0200

    use casts for systems where time_t is longer than 32-bits
    
    Suggested by Stuart Henderson.

commit 4703177c9958966a4999e9e913d2c881843f4e9b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 25 19:04:16 2015 +0200

    doc update

commit f7412a7fddec3386d3165fa9ec0f9f9fe5be3adf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 25 13:11:30 2015 +0200

    better text for group prompt

commit 36bd7e10fd19cc9b95a97f090d1f6c0a3cee7f44
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 24 17:01:30 2015 +0200

    use IPV6_PATHMTU socket option instead of IPV6_MTU
    
    The former is portable and available on BSD systems.

commit 55eaf601b1d1e5465e35319bda6e4bd3e591c885
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 24 11:39:48 2015 +0200

    removed redundant line

commit 00213a4e4152ed8dc61c21afe56a23c7937e0989
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 24 11:14:59 2015 +0200

    don't exit if isolated-workers isset

commit 850cda3337ea8afa577486cdadace3fb25952a24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 24 10:58:37 2015 +0200

    released 0.10.5

commit f954983f7a99f9be2b92635785a73b6b51597dbc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 23 11:16:43 2015 +0200

    sample.config: bring in par with ocserv-args.def

commit 9c0ebd3c8122c68b5396519234fa6c834ecacf90
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 23 11:14:46 2015 +0200

    document the fact that some clients fail if rekey is disabled

commit c89aec1b2ad56f0ab2c28a0ea94450bb2ca17b24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 22 15:33:14 2015 +0200

    tests: separate the provided routes from the client's IP to avoid collisions

commit f7c9079e828980a889b408d4ab92a80e3c0819ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 22 15:15:30 2015 +0200

    tests: use openconnect -b in full-test

commit 96cf2ca6745faa84c0a394e607d7878cb3b07926
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 22 06:53:50 2015 +0200

    tests: use /bin/echo to provide '-e' and elimination of some bashisms

commit 95ae123a57520afbaf60c7a78d3f50e71d228f47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 22 06:45:49 2015 +0200

    added dots to prompt messages

commit 45d2aa997d5b16b582271945a5ea5895cec86677
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 22 06:44:04 2015 +0200

    doc update

commit dff24be3bcc4f4c90b02ccca6587696f0e795cf5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 09:10:47 2015 +0200

    tests: added Dockerfile-debian-radius-config

commit 4b811a6e2aa3c46a84043e70c87910b762e2a6d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 21 11:19:41 2015 +0200

    tests: avoid docker cp in kerberos test

commit 700bae21f6ebf09d5361288750719af5e005d5c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 21 11:04:52 2015 +0200

    tests: use common functions in unix-test

commit c371a917361275d8d74f932bd395e48bc197db69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 21 11:04:30 2015 +0200

    corrected memset usage

commit 80a925a2cf92c22da057b00e81ccf2b8f0b43b06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 21 11:02:43 2015 +0200

    avoid null pointer dereference in config parsing

commit 73c9c56a01945977c8d75f54c01fb289a5ba46e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 21 10:58:46 2015 +0200

    check the return value of inet_pton

commit e3d21e0d303f5b82df203d41207078e8d1f3c8f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 16:16:34 2015 +0200

    tests: corrected username in pam-test

commit 77c98f45342e0158f40e8e3714422b823252e7c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 16:10:36 2015 +0200

    tests: cleanups

commit 70bb46d206ea2ef740674d971720ea46e861629c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 16:05:09 2015 +0200

    tests: remove the interactive flags from docker exec cmd

commit 8b5f13cdc9e5dfe81c0428f2fdd52eb303e1e677
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 16:04:41 2015 +0200

    tests: added radius-test-config to tests

commit f4e9b2e69877326e91c156cf52101df693a7f1be
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 15:51:25 2015 +0200

    tests: use common function to check for file existence
    
    This addresses issue with "docker cp" in some systems.

commit 76f2c91e6b9cf72ad9d9e777e69bd09c04fe6c3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 13:17:15 2015 +0200

    move the password counter to the label
    
    That addresses issue with anyconnect clients which require
    the name to be called password.

commit 5c146055fe764a0fec9a9d80ece7956110e0ff32
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 11:34:08 2015 +0200

    tests: don't use ssh to obtain user information

commit 7b786ed486d590281b0ebec2cf7ab30348989ace
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 11:13:40 2015 +0200

    when the password label matches the message, set no message

commit 75646402ee434c943b78cb5114104ff1e64a4e5c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 10:04:16 2015 +0200

    PAM: improved log message in conv to include prompt

commit c60a0bce5076ada17feb45b87a527d7d327ce604
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 10:01:23 2015 +0200

    Combined password prompt and message
    
    That is because there are clients (anyconnect) which only print
    the message but not the prompt.

commit 705f1f3efcc99221f75be4e4fb8c3db9acf2ff26
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 20 09:55:30 2015 +0200

    do not print error message when a new password is requested

commit 38cc6d926096a902e032ed0ed4156471979949a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 19:02:12 2015 +0200

    doc update

commit 48115f80e9a072f449dc097726dab447ca5f1eae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 19:01:38 2015 +0200

    TODO: removed session timeout

commit 419fd1e63cde6566bd7118f81b4e8aa0d39275b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 19:00:53 2015 +0200

    tests: avoid using double newlines and other updates in full-test

commit 2d386261acb7a3325c289da104c3b118cd621aee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 18:28:01 2015 +0200

    don't use default messages for first prompt - allow worker to set it

commit cdd5dcd9c32a344743396342e5f7f1f7b08598e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 18:27:41 2015 +0200

    updated for new format of msgs

commit 87dcf31665acb536180f5ce17a51640d9e5ddf2f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 18:18:36 2015 +0200

    tests: added check for the application of radius configuration

commit c9b45fabef22786ff554492f745ebe71aef80a88
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 18:05:12 2015 +0200

    do not send interim-updates on init

commit 27b1541c31412d4faf4df128106c88876a2165d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 18:04:30 2015 +0200

    print information on the config backend used

commit f4a55660de6e3da7e75e7632a07c89a4679da016
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 18:02:34 2015 +0200

    corrected bug in string expansion

commit c461d96d9ed5db1a60a60645457f66d6b518d144
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 17:12:31 2015 +0200

    tests: properly escape output

commit 0c0621146514067b4f16d1374a4758bb3371b618
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 15:59:24 2015 +0200

    session-timeout immediately invalidates the session

commit e9d35493f02058c926a88decef94dda435634133
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 15:42:53 2015 +0200

    stats-report-time and session-timeout can be set per user/group as well

commit e9cb3b1d60c893d9900ec74ef242f617231770d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 15:39:21 2015 +0200

    simplify application of radius config

commit 0abc1ee2dbece0a5257ae67f30583ba43ffb1c10
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 15:28:59 2015 +0200

    Allow overriding session-timeout from radius

commit 6ff0a8fb0706e3fff64b969c3a1dcb1afb6a88b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 15:07:49 2015 +0200

    Introduced session-timeout option
    
    That allows to set the maximum number of seconds a session can be
    active.

commit 4dd558b0cc222e93001943fd93dc9aeac79bed03
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 13:57:44 2015 +0200

    updated radius documentation

commit a4cb90b8eb1592335b4ea5aff1611c993c71b7c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 13:29:43 2015 +0200

    cleanup in match_password_in_reply()

commit 9797ccee8167b7f844827bfb083bc1e423a54874
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 11:51:46 2015 +0200

    when multiple password prompts are sent, utilize a counter to differentiate them

commit 2f266e582841b887f15831e9dd3416be8efe4ccd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 11:33:32 2015 +0200

    removed deprecated field from auth_reply_msg

commit 93c08194039c305251bf4237bbeb7a70c096c05b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 10:38:02 2015 +0200

    doc update

commit 6cb44ec8c46fd8b640f6b389b2f8e99970431282
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 10:23:18 2015 +0200

    tests: enhanced PAM test with a second (OTP) password

commit 379716efcd1cd272d91661c8398ad73019460ef9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 19 09:26:36 2015 +0200

    pam: allow passing brief prompt in addition to messages

commit 8a0dbb743510aa489f59f6e2ed0fec78642f1dda
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 15 11:39:02 2015 +0200

    increased timeout in main-secmod  communication

commit 2ed95206e2c04aae1462cd7557a808eb75a9b887
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 14 10:17:03 2015 +0200

    simplified request handling in sec-mod

commit 18ad0920ed081b0e3ac407dfe22d33d04d9fe723
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 14 09:39:13 2015 +0200

    close the sec-mod fds on worker

commit 9966fd578cc6ef3db98d0487090566ad369a19f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 16:39:46 2015 +0200

    doc update

commit 7086212fade1caefc095416828798fa6f85ee185
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 18:06:06 2015 +0200

    remove_proc: use flags instead of multiple variables

commit aeaf08491b4a7bd59a1821eb2bff49f5de05c253
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 14:32:03 2015 +0200

    bumped version

commit 8b6b83a6f6ee18ecd580fa7c6d60eba51b3866ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 14:27:27 2015 +0200

    when the server exits don't wait for stats from sec-mod

commit 8829441e821a610fc86aaec42caf2e184e47dc87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 14:14:33 2015 +0200

    updated main_mod_fd_sync doc

commit f942dc834ac771c801961991050195344414b9a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 14:12:17 2015 +0200

    doc update

commit 33bcfb178e15b261408ef4ece76ebbace99e7888
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 14:04:20 2015 +0200

    main: use two sockets to communicate with sec-mod
    
    That allows to have a reliable synchronous socket, and
    a socket where messages are sent and received asynchronously.

commit accf63a9e33bbe2a7a4a24a3b9d734578c90334d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 13:49:12 2015 +0200

    Added more debugging messages

commit 66203e1a6da45f7b6cec81c5373f8736ccfb110d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 11:50:38 2015 +0200

    set cloexec on sec-mod's socket file

commit b5e64c1569861cd9472ba2452fb4377c5a39b48e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 13 09:54:22 2015 +0200

    tests: added more users into radius' server user file

commit 691d9d426a3114c3f5d611c13f0b78d9a46da8f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 12 11:28:41 2015 +0200

    tests: updated ipv6 addresses in kerberos and pam tests

commit b341880d05d25060733cb5d432c5b1f412fddde8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 18:07:04 2015 +0200

    export IPV6_PREFIX to scripts

commit 046d1e65ea7700414141887b7cec8b14df3623ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 19:25:45 2015 +0200

    set ipv6 prefix only if it is set

commit 3cc52238424f76a4a44f3ab96734f9acc5da5fd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 16:14:38 2015 +0200

    tests: updated IPv6 addresses

commit 69181d0cf30ed4f9aa54f4204c85df71b429db3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 14:40:59 2015 +0200

    use an 127-bit prefix for IPv6 leases

commit 308d0a162e761077b4d231fefeb29b5f7f9721d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 13:57:09 2015 +0200

    tests: updated radius-test to detect disconnect in certificate auth

commit df5a67b5c7e836c12d8b931a7ad1a4d237469961
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 13:34:09 2015 +0200

    radius: set NAS_PORT on accounting requests

commit 9a05edd2ec22a5e7fc2a832e9baf3f361aad92a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 09:45:00 2015 +0200

    radius: corrected the byte ordering of NAS_IP_ADDRESS

commit 43d174980df48972f342d78da26b00f1b38e7cb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 09:27:56 2015 +0200

    tests: check whether the value set in radius' NAS-IP-Address is not invalid

commit 18134a87d54f03b234884f67a1bdcc7c958e7e3c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 09:20:56 2015 +0200

    radius: advertise the correct NAS IP in accounting messages

commit cc04bad753a54b4b17b57a46cc7a11134d52d162
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 07:14:25 2015 +0200

    set close-on-exec flag in sec-mod fds

commit 45d380ccd9a7994baa41da879b81007089819e36
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 18:03:25 2015 +0200

    corrected typos in IPV6 env variable

commit 519ce111a5113ac89f700cd27e6846b21937bf79
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 14:35:05 2015 +0200

    increased MAX_MSG_SIZE

commit e450b5a25954cdb87ae95cb846707b984785f0dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 09:50:23 2015 +0200

    enforce more timeouts in sec-mod main communication

commit d1d83d909cdc1e5335dbd1fd95b95da60a49b879
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 09:42:33 2015 +0200

    sec-mod: eliminated redundant parameters

commit 10dcf1a82d36860e1e017d5b4b0860cc4c448a2b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 09:16:05 2015 +0200

    added sanity checks in commands exchanged from main with sec-mod

commit bbbf6e3467066461643fd29a3adb2bb41f039b48
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 10 00:47:37 2015 +0200

    radius: distinguish more disconnect codes

commit 4c29de105a25facb8a76472d8d7f5fd9ba45292b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 21:34:45 2015 +0200

    worker: introduce a minimum interval below which no stats will be sent

commit ad9e3da777812623292ef53112a088a42e739d2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 21:34:09 2015 +0200

    radius: notify of disconnect timeout reason

commit 5e6d15db45806b5569314d041f6f3c59b500be0e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 10:24:43 2015 +0200

    oc_recvfrom_at: use correct packet type for IPv6 data

commit da44c28a0158b0240b9e940de3dc70e22345860f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 14:24:28 2015 +0200

    more files to ignore

commit 020138d219c262ce86993c6a29ef60135a3aa9d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 09:29:27 2015 +0200

    radius: use explicit sizes when setting NAS address

commit 87a3fbf18eb7de1d642e3737fb12ccc01d8e269c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 09:06:14 2015 +0200

    updated ipv6 MTU discovery

commit f2e5e7e441acc9b199cbe86d47b64ec26f010eb6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 02:15:51 2015 +0200

    oc_recvfrom_at: fixed discovery of our IPv6 address

commit a80a07fa534318220724ea66856fc382d94617d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 9 02:04:41 2015 +0200

    added MTU discovery and adjustment in IPv6

commit 0ca7389c5dd6b627a2e5dc68c5751e4d38bc9ed1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 8 21:30:28 2015 +0200

    radius: set our IP in the request explicitly

commit ff3602327761e8b7c7e91039e8fcd04bddfedc7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 14:14:17 2015 +0200

    doc update

commit 18253952d33df10b59dc390435a64243b5d98612
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 14:09:24 2015 +0200

    radius: removed documentation for Framed-IPv6-Route
    
    It was superseded by Route-IPv6-Information

commit c7167af362a6942984dc765242185785fc8d1ac1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 13:49:23 2015 +0200

    radius: added support for Delegated-IPv6-Prefix

commit 41bcc9d0c03b05caab1e6e5ba2459a31d44d88f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 13:34:03 2015 +0200

    radius: put the process ID into NAS-Port

commit 6b79e20c5390811811a6c86d3e93f468d4e0f3ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 13:22:49 2015 +0200

    radius: removed NAS-PORT-TYPE from accounting requests

commit 96a2f9723d104418ec872eb6b4b08c6b49c9f74e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 11:45:10 2015 +0200

    README.radius: added new attributes

commit 3185581a73dc4c16fba646fe653de9f4eca2e5ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 11 14:13:26 2015 +0200

    Revert "allow specifying a subnet id"
    
    This reverts commit 689c5ad56338b4a9ed81ac9a58d13689a24ba955.

commit 5995389b0ffab644adbdb2f305ce502cb87f928d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 09:29:36 2015 +0200

    tests: added ipv6-prefix unit test

commit 39ac437727fbe45577e1611e058223fd17f58c23
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 09:09:09 2015 +0200

    enhanced ipv6_prefix_to_mask

commit 689c5ad56338b4a9ed81ac9a58d13689a24ba955
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 08:57:58 2015 +0200

    allow specifying a subnet id

commit acde2a116377434ee12b8a3926949d17bc8745aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 08:50:57 2015 +0200

    ipv4_prefix_to_mask: enhanced to handle all possible prefixes

commit 353e5018efa601978bf1da11091b39ece43dde3d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 7 08:50:33 2015 +0200

    tests: added unit test for ipv4_prefix_to_mask()

commit 111e5a9b5fae3e18e252752f7c024c0009c14c1b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 6 21:09:56 2015 +0200

    restore recvmsg

commit 8b32d185c66b0a1ac12d30c5a677877f23e8c9d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 6 20:43:04 2015 +0200

    doc update

commit 739cf0c78eeaf4adc7930742179311bc360671ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 6 20:42:06 2015 +0200

    doc update

commit f89525ff9449e03b919ec8630769dbe97fc308af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 6 20:31:13 2015 +0200

    added config option 'persistent-cookies'
    
    When it is set, it doesn't invalidate cookies after
    user disconnection.

commit 4083684be2579cab2012ce13cd92c22e5c0a0eb7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 6 13:14:55 2015 +0200

    sec-mod: terminate a client session immediately only if there is a single user

commit 3aa0bc4010e19b2976d7242dba6e8ae5c3c72d6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 5 11:26:24 2015 +0200

    doc update

commit df4425a7d27caf611c70db9e8c7642c830907f65
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 5 11:23:25 2015 +0200

    radius: consider Acct-Interim-Interval by default
    
    That can also be overriden by specifying 'override-interim-updates=true'
    in the radius subconfig.

commit 9ed9716e0e470f8a1c2ef30563634b2673be3f9a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 19:02:34 2015 +0200

    radius: send IP address on session start

commit 1b29436168455935aab8c0537c6dfde15cd78400
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 18:50:51 2015 +0200

    updated TODO

commit 70eca474c4b6b2e340f2c63911d7f7c3c334628f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 10:55:02 2015 +0200

    doc: use the "proper" URL for kdcproxy

commit 3dfd41221c2b13cc86c586d1fcecb9736c033a0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 10:39:10 2015 +0200

    doc update

commit 9df499e3765152771a673db7d7655a66e29aac95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 10:31:25 2015 +0200

    tests: added check for radius accounting with certificates

commit 71bb8f286616f9b2a9a42f64101ab0c138d6a279
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 10:31:03 2015 +0200

    force_read: handle EOF from fd

commit 2929e1c2e8cae319e3a0629f707b494e3527ab75
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 10:25:37 2015 +0200

    radius: properly close accounting for certificate sessions

commit 038db8fd80c54a71bd777514d38ea0e63289d75a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 4 09:30:23 2015 +0200

    common: corrected select loops

commit 26b2978f6d43f432d64360f43d06e6bf9be0d4a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 3 13:58:45 2015 +0200

    allow the _timeout functions to operate without a timeout

commit f33009a6f0ee3289b8dc9fad0efa3096ee3684da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 3 13:50:08 2015 +0200

    selectively specify timeout in recv when needed

commit 7661726bd7c431a003a76caeaae06ff25a5da40c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 3 10:07:15 2015 +0200

    radius acct: corrected type of value in data setting

commit 6022b80394656ca761704774d502ba66b3d291e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 3 10:06:45 2015 +0200

    radisu: always send NAS_PORT_TYPE

commit d09bff7b0961bc63093320423e2fd19ffe8f114a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 2 12:23:06 2015 +0200

    doc update

commit 0b0ab73a2e7919eefa80baf9373f22875daa3bdb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 2 10:53:32 2015 +0200

    updated message

commit 5d522a73fee62e79877bfd7ba09f388f0039e8ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 2 10:47:42 2015 +0200

    main: do not impose timeout when reading from sec-mod

commit 89190854f6d2dd75cc3bdab0b9226fba9bc58129
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 17:48:32 2015 +0200

    doc update

commit ddfa37cf4a3a1e371335717ba48cfa3dcf963ae7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 17:36:14 2015 +0200

    increased the tgt-freshness-time in examples

commit 2932f170a6c1eacfcd47b4269371c4acf3ffa6d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 13:24:56 2015 +0200

    gssapi: avoid comparison with null mechanism

commit c041d669e10eb3399978ff831aa4e4d2dfe8c76e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 12:53:42 2015 +0200

    updated comment

commit 3f91dfab830970e0cbaa71b1dffd954e036593cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 11:55:15 2015 +0200

    corrected termination of sessions which had no associated module (i.e., certificate)

commit 6e336431fe531bdde305858e09d8e55b62e9cebb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 11:41:58 2015 +0200

    radius: distinguish between user disconnect and admin reset of worker process

commit 849c68e4b688e9fce55425bbcd56cccd2877c173
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 11:04:14 2015 +0200

    doc update

commit 1a1ab808a71d49443c8a65f274f96facf85d4dc1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 10:47:02 2015 +0200

    tests: verify tgt-freshness-time in Kerberos setup

commit e54f6e2ac215feab7447831fcc96d07ace74eda6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 29 10:10:39 2015 +0200

    Added config option 'tgt-freshness-time' for GSSAPI
    
    This allows to set the maximum number of seconds a TGT ticket will
    be valid for logging in the VPN. That can be used to prevent
    a valid for a day TGT ticket from being used to login to VPN, and
    addresses the use-case of where a laptop with a valid TGT ticket is
    stolen.

commit 595a9607ce50e61edf041b9d8f669c71888474fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 28 16:54:42 2015 +0200

    doc update

commit b4d8a4aa39f5e9aac2cb1fae8cab054b4d4b6089
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 28 16:39:54 2015 +0200

    tests: updated radius test

commit e0cd5c2660107e8498861716a25209795250df43
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 28 16:06:47 2015 +0200

    on explicit user termination notify radious as soon

commit 57104d9148509b0c3955fb0d30c309db3ecc49ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 14:10:01 2015 +0200

    doc update

commit de118b1787371c22e9c3a328de4750d3a21d2fb5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 13:17:50 2015 +0200

    corrected typo in ban-points-connection option

commit efea3fa1e26326b9b39f9c241a41763544826707
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 10:57:14 2015 +0200

    return more meaningful error code in parse_data()

commit a034626add666dc34274c070603c3c4444b3790b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 09:48:38 2015 +0200

    radius: differentiate between user termination and session timeout

commit 1cdc70763c92fd5c4dd74af4edd38278d6303a8c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 09:34:55 2015 +0200

    tests: added check for proper disconnection message in radius

commit ff63a1daddc6e37f36b686e5d1a528d4eed0c0ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 27 08:07:01 2015 +0200

    bumped version

commit cbd916caafeda820201918a2de1d815aa70ae17e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 26 23:10:41 2015 +0200

    doc update

commit 02aa9c691e5f8a3bb103f651b3b28bc809bddee8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 26 17:04:22 2015 +0200

    keep track of client entries in sec-mod and report them in status msg

commit ea7b975840f4ad1245f98ad1ed32bdfd349a1429
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 26 16:46:25 2015 +0200

    sec-mod: expire sessions which are in terminated state
    
    Reported by riteki@gmail.com.

commit 80e6e4603426d58481bb07a1ff1645b6f5d70010
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 26 00:13:28 2015 +0200

    Added support for chacha20-poly1305 if compiled with gnutls 3.4.0

commit 3f57dd59bf9950f5b3ed37a5a00bd00eb0baa65f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 25 10:35:48 2015 +0200

    doc update

commit 0ce51b8ac30019c9cca193aac9797912de7f9d33
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 25 10:20:40 2015 +0200

    NEWS: made header consistent

commit 18ed21d979ceb896f61bba848df6db050d7fdd5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 25 10:14:13 2015 +0200

    released 0.10.3

commit 35b9d4364de3182a756efbfbd86e20e8ace904d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 25 10:10:22 2015 +0200

    improved log messages and levels

commit d35582ff7d81b8fa77f8e7fb32d071728278a121
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 23 16:03:50 2015 +0200

    doc update

commit 2f5b261262de4616cf35e9c3108e4720d76d9374
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 23 16:02:42 2015 +0200

    README: updated command for test server

commit a588010c4113befa2262ffc2ae210ceeb99a2f6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 23 10:28:21 2015 +0200

    doc update

commit 1ab18e839f1b3807eb9c79d454d704f1044fb819
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 21 19:36:54 2015 +0200

    bumped version

commit 25e8be3db51e57a94032a3f85879a70bc8db978f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 22 17:17:13 2015 +0200

    doc update

commit ca72c7c60ab977d3dd9177a7240766e61d036cb1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 22 16:51:34 2015 +0200

    removed unimplemented option

commit 700bc55cb228e35237ea94a2f57743f79cf3a3a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 22 16:49:10 2015 +0200

    if user-profile or binary files are setup allow opening files on isolation
    
    That fixes the user-profile configuration setting when isolate-workers
    is set to true.

commit 2729fea7374538500a3e87c9d2cee72b40c1dd26
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 21 16:50:35 2015 +0200

    doc update

commit 8e5e00a40d36fa98ff754133ac0ef20e8b3c146e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 21 16:18:36 2015 +0200

    tests: improved tests with cookies
    
    They use the --background openconnect option instead of the shell
    background command.

commit c6c9ca9a2c37fb852a7471ead1267dcf3f602743
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 21 16:12:04 2015 +0200

    tests: added test for cookie invalidation

commit b3db947a7d13dc02cc25acaee4caca72c306f9d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 21 15:57:21 2015 +0200

    when the user has voluntarily terminated the session invalidate the cookie

commit ed3ba2e0fa649142cde033ad431d2c750856d9c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 21 11:04:23 2015 +0200

    mention about clamping MSS

commit 6a2e575a2fabda36319be8614df92adab6f2c7e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 20 20:22:39 2015 +0200

    doc update

commit 71f0e356992b7da52f913a6283b2d5c1496231d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 20 20:21:38 2015 +0200

    set the the don't fragment bit only when mtu discovery is set

commit dea550798dd92c8ff51610c197a0bc70fea84005
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 20 12:07:03 2015 +0200

    doc update

commit 18e50de9e849394a4841bcc2854c475128266840
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 20 12:05:32 2015 +0200

    fixed debugging message

commit 0f2c4ed968fe0cafc16d16eb03f6e09fd9a90434
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 20 11:49:59 2015 +0200

    reflect the received DPD packets

commit 2f4de1689ad5f992c50a4e996baa9c24e6761e06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 19 21:47:10 2015 +0200

    doc update

commit ee31d1bf522cf7b4d40c57e6c571ae9bdaaccc38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 18 22:13:58 2015 +0200

    NEWS: fixed typo

commit 9b2785910c6f55fa9f9dd68184a8def8806e6850
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 16 14:45:15 2015 +0300

    doc update

commit 1797f23ed1ec0b6d19d362316020c0490f54451c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 16 13:44:55 2015 +0300

    document tun assignment

commit 12075284bfe825373c9840a934439e623bf8dbc0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 16 13:34:15 2015 +0300

    reset the IPv4 address of tun device in linux

commit 0885a65d5e1a00081643ba660b8c55c1f66a507c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 16 13:22:57 2015 +0300

    delete routes and ipv6 interface address in linux as well

commit 9e9fdf180e153bcd87f77fec1e73245f60d3d95c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 15 15:37:20 2015 +0300

    doc update

commit 5a256bc727b4094cb0f07cdeb10e148ce08ff534
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 15 15:35:56 2015 +0300

    tun: restrict SIOCDIFADDR on non-linux

commit f2ede537db5d1756a5c210db5d068ca4c506eeec
Author: Brian Chu <cynix@cynix.org>
Date:   Mon Apr 13 14:16:11 2015 +0000

    Remove addresses from old tun device when stealing leases

commit 0ee9d946a55ff7f7de950227c4f645d1ec5dbc55
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 9 11:42:13 2015 +0200

    when multiple auth methods are set, do not 'require' a certificate

commit 99dd4a6e03b669a5b5fe234fa665b75bbd95c593
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 7 17:13:29 2015 +0200

    reject bad commands from main

commit 3c85b8ed43e704b2c77a4d93bc2da5385e55b84d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 7 17:09:57 2015 +0200

    dbus: require desc to be non-null

commit 2f43ded31c945dc870dda759202d263407f54e4e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 4 19:18:16 2015 +0200

    doc update

commit e4149e3a5b8a5b3b968872b69019c43344a09e21
Author: Brian Chu <cynix@cynix.org>
Date:   Sat Apr 4 10:28:10 2015 +0000

    Set TUNSIFHEAD on the tun device if supported

commit 76eceb579b90e627630109b6fd82308d235aa7ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 4 19:17:22 2015 +0200

    Revert "tun: only use the TUN_AF_PREFIX in OpenBSD"
    
    This reverts commit 2df8e244abf3dc94ff5b6881b02da74d08999c84.

commit ce34bd79295655e182a963365f36730b204d51db
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 4 16:06:02 2015 +0200

    doc update

commit 2df8e244abf3dc94ff5b6881b02da74d08999c84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 4 16:05:04 2015 +0200

    tun: only use the TUN_AF_PREFIX in OpenBSD

commit 98452e78370d0e42a04262ee4919a4b3f96b74b4
Author: Brian Chu <cynix@cynix.org>
Date:   Sat Apr 4 10:14:50 2015 +0000

    Fix indentation

commit 54259a5d4c5ab117d05f67bec57d10f970c2f296
Author: Brian Chu <cynix@cynix.org>
Date:   Sat Apr 4 10:14:50 2015 +0000

    Fix invalid return value

commit 019d7e8a044f1d6790164514e53f9bba9959a34b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 15:22:58 2015 +0200

    dbus: reduced verbosity of module

commit f2334ae4af1b34d55d0be61e8c2f42ed023d1214
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 14:50:20 2015 +0200

    dbus: share the common part of signature in user listing

commit abfcee599148f6574b3b5c3b253c21017d6d0c69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 14:49:58 2015 +0200

    terminate_proc is shared between dbus and unix

commit a85dfcc3d810eea5cc2cdb30b85acac5ae98ec6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:15:07 2015 +0200

    doc update: remove dbus from the non-recommended options

commit 0654a191b218cba0ecf5c29ecf3183b1a3851d69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:13:10 2015 +0200

    install dbus config file if DBUS is enabled

commit de955d19c4e224bbe12627ebc1ad5d8791043b4c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:11:20 2015 +0200

    doc update

commit 92c9dafbb1a7a8a890c7fc3a0a51cb63163f5e9e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:10:05 2015 +0200

    dbus: use terminate_proc

commit c50ad8021cc9b6410a872c9b3f454ae1430c9acb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 13:09:13 2015 +0200

    dbus: include no-route information in the user info

commit 913ebf767dbca8e3f16a617e9a4f86d0f2fe65d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 12:58:27 2015 +0200

    dbus: include DTLS/CSTP compression and MTU in the user info

commit e65c4f5c607f526d5d24301468c9b667437257df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 12:49:32 2015 +0200

    dbus status command is in par with unix sockets one

commit bef3ace9044651903cfc5208112ab483e7ade948
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 12:41:15 2015 +0200

    dbus: fixed new commands for ban/list

commit cf7852b7515c64cc13f67ca73483a240124e6b5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 12:23:37 2015 +0200

    removed old todo items

commit b2585e30b3e27aad8a87426c446558c99ea65d3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 10:56:46 2015 +0200

    enable dbus

commit ba659368593389009d9db6fde4462402407a068d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 10:55:38 2015 +0200

    dbus: more debugging messages

commit fdaac88e37fc2d3c3959d48f12443add5deb1799
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 3 10:38:17 2015 +0200

    dbus: added new commands for ban/list

commit a35f020b327b68d8eb6e6411f0ff52889ad49351
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 2 15:57:08 2015 +0200

    server header moved to X-CSTP-Server
    
    That would allow viewing the server from openconnect verbose output.

commit a9d562064aa4d8bfcbfa897eddab7c5895dee5fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 13:37:43 2015 +0200

    tlslib: define DTLS1_2 when needed

commit 9ab82246deb6bc5ab98cd881f9b48f23b42b1048
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 10:58:49 2015 +0200

    configure: no need to require libtasn1 3.9

commit 3741cdb2f8285d1d5b101a63761b06d265480f5f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 10:46:22 2015 +0200

    doc update

commit 1483f51062d4c7c9cfef5f2d54d5660d8ff324a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 10:30:24 2015 +0200

    ciphersuite check is made dynamic
    
    That would allow ocserv to be compiled with GnuTLS earlier than
    3.2.7 but still use GCM if linked with a proper version.

commit e09eac37cbf9597528497a454b97a697a7eec4aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 10:14:19 2015 +0200

    tests: docker-common includes common.sh

commit 0967f05f8d7665a67f3cb0fbed46c48dc7ec74cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 31 10:13:08 2015 +0200

    sec-mod: do not impose timeouts on reads from main

commit eba415def64b96b4b04c959981b672ccf059aacc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 29 19:38:38 2015 +0200

    tests: openconnect binary is now set in variable

commit 9e3e039dc3ccbe52303a0f569914c0faf14ad083
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 29 19:07:26 2015 +0200

    released 0.10.2

commit 4a40ec6afa1aed13c517126759ec91037c54f351
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 26 07:48:02 2015 +0100

    reduce messages sent by main to sec-mod

commit bb5500854dc986186f9826ab921ac98cf7aa4760
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 26 07:12:46 2015 +0100

    bumped version

commit 5395f481e8d57629bff9434b011db902794a84dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 25 14:01:36 2015 +0100

    tests: rely on fedora's openconnect for kerberos-test

commit 8edbdf42921efb0cb3fa8fcb333601473f9854c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 23 11:17:12 2015 +0100

    doc update

commit 7ea22d3aac23f0e30abcfa3cda1a113e4cd13c49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 23 11:04:58 2015 +0100

    receive SM_CMD_AUTH_BAN_IP_REPLY asynchronously to prevent race conditions

commit bf7394b091a7fa3740f01fdbca057f94c3eaf90a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 17 12:30:07 2015 +0100

    worker: don't use getsockopt(TCP_MAXSEG) on unix sockets
    
    That avoids unhelpful warnings on the log. Reported by Claudio Luck.

commit a2e33f71a1ac5c6f47b5c68c9b08f6670925a7d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 16:00:17 2015 +0100

    tests: corrected full-test checks

commit cbed2ac57b0f9ef7b3428eed6b7ae641c6e8eb2c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 15:48:51 2015 +0100

    doc update

commit f64e37308459944aedf0c73bb582afb8cf5a8c19
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 15:44:50 2015 +0100

    worker: when receiving auth_cookie_reply from main update the SID
    
    That fixes an issue where the worker didn't know its correct
    SID, because (1) we didn't always send the SID as cookie - corrected in
    the previous patch, and (2) openconnect client doesn't honour all cookies,
    only the webvpnc one. In all cases it is more trustworthy to check our
    view of the SID rather than rely on the cookie.
    
    Resolves issue with stats not being transmitted to sec-module when
    using certificate authentication.

commit 89ecadf1830afcbf959d2dadaff1088a6e73e68e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 15:41:14 2015 +0100

    worker: always set the webvpncontext cookie

commit b9c9904903f66ef1c71b9ede9b92bf7b9658bf47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 14:07:05 2015 +0100

    full-test: set PORT_OCSERV

commit 53aa95bc1ecbe587bd9c741a5d19e378d71e6a20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 16 14:06:45 2015 +0100

    print unknown SIDs

commit e81c6755ee443fa6dbb38626c8e1e9db82f061f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 15 16:47:36 2015 +0100

    released 0.10.1

commit 419ac8ecff4236e29015c8fbb34936c5c7428718
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 15 11:25:09 2015 +0100

    ensure that sendmsg and recvmsg don't get interrupted

commit 872f39f777307bbac9048d86b06d0e7420b8b26a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 15 11:20:42 2015 +0100

    sec-mod: handle unknown messages as bad commands

commit 95b9f61f9026899ff46a8bd0a5711d6d4ca472bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 15 11:13:57 2015 +0100

    doc update

commit 542597d08b6d54493e303780cfa202dd3b226cfa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 19:24:33 2015 +0100

    bumped version

commit 87fe1747b8ac1dbb6b6a5673bf31354771a8520e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 19:19:41 2015 +0100

    call session_close only when session_open has succeeded

commit fac64468dca04fba4c3389b5def2622310a1e39e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 19:10:49 2015 +0100

    tests: enhance test-cookie-timeout to detect issues with main-sec-mod not in sync

commit da29bb99f35a337994413191410de198771dbbfd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 18:57:59 2015 +0100

    doc update

commit 423540b7571dbc32f42dfc02e6b653bf58883f87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 18:54:22 2015 +0100

    tolerate session close in unusual cases, and avoid desync

commit 6c1f88a09042e4f0d9f6fb79424f3260ffabfb99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 14 18:46:17 2015 +0100

    sec-mod: only exit on ERR_BAD_COMMAND errors from main msg handler

commit 00e775dac6e6cbfdc051ecfd934373c3fc0af174
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 13 15:53:07 2015 +0100

    radius-test: include radius accounting test

commit fed17e005af96131b02d24ef5671789c52acfa95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 11 10:25:08 2015 +0100

    config: simplified comparison

commit d3c0d6a2c8af29f4e0ca0808acf639d669c8cf98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 11 10:18:03 2015 +0100

    icmp-ping: explicitly specify type

commit d9fb482361b3c580f0e5cc99489e07324e8e1d22
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 11 10:11:58 2015 +0100

    configure: removed stray ','

commit 551f22f57c72ac7c21f5d6296223235e1589e6d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 10 18:22:30 2015 +0100

    released 0.10.0

commit 54dfdf3d59fd95cd6e15c2d1a3109db6e338c009
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 6 13:54:52 2015 +0100

    doc update

commit 755f8ad6c2d11acba72ccd72f0564ffe3f0ca1e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 6 13:49:22 2015 +0100

    document GSSAPI authentication

commit e3df6c9cf0d97778c47cb6607103fa01af7e53d5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 6 13:42:50 2015 +0100

    doc update

commit b27ff289711bc923e31117c7aa1e57705eac079e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 4 10:28:15 2015 +0100

    updated sample.config

commit 17edec6bc65420c06304d0617237513f95860b92
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 4 10:25:26 2015 +0100

    disable DTLS if there is no ciphersuite in common

commit 642edaae59a289c5b78352b4c505b5a105569d65
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 15:37:54 2015 +0100

    doc update: mention that banning cannot be combined with listen-clear-file

commit adc8473328debd67d0f47daf421a0bb6cd9f2333
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:49:09 2015 +0100

    chroot_dir, occtl_socket_file and socket_file_prefix were moved to permanent config options

commit b4347e4971a3cea51246da54915f44ffada7c94a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:44:51 2015 +0100

    updated documentation with options that will be read in reload

commit cf483b046b09807a1e00a62e6f4bf3b7f379d47f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:28:28 2015 +0100

    increased the maximum configuration options to 96
    
    That allows for up to 96 routes to be sent by the server.

commit 81b6b6bd3c1a658b4e91cd4af89d715e7b6a4bd7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:26:44 2015 +0100

    doc update

commit b732a6e91efa11e71a173d8f36dfc58b60807663
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:19:30 2015 +0100

    doc update

commit 3693f1baa5027aab1409ea2e0d184d39d51ba1a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:13:28 2015 +0100

    tests: check whether local-map in gssapi is required by default

commit f33b7f955970017dcbcd56d970b19bd0278712bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:06:54 2015 +0100

    doc update

commit 09f7b81f206dec0ba77906f19a7b98ecd758ff9f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 3 11:00:51 2015 +0100

    don't call exit from main process; use the termination path

commit 05accfeb0d1145c87574051a2e8c1c7fc39234e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 16:28:22 2015 +0100

    always check tmsg for null prior to freeing it

commit 3da0b450b9260c9c34ba76e27f6a061c99627199
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 16:27:14 2015 +0100

    corrected default value of DPD

commit d90600b46cc73b745cf6be462d842062e3548e4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 16:23:12 2015 +0100

    avoid warnings on type of the parameter used for the allocation pool

commit cdb1b708222b5367c00e84e8c09a091288067830
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 12:12:35 2015 +0100

    do not send IPv6 accounting with radius; there is a bug in freeradius-client

commit d4a26b9fbe3cafa7848c06bf74b4978a33726f41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 11:30:26 2015 +0100

    clear_cfg_file() -> clear_cfg()

commit bf23bb82ba9c569466141df1a682a06f8737bf77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 11:07:02 2015 +0100

    cast CMSG_DATA to avoid warnings

commit cc16a65819ad1686deaaa9441fdf5d82e9015813
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 10:08:41 2015 +0100

    separated permanent configuration options from the reloaded ones

commit e232ebc764119cd60cb12985edce50d216d23f7e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 09:04:17 2015 +0100

    tests: added check of behavior when SIGHUP is given

commit f4d14f7000c195570a50b23055856a85d8581dca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 2 09:00:18 2015 +0100

    sec-mod: will exit if it fails to process commands from main

commit 65c83c6e8487d0bdb62aa1e335fd4c1fcaeca752
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 1 09:50:24 2015 +0100

    added option to completely disable compression support

commit bbe272a0b4fcdf535d70e126077d5161b0a2a294
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Sun Mar 1 09:36:32 2015 +0100

    Stop using 1ULL as the base value to be shifted in LZS GET_BITS()
    
    Keeping this as an int is fine; it'll never be shifted by more than 9. And
    the promotion of (src[0] << (bits - bits_left)) from int to unsigned long
    long makes Coverity unhappy because of the sign-extension.
    
    (patch copied from openconnect)
    
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit 4aa726bd9c987a141a81add450ee0e232baaf998
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 22:51:49 2015 +0100

    main-ctl-unix: avoid using remove_proc() unless necessary

commit 58a3c7fd581d7edbad28efa5c4582dbc3db384f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 22:44:44 2015 +0100

    close stdin and stdout descriptors by default

commit c0838241d0fcc40f00f62f755c77e566e73dfb84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 22:40:26 2015 +0100

    updated log message

commit d89862811f5d940b541ed55cf8340c189754770c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 22:39:57 2015 +0100

    tests: added missing file

commit 4eafc3c847190531c640bffe42e8bf50a28f98c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 22:15:53 2015 +0100

    client stats are conveyed to master through sec-mod
    
    That way both can keep a more accurate picture of user statistics.

commit 7a11fa615c2d8a8c2846bb4730ac6befd80f44ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 21:51:30 2015 +0100

    worker only sends stats to sec-mod

commit ee7cba2fd2511700480a2bdea444302255b5b6e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 21:45:23 2015 +0100

    sec-mod: simplified session open and close handling

commit fa55722897a37f80686e638f256e52f0fe39cf74
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 21:37:12 2015 +0100

    connects and disconnects to main are logged with LOG_INFO

commit b1fe057f8c04198771210f1f1079b7543ea2ccce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 15:07:10 2015 +0100

    tests: kerberos-test includes check on KKDCP functionality

commit 8bc43d6977f175cb3c7d0e2bcd59c383b7e9f27d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 15:01:20 2015 +0100

    kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

commit dd8b53f655c3b32d52398fe7a085d5ab9878cdf7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:11:39 2015 +0100

    worker: send correct ipv4 address when an IPv6 is present

commit 1e18234d2f6a8be7dfd677d8481638c753dadd1c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:10:16 2015 +0100

    kkdcp: fixes in post handler

commit d0ae4e7e78875a97766212e5e67272e322b3ebdb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:05:14 2015 +0100

    removed pointless checks

commit c8cd64c9cac20e842e08426e05636c9f5f377549
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:03:48 2015 +0100

    tun: combined code used in SIOCIFDESTROY case

commit 09d682d2134691cf8e79d67a1a1afd1dbb2e9667
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:02:22 2015 +0100

    tlslib: eliminated pointless check

commit da6f439d27bc76b8712a51f29734f5f080a504b5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:01:25 2015 +0100

    tlslib: call va_end earlier to avoid memory leak

commit c80c8dc15be30f0509e786e68625ebfacfcf14f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 14:00:15 2015 +0100

    config: expand_brackets_string tolerates null values

commit 01fd48f093bfcc036f257b8be041b31860f98679
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 13:58:44 2015 +0100

    occtl-unix: removed dead code

commit 449dddb13ec35b0bbf91ee0b94d55575b27b15ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 13:55:06 2015 +0100

    worker: fixed caching of message received from main

commit 17dbc5a29f74ab4576363f54485e318f5b5c8aaa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 13:52:18 2015 +0100

    config: print the primary authentication method only once

commit fa6fa5306b716c5219dcb612b43449ed6820f73a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 13:50:01 2015 +0100

    radius: eliminate dead variable

commit 3f12eac4db13683b49ccac362917dadfb11f6148
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 10:34:46 2015 +0100

    tests: corrected copyright dates

commit bfb4f1f95bbd11e846f8ec63b0a7b0160e21a487
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 09:06:53 2015 +0100

    tests: added check for IP banning subsystem

commit 4bbf27a1e87998ba73a9d4dcf359aef2a0ea7130
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 08:56:54 2015 +0100

    don't attempt keeping scores for banning if banning is disabled

commit b8b1d5a212a809b198d8ee1372a42f82efc82bdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 08:52:50 2015 +0100

    occtl: unban -> unban ip

commit 56bb8e1be168773b23102fb1f8c8adf261461c51
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 27 07:50:33 2015 +0100

    sec-mod: do not reply on session close cmd

commit ea69621318d5443f31cf07bec552b1ef92c0c62f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 21:37:41 2015 +0100

    don't print message on adding a banned entry if already banned

commit 0f5b9d1ebd671c25ff60bee78ad21779f6247a22
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 21:35:35 2015 +0100

    print the accurate time on banned IP expiration

commit 1f6340f1fa77b0db2258bbc18a6f28a870d68290
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 21:17:08 2015 +0100

    occtl: banned IPs -> IPs in ban list

commit 9f95d086d9c1753ee5d9f571e4750b0abda3f558
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 21:15:15 2015 +0100

    removed unused variables and structures

commit 3acd229e814da7de5e095267bbcb6dfdb8305068
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 21:13:13 2015 +0100

    occtl: pretty print uptime

commit 6e9b202aa8c98aaba3f2d293f8cc84c3d1b7b851
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 21:07:51 2015 +0100

    occtl: pretty print expiration time in bans

commit e64528c9f18ae79b6f699fa82eb2005d059bced1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:59:03 2015 +0100

    occtl: avoid crash on empty cmdline argument

commit 056730e931f2f1ad820f768bd62b8d7c265e6897
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:58:49 2015 +0100

    removed duplicate entries in makefile

commit 9a97565a609b91389e07203c24671c6f0922ed5f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:49:39 2015 +0100

    occtl: rename show ip points to show ip ban points

commit 15f0733f7d06b51a0af9fb303d1808eaafeff510
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:40:29 2015 +0100

    PAM accounting is only included when PAM is enabled

commit 9c9ac721c2a7fbd02106540e6257be07b46fa949
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:39:53 2015 +0100

    include kkdcp_asn1_tab.c only when GSSAPI is included

commit 2c23c86d486ac8ae7f0d9bfd0a795d79c2164558
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:36:49 2015 +0100

    removed unused parameter of select()

commit 24842d837e0ddb40abbd4a9e645a7326f4a8bdf2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:36:20 2015 +0100

    include security/pam_appl.h only when PAM is enabled

commit f725c08576d39a735a421f783fa1ae83b60efb52
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 20:32:13 2015 +0100

    removed obsolete file

commit 9552638acdde3a041530352fbec3184961fedfa9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 16:26:56 2015 +0100

    occtl: added cache and completion for IP addresses

commit 17c1c3d38104c8f95ecaf083ea67b92454a43669
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 16:05:02 2015 +0100

    sanitize IP addresses provided by occtl

commit ac1e0571582a6421fe54d33d5a6016cacbbed3dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 15:52:59 2015 +0100

    occtl: allow listing only bans, or points

commit 596cc35ff3231d1265cc08152efe9d9d4840bbd9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 15:40:58 2015 +0100

    do not continuously extend the expiration time of banned IP entry

commit 73ba4c06cbf746e39a9a85a8913f0b05cf9ca191
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 14:37:06 2015 +0100

    doc update

commit 0326ec168b630595d8b3a772f12d381be7238263
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 14:33:33 2015 +0100

    occtl: added ability to list banned, and unban IPs

commit bbee3767dc1c94df2fcfd1b02f748ade385ad3a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 13:41:32 2015 +0100

    sec-mod: don't use a timeout value in select()
    
    There is no need for that.

commit 28dd005b760234c5bffea3960791f9fe36f50a02
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 13:23:51 2015 +0100

    removed support for linux namespaces; they don't provide any advantage over seccomp

commit a13e9a9507e11b6b7ca5c46aa8530c870ab63cc3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 11:29:08 2015 +0100

    tests: only run test-gssapi if gssntlmssp is found

commit 445ea63783840377402919c6d7b0fe4e9d432b8c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 11:21:19 2015 +0100

    made the ban points configurable

commit 7619895a25d236b7c45ff8f93a213bf283a4bb7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 11:00:05 2015 +0100

    removed server-name config option

commit c9efcae416c677a470040d03a0b21bcc412c25c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 26 09:22:28 2015 +0100

    doc update

commit 7a675ff5e26745e2677123e84bc0cd0e83f51209
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 19:55:47 2015 +0100

    When sending BAN IP messages to main receive a reply on whether further actions should continue
    
    That allows to BAN a user even during an open connection.

commit 874d0ce0e254f7a8bc349cace470fef1e7a3f2ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 19:10:16 2015 +0100

    sec-mod: always send a reply to main

commit dbfca447a6af4d884c2ffd34d68db0fbee4816b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 16:29:39 2015 +0100

    sec-mod: reply to main on failure to verify a session open cmd

commit 8dd9cedd68c9f63dbc7a8fac371af214b5ed5036
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 16:10:15 2015 +0100

    worker: collect any ban points and communicate them to main on exit

commit 632ae255256e5294ece0c2de8fc26d899a303cd5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 15:32:52 2015 +0100

    tests: radius-test: cleanup

commit 0aa2c86f08f646a6d93463d66388e357b0f7f417
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 14:31:21 2015 +0100

    Added points in KKDCP connections to prevent DoS attacks.

commit 58c8a520594a1bbae0b2c92796414d55049dc1c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 14:09:46 2015 +0100

    log message for rejected banned IP connection was moved to main-ban.c

commit ad66cb92d83d171f9660b97c2641a97ac61208c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 14:07:53 2015 +0100

    report the number of banned IPs via occtl

commit 625441113170dbc335ea513c19091ce78a10c3c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 13:31:35 2015 +0100

    doc update

commit 4d7a4eaf23be8ff42eb57d12c4d09751dc6fad7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 13:29:42 2015 +0100

    HTTP debug messages moved to level 4

commit a3f5ae2551a0308c3943c2360dab7b5738840901
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 13:24:37 2015 +0100

    Add a cost in number of connections per IP to prevent DoS attacks

commit a617485232c460a18f0c91ea01187c00088868f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 13:16:15 2015 +0100

    enforce of IP banning was moved to main

commit 3222cedb99af19afceb4cf711071606dad25b12f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 10:33:25 2015 +0100

    simplify the communication between main and sec-mod

commit b44d84f7a2e5364449f1a3f0b8e99b4c14a4d51c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 09:38:12 2015 +0100

    tests: radius-test: require freeradius-client 1.1.7

commit 43f3807e3b41bb64ca895a56c0addc8e599ea113
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 25 09:31:17 2015 +0100

    prevent accounting methods from switching on reload

commit 3a9617845ea6cdaad1ae14bf7feace602d58fc19
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 19:15:57 2015 +0100

    radius: use the NAS identifier in accounting too

commit 410ad632b0fc5198e154e8bbc8eec5c120f48169
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 19:14:20 2015 +0100

    added sanity checks in auth methods

commit 437235e2538d6f71321c89d4cc6cb1ae03f92e68
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 19:01:54 2015 +0100

    doc update

commit 2f2f4a77d255f0aa5dfaee661684cd3a23690c68
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 18:59:05 2015 +0100

    allow explicitly specifying the NAS identifier in radius

commit 6647ddcbd307228160b1bc15d504abaff7bc118c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 16:22:32 2015 +0100

    tests: use unique temp files

commit cb52dd943e10a7b2e5e9ba56e84b52c32918bac2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 16:01:22 2015 +0100

    worker: if a client retries a POST/GET request without the X-Support-HTTP header switch method
    
    That allows openconnect to retry using password authentication if it
    has no ticket or so. To advertize that behavior we set the header
    X-HTTP-Auth-Support: fallback
    in our 401 response.

commit ca9b7e6e7ddfe4c2b2c993ee714c2f45d50a357b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 15:49:30 2015 +0100

    check all methods when using ws_switch_auth_to()

commit 12ebe6b00519bd30e80556a39b4b8dccef549ee9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 14:50:54 2015 +0100

    unix-test: added lz4 in fedora

commit 6494ea6600c62037cf8393e8f2afbb2a050109c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 13:48:30 2015 +0100

    when stealing values do not reallocate them

commit 29e834da4de484bf770ec52c8a4afdf092aa3cf1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 13:46:48 2015 +0100

    plain authentication uses the new parsing method

commit c5bba808547f516dadf6209536b7224d2c00380c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 13:39:46 2015 +0100

    pam uses the new sub-config format

commit 43caa1be14101d075974192b50f6af5f5850967e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 12:05:38 2015 +0100

    radius will use the new sub-config format

commit efa0f510d752aa4fad51274c2fd1deffde75bee8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 11:52:00 2015 +0100

    tests: test-gssapi: use require-local-user-map=false

commit e16ae6614c1edc8aded5b3ca8aeaf5373549df62
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 11:30:33 2015 +0100

    Added more advanced suboption parser
    
    That adds the ability to parse options in the form:
    auth = "gssapi[option1=value1,option2=value2,...]
    It also introduces the keytab, and require-local-user-map
    suboptions for gssapi.

commit 7b9e5a9f2a2b74dcaab3917cfac94f2b3c8da420
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 24 10:39:47 2015 +0100

    when printing session information in log restrict to 5 chars

commit 9b10323c2f9ec5dcac85c675eab901a978dbc14c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 19:14:27 2015 +0100

    tests: fix IPs in unix-test

commit 3c36f96de5927f517fce94b296a2211c2061333e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 19:12:12 2015 +0100

    tests: set the proper hostname to KDC in kerberos-test

commit 08c5ddea7e63d7133872191bf96a95d7813a3276
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 16:52:50 2015 +0100

    tests: updated checks for gssapi

commit 3caa7bb14463d747b72e57b5f7d15e3bbce5013b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 16:04:01 2015 +0100

    README: added krb5 dependency

commit 6b0b8e5afcc95fce94691f20b4d42e2a064b1735
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 15:44:07 2015 +0100

    tests: changed IP addresses of radius and PAM tests to not collide with full-test

commit 4934cecdd63f07be5dbc35f1a8041ae2be8920ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 15:21:11 2015 +0100

    doc update

commit 40e96aae459726d7a0b82f79ff47afa6a2f6aa8a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 23 11:24:14 2015 +0100

    Separated accounting from authentication.

commit 783be933e577e88d1187620bd05cb6f05f0d0245
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 20 16:20:00 2015 +0100

    tests: updated kerberos-test

commit 88e008cda351399e326b94cf430df441a7f53244
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 20 16:18:06 2015 +0100

    radius: when sending accounting information include any updated IP

commit 551e3b38c5e44126ada140868a9b263cd89ba77c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 22:15:50 2015 +0100

    tests: added liblz4 into unix test and fixed IP addresses

commit e7f0b1f947ada12db0f13185684f07325b4b2140
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 22:01:47 2015 +0100

    keep statistics over the lifetime of a session rather than closing and opening the session multiple times

commit 40829b037ea2ca9393ce563a9b10a5b65d0604b1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 11:02:01 2015 +0100

    when generating a unique SID check if it already exists

commit 1fbbfa7862b2a8c4f51bcf6819873ac6ead8ca98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 10:48:06 2015 +0100

    tests: added more dependencies for debian docker image

commit 31fe29c4330b466f990d647ef320ab8587958dc4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 10:40:51 2015 +0100

    test gssapi/kerberos only when compiled with gssapi support

commit bc7c1bf8d97027c391d97f82c2533d5bd5b91b4f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 10:35:52 2015 +0100

    check state on session cmd

commit 9682a0f635d89c498b8698a4fe6990d00c0b3044
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 10:28:45 2015 +0100

    when combining multiple auth methods as primary, combine the name as well

commit 151b716cb13e29adc29cc00f116d6dc4ffc270b2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 10:14:03 2015 +0100

    corrected command issue check

commit de932ec60a9367c07171a93e12199d0dd0a6b688
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 22 10:08:10 2015 +0100

    removed pointless check

commit 646b4ee1eca27a1e5c74431014ab348caaa9b792
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 17:14:23 2015 +0100

    main print username in new cookie session

commit f1bc754169edb65961ca6cd7ea8802e48770cb0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 17:13:25 2015 +0100

    add part of the session ID in logs to differentiate them

commit 39494d54ed8d5bf80f0e35e22bb8653677a4e992
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 16:59:52 2015 +0100

    fixed sample.config

commit 979a2be68fd3a2dc74efb1f4880b13bad6faa1a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 16:51:30 2015 +0100

    sec-mod: check for expiration time of -1

commit 89ca2a3889516fdd33851b834f6cb3dc4b5ea4ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 16:40:53 2015 +0100

    sec-mod: prevent an auth init message when not in inactive mode

commit 06e0c69f1dc181f5713713ece09b37966bb79596
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 16:34:55 2015 +0100

    sec-mod: maintainance time was increased to be over the default cookie expiration time

commit 30300cf65e3e92350f7217405ed59feb807cad09
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 16:28:49 2015 +0100

    sec-mod: more verbose logging

commit 218162458eb72357e58865d7de7ddb1446ba52e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 10:03:33 2015 +0100

    sec-mod: corrected usage counting issue in client entries kept

commit 349cced46ff8a3833e9d6aca16c5f3f1046baacd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 08:25:58 2015 +0100

    doc update

commit f3dc88f427ab49674aadfc6fbcddd0671ec80665
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 08:20:35 2015 +0100

    radius: improved log messages consistency

commit c1a6f4730bda98492e063aff529e6bb7c7b29a0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 21 08:16:56 2015 +0100

    Added the configure option server-name
    
    If set it will be used to set the NAS_IDENTIFIER in radius.

commit 4e459c578ad437ac924381632296980465779ef3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 20 14:06:57 2015 +0100

    tests: use env variable to leave the docker image open

commit 4a3668897d8b4633909a1307aeacbd79451b2f1b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 20 14:06:28 2015 +0100

    log http status replies

commit f3ba75146f4dc0e2b08d252dab1f5635bf580d27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 20 12:28:36 2015 +0100

    renamed X-Support-SPNEGO to X-Support-HTTP-Auth

commit 2557944bf097016414b077efa78e9091b50ef37d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 19:29:03 2015 +0100

    eliminated unneeded variable

commit b8964373c85a47e5cc3c34f79bf8f285f7fa02b6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 17:41:32 2015 +0100

    radius-test: fixed wrong password test

commit ecf5ec339104de4beb7ea47ea2addf79d6746219
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 17:41:20 2015 +0100

    tests: added the kerberos libs as dependencies

commit d7b4a28325a3b0446b4f355b7d2bef59403cd985
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 17:38:19 2015 +0100

    radius: fixed config string parsing

commit 35a586a85c3af39d6de65b244a038f0989e81b47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 17:20:52 2015 +0100

    tests: fixed explicit-ip check

commit 98f88f2060fc8b0aae633963af3942ce84a5244a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 17:11:56 2015 +0100

    sec-mod-auth: use auth_user module function only when a module is available

commit 08d4f7cfe3632778f006280c5fce6dd4c4c4b3b0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 16:16:13 2015 +0100

    tests: added PAM test suite

commit 35817b964270bb0ad1aaebb52d05bfb90c1361e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 16:03:56 2015 +0100

    tests: added negative authentication checks

commit 62be0ef47036d05e269f7e8c36d08ab87f76a421
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 15:41:04 2015 +0100

    tests: added kerberos-test

commit 661d92cfc63d98dc777ecdb53a87eb90e3d4bff5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 15:31:55 2015 +0100

    bumped version and updated NEWS

commit cc86c2d1749aa85ff45926302da1ab4e3266b2c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 17 17:34:37 2015 +0100

    tests: added kerberos test suite

commit 9a3be087b45475226a56e84ad00091c5b0fb24c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 13:29:59 2015 +0100

    kkdcp: allow the handling of multiple realms per URL

commit 5f1f0ce87e3c1df7439ac88538d0798521f8cf56
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 09:17:01 2015 +0100

    reduced level of command socket closed error

commit ab74201b994ddfed109e90eb673a6d5400390074
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 09:15:46 2015 +0100

    gssapi: better log messages

commit 4e9a329b59f5c52f4efa75f0abf903d6f27891c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 19 08:54:26 2015 +0100

    pam: return empty message when not in the appropriate state

commit 953241fc562ec2c4498ae91f81cd29c5e90a8af9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 18 15:13:16 2015 +0100

    gssapi: require the localname to login

commit 85de70c621f60eb64a945b9590f42e66b9d64a37
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 18 14:02:30 2015 +0100

    kkdcp: attempt to read the whole message

commit 3e33936f0c24dabf90d1e4dc24f7845de30bbcc7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 18 13:40:07 2015 +0100

    corrected DER message construction

commit f591cb0181262789bc0688249a0f86f389126269
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 18 10:36:20 2015 +0100

    sanitized strcmp check

commit 7a46da3379c127f729dd5c5025846043e7652ec1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 18 10:18:09 2015 +0100

    Use content-length: 0 when closing connection

commit fbce6f59247e6533766412f30b616b64115b561a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 17 17:47:50 2015 +0100

    when cookie is present avoid basic authentication

commit 4a940145ad3546d2c07c71c1c17c3dfadf83ea0f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 17 17:35:27 2015 +0100

    doc update

commit 597d1a6a479c9a3e560bead43cfba46886f67e0a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 17 17:34:26 2015 +0100

    update username in GSSAPI

commit 773d277802a92cb4de2163de4d880d90e0c923c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 10:08:34 2015 +0100

    kkdcp: perform the proper encoding and decoding on exchanged data

commit 6334bada15107406dfd4c2cd8f60774c4307dae6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 09:27:05 2015 +0100

    renamed urlfw to kkdcp

commit b5a0fe354f7089981a6f1e588e98976a67f282f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 09:18:27 2015 +0100

    more specific log message

commit b300177eb7f1d8b2667bd2912aec65511262b7a2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 09:35:26 2015 +0100

    Added max-password-retries config option
    
    That makes the number of retries prior to banning the IP
    configurable.

commit 108d34f6132227c10888e4c10086601c9fd58a3d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 08:29:42 2015 +0100

    Ban an IP only when the MAX_PASSWORD_TRIES attempts have been exceeded

commit 1fc59e00995cae30e55d8a3c2e6c4d0097e810d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 22:35:25 2015 +0100

    gssapi: better error printing and restrict to SPNEGO

commit 1459f397905a6a269aa7f91ae269a13f57479a14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 15:56:59 2015 +0100

    X-Need-SPNEGO renamed to X-Support-SPNEGO

commit 1f128219ae3c6cf7e2d844907bba9d2099cd7a78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 15:55:37 2015 +0100

    if gssapi authentication fails, switch to password auth if possible

commit 06f21471555547b8f50fcb2606ab94f2d37a1db9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 09:40:12 2015 +0100

    prohibit worker from sending an auth_type of zero

commit c0ceeba0f823015d92e7505126fbfbbacb0f4728
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 09:34:17 2015 +0100

    Fail if authentication modules are changed on reload

commit bfeab4b015d997537bdac68f0a59232867623085
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 09:32:19 2015 +0100

    Additional data are passed only to auth module's global_init

commit 2d72c0a52678bf4448b3e0ec0a3b96e00239aeb7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 09:14:06 2015 +0100

    doc update

commit 01ec22db277fbaf9cc12d0ec33ee94f7ef3bd600
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 17:15:08 2015 +0100

    Allow setting content-type urlfw, and allow tcp

commit ac4ca3cd707d22f2454b37fd1fd5c3196256af80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 15:42:54 2015 +0100

    updated documentation

commit 494738dd55cba683c14ed85ca2b9f8848298f4d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 14:14:13 2015 +0100

    Added url-fw config option
    
    That allows to specify a class of URLs where, if a client
    POSTS to it, the data will be forwarded to the configured server,
    and the client will receive its reply.

commit 41a6c25a91029cd9358802cc05d96c8c9faeba01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 12:54:25 2015 +0100

    use vasprintf() in cstp_printf()

commit 11f43f144a2e0681a25579bcc108f6671fd8b056
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 12:01:34 2015 +0100

    eliminated auth message upper limit

commit 4bbd9875253c95bfae9f52d4aedca7f4f1d59ad6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 11:41:24 2015 +0100

    test-gssapi: added check for gssapi authentication

commit 065bcbd2ea71e99ff4ab922ffc9ee82cd924882b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 11:28:10 2015 +0100

    increased maximum message size to 2048

commit daa18cae8d070815568e3f1e7a7809869fdb4923
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 10:58:03 2015 +0100

    Ensure that any messages are being forwarded even on success packet

commit 51ab9a97d02689e06df19559b1cc0a86bc9316c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 10:52:16 2015 +0100

    only print WWW-Authenticate when there are data to print

commit a08329b3986218f9fc4ce55b4194297b6070f17d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 10:37:10 2015 +0100

    Allow GSSAPI authentication even from GET commands

commit e865dcb354ca93aa964d80638dac958fc7350c2b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 10:07:35 2015 +0100

    In certificate verification separate between no certificate and verification failure

commit 370fa01de68285c4f4354f3175db4ba0dd5f1beb
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Wed Feb 11 22:40:53 2015 -0500

    gssapi: Don't include gssapi header files if !HAVE_GSSAPI
    
    This fixes:
    
          CC       auth/gssapi.o
        auth/gssapi.c:30:27: fatal error: gssapi/gssapi.h: No such file or directory
         #include <gssapi/gssapi.h>
                                   ^

commit 507d6cc5023679ae45ce3ecf4a2ee9f53c754e18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 21:05:09 2015 +0100

    test-pass-opt-cert: updated for enable-auth config option

commit afef74fa231ecab5dae0927a1b03a908034890c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 20:55:23 2015 +0100

    removed the certificate[optional] auth type

commit 8bb0af61bc4a45c5e1f303b35af97a8f859757e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 16:38:27 2015 +0100

    Added GSSAPI as an additional password auth mechanism
    
    That also adds the ability to support an OR composition of multiple
    authentication methods. That is using the 'enable-auth' config option.

commit 5e4763d22914a08f7c4ecadabd519cdfa75dace3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 18 08:12:19 2015 +0100

    bumped version

commit a6f6dea2cb106773338915525fd6a1bc8bf3bd46
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 17 10:10:52 2015 +0100

    ip-lease: use 128 as prefix in local IP

commit 579900211efacd835b0be8d99eb30ba1fc28f13e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 23:04:17 2015 +0100

    doc update

commit 8d08df70cc5b7b31c509920989c4956b6de6a581
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 23:03:29 2015 +0100

    tests: updated for new IPv4 assignment

commit e959c8cfabd4ef71b7c9eb1965b9e694ddbf10f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 23:02:00 2015 +0100

    manpage: generate a DER PKCS #12 file

commit ce19dca7190694abbcaba129ab23647c7919a720
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 22:19:24 2015 +0100

    avoid using the IPv4 network address as tun address, and simplify valid address checking

commit aa72455d39e4b4188fd691369b408fec4f198a96
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 15:33:12 2015 +0100

    doc update

commit f94276fc73a558461cc4c458880a60b2eb85aed1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 15:31:41 2015 +0100

    ip-lease: fixed hash value for IPv6 leases
    
    This corrects the unique check for assigned IPv6 addresses.

commit ebcf2f735268c4fd72a1e4d250d13bd35270fef5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 15:14:07 2015 +0100

    tests: fix pings to IPv6 addresses for the new tun address

commit 31fb3b680ffb1a3f0ed65fe1e0db66aec26b966c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 15:13:30 2015 +0100

    In IPv6 use the network address + 1 as the tun address

commit 683fd2ec2880a058cf7f1e0d4fb58a452520941c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 13:21:14 2015 +0100

    radius-test: completed test

commit a2f52c58ccea058dd2c853b13326e387e198296a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 13:17:29 2015 +0100

    full/unix-test: updated for new IP assignments

commit ad52336a14dad836b02fbf71778491b5bd195465
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 16 12:58:49 2015 +0100

    Linux ipv6: assign route to the remote IP

commit e22a1d7f42d952b944945042abf2ba8841c1d96f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 11:36:55 2015 +0100

    doc update

commit 137e58453829e7c1b014f1ba334d657b3fdd2a38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 11:34:02 2015 +0100

    force relative names on the socket file to allow it being accessible from main and workers

commit 53b9bbe603b768259eaef804539f3b79d4fc3df0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 08:28:08 2015 +0100

    configure: use seccomp where it is available

commit a07be822ac2e6350b6bb2d09d33350fb6db02168
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 08:21:39 2015 +0100

    use IPV6_V6ONLY flag only when defined

commit 0794a325673c6e4f7e3ef2b14c60b7649fee5164
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 08:21:22 2015 +0100

    use headers for clone() only when ENABLE_LINUX_NS is defined

commit f3249a70aa0d23bdbfff9ac8c28743eb5b443079
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 07:57:06 2015 +0100

    doc update

commit 9e3695ec15ee2e7c8e5144c1f905ae21cebddbb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 15 07:55:35 2015 +0100

    tests: added missing file

commit 56c2d9a74a797bd91eac8267b4f817f65c50db19
Author: Stuart Henderson <stu@spacehopper.org>
Date:   Sat Feb 14 17:20:03 2015 +0000

    header/macro fix for OpenBSD
    
    Signed-off-by: Stuart Henderson <stu@spacehopper.org>

commit 7cb57b162b24bf113207c53b7d456fc6f0767298
Author: Stuart Henderson <stu@spacehopper.org>
Date:   Sat Feb 14 17:19:46 2015 +0000

    correct byte-order for tun header
    
    Signed-off-by: Stuart Henderson <stu@spacehopper.org>

commit d75c1d18a25ecf8b397e423d51bb15e47a2195f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 14:35:40 2015 +0100

    use writev() and readv() for tun_read/write in OpenBSD

commit 9d5106995c382dd84f292b5262bc1793e14f3b7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 14:22:00 2015 +0100

    Handle OpenBSD's additional tun header

commit 82a0c334ba00ea208dfeb8d493610b72a8e3fd33
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 14:06:08 2015 +0100

    oc_recvfrom_at: correctly set *addrlen

commit 1b9fe50628892f04b25b9d01757d0edcca546573
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 11:49:22 2015 +0100

    Set blocking mode to fd returned by accept
    
    That addresses issues in OpenBSD where the fd is
    set to non blocking when the accept's fd is non blocking.

commit ff5c721d3077923ae8eb42747a8c096db54f016c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 11:14:53 2015 +0100

    doc update

commit df81d16f9dfc957a1490dc6bff6687c33d2e9b50
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 14 08:06:53 2015 +0100

    added missing colon

commit 14d8c34e6066bbe0cc132fa95a497cef8c30b14e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 23:30:29 2015 +0100

    Attempted to simplify the BSD tun handling code

commit 2c0849c8a93f381cf3e4d52654dd9480d6280310
Author: Stuart Henderson <stu@spacehopper.org>
Date:   Fri Feb 13 16:39:57 2015 +0000

    BSD patches for ocserv
    
    Iterate over tunXX devices, for BSDs that can't just open /dev/tun to
    retrieve the "next available tun".
    
    This is just copied with minor changes from openconnect/src/tun.c,
    
    Signed-off-by: Stuart Henderson <stu@spacehopper.org>

commit a2b947de6f66390e6f9d8c26064157a3c6f28f61
Author: Stuart Henderson <stu@spacehopper.org>
Date:   Fri Feb 13 16:18:03 2015 +0000

    BSD patches for ocserv
    
    Hi Nikos, here are patches for a couple of issues which are stopping ocserv
    from building on OpenBSD (and might be causing problems on other OS too).
    There's a bit more to do for OpenBSD, it does need the iteration as done
    in openconnect's tun.c:405-410, I might have another diff for that later.
    
    Signed-off-by: Stuart Henderson <stu@spacehopper.org>

commit d1c3e05b9294ff040a0729141acc9fe82b926be6
Author: Joerg Mayer <jmayer@loplof.de>
Date:   Fri Feb 13 11:16:12 2015 +0100

    Fix one of the places where "make distcheck" fails: In case of success ocpasswd-test should not leave the last test output lying around
    
    Signed-off-by: Joerg Mayer <jmayer@loplof.de>

commit 12f7d4285181cad192c265cc22ad274b73f71925
Author: Joerg Mayer <jmayer@loplof.de>
Date:   Fri Feb 13 11:15:50 2015 +0100

    Fix out of tree build.
    
    Signed-off-by: Joerg Mayer <jmayer@loplof.de>

commit 9a0ba0218f49734498de92d75f5fa487ecd6b0bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 13 10:41:51 2015 +0100

    tests: updated radius-test for fedora

commit 3d55134215e24f107b050cba92fa24e018b2ca52
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 21:44:29 2015 +0100

    when opening a session forward the received cookie to sec-module
    
    That allows to verify that the cookie hasn't been tampered
    without relying only on the MAC.

commit d348caacc22bcaf78e081854ca24733cb77afc4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 21:43:40 2015 +0100

    added seclog_hex

commit b6ef99b4439e7420a2e7d1ccbc99d7956b079ae9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 21:10:12 2015 +0100

    doc update

commit 23586bdb9cf43548be2e4e25db41fc7e6329843f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 12 21:08:41 2015 +0100

    no longer document the auth option certificate[optional]

commit aa10eb53c152c926f98140174f2710e996929e1d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 11:44:57 2015 +0100

    doc update

commit 965ea48ee2c2eb391042a6c48772392e425923d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 10:00:15 2015 +0100

    always assign the first network address as PtP address

commit 75af003f128ef859c57f28e0febf35dd706e609c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 09:51:43 2015 +0100

    check the explicit IP addresses for existence in our leases

commit 585d29763dfb3add585693d159628fc40bff033b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 09:39:57 2015 +0100

    test-explicit-ip: Modified illegal checks for the new illegal addresses

commit 57225a2c6a43099da67f0a99e21efde8bb26acee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 11 09:32:02 2015 +0100

    reserve the first address of the network to be set as the local part in our tun devices
    
    That is used only when explicit IP addresses are set. That way we
    don't need to separate addresses into odd and even.

commit 0d999f54249b012967b2f7ce45131a4f90f59a99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 10 18:36:40 2015 +0100

    Added failure codes for proc_table_add()

commit 85483e98e8f73464c3381f75d4b6ef9d71987a73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 10 18:33:02 2015 +0100

    added hash table to search via 'real' SID

commit 820de6a97923c3c109808cd61173479b0be622f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 10 18:14:34 2015 +0100

    correctly renamed DTLS ID search functions

commit 45b1f4626572c269271ce423a23db95c630a2cdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 10 11:17:04 2015 +0100

    doc update

commit 952d6adc9c1001e0d05ab9e6032c066a89fcb576
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 10 11:05:41 2015 +0100

    Added implicit accounting when explicit addresses are specified
    
    Only odd IP addresses can now explicitly be set, so that the next
    even address can be used as the local one.

commit 2e757cedb2428e9e481de4dfd5b8d04149301330
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Feb 8 17:26:39 2015 -0800

    Use distinct remote and local IPs when explicit_ipv[46] is specified
    
    Currently the code sets the local interface IP to the same value as the
    P-t-P IP:
    
    tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
              inet addr:192.168.63.1  P-t-P:192.168.63.1  Mask:255.255.255.0
              UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1341  Metric:1
              RX packets:0 errors:0 dropped:0 overruns:0 frame:0
              TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:500
              RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
    
    This doesn't seem to get things routed correctly.  e.g. pinging 192.168.63.1
    from the ocserv gateway just loops traffic back to the local machine instead
    of pinging the client.
    
    So instead we'll set LIP = RIP + 1.  This isn't terribly intuitive (an
    administrator might try to number consecutive users 192.168.1.1, 192.168.1.2,
    192.168.1.3, ...) but it's better than the current situation.  Maybe at some
    point, fixed IPs should also make use of the hash table.

commit 1e0af5c482196b2ad8e5b7c4b2c303270fe2b01a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 10 09:10:00 2015 +0100

    set cookie to expire when the last user disconnects

commit 25cfd3b1db58f2604fa827ec45353fe55ba46d87
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Feb 8 17:26:40 2015 -0800

    config: Use talloc_free() to free "route" strings
    
    Adding redundant routes triggers a glibc assertion on startup.  The offending
    config file contained:
    
        route = 192.168.1.0/255.255.255.0
        route = default
    
    The assertion:
    
        # ./src/ocserv -c ocserv.conf -f
        *** Error in `./src/ocserv': munmap_chunk(): invalid pointer: 0x0000000001703470 ***
        Aborted (core dumped)
    
    Fix this by calling the correct free() function.

commit 35fae82538e3d5f1340149a0a6a4ee72e131aaae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 15:04:30 2015 +0100

    document explicit-ipv?

commit 71ff05cea7768a85dc5c4e2148f8afeaa115b3b0
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Feb 8 17:26:38 2015 -0800

    Allow explicit-ipv4 / explicit-ipv6 addresses in per-user config files
    
    If a machine is running remotely accessible services, it can be helpful
    to assign a fixed IP address upon connection.

commit 15451302372116ac064005d92f60588a3913837f
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Feb 8 17:26:37 2015 -0800

    main: Check chdir() return value
    
    This fixes:
    
        main.c: In function ‘main’:
        main.c:1025:8: warning: ignoring return value of ‘chdir’, declared with attribute warn_unused_result [-Wunused-result]
           chdir(s->config->chroot_dir);
                ^

commit fbe55c23efb85cd4149bb5902c8c56099b842d47
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Feb 8 17:26:36 2015 -0800

    main: Fix unused variable warning on !HAVE_LIBSYSTEMD builds
    
    This fixes:
    
          CC       main.o
        main.c: In function ‘listen_ports’:
        main.c:276:11: warning: unused variable ‘fds’ [-Wunused-variable]
          int ret, fds;
                   ^

commit 38206d6e93161e9ac1e0da75027eb530c6438414
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 11:25:14 2015 +0100

    eliminate double books for session expiration
    
    Session expiration is now handled only by security
    module. That simplifies the logic significantly.

commit e82e1b8d68012f5d64b4591f4d25a1b94f01e49d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 10:52:54 2015 +0100

    delete client entry after message is sent

commit dcb7068c1925f4617cf603c5e3db82aa2221cec5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 10:20:25 2015 +0100

    Before allowing the steal of leases, check that usernames match

commit 905222fe6e379ce6300c370d9a2852f8b8abb0f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 10:20:00 2015 +0100

    corrected typo

commit ee81ffa10d3752af98727d8441caff0634cdd345
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 10:01:38 2015 +0100

    when we detect user disconnection, set the proper expiration time on their cookies

commit b014f8e1ecc30a2179dcd2058154b47c45960aa7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 9 09:53:45 2015 +0100

    test-cookie-timeout: verify that a forced kill will not alter the cookie's validity

commit 1ce578a5258f48a45af1f18fbf927fb92ca3a86e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 6 20:05:35 2015 +0100

    doc update

commit ffe945136709ab4c3b7d878b62bd357e73171b04
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 6 14:09:44 2015 +0100

    be explicit that dbus support is incomplete

commit 1a462c7ced0ecb512c4eb5447ac7dbad6ee7e6df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 6 14:05:22 2015 +0100

    doc update

commit bcea928abe0fc7007286c16ec789b7dfd9d0dc33
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 6 14:02:34 2015 +0100

    Added support for no-routes (X-Split-Exclude)

commit 5f34edaf3157b951dac1cbf4a0d0f1c4141b2b87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 5 17:50:27 2015 +0100

    only use libseccomp in x86 (64) and ARM

commit 2651099b9656d69d2baae388acbf56ef6d75fd6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 5 17:47:53 2015 +0100

    doc update

commit 06b4f0267919e106b452e9fc779f2111fc5d27e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 31 12:29:32 2015 +0100

    doc update

commit 4cd880cb2d2d0b635707f7582e355d8c657d7b9a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 30 11:22:10 2015 +0100

    updated package dependencies

commit ea79349bc5afbb6e415eb87a5766f4a25fd9dd7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 30 00:41:53 2015 +0100

    Revert "tests: added test for broken seccomp"
    
    This reverts commit 889d6ba0b7ffdc7b38086e80654e21ca7e515944.

commit c4f5027a468f99a50882f6af8f283b2bf3cd5ff4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 30 00:41:50 2015 +0100

    Revert "tests: only run the seccomp check if it was enabled"
    
    This reverts commit 00a2caee368cacc59be963288f705070b2c54a80.

commit 639514d1e10c0781eb43f6ca092b3099f53a2e37
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 30 00:41:26 2015 +0100

    seccomp: allow _newselect since it is called in x86 instead of select

commit df872c218da50ed4e99e55b2bae4fbe67842aa4e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 19:26:25 2015 +0100

    configure: specify that experimental are not recommended

commit 777199ffb74c61d53924bd0d6987572978eefb98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 19:22:06 2015 +0100

    bumped version

commit 7598e9dee2ba00012efe798a5702f7b4f599efc6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 19:20:09 2015 +0100

    rearrange supported options

commit b5d8547563ecc9c3a844ae1f2f8cfc2cfef3ca11
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 19:12:03 2015 +0100

    doc update

commit 00a2caee368cacc59be963288f705070b2c54a80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 14:12:20 2015 +0100

    tests: only run the seccomp check if it was enabled

commit 2d06c2da5651bc93c081dad384942091877e33dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 14:08:27 2015 +0100

    doc update

commit 889d6ba0b7ffdc7b38086e80654e21ca7e515944
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 29 14:07:55 2015 +0100

    tests: added test for broken seccomp

commit 55c54202e135be4034fcfacd0c1b2d0936d13a9a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 19:03:33 2015 +0100

    doc update

commit 06dcdb86693c52b833cddb033d057a74ab1d710f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 18:57:49 2015 +0100

    tests: added missing file

commit 22de76b5dd3a3d7c8afa04300a05c21e857a7b78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 13:21:25 2015 +0100

    configure: ask for libfreeradius-client 1.1.7

commit b1947be1d1b481af3de4f1fb13e877255bee502b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 13:06:17 2015 +0100

    tests: check for empty password support

commit 654cf12ac425f49fc621a282997712dc9b4ed521
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 13:04:02 2015 +0100

    sec-mod: use ctime() to print the ban list expiration time

commit 5d3b2da2e1cff57cc464a446d4999e59f35ce28c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 12:55:54 2015 +0100

    sec-mod: pass all failures through handle_sec_auth_res()
    
    That will set the proper state to the user entry.

commit 0dc2e43335fb00b188e9f309b085eaddd23fc5c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 11:52:38 2015 +0100

    worker: allow empty passwords

commit 6c8174668d45719e6ae87293dd773f14e8344b0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 11:42:03 2015 +0100

    moved LOG_DEBUG messages to debug level 3 or higher

commit b8bcf8b83592a5e161ca06b6c69166b290d4d483
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 28 11:41:15 2015 +0100

    moved some debugging messages into http level

commit b93306fca6d4993056b60a7fcbb1865a84c3597f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 21:50:05 2015 +0100

    doc update

commit 9dc43045c7d32a275215b9a1b88a3fbd477ee038
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 20:00:56 2015 +0100

    tests: added radius test

commit 1e718980dfac41af8c7b19aab9fcab41e5dc27ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 18:54:22 2015 +0100

    tests: made pid file names unique

commit 414c5d94daa0d36b0da3d41b58922c9f4e3eacd0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 17:41:32 2015 +0100

    harmonize the time cookies are stored in security module and main server

commit e45482bd04ecf664175b7abac2ea42c24ed267a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 17:35:01 2015 +0100

    tests: added check to ensure that cookies remain valid during all session time

commit 8e77c67f2aab965995dd354995221581aa86d22f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 17:17:55 2015 +0100

    tests: check whether the expiration time in cookies in checked

commit 92df4b925b204b7bf61168da36b6120e5d72440f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 16:51:16 2015 +0100

    test-multi-cookie: corrected test

commit df7f3c528cb31b92670e4d8af8a4a518a05afc5f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 09:52:08 2015 +0100

    updated design documents

commit 29760b0fa43e058a96402e5a54775ab25125b292
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 25 08:34:47 2015 +0100

    account freeradius-client version 1.1.7 in README.radius.

commit 5abd253806d0075e7dfa332f578b49a303324b55
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 24 14:39:05 2015 +0100

    doc update

commit 99c9a8ef6ae457fd6efe610c5143eed3bf1bc0e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 24 13:55:05 2015 +0100

    enable min-reauth-time in default configuration

commit de846f9dd6205339c78b0060d28998d1f3b0b706
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 24 13:53:34 2015 +0100

    enforce the actual number of MAX_TRIES in authentication

commit 7da97916e61f018a9551b6ae2821473ea8558eea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 24 10:23:35 2015 +0100

    added gperf a development dependency

commit facb8c3b3ba714568e331de600ad006386830ee1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 24 10:23:04 2015 +0100

    doc update

commit 313b456a546a410d7ce39449d5266e24b5e4503b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 24 10:18:41 2015 +0100

    occtl: corrected sending of dbus msgs

commit 39248a6596339198e3bb09a157227bbff61d0d76
Author: Aron Xu <aron@debian.org>
Date:   Sat Jan 24 16:25:41 2015 +0800

    Run after network-online.target, instead of network.target
    
    Signed-off-by: Aron Xu <aron@debian.org>

commit d925276da8e6cb0298e0d30006fbd162e043ff03
Author: Aron Xu <aron@debian.org>
Date:   Sat Jan 24 16:25:40 2015 +0800

    Remove syslog.target from systemd service files
    
    syslog is now socket-activated on all major distributions, hence
    the target is deprecated.
    
    Signed-off-by: Aron Xu <aron@debian.org>

commit e2c609505b4b5ea65976d34e88c8024efc181262
Author: Aron Xu <aron@debian.org>
Date:   Sat Jan 24 16:25:39 2015 +0800

    Run in foreground when using systemd
    
    Signed-off-by: Aron Xu <aron@debian.org>

commit d4b6d97697884b0e018d9445c4c8614595ebdeeb
Author: Aron Xu <aron@debian.org>
Date:   Sat Jan 24 16:25:38 2015 +0800

    Replace LIBSYSTEMD_DAEMON with LIBSYSTEMD
    
    Signed-off-by: Aron Xu <aron@debian.org>

commit dfc5f33f851196f26b2f19f060e1a76c590a47ea
Author: Aron Xu <aron@debian.org>
Date:   Sat Jan 24 10:37:18 2015 +0800

    Listen to Port 443 as in sample.config
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit aeb034222abc212aa79ffc87c81311f5ed858946
Author: Aron Xu <aron@debian.org>
Date:   Sat Jan 24 09:54:59 2015 +0800

    Update call parameters of str_init() for --with-dbus
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit e4047e7a5b2022240df7b5325772b464f02454e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 22 19:57:05 2015 +0100

    doc update

commit cbcb9a6a7df89489eaa384ba447ef4b45f862890
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 21 15:13:11 2015 +0100

    doc update

commit c90749613699f19095235965f4cfa86d02236aff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 21 10:28:43 2015 +0100

    worker: calculate MTU prior to sending IPv6 addresses
    
    That way we can disable IPv6 if the calculated MTU size is
    less than the allowed by IPv6.

commit ac80bbdbf0efeb2f38613592ba75cbf0e8a4ab4f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 21 07:51:03 2015 +0100

    include http-heads.h into ocserv's sources

commit 66ff730dfc26d44268f43a0c01ca2398ded1ff04
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 20 20:56:09 2015 +0100

    released 0.9.0

commit bcef2eb16b58458512954b12ea2c192fce6689dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 20 14:20:44 2015 +0100

    doc update

commit 10f95ade9aa2a023424a7775e23687952412df0a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 20 11:28:43 2015 +0100

    doc update

commit c0cd87b0e3a5b4a7ebb61d76b792af15989f0cab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 20 10:12:47 2015 +0100

    properly disable safe_fork

commit 2a257951703ceee37ff5fe3f05f0012e9ab11d8f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 20 10:03:09 2015 +0100

    corrected isolate-workers typo

commit ec1ee46250b2ad5beb43fdf35c733f79370fd5bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 19 14:26:43 2015 +0100

    ocpasswd: attempt to use sha2crypt only in glibc
    
    uclibc's crypt(3) is so dumb it will not error if
    $5$ is specified as salt, but not supported.

commit 0ce83be801ab87f424ede1eea575c37775cc258f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 19 14:17:23 2015 +0100

    ocpasswd: corrected fallback to MD5 crypt

commit a3d0caf9c5046482325f9a23453643bb1d7ba194
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 19 14:03:15 2015 +0100

    doc update

commit 314b99477a50dc4f84a827a0ba3b3b5cd3aa6946
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 19 13:05:13 2015 +0100

    tests: enable compression in the unix test

commit 1ead0b33467981977ce14938eba8f02fae383221
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 19 10:50:44 2015 +0100

    disable linux namespaces by default

commit cb5499a6b74872f5c8c3216330b7c408c3fe4e83
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 19 10:49:01 2015 +0100

    only define safe_fork() in systems with linux namespaces

commit c954e45e53d62f4dfb63843ce7709fd528a32707
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 18 17:34:59 2015 +0100

    silence debugging messages from sec-mod when not in debug

commit 5179a064aba2eaa932111981dbb0c95fabde3770
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 18 16:51:34 2015 +0100

    doc update

commit 310855cb7c19ba251c119a3a4fe84cc240a379fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 11:55:17 2015 +0100

    move more http-related functions to worker-http

commit 6d1f848e1dbd5299e1e0d68622621589e4b0746d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 11:17:52 2015 +0100

    updated copyright information in LZS code

commit 0638d8563117148222283ace2107b69f9ca5797e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 11:12:16 2015 +0100

    combined parsing of CSTP and DTLS encoding

commit 4a372f4e05432737c68bf90c77f3ca5d32a24da3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 11:07:10 2015 +0100

    Replace header_check() mess with a gperf table

commit dcf47899e007b3b037d1fc32748d03d06ae094a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 10:56:33 2015 +0100

    Moved HTTP parts of worker to worker-http.c

commit 04a9381068135dc264623d0d6451ade573f5aee0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 10:45:53 2015 +0100

    Compression is disabled by default

commit 8dd56e69c8eb0591112d8f527c3a46955db03eaf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 10:33:33 2015 +0100

    doc update

commit d3159c697322bbbae53af777175720c89e00bd3e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 16 10:23:00 2015 +0100

    lzs.h: added license

commit 1bbef9662df373970c791bbfe4843fdd237c499d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 23:02:00 2015 +0100

    doc update

commit 85d3162f45d8a83bc0338c1600f170bdfef092f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 14:24:20 2015 +0100

    Added support for LZS

commit 8d2a562af1a493943c4338988578b2b7b3a3bdca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 21:00:32 2015 +0100

    increased MIN_NO_COMPRESS_LIMIT

commit 724cfef3d44d94f17f2257f32c3cb40cde75c331
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 20:28:58 2015 +0100

    tests: install lz4 on docker images

commit eddb0b929769c2bc707006bda93d45b46c3532d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 20:21:05 2015 +0100

    fixed compression to use the correct start of buffer

commit 24f348226ff2dc91a9236fe5ec5786e46e010564
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 19:18:17 2015 +0100

    only enforce undumpable if we are not debugging

commit 6f714d6f2e9da34a1016e9d90858118ec96ce73c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 19:03:26 2015 +0100

    report the compression algorithms to occtl

commit 048b25ba45d06d812bfc9d07ab23fda699dfa402
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 18:31:33 2015 +0100

    Made the no-compress-limit configurable

commit 67f621976b0c7c9ae558bd8585bb80ed8a146b9f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 17:43:45 2015 +0100

    Allow compression to fail, and in that case send uncompressed packets
    
    That allows to cancel compression early, if it seems to expand the
    packet. Suggested by David Woodhouse.

commit 7f997cc3fc11e48c33d398d502b9d288c47f9726
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 17:03:41 2015 +0100

    only transmit a compressed packet, if it reduces the size

commit 2719c00281d7e52469d848fcb78c97c572a5f75b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 16:43:11 2015 +0100

    doc update

commit 27168673f031407f56bda3281d1122acce3bd9a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 16:38:15 2015 +0100

    added option to disable compression

commit 850181ed4e431ea8f3f4692a643495d198039958
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 14:30:04 2015 +0100

    Moved negotiation/parsing of parameters using HTTP headers to worker-extras.c

commit 3c023ffe5ef9b95f604925e45d2c3b22d63d28dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 13:19:11 2015 +0100

    Added support for LZ4 compression

commit 831abcb76df2c2cc8bdc24048cfed8caa3336228
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 16:34:58 2015 +0100

    corrected typo

commit 6ece4ef2e6dd5d9a9a6f214426d5b01e22d09ac3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 10:26:55 2015 +0100

    doc update

commit fe848ad15394e0079cd86b3d2d39a76bb1d25473
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 10:25:20 2015 +0100

    replaced use-seccomp by isolate-workers
    
    That, if enabled, includes the Linux namespaces restrictions into workers.

commit 7a51462abdc0de0def87a499c768ed50904d1254
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 09:59:38 2015 +0100

    reorganized to avoid compiler warnings

commit 65a4646d2f81a548a695f44a92248d5f0900173e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 15 09:55:51 2015 +0100

    include linux/sched.h to compile on systems with older libc

commit 8b65df1ce36cecf3e94579a0c2a58a5516293ab1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 14 21:05:14 2015 +0100

    remove the CLONE_NEWNET isolation option as it's performance cost is too high

commit 8989be49ef3b7a35f649f0cb5a6f700252b2eaa2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 14 17:47:44 2015 +0100

    typo fix

commit 35d609cfc80087db3d3db8df7c198b015d698192
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 14 16:28:24 2015 +0100

    tests: remove all error file references from haproxy.cfg
    
    These files don't exist in Fedora.

commit 180a3f468c552bcbdfb663fa71df6ea7ccb0d835
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 14 11:58:23 2015 +0100

    doc update

commit 4dee583e29939a4869652a297c702f9aef782d0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 14 11:42:53 2015 +0100

    In linux run the server in it's own container with separate IPC and PID namespace

commit 1740a3aaf09c1a0d1c8eb9fb9aa7484a567c6e56
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 14 13:28:41 2015 +0100

    tests: attempt to use lockfile-create if it exists

commit b124f68f120ad20078acf91bd9f17d771604c90f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 13 17:11:58 2015 +0100

    do not allow the processes to be traced in linux
    
    That would prevent a worker process tracing one
    from another user.

commit a02dbb1fb204221bf0ca373d42769be5b610b971
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 12 10:53:47 2015 +0100

    removed unneeded variable

commit 9f619b3a79f60b844bbe19499cadf01ce39a1f38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 12 10:50:10 2015 +0100

    corrected check for non-empty pull buffer

commit 4a56dd95c93f16e2cd370c34baff3df8b3534110
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 12 10:45:37 2015 +0100

    prevent a memory leak when multiple fds are received in short time

commit 8c24dd8dd7ff007cfce6a94a88e07a89ed32be63
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 12:42:04 2015 +0100

    occtl: re-arranged user-agent and MTU printing

commit 9477340b86bb2d465213224c488453d26aceeed5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 12:40:04 2015 +0100

    added more precise match of version

commit 406c171069dbfa0130f2bfefd8db0bb879b5a978
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 12:25:15 2015 +0100

    avoid repeating username in logs

commit 2f3d520c85949b3dc64579bfe367977d3d206b96
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 12:22:25 2015 +0100

    do not enforce PFS on default strings
    
    That allows legacy clients connect.

commit c3417f0830508b59b5fc07c744d34fe7e3d22cbb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 11:40:22 2015 +0100

    simplified DTLS fd handling and dtls_pull()

commit a04599afc81fd30f6fa4b897eca09e64ec49396c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 11:33:44 2015 +0100

    always forward the first message when forwarding fd

commit 41d61c42251d9d3abef62a5daf2703ef81c0750d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 11:27:06 2015 +0100

    cleanups

commit 286ea8ff7b3bc419cedc23a0e968393a5c02360c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 10:57:02 2015 +0100

    only set IPV6_RECVPKTINFO on IPv6 sockets

commit a4c2967e02ae1977822c33d88b5ac3a1e0f1301f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 10:53:29 2015 +0100

    simplified forward_udp_to_owner() by introducing oc_recvfrom_at()

commit 04ec372f4f870ba773f436675fa2f1b6d3119e5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 10:34:13 2015 +0100

    save MTU in main, and report it to occtl

commit 730c95e30eeae3fd1c7aee67bfea1b2b1f7b1407
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 11 00:44:14 2015 +0100

    doc update

commit 3d7ac2c98cd2dc20516107c2da0fd5a407f9232b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 10 22:49:25 2015 +0100

    bind to the address we received UDP on
    
    That in addition allocates a new UDP socket per client,
    and forwards the initial client hello to the worker
    process as auxillary data. That, eliminates the need to
    re-open the main server's UDP socket per client connection.

commit cb56984e8d0558043768f735c04f7d8ac45f68fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 7 22:18:15 2015 +0100

    when compiling with gnutls 3.3.5 or later use the zero copy recv API

commit efe61fa48e6a6d8a36f2ae6ebba6f50ad7eb0a61
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 6 10:58:05 2015 +0100

    radius: added safety checks in the parsing of Framed-IPv6-Prefix

commit a530330873f825e676edde7911c82c9876d83a5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 6 10:56:24 2015 +0100

    radius: use separate types for ipv4 and ipv6

commit e042e3edf9ced90c6d021434d62b292a4a8d01bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 6 10:38:09 2015 +0100

    configure: set seccomp as enabled by default

commit b097d8a3ff17dc3f4b2c27132fc1476d7d5900a3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 1 01:16:41 2015 +0200

    radius: handle Framed-IPv6-Prefix as routes to add

commit a1abcdbeae78b2342f4784ebfc309fc20582caca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 30 17:22:02 2014 +0200

    Allow prefixes in specifying the IPv4 network

commit 674a690301f965d3f2eb801ae84d4683d680c1cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 30 14:14:16 2014 +0200

    Disable route and DNS assignment in IPv6 for non-openconnect clients
    
    That is because anyconnect clients can handle the assignment
    of an IPv6 address, but cannot handle routes or DNS in IPv6.
    So we disable IPv6 after an IP is assigned.

commit effc095f46a9fe73fbb097dfec44c881627a0279
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 20:22:07 2014 +0200

    dockerfile: added missing haproxy

commit 8de4a47e627b5defc11d3e76d8db58db848b3ec7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 20:18:01 2014 +0200

    doc update

commit 50f2fb88f6e0e3e7897a6a24a6870afab914bdf3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 20:09:58 2014 +0200

    simplify the input of IPv6 networks
    
    The prefix is specified as part of the network.

commit 90b0ac7932cbd1b8d4d3baf45d55948ac4aa8df1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 20:00:39 2014 +0200

    radius: added support for Framed-IPv6-Prefix

commit 73726d13a38b2f5cd501681d4a806305c361af3d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 19:38:33 2014 +0200

    print IPv6 netmask only when in non-full mode
    
    Also use the network address if available to print netmask.

commit 27b9e91eb85898e65c899c4266c58b19515129a9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 14:22:45 2014 +0200

    bail out if use-seccomp is set to true but there is no seccomp capability

commit c821a578a4c4470e425be505b8544dffff6f03af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 14:22:32 2014 +0200

    tests: enabled nuttcp when running in Fedora

commit e2192d546c788ae0e6a4de3a580f0ad71efd9348
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 12:55:24 2014 +0200

    full-test, unix-test: modified to operate in Fedora as well
    
    That also enables a check for ping in the IPv6 address.

commit 3edc36c1377145ba716f4a1d2de386d51238de44
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 12:03:00 2014 +0200

    Added protobuf-c dependency

commit ecb59fdf3e27c16878bd1b87a06e4b07c1d631c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 11:56:32 2014 +0200

    tests: separated the address ranges on full and unix tests and added IPv6 addresses

commit 02734d8f54b3ef1d2381fbb1aa6e55c68511baaf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 11:47:39 2014 +0200

    send the Netmask when an IPv6 Address is assigned

commit 0b47b5fb8f728ace6f2ce21c3f85cfaca8c98b1f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 29 11:39:50 2014 +0200

    IPv6 fixes in ip-lease
    
    Issue discovered and fixed by sskaje.

commit 0f1599a64a2a2bfee48c1da65fae8887ccafc85f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 28 09:57:06 2014 +0200

    use libsystemd instead of systemd-daemon

commit 660311d74d35bd180badf3c2771b73f35bf133d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 28 09:50:52 2014 +0200

    enable IPv6 in Anyconnect clients, and send the prefix

commit 620c40fba349ae1d614a9f16c2d414973987f353
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 27 21:37:31 2014 +0200

    doc update

commit 33c45d73e0ca825fc6fa8a71e9e182966d4aba25
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 27 11:19:10 2014 +0200

    doc update

commit 071a8ae05fbd72c8ed188c259c3a854d0d941627
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 27 11:17:41 2014 +0200

    Do print error when pam_authenticate or pam_acct_mgmt fail

commit 496f563686e903d804e0106341388cbe927f6809
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 27 11:11:06 2014 +0200

    doc update

commit b38a1bb39a5aa1984aee9f133fb42a44493b2e7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 26 20:23:12 2014 +0200

    override the default ipv6_prefix only if ipv6_prefix is set

commit 80459cfbd57e6c31134e466b070687316e3530ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 25 10:56:19 2014 +0200

    the default strings will enforce PFS

commit 6d331584c15075dd07331bd2ff6bcb8eef744221
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 20:55:01 2014 +0100

    radius: optimize "parse" of route

commit 4cf2797afc2a05c56ca661495d6ad229ac2b9611
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 20:29:43 2014 +0100

    radius: use Framed-Route and Framed-IPv6-Route
    
    That is read and if format is the expected, they are forwarded to client.

commit 3bbee0b069facbb1e238771cffeedb4dd0bf68cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 20:12:08 2014 +0100

    more strlcpy() related changes

commit 9fc8568107a901e0fad7213c1be393df0d79194e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 20:00:25 2014 +0100

    ensure that stats are only updated if they increase
    
    That is, transferred bytes will not decrease in an update
    due to miscommunication between main and workers.

commit 07e01d06b51e3fefcb39f57518fc2b4401eb5700
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 19:24:11 2014 +0100

    use strlcpy() instead of snprintf() where it make sense
    
    That should reduce wasted cycles.

commit 853f7876cdf6a2550c42171d293732b45fe41d5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 14:30:53 2014 +0100

    radius: increase the info sent during accounting requests
    
    Based on suggestions by Niels Peen. That adds:
    Calling-Station-Id in auth message, and Service-Type,
    Framed-Protocol, Framed-IP-Address, Acct-Authentic,
    NAS-Port-Type, Acct-Session-Time in acct messages.

commit 113ae94f1337119f8586c46aaf94752b695d177c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 14:06:03 2014 +0100

    removed unused option

commit d5a975d5e62fd42367881f3ae86191ae49232279
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 14 07:30:14 2014 +0100

    removed redundant checks

commit 64637b9f78d43eae79bd4f62baadc5260821e60c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 13 22:26:51 2014 +0100

    check for a suitable freeradius-client

commit 640211d8ea09c3c9d6f7b850ed5bec0504b1af73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 13 22:23:44 2014 +0100

    simplify radius usage

commit 173301744ce4b5e568600a360359799be18bc73e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 13 22:22:28 2014 +0100

    updated radius documentation

commit a32c5db859ef7f49f46941c3dcda9ba6702a834c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 11 12:09:16 2014 +0100

    Added README.radius

commit b18eeb7d74c8dd6a572c92d72d8cace5bccf8677
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 11 11:36:23 2014 +0100

    first set amod and then use it
    
    That fixes a crash with PAM module on startup.
    Reported by Ismail Donmez.

commit 6989b6a0c4155cc4d5493050a0c742a57c53d02a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 11 05:37:14 2014 +0100

    do not utilize radius symbols if radius is disabled
    
    Reported by Ismail Donmez

commit 209937e7b1d6f75f8718eea09e0598617122fcab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 11 05:27:42 2014 +0100

    bumped version

commit 27cf16b5f9e4a5485c0db7cb69d8946eb83956ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 20:01:45 2014 +0100

    doc update

commit 816663fab157e17235894a922e2aa83d14f8395b
Merge: 3307793e 065753bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 19:59:30 2014 +0100

    Merge branch 'radius'
    
    That merges all the changes needed for radius support.

commit 3307793e3474678516c85279521bc74f5095171e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 19:55:12 2014 +0100

    test-unix: correct copy of file

commit 1f2726feb742a669e41ab91b6e349aef87245c0c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 19:32:59 2014 +0100

    bumped version

commit 065753bd573f688e514e22b163e273103b6d2ad4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 15:28:11 2014 +0100

    undid ed5b177691d52c1c5417ef802854e26c9dd5d4f4
    
    It is not currently possible to reload only a part of the
    configuration. If the back-end module changes, the server will
    bail out instead.

commit c15a7befbbd8a77c3bfe0ef5b3ce1403b552ba0e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 15:10:25 2014 +0100

    sec-mod: always reply on open-session cmd

commit c8a2666fa7fc4b729eac9bb2f18cdbeb7c109155
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 14:15:37 2014 +0100

    avoid crash when no auth module is in use

commit 0551338a7a861900acf4c34c89f4cac78fc71ac8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 13:48:45 2014 +0100

    sec-mod: preparations for thread safety

commit 54e6450807318e0309c96d30d756849ab405f545
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 13:24:42 2014 +0100

    sec-mod: separated request serving from main loop

commit 93125ea945fe3ce836a394dcca94c4c57bb1262d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 11:46:17 2014 +0100

    updated documentation on radius

commit c1deee1fb5b02e42efb20907b3d1fca980fa2584
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 11:22:22 2014 +0100

    updated todo list

commit 320773e80acb53d75f6852a088edb2614addb061
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 11:10:08 2014 +0100

    Added support for radius interim updates

commit 35e93c63417f75e5eab51cb20a325472ef392f99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 10:15:02 2014 +0100

    added option to send statistics periodically to sec-mod

commit ed5b177691d52c1c5417ef802854e26c9dd5d4f4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 10 08:56:23 2014 +0100

    authentication information is only read on load

commit 766afb591a4375b7c5d7e07e73798a401fb3369f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 9 13:20:11 2014 +0100

    Added support for reading user configuration from radius.

commit 2194e11b3929f131270556ee7dc10cc7ceeaf030
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 8 15:37:44 2014 +0100

    Added support for radius authentication

commit baa3e4701e3c5787079f0f335a48fe49cde2ebf4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 8 12:56:16 2014 +0100

    Supplementary configuration is now read by the security module.
    
    That allows sec-mod to handle both authentication and accounting.
    That deprecates the session-control configuration option.

commit 8365449e9b304a94cdcf713f87325e8826c784da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 8 10:48:25 2014 +0100

    deprecated ipv6_netmask

commit 7abfb3e8008bdfcb2807e55b1e62449ca8bf2f47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 2 08:34:20 2014 +0100

    call disconnect script only if the user was on connected state

commit 6bfd5db245dbacd4c51d4ba125d18aac9a32094c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 2 08:27:32 2014 +0100

    separate log messages between up and down script

commit 230b6adca01d666a1576543d36d201ecd5bdeae0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 1 23:15:31 2014 +0100

    doc update

commit af91c739249c63a9a04274883f6e4fc0682284ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 1 23:12:20 2014 +0100

    tests: satisfy latest docker's restrictions

commit 5019c4cebe485e6030c4cc365b6bd058435ca691
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 1 23:08:12 2014 +0100

    tests: try to check stats only when file is present

commit d7ec6a168ec55ac86c2b2b39d3a7d0ae661bca4f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 1 22:56:31 2014 +0100

    run the down script even if the client's IP address has been re-used

commit 7b0e20e6adea753dd4f30eae5bda23b66afeed9a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 1 22:44:45 2014 +0100

    sec-mod: made logging consistent with the main server

commit c402c03d0951d60beacbe5a1c5f0d4a77580226a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 30 14:44:08 2014 +0100

    doc update

commit cb9dcde3874441bf66d52b70ac8b0d6f6bb557d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 30 11:30:08 2014 +0100

    Notify the client that the server may have a dynamic DNS address
    
    That is send "X-CSTP-DynDNS: true", in CSTP headers if the
    server is configured as having a dynamic DNS address.

commit 9a7a9a36a1d8011fd5276f7348e4ee81f1b8741c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 29 19:44:03 2014 +0100

    use define _XOPEN_SOURCE to get crypt()

commit 987974a59e110231244ebefc8a83de61c8aa42a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Nov 27 13:33:02 2014 +0100

    sec-mod: print whether a certificate is present

commit 74aa65bfa0639c8ab50edfcb459d404ecee7fcc0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 26 17:09:54 2014 +0100

    enhanced sample.config

commit ece3324e40931cb490b78b3b0595ec289eaa0988
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 25 21:59:40 2014 +0100

    forward to gnutls manual for priority string documentation

commit f96177ebe8ec261e40412a1225098b58ecd5f458
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 22 15:25:38 2014 +0100

    released 0.8.8

commit 8f84801c32b6b92ef1be2f3b2e9b8274882d661c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 18 22:29:37 2014 +0100

    use TCP_NOPUSH in systems that support it (FreeBSD)

commit 0320f61e3f5cc6a455becfd6105ec7f941569d76
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 18 22:23:02 2014 +0100

    Disable RC4 in the default priority strings

commit dc8c340bed5e3288074355d6404bbb3ff53010e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 17 20:16:47 2014 +0100

    bumped version

commit 141bc755adb3617db504eac2e9165cbaab8f8db0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 16 12:36:13 2014 +0100

    when generating the DTLS session ID set its size as well

commit bf2e8c8cd6601bcd030f83cae4a640132d4cba4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 16 12:34:30 2014 +0100

    added oclog_hex()

commit 6103f5066df9ccf3b93604a2272d3a0b832ed168
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 16 10:04:59 2014 +0100

    doc update

commit 78b3685f7ab4f1f914aa9a6dec1ffda25fbb1cce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 16 10:00:08 2014 +0100

    Generate a new DTLS session ID on every cookie connection
    
    That allows openconnect to distinguish when the DTLS key has switched.

commit 01bbb5cfa16d87c46ef5e1e36beb46adec512ca2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 16 09:15:28 2014 +0100

    print the username earlier in log

commit f1e71ec597c4c22b8561b4458124a8bad896fc95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 15 12:47:30 2014 +0100

    improved logged messages

commit 57cbb43a3bd07be32d7131f31a071754092a9c68
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 15 12:32:31 2014 +0100

    advertise a new DTLS session only when it is one

commit 79668eb5e512d9083be5d8d096a9dd0d618ad006
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 15 10:21:24 2014 +0100

    partially reverted b924eba1acd0a9159d1a938509475174b10644ef
    
    The timeouts were reset to the original values.

commit 845562201aad86d5d09efe96d72d9ed19c931641
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 15 10:10:18 2014 +0100

    doc update

commit a4ec19eb5589ddad02676fb74a39e74a35dde6b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 15 09:50:35 2014 +0100

    disable matching of IPs when the listen-clear-file option is set

commit b924eba1acd0a9159d1a938509475174b10644ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 10 15:52:39 2014 +0100

    reduced the severity of log messages when forwarding packets and reduced the timeouts

commit 0311dc629189ffd0f7b315c0299d5a7a14eb33e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 31 11:04:56 2014 +0100

    doc update

commit 12fb56a3b64f5ab5d40a7ae7bd09a09918704e1e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 31 11:03:12 2014 +0100

    when reporting errors, mention the username of the relevant client

commit c9c9c9c32d589894821a5a6596a8eae97bb11605
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 31 10:47:03 2014 +0100

    corrected typo

commit 00cb1762acd21fd8a7b0ee0e0de2e81056f9d1e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 23:53:39 2014 +0100

    doc update

commit 96b4d922e835c44a72f5b236252139207dbc80e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 23:51:51 2014 +0100

    increased the SID_SIZE (cookie used during authentication phase) to 128 bits

commit 5fa95fe9e7143e903a28f87b0110c640b87d4ecb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 23:44:04 2014 +0100

    send session information from worker to parent twice
    
    That allows to account changes after DTLS is established (e.g.,
    send the DTLS ciphersuite name).

commit f9627732ffbe6477f9552c5a4712cb39fee88899
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 17:05:19 2014 +0100

    TODO update

commit 53005a2cfd7557d05ee064dbd1bc93c59d038d05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 14:52:59 2014 +0100

    use hash tables to locate proc entries
    
    That would avoid a walk on all connected clients, when a
    new UDP session starts.

commit 81107b80f842910f109e750b3cc37ece60f2aebf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 13:46:16 2014 +0100

    doc update

commit be2c8b3cc53c7a96a5bcde25232f577ab6bdabe6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 11:03:38 2014 +0100

    when selecting a DTLS ciphersuite try to ensure it matches the CSTP

commit f0871989a893d2ba6992bd436870b728d2063e9f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 27 10:14:39 2014 +0100

    remove the disable safe renegotiation flag from DTLS

commit ad049ddd741f8141263736b0fda1dad931cc9827
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 26 16:15:57 2014 +0100

    updated synopsis

commit ea057ed7f4e25445dcdf7c8c3e697bb3e655f984
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 26 12:37:48 2014 +0100

    released 0.8.7

commit caaf71c7920bebe9b49ff02d87cfec948172b215
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 19 22:41:06 2014 +0200

    use 3des-pkcs12 in the documentation for the generation of PKCS #12 structures
    
    That format seems to be compatible with more clients (e.g. Anyconnect).

commit 2069af24a8997cd05e2e39063bacdf082cfd1623
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 17 11:01:28 2014 +0200

    disable SSL 3.0 on the default priorities

commit c2856e2ee67e685a71abae139ef0049f3f42e23d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 15 07:58:36 2014 +0200

    disabled session control by default in sample.config

commit b5d64c20409cb2dec8f064066754118e5ac95695
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 11 08:29:51 2014 +0200

    doc update

commit 120e49b26b8536d012c6733e86c78f8744615e5c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 11 08:28:04 2014 +0200

    only enable session control when a username/password authentication is used

commit 473ceebe4c2ea22bb294967d9d9313e514ec53b1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 11 08:25:17 2014 +0200

    Added sanity checks into sec-mod
    
    That prevents a crash when certificate authentication is
    used but session control is enabled. Reported by George Panda.

commit 1a32efbe204a5997fb2eeda4900d20f0e0056017
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 10 10:48:11 2014 +0200

    enable non-blocking DTLS timers

commit 739276fcbe4abe9c9f19692648bc448b41099961
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 9 20:17:24 2014 +0200

    removed no longer relevant todo entries

commit aafa981ed9e03c3ebfc515537a9c0dd1d69b38f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 9 20:15:53 2014 +0200

    doc update

commit ba6455c6e123cecbb808e9fdc069092efacfb83b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 8 23:13:59 2014 +0200

    bumped version

commit b2a608dfec2bea1bfbcfe8399c070e03c7de668e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 8 23:13:40 2014 +0200

    doc update

commit ccfa8cd936d2238f6c02901481257fbe6e8222a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 7 15:44:18 2014 +0200

    corrected typo

commit 288a81f4c99c8bd818d0b15ccd0a319e4d04e8ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 22:34:33 2014 +0200

    changes for non-blocking sockets

commit ccd07f96fc5c86dd98fe5caa804b4c3c0ed8326f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 22:13:08 2014 +0200

    use non-blocking sockets in worker process

commit db48e3db073ece168210fa97712c2d3b61b71859
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 22:00:53 2014 +0200

    added set_non_block()

commit 5a32ad3f3f8777e622914f3f7fc20f91be4cadbd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 19:34:28 2014 +0200

    corrected typo

commit 4cf06b934cfc068975edf24cc5b6dbe3cbafcd7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 19:30:27 2014 +0200

    released 0.8.6

commit 2ab42ed1f28cd5154849af7382b28af870b5268f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 14:47:21 2014 +0200

    simplified FATAL_ERR_CMD()

commit 60d3891b3b963fa20ea23b6984b11b559899465b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 14:43:15 2014 +0200

    doc update

commit 0390f21db6408db5bd85871186781c95bbe7bf67
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 14:30:55 2014 +0200

    added recv_timeout() to replace force_read_timeout() in socket reading

commit 02dcbe6e5619d54e41ef7c6a52fb52031e9447f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 5 14:19:05 2014 +0200

    cleanup of cstp_recv() and cstp_recv_nb()

commit c2640d0076403b018f85abfdd1edbd1f9f6adfac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 4 10:00:39 2014 +0200

    updated to libopts 5.18.4

commit 442ea48f2b2b7fbb726af1590182454431e8ea1b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 3 20:32:51 2014 +0200

    released 0.8.5

commit 91187365555d82c2ecc116b361bc01952a70db9c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 2 09:37:21 2014 +0200

    eliminated last uses of force_close()

commit ef7fb7d59492bb868c10dcbc3d0ee8a579c7ed06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 2 09:36:22 2014 +0200

    Revert "use force_close() on server to avoid descriptor leaks"
    
    This reverts commit f622f6696c3b3a5fc8ffc39c4d5db2322c78c7c2.

commit 3a455f41786dd9b523802f3f57095ac17bf07d17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 28 09:06:14 2014 +0200

    listen-file -> listen-clear-file

commit e2585b2f266282a066517048a26e2e84e53251e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 26 08:52:11 2014 +0200

    unix-conn-file -> listen-file

commit 1cb35b8b090ca2146a4ae004d4368103ef4458cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 25 16:39:58 2014 +0200

    use more reasonable names to open and close a session

commit 46745081888c578c100f770df1bcb03e9cd39cec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 25 12:16:23 2014 +0200

    override the user's group prior to opening the group configuration file
    
    That prevented opening group configuration for users that had their
    group in a certificate. Reported by Norbert Paschedag.

commit bdcd27d13ec499a9f712b69f7a5d7d3a5f3ff3fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 25 10:34:07 2014 +0200

    optional-certificate was renamed to certificate[optional]

commit accdb24050a1de06c0408c9d783aa0575e35e831
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 25 10:26:50 2014 +0200

    allow positive values to waitpid

commit f4de7e7757160541d062635713cdc3f3679a84a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 25 10:04:00 2014 +0200

    increased the verbosity of shutdown messages

commit ba508b3d4de184973a927f912861348c9cbee1f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 13:13:12 2014 +0200

    doc update

commit 701559e4b076514ddd014a56890af1aa6ff02275
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 13:11:41 2014 +0200

    Added self-tests for optional certificate authentication

commit 365ca267d4959e84dbd841e08871e7c8015dc010
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 12:04:28 2014 +0200

    added new authentication mode optional-certificate
    
    That mode allows having only specific group of users that are required
    to present a certificate.

commit 16cde4dc1057199fff637c3927dc1faf1780f3f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 11:37:44 2014 +0200

    bumped version

commit 93353f9ee6a7fb7b74c81d028f4ce24ad9fd13a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 11:37:19 2014 +0200

    doc update

commit 67c76db3096ab511d79eb36196a74dc52e46d140
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 11:36:30 2014 +0200

    replaced vasprintf() with correct variant

commit 30bcf35576750e5c03c7711527e57a110aa0dcab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 11:34:15 2014 +0200

    Revert "license upgraded to GPLv3"
    
    This reverts commit 213f9a63ee60192c5bb086c3c970c4644e55f459.
    
    Conflicts:
            configure.ac

commit aeb0f1edd561971a49ad82c64f4d94e919d4ba17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 24 11:09:49 2014 +0200

    added test for unix socket operation

commit de486dbdfedbc2bdec3b6a8cddfacc1f841c61a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 23 22:47:36 2014 +0200

    Allow disabling the TCP port completely

commit f08612126dc70b993a9cc39da95823f286ac400f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 23 22:39:07 2014 +0200

    doc update

commit b479659836aa57ff7fb1674a0571aa9a4038a684
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 23 22:33:37 2014 +0200

    do not allow the combination of AUTH_TYPE_CERTIFICATE and unix-conn-file

commit 56bcfffed729045156457db008221dbde8bbdcf7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 23 16:42:30 2014 +0200

    allow the group owner of the connection socket to access it

commit 4ea5a56ace17e5e68859bb3e6a16ea790fdc6303
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 23 15:25:41 2014 +0200

    Allow the CSTP layer to operate without TLS
    
    That also introduces a unix domain socket under which connections to the
    server can occur.

commit ddcb609c5d117ec75716d57897a96bba6ad3dd4a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 21 08:47:53 2014 +0200

    corrected tun device closing order for BSD systems

commit f622f6696c3b3a5fc8ffc39c4d5db2322c78c7c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 21 01:40:36 2014 +0200

    use force_close() on server to avoid descriptor leaks

commit a8b32ed8f0f27afa8a15bc683f44833bc71582fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Sep 21 01:35:50 2014 +0200

    ensure that in all cases the tun fd is closed

commit 0cd8002f0c10338afb91ff4b7ce0b1ffd9201009
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 20 00:04:01 2014 +0200

    when a UDP packet error occurs print the IP of the packet

commit 552e7b24e7c52124dab91bf14b5b200f4e6be11c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Sep 19 21:29:30 2014 +0200

    fail when a tun device has no name

commit d5d27b2379c15b5ae6fe7257af9283fd8c9ec4f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Sep 6 12:00:37 2014 +0200

    updated comment

commit 88fb5ab33c42a893f2e9e81037e3c9ec333fb92f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 9 16:15:50 2014 +0200

    reduced the severity of debug messages

commit 0da35d20faf19c61e61ed40d2f0c5d7e255996eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 9 14:13:30 2014 +0200

    added more debugging messages in pam module

commit 913274b44ee948e484c78f76793f8e8de1329ce6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 9 13:48:39 2014 +0200

    pam messages made more specific

commit 265e723cdbc15dab3a804d0ce505c63b53572c14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 9 09:36:48 2014 +0200

    send the IPv6 netmask in a compatible with cisco servers way

commit 06c02caa02f47a09650df77e567f8112b8ccf8b1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 8 13:50:39 2014 +0200

    In IPv6 send the prefix instead of the netmask
    
    That allows vpnc-script in windows to apply the correct settings.

commit aa6cacf0410896d1d46f50d2a6a7c3ec196f328c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Sep 4 16:55:03 2014 +0200

    TODO: updated

commit ab999fec4f1d89fce3bcf5276f2bdacb4dc79fdb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 3 19:21:26 2014 +0200

    doc update

commit 1576a3195df129e121d27fc2720706eda5fd01b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 3 19:17:10 2014 +0200

    modified rx test to an occtl test

commit c79eefcf9c147b6cca1be8427a76d73d4bc4f17b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 3 19:15:08 2014 +0200

    Revert "print the per-user RX and TX bytes from occtl"
    
    This reverts commit ecd6e316a9f447a6766af6174d632e43a557e237.

commit be50fb3ac18945808927ce8fb1afabf26bb32ad3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Sep 3 09:15:54 2014 +0200

    updated full-test

commit 9f42ae8da87c9e47d7092a5faba544493160e060
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 2 13:39:49 2014 +0200

    added test for RX data

commit ecd6e316a9f447a6766af6174d632e43a557e237
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Sep 2 09:11:37 2014 +0200

    print the per-user RX and TX bytes from occtl

commit a40c5afcc898d15f8cb31c86e4c33d0df6d4c0b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 1 00:45:20 2014 +0200

    sec-mod-auth: don't print misleading message on session control

commit 898af172c2874e2f497c8eec679dc3f2edd75eeb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 28 10:21:32 2014 +0200

    full_test: requires building on debian due to gnutls symbol differences

commit 186dcf565245c79666d631742479b414f0c6c49f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 28 10:09:17 2014 +0200

    tests: added check for the DEFAULT group in test-pass-group-cert

commit abe6d2d190ca3d069d957e7ff77c4e6303b0ed0d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 28 10:08:42 2014 +0200

    when the default group is selected, don't treat it as no selection

commit b52c49f133a475f48967e68e950e341934a0c22a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 28 09:58:51 2014 +0200

    doc update

commit 91c05665233614fb204a7d1ce676db578e584402
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 28 09:26:25 2014 +0200

    made the comparison for XML fiels case insensitive
    
    Suggested by sskaje, based on an issue with the Anyconnect iOS client.

commit 7c7f472f2bedd4e8e8a8ca7648ec4b0a7097f47f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Aug 28 09:21:16 2014 +0200

    gnulib: added strcasestr

commit 85e9e36e78b4b1d126724ccb42ace214654ff5c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 27 18:17:08 2014 +0200

    full-test: do not require --without-protobuf

commit 36d49a524bc74df033daffeb1ccf17e620f7b56e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 27 18:10:38 2014 +0200

    bumped version

commit 2d39b710f4ae0e26fb54d324ba2b093c32c16013
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 27 18:09:33 2014 +0200

    doc update

commit 718fc4565a0390370517a8523c093b3b02b00f30
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 27 16:57:57 2014 +0200

    avoid calling gnutls_record_get_discarded() when a DTLS session isn't available

commit d4ca7ba6c2718e4f3537d2079fa928336cab61ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 27 16:36:08 2014 +0200

    full-test: require the --without-protobuf option

commit 103a357f96cee2fffc7927c40bf6bc867526ef32
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 25 21:55:39 2014 +0200

    doc update

commit 77380a02b797d2c0e113dda0d64b0d3db0e05127
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 25 21:54:59 2014 +0200

    updated to protobuf 1.0.1

commit 70eea332ffe24d325c2e535cafb8b9e3bf576b62
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Aug 25 21:52:04 2014 +0200

    check for stdnoreturn.h presence

commit 60bea96ccef5589bd8d35a438fdb9b3759852f36
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Aug 24 08:14:11 2014 +0200

    corrected included protobuf's path, to align with protobuf 1.0.0

commit a186da0fdbb154aaf6d205ea4043910e52122383
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 23 18:28:42 2014 +0200

    corrected typo

commit f2d9ac2d3fce41e6c11a640555d123f84bb23bf0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 23 18:06:11 2014 +0200

    include the docker test into distribution

commit 3d56f0ea8d90dbe97e6b442caeea797d79bc5b35
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 23 17:56:08 2014 +0200

    released 0.8.3

commit 6f4f60db5afaaeadfbabb648ccdb5991b15dfc00
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 23 17:46:25 2014 +0200

    added work-around for infinite loop if the UDP descriptor becomes invalid

commit 817f757577ef78bcc19aecf73d6ecf1b11258c82
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 22 15:23:16 2014 +0200

    after fork restore the default signal mask

commit c567a129f4dac88d1b3c4508484a2dffd78e1e5a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 22 11:57:15 2014 +0200

    worker: when the UDP socket is updated, update the DTLS session

commit 7774aa995144ee86049182c2ca7f2c59cfd525a1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 20 22:11:49 2014 +0200

    bumped version

commit 60af35cd07ce37395b9a447e9fba755cd7f1940c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 16 20:33:41 2014 +0200

    doc update

commit e7f9f152bd18d5a2b595ee73584f2d46d7e117af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 16 20:30:39 2014 +0200

    updated bsd's getpeereid() check to match the Linux behavior

commit f40a73a2ed902db9c256edacf7c80810f1b982c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 16 20:12:11 2014 +0200

    doc update

commit 9be381859d7c9077ed652a82ec06ef01494d413d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Aug 8 12:27:08 2014 +0200

    worker: call sigprocmask() prior to entering main loop

commit f194a59ba349450d5eb428d2a27f270efceff050
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 5 16:24:03 2014 +0200

    protobuf-c: upgraded to 1.0.0

commit 215f0d725457c047300a9015dda1a4cc7f8359c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Aug 5 16:19:38 2014 +0200

    only consider DTLS pending data if the UDP port is in active state
    
    That may address a possibility for an infinite loop.

commit ce2258b391b2a7e9faa513d9d0081323789168d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 31 16:07:22 2014 +0200

    doc update

commit c7349f124f2ba443fc2b73d5e25fe098f161d0d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 31 14:57:40 2014 +0200

    doc update

commit c781bea7cd604e93cd5e66d99754fd821c614beb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 31 14:57:03 2014 +0200

    user-profile is now allowed in per-user configuration

commit 63dd47a7865bcf989c81c3c21176c84ebfa4c0e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 30 16:24:21 2014 +0200

    removed text on seccomp

commit a988dc11dc0a68ae814524fc6c1067701f5da461
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 29 22:19:17 2014 +0200

    updated libopts to 5.18.3

commit 60dcb9d62f7b03c366d72ed4159b8064e795d767
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 27 14:05:19 2014 +0200

    /profiles request allows partial match

commit 40d499ac1aa46d2e293c04cbf1c3f16d02039d95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 27 02:33:35 2014 +0200

    better error messages when certificate username limit is reached

commit f838584e0e31c321d001d3b326b81b78322a3775
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 26 11:05:55 2014 +0200

    bumped version

commit be326bd7edb91d27301a9cd5dfc62000ef3e8912
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 26 10:59:09 2014 +0200

    doc update

commit 6de26b94089929e4cc57c23aa07ae78cfb6ef2a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 26 10:57:26 2014 +0200

    made macro usage safer
    
    That solves an issue where the pid_file would be overwritten on
    a configuration file reload.

commit bf39dc0398d279172a7112e838892461f523afef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 23 15:27:14 2014 +0200

    updated todo list

commit 6079cdb8336ec21bc5ca36888e873b2417486c38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 28 22:59:29 2014 +0200

    doc update

commit eb6e3fea81132dff502eeba1c393b99b5d58d054
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 28 22:57:16 2014 +0200

    doc update

commit def560ec75fcb73c2dc2c432ceb1bfcefc33dff7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 28 22:47:45 2014 +0200

    doc: do not explicitly set serial number in generated certificate
    
    That would allow certtool to use a random one.

commit ff0e39bae139610dc909b2680d032da2cc5b4151
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 28 20:49:30 2014 +0200

    pam: deinitialize co-routine when session is open to save memory

commit bb4f2ae453432c10de732e29f81798047ac6de01
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 28 20:45:43 2014 +0200

    pam: reduced default stack size

commit f44e0d63bfac02700fbf8a0a9ddeb5f729efa95d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 28 13:24:41 2014 +0200

    released 0.8.1

commit 5aeab28caeb528d26b5621f26e59054626a9108f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 27 09:08:31 2014 +0200

    initialize str to null

commit f541dc36334348e410c2297dd42f7b0fe355e501
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:50:07 2014 +0200

    fix typo

commit 47918f97c6e737a2354da9533885394da8fe5ffc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:49:10 2014 +0200

    doc update

commit 53c7bbeb1dc293c7eb525f07c5bb23ed330f1c02
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:47:54 2014 +0200

    ocserv: corrected debug message

commit 309ad41475cf94e4a357d3366fd690d02962621d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:44:43 2014 +0200

    ocserv: print the correct message when only selecting a group.

commit 3de707b0fe30f130de9252ebc6e4870b4fa05e3e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:40:50 2014 +0200

    introduced str_append_printf()

commit 5ef450086dff3e244c9cad6adc78bf40167dfde7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:28:17 2014 +0200

    tests: Increased the server start wait time

commit e5434ea89e3ffb938d1198f0e1f61450a0f7e780
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 13:25:04 2014 +0200

    tests: Added check for certificate-only client with groups

commit 4fa0053d54d1d301e133ebae91712566545e9705
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 11:31:23 2014 +0200

    ocserv: prompt the user for group selection even if only certificate authentication is used.

commit caa98a05fd273671a4da61e1615a8e04309d5bd7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 26 08:29:54 2014 +0200

    document how to convert key to pkcs12 file

commit 29a0604eb001e13f324eb71044c337c408a98eb7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 25 22:00:58 2014 +0200

    doc update

commit 3fac1c4e0c084a0b4740611daaad0f53196ecb84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 25 21:57:58 2014 +0200

    search for group_list in addition to group%5flist
    
    That allows to read the group from AnyConnect clients.

commit e48ad13e82f0340cb755815bfdf2ee8f802f9eac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 25 10:11:00 2014 +0200

    Set the applicable DNS and NBNS servers in complete_vpn_info().

commit a144fde0e438bed921718b512d5c6da1fa8c83dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 25 10:05:34 2014 +0200

    Eliminated the MAX_ROUTES requirement.

commit 3e3e05f30a28738755433a9c806c099cf1da6228
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 25 10:04:10 2014 +0200

    doc update

commit 4a0b16fb987548675e9cbc58c281f3bc0192d9c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 25 10:02:05 2014 +0200

    Forward the appropriate DNS and NBNS values when using a per-user/group config.

commit 6ebaac88399011176f452050c099c20649e51fac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 24 14:00:23 2014 +0200

    tests: Added check for the basic commands of ocpasswd.

commit 4117bf26610a85f96a8776e452d64c14cac91ad5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 23 21:09:22 2014 +0200

    Use a more terse, but with more dynamic information version string.

commit 062934502220fa28887ef2609d6e51b2b67823c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 23 17:28:50 2014 +0200

    Avoid using snprintf() and simply use strcpy().

commit 85288fd96f706e8b3d7a7dea41eb675100c363a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 23 17:26:01 2014 +0200

    Ignore the return code of snprintf(); it is useless.

commit 1d2f36f9bf3bc61c8605c70f6fd581bbcb0ec4c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 13 15:08:40 2014 +0200

    When renegotiating, verify that any certificate received from the client contains the same username.

commit 18cef50ebedc538e0be42a10b022150510a24911
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 12 15:36:39 2014 +0200

    doc update

commit 70623591d5aa130c854fce52d60e25fef5476ca3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 12 15:35:45 2014 +0200

    Seccomp is now compiled in by default, and can be enabled at run-time.

commit ae3b9e51116ff8b61294544cd639ee54b743cfaa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 12 10:20:10 2014 +0200

    doc update

commit 41ff0676416d4adc09d0e339a952ad8d2d04fadf
Author: Hexchain Tong <i@hexchain.org>
Date:   Thu Jun 12 12:55:03 2014 +0800

    Fix array subscription in unescape_url
    
    Passwords with url escaped characters were parsed incorrectly. The
    variable used for iterating over `url` should be `i`, not `pos`. This
    patch fixes the problem.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 11bc2819dae913b051bbd0ca445f8c8a968f7260
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 15:59:50 2014 +0200

    doc update

commit 4a91581d92033c12e5fa40d7047328a9bd9f998c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 20:49:34 2014 +0200

    doc update

commit 23f6e8e1876359f641c6fdcb458bc794eaf79a6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 15:58:53 2014 +0200

    removed debugging message

commit c49128f1bb1b8ca5d14e83b79a9215fc2dc6cbc2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 15:50:55 2014 +0200

    doc update

commit cfa74a4e29b70c902975cd07cfd2d61bdb3dd31d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 15:46:19 2014 +0200

    Reload the configuration of the security module as well, on main process reload.

commit 9e4be335330ea839b757b620cfe621fa9d44505e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 15:39:01 2014 +0200

    Added sequence diagram describing the session control operation.

commit 021febe5d8bb77eb3e295f4c407453dd82522789
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 15:05:53 2014 +0200

    doc update

commit 28dca2aa0ce96bb19bdb7fba82f570d95472e872
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 14:47:27 2014 +0200

    Added support for session control (relevant for PAM for now)
    
    That in effect will utilize the pam_open_session() and pam_close_session().
    It is disabled by default as it requires more resources from the security module.

commit 01db3e58174f7d88ddc9c5c080bcb2905d656cef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 10:40:59 2014 +0200

    Include the SID into the cookie and store it in proc_st.

commit 089463840e26e51b6e54b5160d93ebd096f28a31
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 10:09:48 2014 +0200

    doc update

commit 0a0b51ab37e0a2016582ea7721335e1fd5eb65f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 10 10:08:43 2014 +0200

    Added work-around for openconnect v3.20
    
    That version of openconnect requires some strict format on the
    XML messages. Thus we send it, what it expects.

commit 46f93276844e4632d4b42a76b3a14dc406d22fc5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 9 16:55:49 2014 +0200

    removed unused protobuf variable

commit a3b8745f443a3faa58ea8986d5f0e6b90a9836cf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 9 14:56:54 2014 +0200

    tests: check for special characters into username in addition to password

commit b4544a958212ab3a841985f2566c262938b05264
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jun 3 17:41:15 2014 +0200

    Send the server version string to client.

commit 74855461bfeaa513b4c037d06a64f255c47cabe1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 23:40:16 2014 +0200

    TODO: removed completed item

commit 4489ff3cc6cf5bae9ee44cb990252b4bf4c95024
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 23:35:57 2014 +0200

    removed dbus from the dependencies

commit 3bbfc46280297663601bbc7ce0c42743bb9d2382
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 23:32:02 2014 +0200

    doc update

commit 3248651120e234ba41d55f3f83d7cbd01f98c8df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 23:31:36 2014 +0200

    ocpasswd: added parameter to delete a user.

commit f69353fedc87871fde7286e5a9c15ed5b0dcdbd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 15:23:01 2014 +0200

    bumped version

commit 961171e73b2b4d6ee2505321a63662fbc35addfa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 14:52:23 2014 +0200

    doc update

commit cbe4d80b1e67145fac67f57233224fab6982fedf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 14:52:13 2014 +0200

    No longer install d-bus or systemd files.

commit fb2b1e55041164da672e54f52686dab33ba52d52
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 14:39:37 2014 +0200

    doc update

commit 2a6111eef893a184d0a434fbd7157e1418f215cc
Author: Brian Chu <cynix@cynix.org>
Date:   Mon Jun 2 20:38:05 2014 +0000

    Fix tun IPv6 on platforms that use SIOCAIFADDR_IN6.
    
    Also remove a redundant call to SIOCDIFADDR. A freshly
    cloned tun interface should not have existing aliases.

commit 2e5bd4bbf83ca98a29b89ab381a97ab3f002fd87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 11:54:40 2014 +0200

    removed double header inclusion

commit 4001719560f79812dd98291b37f88c740b3fd955
Author: Brian Chu <cynix@cynix.org>
Date:   Mon Jun 2 17:21:40 2014 +0000

    Fix insufficient arguments in an error message.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit 8c55420a1207b9a1328ac829922be9069a0d8bef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 11:49:58 2014 +0200

    Avoid warning due to unused variables.

commit de0388a3f7da336af0435d16600e32af56bdae99
Author: Brian Chu <cynix@cynix.org>
Date:   Mon Jun 2 17:21:13 2014 +0000

    Fix tun device usage on *BSD.
    
    SIOCSIFADDR is deprecated on *BSD. Instead, use SIOCAIFADDR to
    add an alias. Also destroy the tun device with SIOCIFDESTROY when
    the client disconnects.

commit 264114e7995319b0a13ba209319ae5d82c66e16c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 09:33:26 2014 +0200

    doc update

commit 6f3c07ca2d355439a0794326228859ea527511de
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 09:28:34 2014 +0200

    SID is no longer being randomized in main.
    
    This was unecessary as it is now being set (and generated) by sec-mod.

commit af7e9670635acfd0a6aebf00f2b59d10f57f6ca8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 09:21:08 2014 +0200

    reduced the severity on several worker log messages.

commit 429195987cff5f4ceb065c5ae1c31e1ad30a150c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 2 08:50:29 2014 +0200

    corrected string comparison

commit 3db871bb436ccd232a2fc64ca396d5cf7ef366f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jun 1 13:00:33 2014 +0200

    Do a more graceful termination of the client if main server closes the CMD fd.

commit 48c2477d1fe0d4ea4119a0023abf490eeddde716
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 22:12:22 2014 +0200

    doc update

commit 0c21e47f8559d1b5f7028f1be57fcdfea8dcac98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 22:09:09 2014 +0200

    Always use the native endianness.

commit ade4f84e70c610bdf019ab60ba88752d41bd24c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 21:47:56 2014 +0200

    autogenerate args files if version.inc is update.

commit d47f8b56c1bd7d3100f9bc23169ca6a9b2fa7f50
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 18:43:18 2014 +0200

    removed no longer applicable message

commit a9375dfbba624c1796913eb595b2d4a8cb089502
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 18:31:05 2014 +0200

    released 0.8.0

commit 6f5ec79678b47103664b3c616ef575f414041c74
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 18:30:28 2014 +0200

    use a more portable way to kill the openconnect process.

commit cd635fd8cbdb313f07866ffcbf2f9fc6d135eb24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 18:22:11 2014 +0200

    full-test: be more resilient to docker errors.

commit 37daebaf84e282a9a186aa9cd29d5d7febbc1526
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 31 18:05:40 2014 +0200

    corrected compilation with local protobuf

commit 936932c29cadfddfe8cf49921c59461ce4fb488d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 30 08:55:33 2014 +0200

    doc update

commit 70dc25dce67bac8bbe88856939d963f7fcfe5c6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 30 07:44:11 2014 +0200

    Listed previous releases.

commit 68516206b23590414199799ccb5d33be6dd2462d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 29 21:11:04 2014 +0200

    bumped version

commit c6519a74c3733e7644396f4d8795af6da79e8bae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 29 00:29:27 2014 +0200

    main: correct hashing of cookie

commit 98ed640258f9967ad211f2a488dbb30b355a1bdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 29 00:27:20 2014 +0200

    more debug messages

commit 1e48d0d0de7cc5d89adba93c36c98bcae8b59981
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 29 00:20:13 2014 +0200

    main: removed the inactive ban_list.

commit ff4f895cb02445d1039a79c195119e19ad71c6c3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 29 00:19:24 2014 +0200

    main: deactivate the cookie when releasing proc.

commit 5759032ef963903b101a1680df2e6cdb22ec1c91
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 29 00:14:28 2014 +0200

    worker: only check for friendly names, if there are any

commit d11d8ae47c75fb9209648464b566fb00adca618a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 28 10:56:03 2014 +0200

    increased the maintainance time to 15 mins

commit 3dd67c3f197243d73b73e1db0052125ea1b2f855
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 28 10:48:27 2014 +0200

    inline revive_cookie()

commit 9eb68a381a6a9fe681f0ee492d00dea3c03a7da3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 28 10:34:26 2014 +0200

    No need for safe_memset() of the cookie hash.

commit e5c60a7a440851e68f1d0ee504f202f31a26f432
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 28 10:32:32 2014 +0200

    Limit the number of TLS resumption requests to one.

commit 3a18882a4060165ae6013d5f9e94b0a16565297c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 28 10:13:08 2014 +0200

    Store a hash of the client's cookie instead of the cookie itself.
    
    That ensures that the cookies cannot be leaked from the server.
    On a hash collision, the IP of the other cookie in use will be
    hijacked.

commit 0f0cf31a79e03220602fb19a01340174913c18ac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 28 10:11:17 2014 +0200

    zeroize cookies and TLS session data after read.

commit 7ccdba823470f08dc90f218af787b40775fb7037
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 16:04:53 2014 +0200

    doc update

commit aaa06e31577a6f8e2c44d23ea4476adb928b6993
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 15:18:30 2014 +0200

    TLS sessions expire the at cookie timeout.

commit a872850b1e9346d0790dd64b926d25290ab90913
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 15:15:05 2014 +0200

    better printing of module name.

commit 68071646c65e10155c94dbe81dea618338cc6bec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 13:43:00 2014 +0200

    Report the number of active cookies and TLS resumed sessions to occtl

commit 25fbdfbf709f9b6d5488dc0484f20389bbb47801
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 13:39:22 2014 +0200

    Keep track of cookies internally.
    
    That allows to restrict the cookie validity time to the absolutely minimum
    required to establish and reconnect a recently disconnected session.
    That deprecates the cookie-validity option and introduces the cookie-timeout
    option.

commit a2728265b322cb9a2bed8c0b38b7c22bc1683037
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 15:46:42 2014 +0200

    corrected safe_memset() of expired sessions.

commit 01211c610c8b9728dc16aef013e6905f5c889263
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 15:46:08 2014 +0200

    Allow memset of zero

commit 0586e4c5fab848efd16406767e06185c8f8a3fe9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 14:44:57 2014 +0200

    Simplified the TLS hash table initialization.

commit 8c82e8c96ca3fe2a13c1382e5d898fa1e0e544ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 14:35:30 2014 +0200

    Overwrite TLS session data prior to release.

commit b4fcf4df8285ad3214e5caee8bc0e6ae7e940016
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 11:00:30 2014 +0200

    use macros for reason messages

commit 2e1c1bb29fc7d083407e73cf767912d051274a31
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 10:46:16 2014 +0200

    require the certificate being present on the sec-mod session initialization.

commit cdddc3df0af03ca787dd7732cf0276be34475d36
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 10:45:28 2014 +0200

    Better HTTP error messages.

commit a2b0898821ec05595cb4c1ce5e318eef0ea8ac8c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 10:34:15 2014 +0200

    doc update

commit d879c9761a0a30a1355c8d6e4db921969d97d75e
Author: Joerg Mayer <jmayer@loplof.de>
Date:   Mon May 26 23:57:54 2014 +0200

    ocserv: Fix out of tree builds
    
    Signed-off-by: Joerg Mayer <jmayer@loplof.de>

commit 843883750c8ba2dbe1b9205f91d7695d096e5d7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 27 09:00:01 2014 +0200

    enable cisco-client-compat in cert test

commit b5d5e3cb361f390846cdc7af9f35c1f7cb1949ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 26 13:04:16 2014 +0200

    do not deny roaming by default

commit 7e06e1acfb39cf805c7c41623e15ad089b496095
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 25 18:49:29 2014 +0200

    Return 401 error on cookie authentication failure.

commit c7653e2844f2d543e043a2416c69c97adf69ab95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 25 10:17:54 2014 +0200

    doc update

commit 7ba0fffb076f7414c80b7132a94f80a94b09097d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 25 09:47:42 2014 +0200

    Added the configuration option deny-roaming.
    
    That required moving the read of the group configuration during the
    cookie authentication phase.

commit 4b9100511804c99494a19c5a14e760d7486afb9c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 24 14:38:24 2014 +0200

    released 0.8.0pre0

commit 78132e2a6dd9af8daad7ca2c0b47e62b202c01f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 16:36:48 2014 +0200

    Added auto group listing on PAM authentication as well.
    
    In addition a configuration option to print group IDs over a
    certain number was added.

commit d3f701fba5a566f33f419fddfaba0b6a4446d630
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 16:01:26 2014 +0200

    ensure that the group table isn't overflowed.

commit 618a386f739d032df589b3d9551d4fabc1eac6fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 13:31:05 2014 +0200

    doc update

commit 213f9a63ee60192c5bb086c3c970c4644e55f459
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:49:04 2014 +0200

    license upgraded to GPLv3

commit 21aba3d3e7e7b6e9bc3c08a3520c4bae3dce5ba6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:45:35 2014 +0200

    test-pam: better messages

commit 8eec4098033f6e0148bdd8295ff1b3f8596f5ba0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:43:08 2014 +0200

    remove const from temp variables.

commit de50dd413ba382a5aa0a5ab90f544082bdf28211
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:35:48 2014 +0200

    Better auth log messages.

commit 978e89c53f9c0c8f8d0ddf2445ff1e2d420b4821
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:32:03 2014 +0200

    re-use the string replace API for route add/del replacements.

commit d51a7cb7e7acfffddc2bc6f49bcd26cde315fc03
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:32:03 2014 +0200

    re-use the string replace API for route add/del replacements.

commit 57d848d228c348dcc9d8c5732ddea18e1d24f9b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:19:42 2014 +0200

    The replaced keywords were put into brackets.

commit 92565e1f5de67ecc9d1766a9534853a4cd889c1b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:11:42 2014 +0200

    check for allocation error in custom header replacement.

commit 51494e0df1b17bcdccf15683a9a90097d67dc094
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:08:11 2014 +0200

    doc update

commit 0a1f5f0f557607311afe4d807cc9b67e4ba49549
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:07:39 2014 +0200

    The custom header options allows %U and %G.

commit 28943341dbf393faf1d18fda81a00b63cbf120af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 23 11:04:30 2014 +0200

    Added the proxy-url option to allow sending a proxy URL.
    
    This corresponds to the X-CSTP-MSIE-Proxy-Pac-URL CSTP header.

commit 9eeffef2808c4b57be4e8ea8c8d38938fa804237
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 22 13:48:46 2014 +0200

    doc update

commit 2276acf57bf93b88796da5bdb90adde20428dd42
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 22 13:48:09 2014 +0200

    limit the cookie validity time to 3 hours in the configuration examples.

commit 6dcc9acf771505e17fd3465eb46c6106dca365e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 16:19:07 2014 +0200

    Restrict cookies to a single IP address.

commit 6ca3c4761cb689d80319517210e81a71fb0a4fac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 16:11:05 2014 +0200

    Cookies are packed using protocol buffers to reduce their size.

commit 8ba0d563f0ef01a1f093e82a717e6dac1e9d89f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 14:54:18 2014 +0200

    Do not call close() twice. Issue spotted by coverity.

commit 11a78970bb96649c06939d46370b919bbced2b84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 14:52:10 2014 +0200

    Correctly check for network name. Issue spotted using coverity.

commit e027dfd42241d8ff0eefc064ca3631ec775726b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 14:48:19 2014 +0200

    Corrected check for group list sending to client.

commit fce30e05139422dc9f0b646cfce5a2f6b5d36fe1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 14:37:50 2014 +0200

    doc update

commit 0ed82312e9f24a7e3bad90ff687ccec38312efef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 14:23:02 2014 +0200

    Allow an empty friendly_group_list (in auto-select-group).

commit fbdcaa82ca40d9189ca2ae1bf7aad0959eecf349
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 14:16:00 2014 +0200

    Make pid-file an array to avoid issues with memory allocation.

commit 7eb80a3c013a2e06bb029f73fd6e617c50cca927
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 13:52:34 2014 +0200

    corrected filename

commit 5b8b3b1aa70363a91d310b4e66c1953b935bf181
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 12:40:03 2014 +0200

    When a client has already selected a group, re-order our group selection form.
    
    This is required by some Anyconnect clients and the openconnect android app.

commit 177c1c95bd41070690a9039b7fd7bf058d0c8f17
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 12:25:26 2014 +0200

    Allow aliases to group names.

commit 7153ea8ea79b8aecf7dad33d78ba2028eb6792c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 21 06:21:34 2014 +0200

    more precise usage of MAX_*_SIZE definitions.

commit 8e67f959ed4d84e3ea8203bfcf3c7a9acfd6f32a
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Tue May 20 20:23:43 2014 -0700

    Add missing GnuTLS header file
    
    sec-mod.h now uses gnutls_privkey_t, so include <gnutls/abstract.h> to
    fix this error:
    
          CC       main-misc.o
        In file included from main-misc.c:43:0:
        ./sec-mod.h:31:2: error: unknown type name ‘gnutls_privkey_t’
          gnutls_privkey_t *key;
          ^

commit 5552fc7a613834089765fab63bc2ed40d551cbe9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 23:31:11 2014 +0200

    bumped version

commit 7133a1cf1bbd95ed1f8b8df1de542e0841558ab3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 17:49:12 2014 +0200

    mention the occtl tool instead of who -u

commit 5f93be350ad263930aed87cedf9605376a69c1f4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 16:11:29 2014 +0200

    doc update

commit 125917a9ac161a1071beca68488834a34c38a853
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 16:06:15 2014 +0200

    doc update

commit b6531feee88cbefce65647798e627362033b44c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 14:35:48 2014 +0200

    Corrected certificate generation instructions.

commit 5af82e9ff47ec7362258bfbdac1327077a8b3c1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 15:49:02 2014 +0200

    fixed unescape code.

commit 5d0bdf296678a8402386bb702d877776b26397ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 15:11:30 2014 +0200

    Added test for group selection when having a certificate.

commit 2969d37298f5bc59426812d939dec4348b7fdaa7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 14:27:44 2014 +0200

    Added tests for group authentication using passwords and PAM.

commit aef5dc0633e4dfb0a9514a87b587f27c467379f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 20 13:51:05 2014 +0200

    Allow multiple groups to be present in a client certificate.
    
    In that case the user will be prompted to select a group.

commit 2668fe63b4faf0e8216d1f1fde680726c72fc5f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 19 19:56:42 2014 +0200

    Added the default-select-group directive.

commit d44982235dfd90b9ebdbfb378fb1ad126bc0821c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 19 13:16:32 2014 +0200

    doc update

commit 659cc9850c88d0781a5be39403dfb78d5834170c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 19 18:26:06 2014 +0200

    Corrected filename in Makefile.

commit 4755ee48c56dcb672ddcbcba4362f08eecf04a11
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 19 13:12:47 2014 +0200

    Added the select-group and auto-select-group config options.
    
    These options allow to prompt the user for a group prior to login.
    That in addition enhances the password file format and multiple groups
    can be specified on a comma separated list, as:
    user:group1,group2,group3:$5$encodedpassword

commit 6bc625df812adc91c20e1c98bde93cf8d5e7513b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 19 09:58:37 2014 +0200

    The route configuration directive accepts the keyword 'default'
    
    In that case it will return a default route irrespective of any other
    route directives. That allows overriding existing routes with a default
    route for specific users and groups.

commit 0f0f96ef5c1241a274b940d947c0a49394617ab0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 17 08:47:27 2014 +0200

    sample.config: comment out the occtl-socket-file.

commit d99c5277586f0d0218dbff27157f7be1fe2ffd75
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 16:37:57 2014 +0200

    memory reorganization in sec-mod.
    
    It no longer relies on main pool, it uses it's own pool.
    In addition the DEBUG_LEAKS definition was added to allow debugging
    leaks.

commit 48c42fe25448c8b01c74fda11ea7f910f2a93df2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 15:36:54 2014 +0200

    define HAVE_LIBTALLOC when libtalloc is being used.

commit 739a2126d020c7d8353e5a3572b014591eb28218
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 15:36:03 2014 +0200

    Clean-up all memory on deinitialization of sec-mod and worker.
    
    That will allow to easier spot any unintentional memory leaks.

commit b62c14f613297dd2029c8bd2ae09d1cc92fc5080
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 14:50:57 2014 +0200

    corrected issue in talloc detection.

commit f9ce018f68b4af72ba644f96986a3b86c9a809cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 14:28:18 2014 +0200

    Add the clock_gettime() syscall on the list of allowed in seccomp.

commit a74f6157660792666457b5895671937ac63c858a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 13:14:58 2014 +0200

    doc update

commit 044b910128643fe06577105c4e99ad3b2aa87be7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 11:52:17 2014 +0200

    Force full connection after cookie when a script is involved.
    
    That is because in the new design of ocserv, the cookie is being
    provided prior to any script being run or evaluated.

commit 68c4b2371b3903d9e957f88e91ba7f7415011dfe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 11:39:02 2014 +0200

    Renamed main-auth.h.

commit e7171ac85951488081e6deda910411db9b7fa9f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 11:30:17 2014 +0200

    Supplementary group/user configuration is now modular.
    
    That will ease the addition of other backends that can be used to
    read the user/group configuration. The only backend supported now
    is file.

commit a2ea033f50f29fc1813dc09e68a5d3f4d6c8c863
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 10:46:53 2014 +0200

    use safe_memset() when overwritting the group configuration

commit 231316f6244a0bdcdfa89e4258e31e6b535f6a27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 15 10:44:35 2014 +0200

    cleanup the inclusion of protobuf sources.

commit 37f295b31a757bcf386ff4d157155856a5250025
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 14:54:02 2014 +0200

    doc update

commit fcaeacbd009460137b61f8732aa708984be9fb88
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 14:51:41 2014 +0200

    Added sanity checks in state transitions.

commit b25deaf742d8fdd9173ea421da4b5aaf7b59feeb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 14:50:03 2014 +0200

    Updated authentication state and design figures.

commit 53f3129da9fffaacefbba13063c79d6c708fb957
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 13:34:23 2014 +0200

    Authentication modules were moved to subdirectory auth/

commit a1a47f329449b21f03ba754b3e6a7e3454c0a7fe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 13:30:43 2014 +0200

    doc update

commit 788560b9ce588a10b97dc5404118ca5446e28cb6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 13:17:45 2014 +0200

    Added default-user-config and default-group-config configuration options.
    
    These allow setting a configuration file that will be loaded if a
    user-specific or group-specific configuration file isn't found.

commit 3f9a215f539ba10ef604423d96c4349b75d04798
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 14 13:00:11 2014 +0200

    Allow for random and for predictable IP assignment.

commit 09704b881927c5deabf34b4433ef0b709d0d562f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 13 10:44:10 2014 +0200

    Password authentication is now delegated to sec-mod.
    
    That prevents any memory from the authentication modules to be leaked
    to a worker process. As a result, the status zombie and dead no longer
    exists.

commit df7b124df487bae7ec77ef2b1b5ca7d452b2dd53
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 13 20:07:28 2014 +0200

    include malloc.h when needed.

commit 07559df4320f3654976cff0f69abd5014f119a5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 12 11:13:56 2014 +0200

    Corrected the removal of socket files in chrooted environment.
    
    In addition remove the occtl_socket_file.

commit 5e3afb92adcca87e23ca17a71ae1fc4ce9ad004b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 12 10:51:18 2014 +0200

    eliminate the need for a worker_pool variable in main_server_st.

commit 1465a5922cb754b0b65643d9cff9e8453734b4dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 12 10:29:29 2014 +0200

    Added no-udp group configuration option.
    
    That options allows disabling UDP for specific users or groups.

commit 2338251a0fdccaf54fb9eb3c0dc9319f755e2f26
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 12 10:25:03 2014 +0200

    corrected PAM module and its usage of malloc.

commit 9f07c42b823aabbe2e504a7822052f288d92ffac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 12 10:12:39 2014 +0200

    Allow the main process to connect to sec-module.
    
    That allows gnutls' to verify the key validity during initialization.

commit 478c580a5696076e8d2463824898d54bc73d3779
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 11 14:30:11 2014 +0200

    doc update

commit b83f168613c31cceb57cdccaca06cec944c4bf83
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 11 14:24:46 2014 +0200

    doc update

commit 9434334918a5caba3606fb5531f4731789d166e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 11 14:23:35 2014 +0200

    updated sample.config

commit ed0cb777ddd7be0c39c4161de2a4f8d6b301814e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 11 14:19:07 2014 +0200

    occtl: propagate error codes on error conditions.

commit 522a9c35a4b0e25797295da380ae884012d42887
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 11 14:08:46 2014 +0200

    Allow modifying the default occtl socket file.

commit fa22c1cbbfa798902b25b40784a2f4b09b8ff558
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 11 10:10:39 2014 +0200

    use safe_memset() when overwriting the TLS cache entries.

commit 9229fcfb1c23bee43f9d4dcef6c2aac52c1287a9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 10 23:27:24 2014 +0200

    use common definition for date-time format.

commit 41561567b56749ecf911ee35266fdc9f31af1c72
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 10 23:12:37 2014 +0200

    status cmd will report the server uptime

commit 4b1dc9b38e87425c266e5df00fd467404f295c2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 10 23:12:15 2014 +0200

    Added missing files.

commit d0729cf454d78c1c2edf2a0440eb78bd0dd96135
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 10 13:48:00 2014 +0200

    use safe_memset() where needed.

commit 127fd35d2e3b9a65d04698abb2773be9599cfcdd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 10 13:43:09 2014 +0200

    Use a static buffer to read the password file entries from.
    
    That allows easier overwrite of the parameters read.

commit 93db5129213a95393705c723be828e32d5ce9198
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 10 13:26:22 2014 +0200

    do not separately allocate buffer, but place it instead into worker structure.

commit 0c86299a188236efa275c0982e090290001bc5be
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 21:13:52 2014 +0200

    doc update

commit 435a0bf5b087f1951dd9a7c0f2126b36fe7b4d95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 20:56:29 2014 +0200

    corrected function prototype.

commit f21079b6678d1a489aed2cbe05e5a1fbd23f6470
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 20:42:04 2014 +0200

    use malloc_trim() to return memory to OS after fork().

commit 929bf5e21140d9d0eaec544387e70a6791a3494c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 16:52:16 2014 +0200

    Fixes in talloc usage in occtl in combination with readline.

commit fe150f8ab355dda194b4280e00ad2dd7bd56dcd8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 16:38:28 2014 +0200

    better interplay between use-dbus and use-occtl.

commit ecfb7cf513abc705fdd0ca18372a8ae66a108dfd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 16:28:37 2014 +0200

    When deinitializing the IP-leases table disable the lease destructor.

commit 2c3d7ff97874bbbf80a22353af76186d447fc73b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 16:08:05 2014 +0200

    updated docker test.

commit 969e684960f0eff51f7adc7200f4154514ea4ca5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 9 12:00:34 2014 +0200

    Use talloc() for all allocations to reduce the possibility of memory leaks.

commit fbb168e00af9fb865fb1f4c9bf1a68198b9b71a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 7 14:09:55 2014 +0200

    bumped version

commit b0e10065a0fb29693570b03daf19806814c0cea3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 7 14:03:11 2014 +0200

    Support for the unix socket is now configurable.

commit 840c35e9021d8d57be83acf3d3698e2d314d4c65
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 8 09:03:37 2014 +0200

    Added configure option --without-pam

commit 71104b36a33be9032232c3ae47dc12bdb0f98f95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 7 11:59:43 2014 +0200

    Added support for unix sockets for the occtl communication.
    
    D-BUS support is left, but is not enabled by default.

commit 6f694915c70d98e0760b94c3f862029fc2ed30d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 6 15:30:44 2014 +0200

    Added talloc.

commit 89ddd81c0e7604f02f7b2059f882dbc4164efc67
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 4 14:16:47 2014 +0200

    Use exit_worker() or gnutls fatal errors instead of plain exit().
    
    That solves issue with stats not being reported to the main process.

commit d6583945f91f5f2a72f1c425c40c061b833584b2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 4 11:19:12 2014 +0200

    Added the STATS_DURATION script environment variable.
    
    This variable reports the duration of the session in seconds.

commit 593ce2c9fa76d7bafc27dcc799ebe5f1091e48ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 4 11:13:44 2014 +0200

    sample config update

commit 5c07b36b9b043b67dfd6d5591fbb1da4801cb036
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 4 11:13:16 2014 +0200

    doc update

commit 521edbccd3da2303118c22b102cb24c3b0845680
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 4 11:12:20 2014 +0200

    name the cli stats packet.

commit d949b2844b6165911f34ff824a27162cca0aed7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 4 11:12:16 2014 +0200

    Resumed sessions are assigned the correct auth_state.

commit d1e3b3f1b70d53f78b25f6041ca8f2ae65b7f3c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 1 14:09:23 2014 +0200

    doc update

commit f9e2a029cee3d3d951279e7f75f3b70208dcc602
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 1 13:38:50 2014 +0200

    released 0.3.4

commit ca8ac737b719e1b954a1d59e6148f0454088f38e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 1 12:08:23 2014 +0200

    initialize values to avoid compiler warnings.

commit bb2b3ae5081139695b277fdd28d6197c801207f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 1 12:02:45 2014 +0200

    check for posix_memalign presence.

commit f1b0d85da3c569a0865bb097fcd36fa50a14dcc1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 30 11:06:53 2014 +0200

    doc update

commit 0b977f770fa5ed36c3406cc1beb9bb916341ac2c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 30 11:04:04 2014 +0200

    bumped version

commit 1c460315398d6452a563d75d3731c6306b39487f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 30 11:03:09 2014 +0200

    doc update

commit b7b3f3416d44dc6608f5f0daceb15dedd2aaa6bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 28 17:40:43 2014 +0200

    doc update

commit 4598a1b53bc0e92f729dd95e3523fdc8bb037aad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 28 17:40:00 2014 +0200

    updated example script to account for STATS_BYTES variables.

commit b8bfbde41d585f881a3d121e26c0630c90abb941
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 28 17:36:02 2014 +0200

    Test whether the statistics are exported to disconnect script.

commit 2a0cc77c2e7a3d1856763718ca2029f7a9c0990e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 28 17:32:51 2014 +0200

    Export TUN device statistics from the worker process.
    
    When a worker process terminates in authenticated state, then
    export statistics from the tun device (currently bytes_in and
    bytes_out). These statistics are sent to main process using an
    informational message just prior to process exit. The statistics
    are also exported to the disconnect script using the STATS_BYTES_IN
    and STATS_BYTES_OUT environment variables.

commit 2c213d4e525ddc7b96284a8344133e71d4d8f6c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 21 14:08:50 2014 +0200

    Active session timeout was reduced to 30 secs.

commit d090075502303002ddd299a70052e74c23fa14da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 13:18:24 2014 +0200

    corrected sigstack permissions.

commit d2931cfd880299e00fca99ec2ba5cdcb940a53a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 12:15:16 2014 +0200

    Avoid running test if our conditions are not met.

commit 03f6e7cc1652aecf27751d971f2f5ac10115f396
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 12:03:40 2014 +0200

    Setup an alternative stack for signals on heap.

commit 2577f8bfa74e6a2b340745a7cb8a5f8cd428c480
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 11:47:13 2014 +0200

    Allow the worker signal handlers to operate under seccomp.

commit bae34112fbbcbc6f85c4bea1e45a78d32a1736ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 10:57:16 2014 +0200

    Added sigprocmask to the list of seccomp allowed calls.

commit 46c2965a67a92b9f42ebc4c25fc54edd169b644a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 10:32:04 2014 +0200

    doc update

commit 489368c58e374957153f0eb2e42ac5e61306639e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 10:29:57 2014 +0200

    When receiving unexpected UDP packets, check if they match a known IP and forward them.
    
    This will not work for many clients that come from a single IP but will
    work-around issues, when clients are behind a NAT that keeps their UDP port
    state for shorter time than DPD.

commit 8e73f98502b79eb8487b25f96cc7135c3a2ce04c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 19 08:30:10 2014 +0200

    changed the default DPD time to 90 seconds, to prevent UDP port from changing in several NATs.

commit bd7240e1d516fbaf87efcd2111574db1bfcfc496
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 18 20:37:27 2014 +0200

    When a DTLS hello message is received, print the source address.

commit 025882464737d9ede67945fcf023cb0a274e2211
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 18 16:16:31 2014 +0200

    corrected program name in license

commit cf759e33ed995a6f7819ff67866216fe77af8263
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 17 19:01:54 2014 +0200

    Added note on enable-local-libopts for full-test

commit f4e8bcc9047a2fa723f33001ccd24554c4249303
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 17 18:49:33 2014 +0200

    Modified full test for debian.

commit 8e5bea0851e18d6ca45e956b4a1c9869fca7ffed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 17 16:26:53 2014 +0200

    doc update

commit 7bf24821aea5dbdc390a6820fcf7b7d85d7bde04
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 17 15:23:17 2014 +0200

    Added a full test between openconnect and ocserv based on docker.
    
    That allows testing the establishment of a connection plus
    the transferring of packets.

commit 62110975a724be9f44f71259d1238f346945ebe2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 16 12:00:16 2014 +0200

    Revert "Delay the cleanup of resources of a worker if a disconnect script is set."
    
    This reverts commit 7e0ee385c202807f7fb798564063c7c9a5fcfbb4.

commit 21d60106c2953f085fe8e2cd0c8c937b2179014e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 16 11:55:48 2014 +0200

    doc update

commit 3f8661a98a7fea99afed95c52a740dae077b99c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 16 11:49:13 2014 +0200

    renamed function names for clarity.

commit 4037bed48b2854331441d12a9a3f672bcaa847ba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 16 11:48:50 2014 +0200

    doc update

commit 276bdd49d1b0379d1de98026680ba1b0cc884e62
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 15 11:34:17 2014 +0200

    do not require the device to be present in the connect script.

commit 392c6a0178902974991186737c17b8fae1c4e9d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 15 11:22:27 2014 +0200

    Do not use renegotiation in old clients.

commit e6364e8e52e4f2365f579d1976898a4bbe8b7789
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 15 10:33:53 2014 +0200

    Revert "When a disconnect script is set, the main process will close the tun device on client exit."
    
    This reverts commit e50051b435ca54e6d7eac558e37b814d17fcb97e.

commit f8fbb9bde3ff58994612788a1e093ff0f197743f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 15 10:08:42 2014 +0200

    Corrected several coverity uncovered bugs.

commit b37fa7ae8cb650eea856af694446d7f23b481cdc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 15 09:48:02 2014 +0200

    use list_for_each_safe() when disconnecting a user.

commit 104f12cd1152269644154e794942d77dfcbd552d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 15 09:47:31 2014 +0200

    check the return value of socket()

commit bec93731eb116dafad1e1d40460b1e37bc5f76bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 14 13:39:14 2014 +0200

    Simplified group configuration file loading.

commit be3920a08cdc561f01f9ac5f995441e7408bea18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 13 14:04:55 2014 +0200

    Correctly close tun lease descriptors prior to running worker.
    
    That is, properly initialize them to -1, to avoid deinitializing
    an unrelated descriptor.

commit 70f82e72d3666a68a97f384c8b8521f2733411b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 13 11:12:43 2014 +0200

    corrected ipv6 netmask assignment.

commit 1c3ca402b3c681b42a6bd2f9e9162c64fb08d95d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 13 09:35:20 2014 +0200

    Revert "close tun lease descriptors prior to running worker"
    
    This reverts commit 9496819a33d256d5bcf1588cbd1081a016a0ff15.

commit 7071c75c851b91e58f273fb4eb99f44c4d91a9c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 13 09:25:36 2014 +0200

    correctly print message for no-ip.

commit d056ad5b4f78d8ac126f4c67dbe5909a5fc72ca8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 13 09:25:16 2014 +0200

    Avoid assigning broadcast address as either lip or rip.

commit c410891421924fe4e1d7e627033eb6d542140c14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 13 08:56:36 2014 +0200

    send ID as signed integer over dbus.

commit 9496819a33d256d5bcf1588cbd1081a016a0ff15
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 23:56:23 2014 +0200

    close tun lease descriptors prior to running worker

commit 7e0ee385c202807f7fb798564063c7c9a5fcfbb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 21:16:24 2014 +0200

    Delay the cleanup of resources of a worker if a disconnect script is set.
    
    In that case use the intermediate state PS_AUTH_DEAD to delay the
    release of resources for few seconds. That would allow the disconnect
    script to gather any required statistics from the device, IPs etc.

commit 3bf5c03b4bc489ae33e692b8c8a25380fe7a5f76
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 21:01:49 2014 +0200

    Test whether the connect and disconnect scripts have been called.

commit 6410f6864c5d9504072aba493e279326143be5ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 12:44:13 2014 +0200

    The tun device will be closed only after the disconnect script has been called.
    
    This allows gathering statistics from it. In addition, changed behavior of
    script calling, and now will always contain the IP information.

commit e50051b435ca54e6d7eac558e37b814d17fcb97e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 12:37:47 2014 +0200

    When a disconnect script is set, the main process will close the tun device on client exit.
    
    That allows the disconnect script to gather statistics from the client session.

commit 491b3c9c7e04ce06fd8282f25e4e172a84c39a59
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 08:51:40 2014 +0200

    doc update

commit c1c9680efba68bfb133bdf2d99ffa60c32a67318
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 08:40:55 2014 +0200

    document new behavior in calling disconnect script.

commit 1185cb07eeadf532b12a6fb1f85963f9799e0193
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 12 08:40:55 2014 +0200

    Execute disconnect script for user that their IP was hijacked by a cookie reconnection
    
    This will prevent having the script be called to initiate connections
    that are never disconnected. This patch also introduces IPV6_LOCAL and
    IPV6_REMOTE script environment variables that allow passing both addresses
    in case both IPv4 and IPv6 are assigned.

commit 3137c507e212d7972735573b59e09dfacd255ce3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 8 22:02:12 2014 +0200

    doc update

commit 25137299c7eb23c2c6c5c903df9e17a7f4e1dbd0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 8 21:27:42 2014 +0200

    released 0.3.3

commit ee12a7509d5cac6f914bed31f1013443c4b21b11
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 6 10:02:16 2014 +0200

    renamed function for consistency

commit bd9aaa12288b2234f74ddacbe4693538525d41a4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 6 09:08:44 2014 +0200

    Revert "Try to read more than a single packet from the TUN device."
    
    This reverts commit 019126abfd5603971cc208b404ef8b2ee1980ccd.

commit 7d07ccb1e486bc664e5dfb4b08411f1061c81c3d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 6 09:08:37 2014 +0200

    Revert "corrected DTLS data sending."
    
    This reverts commit 374f8d52a90708f8bfe58f11d1313c8af843c794.

commit 374f8d52a90708f8bfe58f11d1313c8af843c794
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 5 19:57:53 2014 +0200

    corrected DTLS data sending.

commit f9968decf96ae7d644b230009fe2dc77c69d2bfa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 4 09:23:54 2014 +0200

    Revert "check sockets for writability and use that information to discard packets rather than block."
    
    This reverts commit 449302afe2960dcf0f2edd717863c8be00f89b12.

commit 019126abfd5603971cc208b404ef8b2ee1980ccd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 3 13:54:48 2014 +0200

    Try to read more than a single packet from the TUN device.

commit 449302afe2960dcf0f2edd717863c8be00f89b12
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 3 13:32:08 2014 +0200

    check sockets for writability and use that information to discard packets rather than block.

commit 0d1eef4fa5893a020fe635ffcb2daba2289c9373
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Apr 3 11:33:56 2014 +0200

    refactored worker main loop

commit 9b36471d227bd0fee081c361354e0426071d03da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 13:29:02 2014 +0200

    corrected name of crl template

commit 78c0200a693cfcbca1a0fa8e286c5cb29c2d00ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 20:54:23 2014 +0200

    updated comments

commit f79fa04a83da347e9aca6af063d0cf0b7b6727b0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 13:16:10 2014 +0200

    doc update

commit a64edf9c6da9610648a61a3a351295e94835216e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 13:12:50 2014 +0200

    better message

commit d5597c71c6735ab9b31f760387bf2b29748e9d1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 12:06:43 2014 +0200

    doc update

commit c094a94d1970c4bcc5f36f204f207743af38bf52
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 12:06:15 2014 +0200

    Added test for CRL file support.

commit d00319faf46e652827177c0a052861279b5e11fc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 12:05:18 2014 +0200

    Updates in CRL handling.
    
    Ensure reload on SIGHUP, and do print an appropriate error
    when an empty CRL file is encountered.

commit 7473731061ebef15c302001a2dcdb2f94c7a5b7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 11:01:44 2014 +0200

    avoid a totally empty function body.

commit 52d34b1d8dca2119ece1c4e6ab9495a132063907
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 2 10:14:11 2014 +0200

    small code improvements

commit f65507ed6603ab7ae7900f44859e16c422168618
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 1 18:35:21 2014 +0200

    properly copy the username from a certificate

commit a3ecb5b91f0d3414f78e81e8f95e05dec3970306
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 1 18:35:01 2014 +0200

    simplified and corrected test execution

commit cbb7bb28c9f4d209e17a68d6f1f2d97bef07192e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 1 11:57:30 2014 +0200

    Added check for connection with incorrect certificate

commit bfe4d4e9dcdca38238929e1626935a04867cbfa7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 1 11:47:58 2014 +0200

    explicitly specify GPLv2+ (or later) in LICENSE.

commit f58a194054a880f33f534e338070bd0fa4a7c269
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 31 16:58:30 2014 +0200

    Added sys/wait.h for WEXITSTATUS

commit c84452fe8f8e5d0e7c1ce05e59d42f63ce4a2906
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 31 16:58:02 2014 +0200

    Added limits.h for POSIX_PATH_MAX

commit 317fe62a5643115f6b92f50023be4179064283fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 31 16:57:24 2014 +0200

    Added sys/uio.h

commit a5f2bb1705310c987a7cb9d50ebc8bf95f28d9e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 31 16:26:23 2014 +0200

    Added LIBGNUTLS_CFLAGS to ocserv's CFLAGS

commit 75495488740fa1902d342e50aeaa13d41c6d3915
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 31 16:06:23 2014 +0200

    doc update

commit f65e771e548d527a221aa24ff02ef693bc279e26
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 31 16:01:37 2014 +0200

    more verbose log message

commit 4aa423f936f9b6f9fd1d3c64cdf75e2a450f6639
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 30 17:15:08 2014 +0200

    notify the peer when disabling the DTLS channel with a close alert.

commit df6653229ad6397ae602444fa1da2718b3058ba3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 30 15:02:55 2014 +0200

    more cleanups in MTU calculation

commit a4d85dee43c595b57eb47231102d095866667a6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 30 14:59:30 2014 +0200

    removed cast as it is not available on every readline version.

commit 987284a947a1bb974d6c795576267183b767d2d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 27 14:06:02 2014 +0100

    doc update

commit 1b711a1f7c7448c33e9cd022b2ba467f60dffde4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 27 14:04:58 2014 +0100

    Use the Base-MTU for MTU calculations.

commit 1278074b0c627bc0da6bbf6b00234e6317cd7d7d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 25 14:43:57 2014 +0100

    removed unused functions

commit 188b30e26406c474c82771516f4cc56b4e516c77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 25 14:40:39 2014 +0100

    doc update

commit 0b9c6ff633e652ca2940674017610c2df1a063e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 25 13:49:11 2014 +0100

    Added diagram with authentication state machine.

commit 35c46d05c5d02fc847771400c87cefd4c1f0895e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 25 11:25:42 2014 +0100

    Do not set the output-buffer in the default configuration.

commit 1900a23e9760fe3fc78ffee46a9374f92087f835
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 24 16:03:54 2014 +0100

    updated comment

commit 214ae42cd3cfc9a844787e0cea8ff6fa483a8931
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 24 13:22:22 2014 +0100

    The IP don't fragment bit is only set if try-mtu-discovery is true.

commit dd11a069515293d0b7bbfb460e3ec4ce16aeeb05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 23 18:26:23 2014 +0100

    better naming of variables.

commit 4c4650ea172a5030d3b63d0e2db2b5bc4dd98484
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 20 22:54:55 2014 +0100

    dropped support for Salsa20 and UMAC.
    
    They are not supported by openconnect and the latest IETF
    drafts use Chacha20 with poly1305.

commit 1879207f37836b50736865a2211b1c3141fa0d47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 20 22:51:30 2014 +0100

    No longer send IPv6 information to CISCO clients that may not be able to handle it.
    
    Now IPv6 information is only forwarded if the client is openconnect, or if
    the client is unknown and has advertised full IPv6 support.

commit 6eccb69c231e4ecdac9b109387e91da11ede78dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 20 22:29:50 2014 +0100

    doc update

commit 9ff9105df7211e54359fb8600bd26ff0c67beedc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 20 22:26:45 2014 +0100

    doc update

commit cb11549e44f3e3ea69dffc38c3e2b1429e223795
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 20 14:54:45 2014 +0100

    doc update

commit 6f875650c9e6cb3c5f149e42698d71b9c98116d3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 20 07:29:17 2014 +0100

    when printing link-local addresses do not include the zone info.

commit 1324660760ac6e6b5a649d329dac029ca8f783f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 19 15:15:16 2014 +0100

    doc update

commit 9d98b07e46d3ec3e8a1edd957c008121e7b10e4b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 19 15:11:01 2014 +0100

    fixed formatting of news

commit 533e00ae6f5c876d2db71b8e4956af5c91f64598
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 13 21:50:24 2014 +0100

    doc update

commit 1d611d793de2768553fd543d09ffed899fc38793
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 13 21:38:25 2014 +0100

    doc update

commit 9f1f6a8e602b799a0a3e4fd9601ce9d7ffac9cd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 11 13:19:30 2014 +0100

    doc update

commit 4a2a80dc7d6c00a078f428d53537d77a6b67699b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 11 13:19:06 2014 +0100

    Updated the included http-parser

commit 8a1ab0e32dd55e4bb0d36c74f811693066ee388b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 10 19:24:31 2014 +0100

    Print a compact version of the DTLS ciphersuite.

commit 35c31bc0b7c245f4d3b188cc792949b75601c34a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 7 15:21:35 2014 +0100

    Allow TUN_MTU command only in authenticated state

commit 6028e5d81d0bb26aaca6b0d83204432cc467eb54
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 7 15:16:52 2014 +0100

    simplified handle_auth_res()

commit f55185b39c3b0273847460b9a33a2f5a27d16459
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 9 21:42:00 2014 +0100

    doc update

commit 4f9e06d16d4eb649433f15d3d4152b18733df187
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 9 21:39:59 2014 +0100

    Do not block in TLS and DTLS reads
    
    This prevents an issue where a client disconnects but the server
    is blocked on a DTLS read without being able to detect the
    disconnection.

commit a0723ccee9ecb9a733398d4944998794c57e4dc3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 9 21:37:33 2014 +0100

    check return value of tls_send()

commit 6c331db70aa8baad3e43057b370862b7d4c06fd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 9 21:31:44 2014 +0100

    move bytes2human in occtl.c to allow compilation without libnl

commit 28e64c4eec771c6a916ad37bd77406435e6b5606
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 2 19:36:50 2014 +0100

    doc update

commit e72414459a2d79fd3a5e9603da77dadd4d8e1300
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 2 13:24:44 2014 +0100

    provide the bandwidth limit through d-bus

commit 949fbacf32a3552485842005cb483589b3453a1e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 1 17:38:22 2014 +0100

    doc update

commit a0ba9982223cea884e2670ef2e555d91134482b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 1 15:27:34 2014 +0100

    occtl will print the user's dns, nbns, routes, and iroutes.

commit 20cc945383f19cd98191c10ba58acc8e596dc38d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 1 14:23:22 2014 +0100

    Warn when setting a default route the wrong way.

commit 65f8be6eb6d31ecac4d6846200f11bc6cb1c123d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 26 23:10:07 2014 +0100

    bumped version

commit cbc827ae99437b3df867a926047cc4c98081692f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 24 21:22:18 2014 +0100

    doc update

commit c75dad511d94aa7968fbd89ef6b2669a49edea29
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 24 21:21:47 2014 +0100

    doc update

commit 1a996e5ebe428353711345231f2642b86ef744ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 24 19:15:32 2014 +0100

    doc update

commit 66d66ba1c528008b69d859bc4cdf86993d5dde39
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 24 19:13:05 2014 +0100

    Added options to explicitly disable checking for certain libraries

commit 194462a6004c9dea01ade65e6ef74fa86f118221
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 23 11:50:01 2014 +0100

    use remove_proc() instead of user_disconnected() when killing children.

commit 3dfeab017412d680cc784b70d47e5e18bd84979d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 12:54:49 2014 +0100

    doc update

commit de1f63605bdfcecda95c8fa3f02b5720b7b55d50
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 12:54:40 2014 +0100

    updated sample

commit 95a0b6abc3945176e47a3ab35a79481b997cdc41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 12:51:34 2014 +0100

    Added the rekey-method config option.

commit 25afdb5949165b39ee380056719535bc5bd8133e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 22 10:00:32 2014 +0100

    use RND_RANDOM for the generation of SID

commit 5ac591a37edc54842f529d6f5479bdb4cc575b92
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 19:42:21 2014 +0100

    doc update

commit 7b73aee479679eb415ddea84a4bf93c253a95aca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 19:39:37 2014 +0100

    when mobile-dpd and mobile-idle-timeout are not set, they get values from their non-mobile counterpart.

commit c47266ede063870d82745187d472e38a96a7415e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 18:56:40 2014 +0100

    doc update

commit 6ee0899e22498698bd66230e822d783c540da45a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 18:54:50 2014 +0100

    Added the mobile-idle-timeout config option.

commit b550489c886458f046361c4caff8958281c351f4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 18:39:44 2014 +0100

    better messages from pam authentication module

commit d361bd608d1f146460fe83f43ea0a67ef929ff6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 18:36:58 2014 +0100

    only print an authentication failure message if the maximum tries have been reached

commit a609cf58b796a4368d7c65ee02a84fdb58baf8c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 18:32:10 2014 +0100

    send disconnect packet instead of server terminate when disconnecting a user.

commit 367976ca34fe1d34bccbdc1f3be102a1a075b576
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 17:59:03 2014 +0100

    Implemented Idle timeout.
    
    When set, a client that does not have any non-control traffic
    for that period is getting disconnected.

commit 2399aafe3518f3007b58624345b36bce949c2098
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 13:11:38 2014 +0100

    modified priorities

commit bc10b972078d8d1c466cffeee293e8b74a0e0f7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 18 09:04:21 2014 +0100

    added debug message in remove_proc

commit c5c38e92bdc158e22294752a619309906e322c73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 22:40:19 2014 +0100

    Do not allow DPD to be disabled.
    
    Doing so would prevent the server from dropping inactive
    connections. If the dpd values are not configured, set some
    reasonable defaults.

commit faf0a7133bf48dfab99bfc1dba82aaffb049cfcf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 22:02:01 2014 +0100

    doc update

commit 2bd6f5a6a124fbbc81312ba0b07d69f5d202b77c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 22:00:47 2014 +0100

    Added the mobile-dpd configuration option.
    
    This option allows setting a different DPD value for
    mobile clients to allow them going to sleep for longer time.

commit 821f56f5e1d75437adc0658dbf35654ae5e7670f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 20:21:08 2014 +0100

    doc update

commit be332174f819a54bf8812950804d015374fa72d9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 20:19:37 2014 +0100

    Simplified debugging by allowing multiple levels.
    
    'ocserv -d' now accepts a numeric option from 0 (no debugging) to 9
    (maximum verbosity).

commit 1eab85479c37ace5016bd4606d14960a077a2b0f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 15:53:34 2014 +0100

    better log names.

commit 4cf84152e56b97c8fd8aa99a0d8b5a52e5a266ef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 15:41:59 2014 +0100

    doc update

commit 882c37b17a12b2763da8bde6574508958d6f06df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 15:36:33 2014 +0100

    Added profile.xml to the distributed files

commit 8c2acab693a05bd6f86723af589637a7ac716893
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 15:25:07 2014 +0100

    Added 'See Also' section in occtl.8

commit f85ee029a8f153df77551637fe4e8d55927945aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 17 08:43:28 2014 +0100

    doc update

commit 3cf1d409dbe2684fa9460729cadc8d0ae15f9237
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 22:48:15 2014 +0100

    better wording

commit 991455065fe38e552fd5ebd03ac79a5373cfdea0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 22:12:47 2014 +0100

    simplified handling of CISCO reconnecting clients.
    
    Instead of having a client use the initial SID over and over,
    re-set the SID cookie, during authentication when needed. That
    way we avoid having expensive checks to ensure uniqueness of SID.

commit 9d3453877fa32f05ff715820d3bcbf467d4f9a2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 21:31:32 2014 +0100

    eliminated double [m]

commit 247ac9e68307ab514b8bf4b24ceff7f6615b408a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 19:25:15 2014 +0100

    Indicate the main process in message logging, to distinguish from worker messages.

commit d339be261ef25e2243cc2e913bc7a2f3789fdc44
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 19:19:25 2014 +0100

    Better messages in password asking.

commit 24403dddcba5d02d6effc1b811157848024bbc7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 19:12:54 2014 +0100

    doc update

commit fd7f3e65ce9658ce7144af497544f76b964cf1cd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 19:10:49 2014 +0100

    Allow a number of retries in plain password authentication.

commit 83f3cbac19aa49c415e1f3b8174eaef66fd5eba6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 13:59:02 2014 +0100

    set output buffer based on DTLS MTU, and ensure a minimum value

commit 936fefd79d77b0c5765eea0074d7ab9c85c02353
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 10:13:06 2014 +0100

    distribute test-stress

commit 0f0683b7fdfef85c6b870489133f42141fdf319a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 09:34:20 2014 +0100

    released 0.3.1

commit 17f3fb85187ba9b7c21062a436b814803d86e0b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 16 08:39:21 2014 +0100

    check for auth context presence when locating a previous session

commit a329982c972c536ba0cb70c659cecb13cd00abd9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 21:08:00 2014 +0100

    removed the periodic printing of TCP MSS

commit 55de932cdb93f730947aab22f1f16c2dd3b5b3b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 15:25:00 2014 +0100

    corrected typo

commit ac5a9062c6d48cbedd85a2b830ad99e445ddaaaa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 15:19:13 2014 +0100

    added example of IPv6 route

commit 0faee9fbbfcf38078fc102b4f9a1c48180096851
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 15:16:19 2014 +0100

    print errors when an invalid IPv6 prefix is found.

commit 489da30c93638edb8393f240ace03b05030c2b84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 13:53:21 2014 +0100

    doc update

commit 3b9971b7e87ee0571f5008acd5f9966939566d32
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 13:51:03 2014 +0100

    Added support for the "new" type of IP6 support in AnyConnect.
    
    If the client sends "X-CSTP-Full-IPv6-Capability: true", then we
    use the headers:
         X-CSTP-Address-IP6: 2001:db8:1000:1000::1/64
         X-CSTP-Split-Include-IP6: 2001:db8:1000:1001::/64
         X-CSTP-Split-Include-IP6: 2001:db8:1000:1002::/64
    
    (see corresponding openconnect change)

commit 4e8d7e7a5800375fcbeaeda8b0919af30d235893
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 13:44:05 2014 +0100

    corrected typo

commit c8986508c07b9c19083e8d7fc1893b0d61e73903
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 09:58:07 2014 +0100

    doc update

commit 8ffca1fcd97295cd681da77ae755a91de3e70653
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 09:57:52 2014 +0100

    eliminate small leak

commit 828814862b167b0661bce5ab513f0272af09c579
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 15 09:38:45 2014 +0100

    Added stress test

commit dd3bd9dcdd3c395c5eedd2be8d910f731ecb6f8b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 14 21:34:02 2014 +0100

    Do not enforce safe negotiation on the main TLS channel.
    
    This is only set when in CISCO compatibility mode, as CISCO clients
    come from the past.

commit 452ff7973aab863ebb29ad8bf20187537faf565e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 14 12:47:22 2014 +0100

    simplified type usage

commit ea39d512dce8dfeb9336c0b3af64ca67a72a9aa5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 14 12:42:20 2014 +0100

    switch to strtok_r() and other small fixes.

commit af6714605ba6096782a6329cbb59e9571e66e554
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 14 10:37:35 2014 +0100

    when a user is rejected due to multiple connections set an appropriate status.

commit f8f30bffa460d02e5939cca7a2c8d0602052da23
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 12 11:07:14 2014 +0100

    set a reasonable default rekey time

commit 6d8841cae77422ff65b741952a0b800ce2e101c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 12 11:04:51 2014 +0100

    sample.conf update

commit c8a9ab3191dbb11850eb8fc3bb1917dfad1bcc5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 12 11:04:08 2014 +0100

    removed exclamation mark

commit 22ffb526ddfcf2432cf6d10b1d19bab5564b01b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 12 10:48:06 2014 +0100

    DTLS rekey time and method was aligned with CSTP.

commit 001fd57c719e55c1af6566df6e2457a6ef26fc58
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 11 16:18:08 2014 +0100

    Allow rehandshakes on the DTLS channel.

commit 8f559e89e54ea097ac6cd474a238a23072525e08
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 11 15:48:55 2014 +0100

    doc update

commit c92925e7277fc8d492ce879c1981c4ac60dd8b87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 11 15:47:20 2014 +0100

    Rekey time is now configurable and can be disabled.

commit fa4b24ddac0ee54e133d0ec20bc2569a81145655
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 11 15:30:25 2014 +0100

    removed unused label

commit 266b06f7d2951251ccf35721b10226291936818c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 10 09:45:05 2014 +0100

    when the tcp channel is terminated attempt to close the DTLS channel as well.

commit 295a87b8ab1090f9871088e93934905b0d7787c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 2 12:34:30 2014 +0100

    bumped version

commit 638228e284cc6c8eaf7daee68a0918987134d558
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 5 09:56:06 2014 +0100

    Use brackets in DEL macro

commit eb5f78c748eb6f959bbe648609ff75c528431160
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 2 09:45:34 2014 +0100

    seccomp will make the forbidden system calls to return an error.

commit cfc10eec817d4605035d79abb3119cc450c328a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 2 09:44:09 2014 +0100

    reduced the number of allowed ioctl() to the ones used.

commit 5bf791bdfa4e252541b9558b5aaaa46888c3db02
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 19:00:13 2014 +0100

    doc update

commit 91ceefb1f315d007aed49b4e1a64496ca64fd007
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 18:59:50 2014 +0100

    Added the split-dns config option.

commit 311d5ddd20d51ed1bea45a2dcc6f10cdcce770b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 18:55:27 2014 +0100

    Added configuration option to send custom headers to client.

commit 0ec67882c05e7a0915365615034650168c294f57
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 14:42:08 2014 +0100

    Added support for multiple DNS and NBNS servers.
    
    This patch also combines ipv4-dns and ipv6-dns options
    that are now handled as aliases to dns.
    
    A side-effect of this patch is that the local keyword is no
    longer supported.

commit 5c49678568894c49db303d2e52cd0d7bc807ee62
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 10:27:49 2014 +0100

    doc update

commit 51c0e1bee165240caab54924f23c7d4018567480
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 10:25:41 2014 +0100

    Added untested code to set an IPv6 on FreeBSD.

commit 97c2a4428fd4978fb53d7656c29b39ff3c7a2592
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 09:57:18 2014 +0100

    separated linux-specific code to allow easier portability fixes.

commit 16f731bd2eda5ee79090fcce5a1ff9d938904cc8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 09:49:10 2014 +0100

    on systems without IPv6 support remove the IPv6 lease.

commit ea02f38a048f7d0797d4c3ea75b5303445abbeec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 09:24:52 2014 +0100

    if the loading of default config in the new location fails, try the old default file.

commit a22b846ece3ea92b156e00e74554076b6bb19795
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 1 09:12:35 2014 +0100

    use linux/types.h for __u32

commit 28e5d62f3f353c0760fcec11f31c3d8da37e76e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 31 20:47:20 2014 +0100

    The worker process receives the client's IPs from the main process.
    
    That eliminates the need to read the IP address from the tun device
    (which can be quite tricky to implement in a clean portable way).

commit f715cf08f0825dd9fce7224bb1529b5b8c5f0b2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 31 13:28:58 2014 +0100

    doc update

commit 798eb38eb09c081696a2eedae9963a8c76e4073e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 31 13:27:58 2014 +0100

    remove socket and pid files prior to waiting for kill.

commit a51de1cb0cd4894ec3ea44702cca612673763b1d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 22:15:42 2014 +0100

    Get real-time netlink information rather than using the cache.

commit 4ce836587301dae3d589f8cae1cb42cadf3c0f7c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 20:51:00 2014 +0100

    updated netlink handling.

commit ab7a5623adcce6b29c6e4911c228a6febfc53fca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 20:03:13 2014 +0100

    better error messages

commit 4dfa0e560b117438d8361d18e9f44c5985db07e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 19:25:38 2014 +0100

    doc update

commit 313f1b67fd009ad6ecc1ec6f5d077abe2f4ce707
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 19:22:02 2014 +0100

    When not reading from a tty use getline().

commit aeb0b4022104c303c9136d5d9c6a46df472ec095
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 19:13:23 2014 +0100

    use etc/ocserv as config directory

commit 2254ba554bc7ce1e4725db79d32678fc87bcd00c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 19:12:02 2014 +0100

    Set a default password file if one is not specified in ocpasswd.

commit 44cd152f02ebb60d84c1761a2d231b4ab4bb6db4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 14:05:18 2014 +0100

    doc update

commit 6f25bf1889b281241f694b6978cf6643403b9d34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 14:01:54 2014 +0100

    ensure that our MTU discovery will not try an MTU smaller than the minimum.

commit 4a1f5a116269d985f47368bb88db24c4fb0435c9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 13:56:45 2014 +0100

    doc update

commit 32d608a1695db0af91c9e14b78552f5fd2de0bc3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 13:56:25 2014 +0100

    doc update

commit 524e90351fd9335fd02e9188c31810e13b1ee3dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 10:16:06 2014 +0100

    Take into account peer's MTU values after considering the overhead.

commit 7129b7b316e8ef8388e03c49e6c521d71d813705
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 09:43:18 2014 +0100

    change default ipv6 to link-local

commit f6244539b9730d1dac49fc78ab357c9a9aae8a52
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 04:54:26 2014 +0100

    set IFF_RUNNING and fail if tun interfaces cannot be brought up.

commit 326bf7143a56c9e65abf6394bf0b32dc359c9930
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 04:53:00 2014 +0100

    'guess' DST address in IPv6 links

commit 83b2d75a2497226fedbe14236f6f31cebd8dcb71
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 03:58:56 2014 +0100

    Corrected auto-detection of the address.

commit b80ac284a2e17af230437d9a0a0532be519fb96f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 03:41:25 2014 +0100

    simpler handling of IPv6 assignment

commit 2409fd3abe1553a759a503361e08551055531d73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 03:37:31 2014 +0100

    Revert "ping a single host in IPv6"
    
    This reverts commit b7a4a098a30390f2549be66deda513b6e2c05875.

commit 040d552f5e9ba9c15d06e5e88cf8d3e98b081392
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 03:37:23 2014 +0100

    Revert "Lease a single IPv6."
    
    This reverts commit a3889c9053607bccde126e34bcef381c64e6e412.

commit ddfdd019c872b489b9fdc7f6a70bccd2e527b8ba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 30 03:37:12 2014 +0100

    Revert "The D-BUS protocol transfers only a single IPv6."
    
    This reverts commit 1f08ebc70ad54ceadd565e03704db2d76c7b9278.

commit 1f08ebc70ad54ceadd565e03704db2d76c7b9278
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 18:42:22 2014 +0100

    The D-BUS protocol transfers only a single IPv6.

commit a3889c9053607bccde126e34bcef381c64e6e412
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 18:36:03 2014 +0100

    Lease a single IPv6.

commit b7a4a098a30390f2549be66deda513b6e2c05875
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 18:35:16 2014 +0100

    ping a single host in IPv6

commit ec9ee54eca7fa3c405e8f2f1077db2cad06e27c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 18:29:35 2014 +0100

    Set both IPv4 and IPv6 addresses in Linux.

commit fe927da089120f5e0c5780d4183d61f030cc0bc5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 18:27:57 2014 +0100

    corrected reading of IP addresses.

commit 6abcbcedd3152ebede81bc517b74a7ee5fb23462
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 17:00:21 2014 +0100

    Use getifaddrs() to obtain the IPs of the tun device.
    
    This is a waste of resources but it seems there is no other easy
    way to obtain to IPv6 address of a tun device.

commit 555994ff473f9dfb66a14548261b9041637e86ad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 16:53:22 2014 +0100

    use ffff instead of FFFF for IPv6 masks

commit 8a29216228bacddb247ce0f7593a621b66cdbf1c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 15:13:33 2014 +0100

    doc update

commit b5b2d5b20a912804917818c7a96fe6e88b9a6fd0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 29 14:31:18 2014 +0100

    Cleanups in IPv6 handling.

commit 885f394f95efb95fa0b7111fd316f6bad89c2113
Author: Thomas Glanzmann <thomas@glanzmann.de>
Date:   Wed Jan 29 11:54:35 2014 +0100

    Allow Remote Desktop Users to establish AnyConnect connections
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

commit c814f5bb5960318ab54086c1757b8097001f91ed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 18:13:34 2014 +0100

    reduced log level

commit 41e8a949b3d24c9a68c1b134c8dc7c18d2f725bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 18:04:38 2014 +0100

    only install DBUS and systemd files if they don't exist.

commit ec10295d9c5bcd6864a2f0b5839201c8145aa575
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 18:01:29 2014 +0100

    Added two versions of systemd socket files, a standalone and a socket activate.
    
    From the standalone is installed by default.

commit 22dfa568a09a68a2b92a48e28291a45323f4a31c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 17:56:37 2014 +0100

    No need to install the dbus service file.

commit 05272d0093075c688925796b6f8292f490ea0fe0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 10:09:58 2014 +0100

    doc update

commit 3477f9aa5458626e8d6721c653973b8ad151d787
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 10:08:18 2014 +0100

    safer decoding of cookies.

commit ed43472ac9ac9f15df267d7574c3148be24b4c69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 08:35:18 2014 +0100

    print info when a UDP connection is rejected due to time.

commit be24d97cb7664d159ef1619d486bb416827782c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 28 08:13:10 2014 +0100

    doc update

commit 0d72dede2339e5e651046b53596eecd94b8d1ee8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 27 23:01:57 2014 +0100

    print message when a SID cannot be decoded.

commit 3c331370cedc9987e7e065d417d4832bb495c8f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 26 21:32:37 2014 +0100

    IP -> Remote IP

commit 85afe45174b66180898bf0660045cbd012f2f993
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 25 21:42:02 2014 +0100

    only ask to verify password in interactive mode

commit 6f1bd66743440cad70ab73c9444dd861afbc8f3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 24 18:25:05 2014 +0100

    doc update

commit 2045e6329bfbbf276aa98b4f3d68ad3f69f32e4c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 24 18:00:52 2014 +0100

    updated config files

commit e69833604764230733a929503bd433ac25675847
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 24 17:58:37 2014 +0100

    removed pre0

commit c15a3bb1251e83c32bf5e52b21de21d465d372df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 22 22:30:02 2014 +0100

    indented file

commit c1312145d43911cf651e302562ce138d58ac63ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 22 22:29:19 2014 +0100

    Added support for getpeereid

commit 28a20263635f177c01ba227fdf007983ca1a5310
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 21 21:59:38 2014 +0100

    updated seccomp rules.

commit f9a1dd94ae942da2a4e9bd6a1a6da67e79264881
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 21 18:00:21 2014 +0100

    Do not rehandshake on the DTLS channel.

commit fa1bbd20f2d1f5cd51739425d99120182976db73
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 21 17:59:26 2014 +0100

    better detect original readline

commit 5f3a6279d910e814bee4307a5b7f9b705632f3f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 21 17:29:45 2014 +0100

    protect the server from multiple rehandshakes.

commit d8162d3c0b978aeab21084b32d90be768485737e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 21 17:24:29 2014 +0100

    when the client requests a rehandshake accept there request.

commit 6a9600aa61292a9f4f2634a1fa227b84e9ce1645
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 21 14:34:35 2014 +0100

    When libreadline isn't available try editline.

commit 50656ef49f78f2aeae2e5583cfab0c80f07d2f44
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 20 23:33:40 2014 +0100

    better checking for readline

commit d4272b8e72e31052886436ec87d7976fb4c494ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 20 23:26:56 2014 +0100

    Changes to avoid the embedded protobuf files being included when not needed.

commit 30d656ad92fd9ab9f948fe3b23918cd9b48a3aa8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 20 22:02:09 2014 +0100

    code cleanup

commit b66e977a6d72f18b3407ec818b88e93bbb4dfadf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 20 19:18:07 2014 +0100

    doc update

commit 3473bf170615a6aeb8ebc183a601c76378adbb18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 20 18:54:01 2014 +0100

    do not duplicate technical info

commit 8884cfc940474990a107eb3fd93afa1731d1c53f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 20 11:17:04 2014 +0100

    protocolbuf-c was made an optional dependency.

commit 0695e050785cdd8fa163b9314d16503f3a0ecd58
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 12:50:02 2014 +0100

    more reasonable line wrapping

commit 268ba7a634a3a2bc03f68a6de046d722d77c44cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 12:40:47 2014 +0100

    better order of options

commit 3ad1d38c8c35533bbe855ed58bc2d4e3b7161e4c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 12:17:14 2014 +0100

    Added gnulib's missing files

commit b500de2ec004d1956cca143cb3e6f43117a1656c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 11:43:10 2014 +0100

    simplified ciphersuite selection method and select ciphers based on server's desire.

commit 404d831c3525aecd3159ee6eee85a3289759c506
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:49:46 2014 +0100

    better definition names.

commit 2b743f58987c07d114723c8091af6f1f5ebb2a21
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:34:27 2014 +0100

    increased minimum maintainance time, and decreased log level of maintainance message.

commit d665872468fe41d0ec9bf17d6e5aaf16a2851084
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:30:48 2014 +0100

    updated gnulib

commit 3893ee621363aea807283504ed8b16a148eb0288
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:30:36 2014 +0100

    on unknown messages print the number of the message when cmd_request_to_str() is used.

commit e859125bb518c80ffa4ce632d0e7d3a120fcbe19
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:25:14 2014 +0100

    evened out the level of some debug messages.

commit 0ed6332e0965413c7e1e02057c4b370ea960e007
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:21:48 2014 +0100

    mslog_hex() will allow printing values encoded in base64.

commit 1b769d38d93f40019c13872347f04345f4f81079
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:16:08 2014 +0100

    better debug messge

commit 9d2b10de228a50b8dd1bafbfa448866babf12c6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 09:12:48 2014 +0100

    Use base64 to encode Cookies. That reduces the size of the cookie.

commit 41862db757d517f3b8383b4a759b96d47aa7ab27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 08:42:08 2014 +0100

    doc update

commit baf12348d4be6f5d4b63094652684866155a7ee1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 04:14:56 2014 +0100

    Added proc_st status PS_AUTH_FAILED to prevent users that failed authentication to leave a zombie proc_st.

commit add57c5d32e27abfc949ccad03e60c781e712752
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 04:10:42 2014 +0100

    use pselect() in worker process as well.

commit b611537683b7b7b248a7da471e7c4510f642237d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 04:02:31 2014 +0100

    better message when cannot reach server.

commit 1ac47546f743e801dded8585aae29a273958ad56
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 04:00:57 2014 +0100

    main-ctl-handler.c
    
    when disconnecting IDs and ID==-1 then continue looping until all zombies have been cleaned up.

commit 0f7e59a4f50575a0f2981c5796325d15a7a4b045
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 04:00:16 2014 +0100

    list users -> show users

commit f174f655db4740d83598908ce2c355f65955045f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 04:00:02 2014 +0100

    remove zombie proc_st when its state has been 'stolen'

commit ef647c0190d7ac2c5b2f44a2b4d8d2974605e63c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 03:43:30 2014 +0100

    reduce maintainance time to remove zombie processes sooner.

commit 79b6f226afbf59b65aa241b32e98c598f8cbc4b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 03:43:03 2014 +0100

    when taking the state of a proc_st set its status to zombie.

commit 3105398cc041017f86596c04e70a1134d6869cd5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 03:41:56 2014 +0100

    do not give information on zombie processes

commit 445fcb666b8f666f8d23d641b6631ce7f8632eea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 03:41:35 2014 +0100

    info printing updates

commit a88f30f3c990db203307c7e1dbbca2bc1d719aff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 03:21:25 2014 +0100

    updated copyright date

commit d83d71bf7ac059c0b61c7fb0ac69816975db67ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 03:14:43 2014 +0100

    updated authors

commit b9fe6b6263b2df8d3973f6212501854a93635d20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 19 02:59:04 2014 +0100

    instead of using the TLS session ID as session identifier prior to authentication use the webvpncontext cookie.

commit 90a9286b88144ecc1460cec33806ce5a8e0b32ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 16:06:33 2014 +0100

    send auth reply failure when needed.

commit ef537d6846fabcbcf628285692be38d8d5dd35dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 15:08:51 2014 +0100

    doc update

commit 7145db0d54152677a6dc0e0a9d2f9906bbc7309a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 11:39:14 2014 +0100

    Added sketch of authentication protocol between main and worker.

commit b1af6f2829f612d5593412500107cffbaa1850de
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 10:24:47 2014 +0100

    enabling cisco-client-compat allows 'stealing' of processes.
    
    This change puts a proc_st that its client has terminated to a "zombie"
    state. That state will allow a client that connects later using the
    same TLS session ID to reclaim it. That way clients that try to authenticate
    by sending their credentials in different sessions can still authenticate with
    ocserv. That however puts more trust to worker processes (as the main
    process has no way of telling whether a TLS session is certainly
    resumed).

commit d4545576493e364a87acb1dcb33d43de7ee8d84c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 09:14:44 2014 +0100

    replace always-require-cert with cisco-client-compat.

commit bee6a99450df583b868e6b2a21aea4fbfff72c45
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 11:13:29 2014 +0100

    added missing dependency

commit fdee40d276abc1d431fb30bd6b374c8119950cad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 18 11:08:15 2014 +0100

    documented all dependencies

commit 6c078f2397722cb06b1d4d885e0ab3b4d87af8c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 14 17:36:40 2014 +0100

    configure info update

commit 6eaa81cf738a0683a65aad4cc59e04533f2ce58c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 14 17:31:19 2014 +0100

    corrected prototype

commit e43840db05d4dd6f0b82eaee1527d5d85f805e76
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 14 10:34:34 2014 +0100

    send empty array instead of nothing when a user or ID aren't found.

commit 8f9cef966540cc7cf1c10d66ad6e58c723283533
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 14 10:34:09 2014 +0100

    print correct error when a user or ID are not found

commit 766ab8ee219a64c2aad222479581c3351153ffbc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 13 15:27:35 2014 +0100

    Added function to print network interface statistics.

commit 68bd5af105bf519c5c128dc06c3614697c6426e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 14 07:39:53 2014 +0100

    free the output of gnutls_session_get_desc

commit 81c20b923708c8d35f7aeadff053ad199f608e29
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 13 18:32:54 2014 +0100

    export ID env variable

commit 2e068ad0b9c15877b49bcbeda85c5ef5fb33184c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 18:28:51 2014 +0100

    more files to ignore

commit cc6473a92a301ece1b24f40f8ca088164225bbe6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 18:24:13 2014 +0100

    print file name instead of function name

commit 823190475b3850864214f2e2cc9ef84ed299ba51
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 18:23:29 2014 +0100

    print textual name of messages exchanged.

commit 39572b3d4842a144a0e511fabdb5d83678f705fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 14:35:58 2014 +0100

    Store User-Agent information and send to occtl.

commit b8a4fdf530cd42232833bc9a87dfcdd0209e9339
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 14:19:10 2014 +0100

    unset needs_compact_auth if client changes its mind.

commit a08a03d70eaf1083eea4fbba54a5b58d97cef7e3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 14:09:07 2014 +0100

    use a common version message.

commit 4a8513b393b33eb1eb1ddc1d500cabaf20fe729e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 14:08:13 2014 +0100

    use config-auth header in success message

commit 4fe59287f5e4c7d1095705ae9b55651ca0d75930
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 14:05:39 2014 +0100

    removed vpn-client-pkg-version which didn't seem to affect anything.

commit 6fea92a9610c2a52e503ef41abb3923967197aa4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 12:40:58 2014 +0100

    combined CSCOT URLs

commit 2e2310187ddce390f88e8590cf2a838f1434a548
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 11:59:45 2014 +0100

    Replaced the username cookie with a compact auth option.
    
    That option performs authentication of username, password in
    a single go for clients that request Connection: Close.

commit 151f10759130b02aacfea9125c8d21e2641f0eb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 11:04:42 2014 +0100

    use config-auth XML format.

commit eb09efb6d70a9c36034c94b39a9a5a4a4e0c031a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 10:23:39 2014 +0100

    corrected size calculation for CONFIG_MSG

commit 3c82dc77878657e71246eceb1a43441fd24846cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 10:19:42 2014 +0100

    report the file name plus line instead of function name.

commit 3d0a69e5f646491722c27a2f44e97bf677ed01ba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 10:16:10 2014 +0100

    Indicate properly the status of TLS authentication when a client has reconnected.

commit 089e8a7c30bf9ff91134923b1c2d4d3444d6153e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 10:01:48 2014 +0100

    updated copyrights

commit eba1c9255bf9554fd9ac44125a27fae0062d8abc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 12 09:41:50 2014 +0100

    Allow a client to reconnect and continue authentication.
    
    That allows clients like CISCO anyconnect to resume authentication
    in a different session by keeping the username in a cookie. That
    works only when a single password is used.

commit 1aee463ab4f474a98d15ffde737e959da7bdef15
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 23:52:15 2014 +0100

    Advertize a very low version of client.

commit a545062cec5226413226e5e97a6d31f21ba0415b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 23:40:49 2014 +0100

    stricter check of acceptable states.

commit 50d63259b81e836d735fda858416008ebe102f60
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 23:30:49 2014 +0100

    more debug messages and be more strict when cannot read the password.

commit 0024a9d4a996b876d6604df02255bd4df92f8176
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 23:19:40 2014 +0100

    Added more debugging messages.

commit 2a9d17a7bfb4bf74897eb13e7a6038095eee7eeb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 22:23:10 2014 +0100

    increased maximum name size of DTLS cipher and other occtl cleanups.

commit 043355799d57e5e97ec3c79b8f94813e6a3c8202
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 22:12:28 2014 +0100

    Added human_addr2() which will display port number only when requested.

commit e5466c0688a75c85248579a6ab4cd30338310929
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 22:08:20 2014 +0100

    reduced space for IPs

commit a66a620f58972836306adec9cef99556c2196820
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 22:03:47 2014 +0100

    corrected reporting of VPN IP addresses.

commit 5ba6deb66f9df6dc8fd3a281885c3f0af97142c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 21:58:27 2014 +0100

    better reporting of ciphersuite and group name.

commit 249734c1f76f2ad50ce8a1b16c848dad4c0e0738
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 21:58:13 2014 +0100

    corrected default pager behavior

commit fd2d640e0ad955979fc381d1f59209c3ec6269f2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 21:54:20 2014 +0100

    increased sizes for ciphersuite name, and decreased maximum size for the DTLS ciphersuite (as we use openssl's short names)

commit a5ae35a2792f8cf3952f3e457447a1c9383be7e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 21:52:14 2014 +0100

    removed dbus_message_iter_has_next() as it behaves differently on different versions.

commit 77ecb0461b761ec4824fa64bc8c840eb1e766a81
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 21:46:10 2014 +0100

    more debugging info

commit 770004032e80964c73ac72518b4c72d66ffa65ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 21:09:59 2014 +0100

    ignore sigpipe and print (none) when no group is available.

commit 3ccd12673a0fcea09114bcfc4652813b2c7a1b36
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 20:53:40 2014 +0100

    Added configure option to specify the default pager for occtl.

commit ea45e710d0c7b64e4ea15c03c8657e81e70174a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 20:37:46 2014 +0100

    Better error checking and cleaned up support for scripts.

commit d6060587e2ca27c2b88cf247a78ad67c2fb9a6b0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 15:43:02 2014 +0100

    make sure that recvmsg() will continue after signal

commit d10873f2ffc6fa99917ae4d5badebfd32224c38d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 15:29:00 2014 +0100

    use TUNSETPERSIST

commit 4d09a8612de7661be1267e7446988f99560ec1c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 14:49:27 2014 +0100

    systemd file installation is optional

commit 6b6adae25e58811cadb43df4bbd8e92c585cc621
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 14:46:34 2014 +0100

    corrected args file generation

commit 40ac1f272798888ddda646e122d38f1d96b8c506
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 14:45:08 2014 +0100

    combined EXTRA_DIST

commit 6d3f5b791e6be08855e12ffcdeb86f8c8911b1a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 14:42:23 2014 +0100

    use pselect only when available.

commit 43f7001480e9cb8975500601c111034a6b02478c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 14:36:08 2014 +0100

    added missing file

commit 0ddedc5818dd6632d639b6f8a1743b895817eaa9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 13:37:08 2014 +0100

    Added SEE ALSO man section.

commit 485c83c951f0455be8f0cdf13f16b6a879f7126b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 13:30:15 2014 +0100

    updated copyright notices

commit 0eef3bd5be58246249a0d7417fe893f7247d43d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 13:27:53 2014 +0100

    Added occtl.8

commit 8295868e85d08799c707566c1d91a84ac10d7c80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 13:18:25 2014 +0100

    removed CISCO example policy

commit a85cda224afe1f3f6e27cd065d713c7307d13553
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 11 11:51:54 2014 +0100

    when used non-interactively return error codes to shell on failure.

commit d5228d18d80ace62c943aab58c6b80054d0b2453
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 12:10:14 2014 +0100

    display proper error when server sends no reply on D-BUS.

commit 2bba0bd2485231bdafd7bcdaee29c55dd9561ba3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 11:49:06 2014 +0100

    doc update

commit 14e1b457fd710d19b01be5820bf46b43e5b1f5ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 10:51:18 2014 +0100

    removed auto-generated file

commit 7a7a44099dd5a26e4d62266fb1e65662f80c8ce9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 10:50:29 2014 +0100

    Added more conservative priority strings.

commit 503cd9576d18ad8fba7a2c9f4a1e15e30a94b50d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 10:48:35 2014 +0100

    Add usernames and session IDs to readline cache.
    
    This allows auto-completion to show user, and show id,
    after list users is executed.

commit b8cd5305067f511db230ff3b5548aad0f336ecb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 09:37:31 2014 +0100

    shorter names for states

commit ed2f24daa8c852664cf05602cba7d8d890451883
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 09:35:41 2014 +0100

    The ciphersuite of the client is transferred from the D-BUS interface.

commit 33dfbdea568b11cd9183248d85e9385e39d4b8c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 09:17:56 2014 +0100

    worker will send information on the negotiated TLS/DTLS ciphersuites to main.

commit 8c5d29dd1aa567cd1951c78c514155df008ae430
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 10 08:38:49 2014 +0100

    do not start pager when not on a tty.

commit b09dd7d2e403fc3e50042d59e074f43b282fd4d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 21:52:54 2014 +0100

    updated commands and descriptions.

commit 83630fae97f21340e202417453c1729128927061
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 21:47:55 2014 +0100

    print the license in the interactive client.

commit bb925cc8b3b0dbf06b0d489cb3d5eb13e36b244e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 21:33:14 2014 +0100

    doc update

commit 9079e2b67a208189028e3030e88b25eb9700cfcd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 21:32:24 2014 +0100

    Added configuration option use-dbus to allow disabling D-BUS usage.

commit 9b4e98be71a9aaee5b97456cf61a6a09d75d86bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 21:19:25 2014 +0100

    unblock signals in children.

commit cdba1ae3745ed999af9dff38b58d4ceb4defe45f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 17:27:49 2014 +0100

    Try to release as much memory as possible to be able to detect real memory leaks.

commit 49b4eaa7dd0cf7943fb061980c1221b19c093adc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 16:55:23 2014 +0100

    eliminated memory leaks

commit df1b3ac223889f21c3bb967e9fb37cb4a8d3c5d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 16:22:25 2014 +0100

    block signals on the proper time.

commit e4095375aa3561f712bb8fe95ec573d8dcca6081
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 15:38:17 2014 +0100

    use c_strncasecmp() and c_strcasecmp() for matching.

commit b4c4244ef611e2d6dc3f13e8d870d559e0493ddc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 15:34:33 2014 +0100

    doc update

commit 349e658fd795ac986224ba728af7e36d8b58c847
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 15:32:36 2014 +0100

    print the connection time in a compact way

commit d3824eebf30aa945d135ebc0b104a6accbd84457
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 14:59:49 2014 +0100

    print brackets in IPs only when needed (IPv6+port)

commit e01875b1a8438e148e1967cc0596a4d4523290f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 14:51:29 2014 +0100

    Added commands to obtain information on a user or an ID.

commit 9da260fe245facfe7f9af2af0a62e4ca77bf9917
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 13:24:09 2014 +0100

    Use pager in list users command.

commit bc08bcce9afb85ada470faf7acb9ade0ac89ea2c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 11:23:49 2014 +0100

    Added reload and 'stop now' D-BUS commands.

commit e015a84aa9ba61f530877d3edc231a2278f68714
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 11:08:46 2014 +0100

    print help when arguments are missing

commit 3e6be0f788ab07f5900d3076117f182e415e4c3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 10:55:17 2014 +0100

    force kill if there are alive children after some time

commit 99140996b7156b9565489d41ccc220160826cd6a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 10:30:18 2014 +0100

    force kill if not every process dies.

commit 86fc9ea5d5918f806c7722dfe204a27c52d29268
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 9 10:11:54 2014 +0100

    Simplified method handling.

commit a263f2e48421e758a1617cee57b9133e50ebd23d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 21:18:37 2014 +0100

    SIGINT doesn't terminate occtl

commit 02f940f4361643ae3b417a56baf7a250c48c0736
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 20:47:49 2014 +0100

    better matching of higher level commands, and addition of the reset cmd.

commit 80e5d84c6d29aae7c72227b43a70a40b0c101125
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 20:20:25 2014 +0100

    remove_proc() calls remove_from_script_list().
    
    This will prevent a race in the case where a proc is deleted (i.e.,
    user is disconnected) but a running script terminates afterwards and
    tries to reference the deleted proc.

commit 7b4c98680e5e4f58e3094669eb0bff4a40ab96dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 20:13:38 2014 +0100

    set sockets to non-blocking outside the loop.

commit cf8cac0161d414f53b3bbed7ca7a1472f054a7e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 20:07:41 2014 +0100

    better names to lists

commit 11aaf28fa43e784a50d037e98025c2658f6d5ee3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 19:14:51 2014 +0100

    doc update

commit 6b3387c2c8d7e060b2132334f3944d40b953fd4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 19:07:38 2014 +0100

    doc update

commit d78f845ba8da2673e6117a5081ca35f7a49f6829
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 19:06:49 2014 +0100

    added subdir-objects

commit 7c7b5bffbd4869e6bea1d5c804430feadf20a610
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 7 20:11:46 2014 +0100

    use pselect() instead of select()

commit 16a8bd059fa3cdfdf45eb54e704c32c4471f9b97
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 17:55:38 2014 +0100

    terminate on EOF

commit c1b74e158259cb9af43a024c41d0efcbc451b5e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 17:38:43 2014 +0100

    interface improvements in occtl

commit b9d0b149ce3b30cef3d1cac3f72529d1e0065d91
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 16:47:46 2014 +0100

    more files to ignore

commit 8485b727d5558387642002c60696c86393b58746
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 16:46:58 2014 +0100

    install D-BUS and systemd files.

commit 55ecb6233f1867963e60b48520611bf2aebdfb96
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 16:26:46 2014 +0100

    doc update

commit 3694f4271cd5269cfda73a1c85e69b8e4a49cd08
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 16:25:36 2014 +0100

    Added occtl a D-BUS client to query and send commands to server.

commit 3561f7f34aa23bebf7e345cc578675bab1834670
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 8 11:17:47 2014 +0100

    when disconnecting a user make sure that no race conditions exist when killing the process.

commit 0cf7529c723ef4ea91ee36d2aa54ccc8f4b0e03b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 6 19:01:04 2014 +0100

    Added support for control commands using D-BUS.

commit 26a9121ced9b115e6ccb2bd9ee34e53305ff5a06
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 7 16:26:59 2014 +0100

    do not print a port number if it is not available

commit fdaeb608465e77e6ab6792406374775b44a1a004
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 6 13:09:15 2014 +0100

    when using systemd socket activation the tcp-port option is optional.
    
    Moreover the UDP and TCP ports are "discovered" from the provided file
    descriptors.

commit 1d697285e8087978d9ff79ff9a34fee8974b61d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 6 12:33:21 2014 +0100

    Added example systemd socket and service files.

commit 4abc26872db21a9e05191bfa75504b68eda01f5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 5 17:37:14 2014 +0100

    Detect protobuf-c in systems without pkg-config.

commit 0981efe74fe46f70cb234bcbceb7c0eef55b49d8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 5 17:17:54 2014 +0100

    store the time a client connected.

commit f6e7341fe14a4e51d99cf9d2ffbc6171eb0aea58
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Wed Jan 1 01:08:19 2014 -0800

    Remove unnecessary AnyConnect /2/* files
    
    As long as all of our supported OSes are listed under /1/*, the /2/*
    files can be omitted.

commit f928a11cd0f27fdfdbe07667d2c295346d881a21
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Wed Jan 1 01:08:18 2014 -0800

    Add support for Mac AnyConnect client
    
    Populate the 0-byte /1/Darwin_i386 file to prevent the following error:
    
        The AnyConnect package on the secure gateway could not be located.
        You may be experiencing network connectivity issues.  Please try
        connecting again.
    
    Tested with AnyConnect 3.1.03103.

commit c692943289bdcb7b0f0b2326b076ba81ca20d4af
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Wed Jan 1 01:08:17 2014 -0800

    Fix auto-update regression on AnyConnect clients
    
    If /1/<OS> exists for every valid OS, then the client will never even try
    to request /2/binaries/update.txt.  Instead, it will request
    /1/binaries/update.txt, and then get very confused when the response
    looks like an XML document instead of a version string.

commit 3697b1c51ac05c911c979d748f8cbcf0d195d8a6
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Wed Jan 1 01:08:16 2014 -0800

    README: Update dependencies

commit f344ced1d089bb527e54f4aa276b35beaeca5aa4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 30 22:58:34 2013 +0100

    set socket options in sockets received by systemd as well.

commit 6cf43e6d208211c53711310d1da89ca9da4d0cc2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 30 21:37:34 2013 +0100

    Added support for systemd's socket activatable service.

commit fbbec95f27a725396d9e11a33a57e324d252b969
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 28 11:47:46 2013 +0100

    doc update

commit b46d32a66fcb41d05cd4ff8e834686f7aad9cf25
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 22 18:48:05 2013 +0100

    Added comments

commit 76d179dd5b99eb04e0d9b224a86feec35a74bd72
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 21 12:42:01 2013 +0100

    doc update

commit 058b9869678b22e8eea556458372bbcbb8c0954a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 19 19:06:30 2013 +0100

    Converted IPC messaging to protocolbuffers-c
    
    That adds a dependency on protocolbuffers-c, but simplifies
    the worker-main communication protocol handling.

commit e6a9850a3f126fbf4b50f73bf6852502eab705b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 20 18:42:51 2013 +0100

    removed dist-lzip

commit 6113ffcf984e99bfb618fef013347dafd8cfc967
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 19 20:23:26 2013 +0100

    moved length check to correct position

commit 41257cfdc63eccc9449bb66af6716fa4f7de63e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 17 18:55:54 2013 +0100

    doc update

commit 0d8f13d005616c2dde58bbbed3f5e750fcba0634
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 17 14:42:14 2013 +0100

    doc update

commit bde80879d7190e5ec34fcb460052054f177b7603
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 17 14:02:16 2013 +0100

    Added text on generating the server certificate

commit 97da1ddb2abbdde1d4b469b83417bd8c217c64f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 16 13:55:43 2013 +0100

    doc update

commit 4864f71abb0b70b56505623721f91b087fd95162
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 15 10:02:17 2013 +0100

    doc update

commit f821e8028f7be0ed7f62e317a5905bd760ceebb3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 15 09:59:49 2013 +0100

    doc update

commit 3cc5919ef06260c5f4c801cb098e455209877c78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 15 09:46:24 2013 +0100

    released 0.2.3

commit fed26bec2e2c1f0c8c946339cd2ece2b3736ecac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 13 19:09:12 2013 +0100

    disabled limits that break the worker

commit 316c36fc05058e8e338cb3d03c7218b0ded50d51
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 13 18:45:13 2013 +0100

    generated files added to BUILT_SOURCES to fix parallel compilation

commit 413ba6120cfc81aabbf0629f14b6807cf8d9df2e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 13 18:36:34 2013 +0100

    avoid @AUTOGEN@

commit a1fda9bd27b013ddef5f92280791bae24571ab87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 13 18:32:42 2013 +0100

    Added newline

commit 29222442396505cc60cf8ad1da59a860861f46e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 13 17:39:41 2013 +0100

    doc update

commit f2cf03f40ee0784600f7147772becc2194d836b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 13 17:22:26 2013 +0100

    the generation of makefile isn't conditional

commit 6ccdbe67c67e3c2f9ee0d702e7001405551da2f8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 11:05:10 2013 +0100

    updated

commit 90cdb97f4a7441daa0d3759864f173393aca6963
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 10:17:38 2013 +0100

    doc update

commit dee376e8b14bc7f51cc7e43a51fd87fb0dcf28fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 10:13:59 2013 +0100

    reduced cookie size by only writing down the ipv4 seed.

commit cb5092e820332f49eeeaf8993bd52596aaaee062
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 10:03:45 2013 +0100

    Augmented cookie format to store the seeds used to generate IPv4 and IPv6 addresses.
    
    This ensures that if the IP previously used by a user is free, it will
    be reassigned to him after a reconnection with the same cookie.

commit 80a7ac124c2be4f1daa401e87260ee893f328fc1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 09:52:58 2013 +0100

    corrected typo

commit 0d1b3976ab6ff09772c845e70c7adfa02043674c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 08:54:15 2013 +0100

    use IPV6_CHECKSUM only when available.

commit dd162faf3629cbe844a2c35c71dc3a37e6547892
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 08:50:30 2013 +0100

    reorder

commit 3ef0667ee7cddf904ad257305dceb5eed8ff3340
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 08:49:46 2013 +0100

    corrected typo

commit 7cce5f049c292a9fdecb7659324b0c7ea073068c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 08:48:41 2013 +0100

    include netinet/ip.h prior to ip_icmp.h to have struct ip defined.

commit 60893a11d7e5b4582de8bd5e17f50f5aaed44499
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 08:47:27 2013 +0100

    define ICMP_DEST_UNREACH in systems where it is not available

commit 8a9402a4abd5808f14408fb0993a5c4c7d684a39
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Dec 11 08:43:19 2013 +0100

    corrected typo

commit 1176d2b7b87592860e7d868629cb44adf150afb6
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Tue Dec 10 22:17:26 2013 -0800

    Fix multiple session disconnect when max-same-clients is 0
    
    max-same-clients is used to limit the number of outstanding sessions
    (cookies).  If set to 0, it means an unlimited number of active cookies
    can be owned by each user.  But it doesn't mean that the same cookie
    can be reused for multiple CSTP connections with different IPs, as
    the protocol does not normally work this way.

commit 791d776320da105052c4df3404a95b9590ccc944
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 17:17:41 2013 +0100

    more verbose messages.

commit 4c0da4b288769f32e494fc67fb5795a822af5099
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 17:07:55 2013 +0100

    updated debug messages.

commit 9923e74721c3f2f50c97c69d7ef71f2f3f209b0d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 11:07:17 2013 +0100

    doc update

commit c6a08db6dbd80aaf60094b9a0bc0456f2cc0afb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 11:05:26 2013 +0100

    Added support for cgroups

commit fd25969acaaae07e7ead43b23b57d05755535f8b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 10:05:36 2013 +0100

    simplified reading the net-priority option

commit b4c2aebd9e11a019ddcfdfeecaf4cf22dc1de14c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 08:41:09 2013 +0100

    doc update

commit 74385e6a30c8d2c5384eb653a8584de8727bd673
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Dec 10 08:35:48 2013 +0100

    corrected DPD sending in TLS. Reported by Kevin Cernekee.

commit b21f05df06b6a20f84d1b79f855f9554770ce019
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 22:59:44 2013 +0100

    Allow setting directly the IP_TOS from net-priority.

commit d601a8506a857f8546243805bdbcf99fb99a860f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 22:15:31 2013 +0100

    conditionally use SO_PRIORITY

commit ca93854758754d902ad61cebf96aa6b1bf4470a0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 22:13:35 2013 +0100

    do check the username validity only when a certificate is present.

commit b267ba203f84dcab1cb08ca479ea4a59de04de88
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 22:10:29 2013 +0100

    adjusted severity

commit c5e656a91670c58f55cdf912655b346a70ed7a9d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 19:59:46 2013 +0100

    simplified setting of additional configuration in the worker process

commit e367acc41d041f73415ab12d0985dd4272824d3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 19:56:50 2013 +0100

    corrected typo

commit e2c5db109ed46a0349750fe88045bc1fe87e8f3e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 19:49:01 2013 +0100

    doc update

commit 480c5f5a44a5fb8c33e470582cf759c3760e3716
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 19:47:52 2013 +0100

    do not require a certificate when authenticating with cookie and always-require-cert is set to false.

commit 8f40c5c18e74a0cee0444c6d6378eb6b4bafa4f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 19:44:11 2013 +0100

    Added more verbose logging

commit 3fbac008173d083e5e16ee8067ff8b03a4619439
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 15:39:40 2013 +0100

    sec-mod ensures that requests come from the correct user.

commit 665d39074668fe619e36f51549945f4b20df2dc9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 15:39:23 2013 +0100

    doc update

commit 4f9a09a3ffd12629d2e84c07c3233139e201a970
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 15:16:59 2013 +0100

    doc update

commit 6cb553e9a8516059549fd061676d9bf34a8bc90d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 14:40:53 2013 +0100

    Added the net-priority configuration option.
    
    That option allows setting the protocol-defined priority (via SO_PRIORITY)
    for the UDP and TCP sockets, per user/group or globally.

commit 74a566c5408d1a52bc34c281109e50fdd962b315
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 11:44:22 2013 +0100

    enforce the RLIMIT_FSIZE and RLIMIT_AS

commit 8148367e169635592b8b7214e78e6213fc52a12e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Dec 9 10:27:30 2013 +0100

    use iphdr only when available

commit f3dd34d4091312f24bc0f3337b69bd364a2dc6f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 14:00:34 2013 +0100

    doc update

commit bfb272ff9929f04fbf7ab42353d31e43c5b7bb81
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 13:57:02 2013 +0100

    do not return empty usernames

commit cd2a4d1abfc03684bdc0d7e77acb894ce01dc185
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 13:42:57 2013 +0100

    Added test-pam (which is only run manually)

commit 816c51c7d218c69d375dc0cf8c07542486381bcc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 13:27:54 2013 +0100

    reduced fragility of the tests

commit 32bfe5f6aea40e380136ac05a81a530a17010749
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 13:07:10 2013 +0100

    store temp files in a fixed dir

commit c256f14c33af4efe0a200c0a13b6e7571e1a4211
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 12:58:33 2013 +0100

    Allow PAM to update username

commit babf53c442668e94e7cc8d1edb1f4364d71ac35d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 12:43:59 2013 +0100

    explicitly initialize module

commit d407ef79781e9aa84d526763030281589c8ff08f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 11:37:27 2013 +0100

    removed newline from log messages

commit a30abe3bb789546e6227b1482aab63cef2f14792
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 11:32:43 2013 +0100

    Only add new leases to hash table (and print the assigned IPs).

commit d8f1ec4473def44608fd52b600e5784c6395e5bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 08:41:06 2013 +0100

    print more details on certificate verification failure.

commit 842025c9798749f8ad9a1c19bc6f29c796aa5bf2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 8 08:35:14 2013 +0100

    Conditionally include system specific headers.

commit 56f10baad3cec52118bbe1bb99ab7cf0457993cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 7 20:42:36 2013 +0100

    if no udp port is set do not bother sending DTLS info to client.

commit 85eedc9f05f4b28dcf7c56e4fcaaff9cf6b9e8c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 7 18:58:56 2013 +0100

    doc update

commit 16629faffdefcb4de221c873d1482efda4caf6e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 7 18:28:25 2013 +0100

    removed unneeded include

commit 8a919d236f68cc4ae9a361c792dac012083ce53c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Dec 7 17:44:31 2013 +0100

    udp-port can now be unset, and that will disable listening to UDP.

commit a53c4dba8efa00eebcd7c582f62a9f6247f5e862
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 17:52:38 2013 +0100

    doc update

commit 5929c7a17147095693c0dc811cabcd415af22baf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 17:09:04 2013 +0100

    doc update

commit 55b6af3460fe52cf37260118e54e8cc3d7491c58
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 16:17:48 2013 +0100

    doc update

commit d4a56c6a336a531bcd9bafacc8d1fed319f1fd25
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 14:50:48 2013 +0100

    initialize values prior to list_for_each() calls, to avoid static analysers complaints on garbage values.

commit b90c160b01284df3830a6c6eb131f23192254cda
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 14:18:57 2013 +0100

    undefine LIST_HEAD and LIST_HEAD_INIT

commit f1ddf6729e7d643207351949be316e1bf67357da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 10:11:58 2013 +0100

    bumped version

commit cde9324363e949c849d2f952e035e49dbb9915aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Dec 6 09:46:59 2013 +0100

    Use the correct sighandler definition on different systems.

commit 190e81707e94b67778e1a0f66d82d39c1552649b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 5 16:26:47 2013 +0100

    use regex for comparison

commit 4eebd6eaa719c0f8ca4a52bdaa656f1e0bc532e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 5 16:15:01 2013 +0100

    Added test case for the disconnection due to cookie re-use case.

commit 8bb4e81f6f6583b59ec4f522453abd8bc083a5a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 5 14:12:31 2013 +0100

    When a new connection presents a cookie of an existing session the previous session is disconnected.

commit d5dcee6fb0bfa93cd91f0e7e16d8ef7ce8237e18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 5 14:09:09 2013 +0100

    fixed issue when compiling with -j

commit 059458919d5ce96e43a14b462ca06030edbfd982
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 12 10:30:11 2013 +0100

    further increase the PAM stack size to allow for more complex PAM modules

commit 3d5b15ccd389d8fd3de51e987efad6f40b1cfd7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Dec 5 17:04:18 2013 +0100

    properly initialize rnd IP to avoid valgrind complaints

commit d1a79b3fcd5918f1f4131b22e61f6366328bd414
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 1 11:34:53 2013 +0100

    updated todo

commit a6298001bddc6e35da170e2611479598315aca15
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 1 11:08:39 2013 +0100

    doc update

commit 972bce3bde57f04547842ed891e3e7bb06146441
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sat Nov 30 18:25:09 2013 -0800

    README: Add info on build dependencies

commit 3e263573abc5cf8aa860a52c29f109e403aaa8d0
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sat Nov 30 18:25:08 2013 -0800

    Add build-aux/.gitignore

commit c91ae911eea7c2f38ee8d4bd5205491afd8e0063
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sat Nov 30 18:25:07 2013 -0800

    Remove autogenerated scripts from git repo
    
    These get dirtied every time somebody runs autogen.sh.

commit 1f36e79c5c56881a4912f0de1019ef21ed8cade6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Dec 1 11:03:25 2013 +0100

    updated

commit b38a82873b4303a2b89829e031580794fc2fa991
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sat Nov 30 18:25:06 2013 -0800

    Add X-CSTP-License header for mobile client compatibility
    
    The Android AnyConnect client passes authentication but refuses to
    establish a VPN link if this header is missing.

commit 926e5da8538a55b2a8238a2645c040d06ad2a9f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 22:15:38 2013 +0100

    updated title

commit bd42c084ee7ce566985cb86d321e6ca4bc5b9753
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 17:02:13 2013 +0100

    updated gnulib

commit f46a99233f18296961541b52c28a42e67c83744b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 17:00:28 2013 +0100

    doc update

commit 5938943d39ab9c5d5fbee1d9fc80789e12b9ee14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 16:55:38 2013 +0100

    use different ports per test

commit d91a8c5a1e5c32277d7dc9af0f7678f97ce01e6f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 16:50:40 2013 +0100

    daemon group is available in more systems. Use that for testing.

commit 325bc3cdff9efdb8f85f4980f9ad1de181a5d7ca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 16:45:22 2013 +0100

    bumped version

commit 72fc4ec2b8965748c204f515beea78d289961135
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 23 16:44:12 2013 +0100

    updated libopts detection

commit dbc871b588511617e3ca9bad2aeeeb74fb1bc977
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 19 22:32:30 2013 +0100

    doc update

commit d7bee06bff02ce3c72399a28bd21c4c422fc3535
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 19 18:19:46 2013 +0100

    relicensed after all authors agreed.

commit 276c5137d35306633a8edc1ba24c02b9eb3bf072
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 17 18:22:20 2013 +0100

    use definitions to avoid discrepancies.

commit c0277bd9d3fb40d82df35ca6c3e16aa0bdd57834
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 17 18:18:08 2013 +0100

    corrected size of explicit nonce

commit a6ec33298802cee3d7a7154f2294fcd3ab40528b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 23:12:48 2013 +0100

    The Salsa20 ciphersuites are used over DTLS 1.2, and their names follow the new encoding.

commit 1265b8949df6fb8f9afbf3d3389be7af07b1f9d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 22:47:44 2013 +0100

    be more precise in MTU calculation even without gnutls_est_record_overhead_size().

commit ccb3f1b45f84c1f87c4e48680138522688362776
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 22:34:25 2013 +0100

    Do not use an MTU that is bigger than the originally suggested one. Openconnect doesn't like that.

commit 39515e39f58bb0665731b2a6c08796682a527a68
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 22:30:44 2013 +0100

    Better estimate the record overhead.

commit 02c821fa73eec1eb225f948f1af85b8e3b57cd71
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 19:53:46 2013 +0100

    updated

commit 5f32afbf6ced11afdf36b34d6a3faf7b5238110d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 17:34:08 2013 +0100

    doc update

commit e08f70987a918126a4a767938996a8613286daa4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 16 17:33:50 2013 +0100

    Added the --http-debug option to ocserv to avoid printing full HTTP messages to normal debug mode.

commit d3a6759bc7363d681c15ff426f8309660352047c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 15 09:50:36 2013 +0100

    more changes for the new ciphersuites

commit 103ffb424faafb73bb6dcd4cacf3e661d3b6cf2b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 15 09:03:16 2013 +0100

    Added ciphersuites OC-AES-GCM.

commit 4e28be4e38efa5b7e5a6465a5cf6341110fb679d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 15 08:54:10 2013 +0100

    corrected include to http-parser

commit d85669aedce1cf0adf21e15df5e2c2ec8b6426df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Nov 11 23:16:54 2013 +0100

    relicensed files.

commit f9ce3fd3d37ba1cd05adb62d02380d65ffcfef3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 10 16:48:01 2013 +0100

    doc update

commit 7d70006a2dbddf783213f1856374bacc74217e09
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 10 15:14:37 2013 +0100

    Check for local http_parser library. If found use it instead of the included one.

commit d2f584bf9b93e8ca6d4382497ee74e23f6006b7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 9 19:51:37 2013 +0100

    test before copy

commit 438b76ff58a7b1f0b8b49fcf8337d2430b4e9882
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 9 13:04:09 2013 +0100

    Distribute the autogen'erated files as .bak and enable them only if local libopts is being used.

commit 17946ca7008f5c66c31800aae19f88addd7edc98
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 21:12:31 2013 +0100

    better phrasing.

commit 504737b3783e38804aef587e7646c89c71e1d8ee
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 9 09:57:17 2013 +0100

    remove usage of wondershaper

commit ac6c0dd5c7087b789feecf51357fcf94e9b72420
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 9 09:26:42 2013 +0100

    reduce the calls to gettime().

commit 31b08654a552e0f0a4b55e379db577d9ccf23318
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 9 09:26:26 2013 +0100

    use CLOCK_REALTIME_COARSE if available.

commit 7410bc6596c06044f8eda200c56544443b61f176
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 9 09:26:03 2013 +0100

    more files to ignore

commit f8a81770c1ae6b963b8d09b87884d113008d3933
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 8 18:22:37 2013 +0100

    update

commit aff7acedb26995fc5bd1e94fdcb29d4787bc23e1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 8 18:22:25 2013 +0100

    separated auto-generated files into special libraries to allow compilation using make -jx, x>1

commit 368144592c3131967eca384c75a965be6816b4f6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Nov 8 18:08:36 2013 +0100

    mentioned the libopts license

commit 1ff55f4e916190c4299291c930d61e93bc32dbed
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 21:11:36 2013 +0100

    print package version on initialization

commit 848f015a5f8aa1b2f8c5c4d3fb85597672ea8911
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 21:02:51 2013 +0100

    updated

commit 203465a4881af11194ba73ba3dbb0e90589d2f85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 20:50:32 2013 +0100

    added the srcdir prefix

commit 1cc339e6db343525228ac30820d65ab464ea64aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 20:40:01 2013 +0100

    updated

commit 860df3d680c5a27496926431bc863bed00faab24
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 20:37:16 2013 +0100

    delete libopts generated files if system libopts is being used

commit b899cba222d35e2ec6eb39180b626af1662f0464
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Nov 6 00:09:19 2013 +0100

    ensure that auto-generated files will be auto-generated during compilation.

commit 91b5ee591eccaa095a0759d07b46353d17d8293e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 23:32:49 2013 +0100

    removed no longer relevant item

commit fe1c948bcf7062ac11c6e476e4432c9e34cf2a77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 23:30:19 2013 +0100

    updated to libopts 5.18.2

commit aaf03d537ef36efd4d976b15e67bb2025782700f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 21:07:02 2013 +0100

    updated

commit e7e29b8396d4acd796df8aba23d26de830033806
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 21:04:56 2013 +0100

    updated libopts to 5.18

commit 6cfa963a1bafb3d8e919c96bd4a4636122520fcc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:40:11 2013 +0100

    released 0.2.1

commit 1a8affed36ee45b6b8748c17480b8fd68567f505
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:33:41 2013 +0100

    doc update

commit 0efef7376e57daf41e2f8784c908534b97ff9c83
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:33:41 2013 +0100

    doc update

commit b012faacb850c880d2747425f9d5299c4a86db43
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:32:51 2013 +0100

    more files to ignore

commit 615e16cc4140b066e17c7d50535650cf39d705c7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:31:10 2013 +0100

    count bandwidth in kb/sec to avoid overflows on high bandwidth.

commit 075912565223b41fc78d2df9eca170fc9fc30aa4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:16:45 2013 +0100

    removed auto-generated files.

commit b1633b2eb1d23e15c1abc2b52f66939785949ee0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:07:09 2013 +0100

    updated code to avoid memory leaks.

commit 74f0ba5e729463c3eb69d00da6f80110fb729b6c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:06:18 2013 +0100

    do not ignore errors from system calls

commit 14a06cec0c7b31808621e26deaba8b2e0cd12665
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:04:42 2013 +0100

    autogenerate changelog prior to release

commit 8117fc0b038aa75cfe75739b10d76701d94d5372
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:04:00 2013 +0100

    call setgroups() after setgid() to avoid staying with an unexpected group set.

commit 3dc2637c6f82db2373d84ed949b6e2bcb06424fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:03:23 2013 +0100

    Added pid-file command line option, that overrides the configured pid-file.

commit 7340567c138338e086c382e37e9f499f920c6f76
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:02:51 2013 +0100

    bumped version

commit eb36a15550580bedcbf4547fea35d774557ba186
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 20:01:49 2013 +0100

    reorganized file generation and removed auto-generated files.

commit 9374aa75763ddca6e8bb4f13d0228cc020fad264
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:58:07 2013 +0100

    increased stack size for PAM coroutines to 64k.

commit d284a601d491892952aad86f385b532567a465eb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:57:32 2013 +0100

    link with libopts only if autogen is found. This avoids incompatibility issues with different autogen/libopts version.

commit 5b1f23b55f8b7d9c56be78b07412e122571c1ae9
Author: Mike Miller <mtmiller@debian.org>
Date:   Tue Nov 5 19:44:41 2013 +0100

    Allow linking with system libopts if installed

commit 68762f5862f69b657282fe02f96b7109778162b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:39:36 2013 +0100

    removed unneeded check for gdbm

commit 1e8d036727ed25c9e5eb67bb4904c8df544308a4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:39:14 2013 +0100

    Move ocserv to sbin

commit 85f4db201c69b89e9bd71fc65b93a833d8dab244
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:35:22 2013 +0100

    updated license information and authors

commit cc0612ddeb200f9c8f726f831ae3b73d071b5717
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:34:08 2013 +0100

    Added lib-link.m4 via gnulib.

commit f9b311357e15729358c0e89a3f9dae44d9848c0b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Nov 5 19:33:51 2013 +0100

    more files to ignore

commit 42ffe940d2f137dd21325bfe499c92c2eeb0c222
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 3 21:12:17 2013 +0100

    doc update

commit 2f5141b00f40bb37929bd17fdabc333052509701
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 3 16:48:24 2013 +0100

    Added directives to allow bandwidth limitation.

commit 801eded2cf6414f9331c14341df23fd837fd5ec4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Nov 3 15:23:07 2013 +0100

    do not fail if a configuration file is empty

commit c7c88b51b494c344f05ba68424c94a4e5738a2dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 2 23:07:48 2013 +0100

    reduced the severity of several messages.

commit c7635046dc6e67e46f4509a6f314fc816e7b4545
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 2 23:04:57 2013 +0100

    more informative message

commit 699ec196b208c4506a9c386832a21b412c806fe9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 2 22:47:58 2013 +0100

    doc update

commit 2e09e80e6dda694ed8627ee0d4f20841299730b8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 2 16:27:30 2013 +0100

    avoid multiple calls to time(0)

commit 05a8f946c4698d4c7b0517f77384732b2cf433e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 2 16:25:23 2013 +0100

    doc update

commit 1d4d4e731ad1bb8d9f9e9b40df643c9e6bdc54e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Nov 2 16:07:08 2013 +0100

    added error message

commit 44f0a7193a4d9a9980e3b6e9e25b91dc5557787a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 17:20:57 2013 +0100

    Added login-test when a connect or disconnect script is set.

commit c086e8c3a39d1e3e1590a2208019eb433d0f0d64
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 14:11:09 2013 +0100

    released 0.2.0

commit f67da1d2c18839ddfaa8a91841dc02e3bd5c09bd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 12:51:27 2013 +0100

    doc update

commit affcb543fc6a6063d8dec81a898bb1dc221a3981
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 12:48:14 2013 +0100

    Avoid calling handle_script_exit() twice on user connect.

commit 586829e868abd064fc2dec8501a1235d15dad49f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 12:33:53 2013 +0100

    return correct error code

commit c370e4d3d7550b3a08fafef79c5664ac66d64ff0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 12:32:38 2013 +0100

    corrected typo

commit bea6b6accdaa7ebe5eb31c9ff6db25c1fe05563f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 12:31:28 2013 +0100

    small updates

commit e358af25785490c047ddb034f54653f0eae7c729
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 12:22:17 2013 +0100

    Always terminate the worker unless he has already been dead.

commit ac1621df0b7a6c72a6fe6dce5a8026fbc4cbec2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 11:28:13 2013 +0100

    Corrected behavior on error during receiving a UDP fd.

commit 929b8dcaec88a914daceecda0513ef7227954606
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Oct 31 09:29:06 2013 +0100

    Avoid forwarding the UDP fd within a minute. That is to avoid duplicate messages messing the worker session.

commit aa71216a65dcdcf47b0e8af292f4137f33f20f53
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 30 13:00:19 2013 +0100

    updates in hash table usage.

commit a2c194f63f927de1b15b268b28ccef38018f2d16
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 30 12:40:33 2013 +0100

    Added test to check the application of user routes.

commit 245e7e0b44dfa53c84bfac1e98adf2b9807931e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 30 09:30:18 2013 +0100

    doc update

commit 9e8f39faf59c74046b715cf7427f38262f66af66
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 30 09:19:33 2013 +0100

    Avoid many system calls when sending serialized data.

commit 1145eafa97656c89051e1a4c074ee7407172993a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Oct 30 08:39:19 2013 +0100

    Simplified auth_reply transfer from main to worker.

commit e821f3dac14ff0fad99a39634cc6ebedcde8df5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 22:48:35 2013 +0100

    updated todo list

commit 7ac0cfbb14352c4ccda912b9d419bb2c8aaa35f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 22:05:11 2013 +0100

    doc update

commit f607b6dad448397a1b371407ae3df95453d0bb64
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 21:49:39 2013 +0100

    doc update

commit b847edfa52a768057e6c0117f4915334d64378a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 21:46:58 2013 +0100

    increased level of spawn errors.

commit 4fbde480a043b2e1443cb2c1df69fae39ef6c7e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 21:45:55 2013 +0100

    updated

commit 1a7e1d3b73abae8996b797e076e41e281b7838fb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 21:33:33 2013 +0100

    do not try load configuration on empty string groups

commit 186f3e098be721aa30dbb7b2f3a2580833ffd245
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 21:05:46 2013 +0100

    corrected bug

commit 4499196f24fb6f89a8238b69e2384b5c1b58d521
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 20:52:36 2013 +0100

    Added more debugging information.

commit 15f8119991672e73a25d75e77794339863a98ee2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 20:23:44 2013 +0100

    updated gnulib

commit b7e4f03fa828680239d7af75e0c279e98d594f7e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 20:22:22 2013 +0100

    doc update

commit 52124af92d577b42194e036708fae07d8a48d9c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 20:20:33 2013 +0100

    small update

commit 69fd310f63312a6b939534acccdea167cca27d87
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 20:20:25 2013 +0100

    Corrected certificate authentication.

commit b50aef1a8f5dac57dd9f947607f46cee3266e150
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 20:14:35 2013 +0100

    Added test with only a certificate.

commit c21189698cbb241bc17d4e4b1bae7b66eb24eebd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 12:51:54 2013 +0100

    bumped version

commit 6d8d111f6dd3189efb2b6b7edb1e00338511974c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 11:40:33 2013 +0100

    doc update

commit 3c583e3a3558834a906c84ab79fa70f824bb80ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 11:37:57 2013 +0100

    Added the 'iroute' directive to allow routes set on server.

commit e4d2e5803d99fc33a7ecfb3b91efe438648af4e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 11:07:03 2013 +0100

    Added commands to add and remove a route.

commit b6239749e9abccd14a386583cab337e18a41ec42
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 10:42:15 2013 +0100

    relocated function

commit 30f0e93e70b80c702287b64eaabfeb77dc3a2403
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Oct 29 10:00:53 2013 +0100

    Added the ipv6-prefix configuration option

commit 2480a2cf58c3ac3a0417201bfcdc773b4d64848e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 28 21:35:47 2013 +0100

    Increased the number of directives allowed in group and user configurations.

commit 00554b2f286e01684fa088aea83cb62487526c53
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Oct 28 09:38:40 2013 +0100

    Allow loading additional configuration files per user or per group.
    
    The directives currently allowed are: ipv4/6_dns and route.

commit 99e7978f99daadabf4537e11cd11f10152c85899
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 25 14:23:55 2013 +0200

    bumped version

commit 87684c1c0d4e097dcf8b6068d99f91dc816ea7aa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 20 19:08:10 2013 +0200

    Configuration file parsing was modified to allow detecting mispellings of directives and unknown options.

commit 0b499f70f19750f065ff34eeb2e251294af4b28a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 20 18:12:00 2013 +0200

    doc update

commit 988116bbeb4981a9c97caa8120f4c41df54aca7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Oct 20 17:45:51 2013 +0200

    Added config options 'mtu' and 'output-buffer'.

commit 137dfed158fd04e868fa5a89536334690d9351fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 5 09:39:26 2013 +0200

    doc update

commit 067ff8fa5237110b300b8a51a7f2d0d25dec9524
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Oct 5 09:37:23 2013 +0200

    doc update

commit 009e76cac3dee58472fdcd3a422d928648a0188e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 4 09:40:46 2013 +0200

    Do not wait for socket to be ready when sending DTLS data.

commit 6093b166d5fa94770e8172c2d221236795a80dad
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Oct 4 09:32:52 2013 +0200

    Reduce limit of output buffer on DTLS socket to reduce latency (following similar openconnect change).

commit d1e9c4b7c1b30ae98a6b0149b97adffee66d38c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 30 15:34:45 2013 +0200

    doc update

commit 352a8c638f48322d0f586a5313fabe343dc3d2e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 30 11:37:47 2013 +0200

    corrected MTU suggestion when DTLS isn't used

commit c9526b83a38d54cf0484e3c89e2c494516984617
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 30 11:36:44 2013 +0200

    doc update

commit e819e4d68ff6f2a006f76001da755514fe425923
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 30 11:35:22 2013 +0200

    Suggest a single MTU value instead of two distinct for DTLS and CSTP.

commit b3b3292ec8b46cea859198066f5761731ebded14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 30 11:30:18 2013 +0200

    better calculation of suggested to the peer MTU

commit ae0ee4f49bc835c0bda267496025346ea14f465e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Sep 2 23:03:36 2013 +0300

    released 0.1.6

commit c6d1e952da695a83a04c88c3d8334a28d6eb7187
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Aug 28 21:13:09 2013 +0300

    doc update

commit c1ad5b14b374880d60cf78d68d322b39968f023a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 26 08:59:24 2013 +0200

    doc update

commit 17ca01e5948be40e170971c04cb07a59ca3b9968
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Aug 3 10:52:21 2013 +0200

    doc update

commit d50453576a46e9be782b491035537e961cfe4832
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 25 23:13:11 2013 +0200

    Applied Bruce Korb's fix on unacceptable chars.

commit 2cdfafcd5bd21a3efca286281049655b7f0cbca6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 25 23:11:49 2013 +0200

    Revert "Ignore non-ascii characters in configuration file."
    
    This reverts commit f7a938e5d7fd07144062ea64a6ab028cf43bb3e6.

commit a98fd667994696cb54827d91cbb47a074fe28273
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 25 08:40:03 2013 +0200

    doc update

commit f7a938e5d7fd07144062ea64a6ab028cf43bb3e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 23 21:48:59 2013 +0200

    Ignore non-ascii characters in configuration file.
    
    This is a quick fix for http://lists.infradead.org/pipermail/openconnect-devel/2013-July/001126.html

commit 355dbdbef04ba92ae02c7e9267827c2c5eec157e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 23 21:39:47 2013 +0200

    regenerate autogen'ed files when making a distribution.

commit fc561051267c07642f4bda74684cd66876bb0dc3
Author: Mike Miller <mtmiller@debian.org>
Date:   Sun Jul 21 00:16:09 2013 -0400

    Fix path to common.sh when tests run from another directory

commit 9d4bea82dd10ccd8c3b90142ab909a4333034fbb
Author: Mike Miller <mtmiller@debian.org>
Date:   Sun Jul 21 00:15:49 2013 -0400

    Add autogen search path to work when building out of the source tree

commit 4154b07b9343d2aa2a20264433248af7a19787cc
Author: Mike Miller <mtmiller@debian.org>
Date:   Sun Jul 21 00:15:33 2013 -0400

    Improve ocpasswd short description, re-run autogen

commit 5e0e286c27c25baa5d12d81704f5c82ad02dfb92
Author: Mike Miller <mtmiller@debian.org>
Date:   Sun Jul 21 00:15:20 2013 -0400

    Fix typo maintainance -> maintenance

commit 71318424f4bfc4808e71d2d6c0178de89954f456
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 15 21:26:28 2013 +0200

    Ask the password twice to avoid mistakes.

commit d19cfc6f944844f6405db58c839bc6ba8f305b1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 15 11:25:38 2013 +0200

    released 0.1.5

commit a601192f0007dbd68aefa9b1712407c22f9370ac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jul 11 23:11:33 2013 +0200

    removed debugging

commit 9c60dfc0e0c82e247b819069fb85f13406ae4f8e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 10 16:17:00 2013 +0200

    use c_strcase in config file parsing

commit 8c15ad69f4fb05a6a3fb15ced5bbbbe4c550e6b7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 10 16:13:05 2013 +0200

    check for errors in sscanf

commit 2af67c4aff0118f3a4f5fdaebffbef44a75fd494
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jul 10 15:52:26 2013 +0200

    Added decoder for HTML-encoded and URL-encoded passwords and usernames.
    
    This prevents special characters from not being recognized. Reported by P.H.Vos.
    Also updated gnulib and added c-strncasecmp

commit 90c2f89c4dfeadd78dcf5a9454993279a0324d69
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 8 08:42:10 2013 +0200

    doc update

commit be84ddc6b8aaa9a719c213383bb75fd7de589aae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 8 00:07:42 2013 +0200

    Added additional handlers for requested files.

commit 190e1d79948a7c6d3fec2f295d8a17beefdaf7ec
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Jul 7 13:31:03 2013 -0700

    bypass AnyConnect client auto-update mechanism

commit 0de1a803d32f2125c9703f49f9fed2b0df08ac06
Author: Kevin Cernekee <cernekee@gmail.com>
Date:   Sun Jul 7 12:05:45 2013 -0700

    add missing GnuTLS version checks around >= v3.2.0 features

commit 58fcdd04868854e6da3ec632b5f01f03c5ab8787
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 7 21:17:41 2013 +0200

    use existing files

commit 05aad245fafe84e697246cdbbb7a32ed5eb016a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 7 21:17:09 2013 +0200

    more files to ignore

commit bd1f6f411adcc46be9f82ab3e4912d5467ee7863
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 7 21:16:28 2013 +0200

    moved common tests to common.sh

commit 98dc60403b94e58b4ed9aa88731ddb58082e5cf0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jul 7 20:08:32 2013 +0200

    renamed scripts and added additional test with wrong username.

commit 638b3bc9f9e5b639fd3bf48bbe6f7969836ab218
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 6 23:03:53 2013 +0200

    doc update

commit 56533a78e81d8491245aa7c36340523010702bd2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 6 17:12:23 2013 +0200

    doc update

commit 3e6e90f73401246043b9e9d14ce3791653b030fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 6 17:09:31 2013 +0200

    Added test suite that depends on openconnect.

commit 19b5a32b751e873cca25965f80d74d99bf9faedc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 6 17:02:50 2013 +0200

    common check for user and group match.

commit b4982477d44299f9a9d9b059d61bf305fe5c4b05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 6 14:29:06 2013 +0200

    Put a limit in the number of allowed authentication requests, and increased size of stack for co-routines.

commit 531b457c64da631157f96ad64d9007b4e0477801
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jul 6 11:45:22 2013 +0200

    silence warnings

commit 2fce51004b89994807fb81adcd95e7de854e17e8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 15:10:54 2013 +0200

    more fixes

commit fdee3b6169ee9220d958a1bfb0792fd19db77247
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 15:07:54 2013 +0200

    automate the clang static check of code.

commit cc44c63d42ccd1c4e7b4708df5a8402ec6725f78
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 15:06:40 2013 +0200

    avoid deinitializing garbage

commit 3d18c41b4d6fd0801265d549eb2550e11511def0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 15:01:09 2013 +0200

    corrected null pointer deferences

commit 3344a1f0dcc36d8d7507a8d05fa64915bdb1bced
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 14:56:37 2013 +0200

    corrected dead assignments

commit 5586f9e68f9e07323ae0a7d33cc620827b1ca094
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 12:12:00 2013 +0200

    doc update

commit 718ccd79c16435f19955dc5da5e673971b170735
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 12:01:35 2013 +0200

    better function names and parameter order

commit a9952f3f50ef7aa3062110f5dfd92bbebb76f34b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 11:53:44 2013 +0200

    doc update

commit 4b065b8150f70d62cfd5e66d50b16a386cf77689
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jul 5 11:52:45 2013 +0200

    print proper message when changing password in PAM.

commit c55b5a9c6892e2f9ff58fbaa458a051f363affb2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 2 01:54:39 2013 +0200

    Allow session resumption database access, and allow more graceful cleanup on authentication failure.

commit 8148aec2193a4ce28e73ca8908c30701ed03567d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jul 2 01:48:22 2013 +0200

    Do not need the multi-threaded version of PCL.

commit f4c5a54d39b2766bd910de9123d612ac75b020d6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 14:18:27 2013 +0200

    leases belong to users as well. That way IPs are properly re-used.

commit a191795e5a9783366c723aa3811b6b3d0b57118d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 14:00:14 2013 +0200

    doc update

commit c4183d358e540975111f214351ca18704fe8bdb0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 13:59:30 2013 +0200

    cookie-db no longer exists.

commit 9af4f67df75acd2fdb984ca65ee34d5a74e2faa1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 13:58:53 2013 +0200

    Corrected plain passwd authentication to read group name when needed.

commit f307fbcdbe7fea5cd6630065d7dd18c6256a65d0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 13:46:33 2013 +0200

    properly initialize group name in plain passwd.

commit c6b11138336c64f6326d63819b3f8327a98119cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 12:31:45 2013 +0200

    allow cookie-only authentication (fixes previously introduced bug)

commit a7eb7b2e6ef8f430c99fad5786055d2b9d2ab823
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 12:23:01 2013 +0200

    disallow mixing multiple username/password authentication methods

commit 126c52ab5c9838eeb399ad5b216cd786851801e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jul 1 12:12:21 2013 +0200

    Cookies are no longer persistent

commit e7aa89dc96ccd47d61cd1026e6814ca93ce8e33f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 17:58:48 2013 +0200

    document way to force PFS

commit dad4c457918f91c1df259a3c1a2cb7ff1fc2149b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 11:00:17 2013 +0200

    updated

commit 020e00714ef00847ce78ed026f97fee5ee0f5969
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 10:50:51 2013 +0200

    updated

commit 4c4ae2915e21bb7717ae4919da765ea5d500a950
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 10:46:24 2013 +0200

    updated auto-generated scripts.

commit e2036dc560558817988179533f33d35f940db66f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 10:45:22 2013 +0200

    enable ability to change password with PAM

commit a13c50f6cc8d729f471310aea04fb54d6543bc6b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 09:57:40 2013 +0200

    removed debugging info

commit 04c9a10f43cfc613b26017747a887ae95a365c12
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jun 27 09:26:38 2013 +0200

    bumped version

commit 88fcfaae7a5f7831f0163d03d0d131b06c3b19bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 17:20:07 2013 +0200

    Allow compilation without the PCL library

commit 4f202afefcb7c522c38f9968c95d3b78676eb059
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 16:54:07 2013 +0200

    small fixes to avoid relying on properly null-terminated strings.

commit 8135cbe6c00c0b66c11c02df379ccbe90db72825
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 16:46:13 2013 +0200

    described authentication process.

commit 62ff3604065dbe42d039681c21c076e6f805b164
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 16:34:29 2013 +0200

    updated

commit 6f4e1420729dba7e5d45601ec169f5d85a868ce0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 16:29:56 2013 +0200

    removed debugging message

commit e91fca55b4c7bf5dccdba9524c8bba2106988a41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 26 16:28:52 2013 +0200

    autogen'ed files update

commit e5def94e6ac42fb089f7fae320abf9eb2dca0d85
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 24 11:15:09 2013 +0200

    Advanced auth implemented

commit cbcdbd2fb26de3bc942c0eb732242fffdd3255ab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 22 16:45:21 2013 +0200

    Revert "Use the new type of XML"
    
    This reverts commit 2163836ad8d3ff5974a69373cfac2d7c2463f2e4.

commit 326ff002d61ae40cd2d69de48219013cf25df64a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 22 16:45:14 2013 +0200

    Revert "simplified opaque handling"
    
    This reverts commit 0af9c45e8c0bca97673f80f63ac73b77f8a23a13.

commit 0af9c45e8c0bca97673f80f63ac73b77f8a23a13
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 22 08:39:07 2013 +0200

    simplified opaque handling

commit 2163836ad8d3ff5974a69373cfac2d7c2463f2e4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 21 20:39:25 2013 +0200

    Use the new type of XML

commit e63913a8a7a3ac4a32a8ad221c7dc001c86e47f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 21 20:37:09 2013 +0200

    set PAM_RHOST variable using the clients's IP.

commit f1d96bdd0a30401143491da235db4ff7f081eec8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jun 15 22:56:11 2013 +0200

    bumped version

commit 3dade4c305b91e31fff1f1512f6fd0c2a6d30611
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 12 22:05:17 2013 +0200

    ensure that the actual reads on DTLS are at maximum MTU-1.

commit 84017d8593fe1bda5100e59f0289c3a935eb667c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jun 12 13:33:56 2013 +0200

    bumped version

commit e9be6eff7d9f637e3d8b15a1461b9d5a91e0cf0b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 10 19:32:47 2013 +0200

    corrected values returned in X-CSTP-MTU and X-DTLS-MTU

commit 1521a3caaa186ccd36d7ec7a8d0be89496d8214c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 7 11:36:34 2013 +0200

    Removed ability to send binary files.

commit e50059b385e860ffecda2c63756ac1fc1fc3cca2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jun 7 11:33:15 2013 +0200

    use X-SALSA20 to avoid any future conflicts

commit b61b31e40b25125179fc5fe8e5ea6b7b44e71a49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 3 22:13:23 2013 +0200

    keep the connection alive

commit 3e1939393669683425d5ab5d531deb648ce55120
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jun 3 22:12:43 2013 +0200

    do not try to send binaries if no path is setup

commit 754321c9e6db76c06cb825543b18534458a603ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 31 18:06:11 2013 +0200

    reorganized compatibility layer

commit 10246b78c41566978b86dbc1c96cd29086159a64
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 31 17:29:52 2013 +0200

    Allow downloading raw files from 1/binaries

commit 92fb37672decbfe7cc68dbdc82590b4d8ea04c09
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 27 22:43:05 2013 +0200

    doc update

commit 5be935dfd8476f7e120d1eef4e73e61b1890ffab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 27 22:39:29 2013 +0200

    use gnutls_privkey_sign_hash() when available.

commit 47587f9bf9bac8202c6ca1ae209c8f7964f365f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 27 22:27:35 2013 +0200

    Check X-CSTP-Address-Type and don't send addresses that were not requested.

commit 5783cd760bb25ba2ac5afd0d6c9ceb87a73a82bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 23 16:58:54 2013 +0200

    Added gettimeofday in the list of syscalls

commit 1a3b4911b9d74c8001993ceb4ef6ae9c9e995a6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 23 16:08:33 2013 +0200

    bumped version

commit 96a7f042374474f45ad7616a3d51bfc8a7a2157e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 23 16:06:20 2013 +0200

    doc update

commit 2d4ac0bb3ac4475aa1037dd5968466e0b6a7a176
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 22 20:16:07 2013 +0200

    updated seccomp code

commit 81dca4ccdcb677e529fa9d3319297b208dc01e84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 22 16:21:04 2013 +0200

    more verbose printing of signal deaths

commit 3271674773234689f46258e2e9dfbef08f4f647f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed May 22 16:08:27 2013 +0200

    simplified seccomp check

commit eb90dd78e3d85c6317e18f8405fe0e4611acaae9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 21 23:51:38 2013 +0200

    use strtok() to parse client provided string.

commit 489e0e1dc55fcd9691279a5b38a82055455b3e7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 21 23:38:03 2013 +0200

    require gnutls 3.2.1 to enable salsa20

commit 8ed0006c223062619cba0611e2c3dff539eca96f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 21 22:41:57 2013 +0200

    relax check on requirement on headers for libopts.

commit c723c70a3d316806ff8425d6a87e05861f835def
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 20 11:22:10 2013 +0200

    more files to ignore

commit b3cdd31dca0afa47386e0bf7f160ee8846752bf3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 20 11:03:50 2013 +0200

    Added missing file

commit 1519c0e4de36cf4e40a3eaa2e48708767d854ddd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 20 11:03:22 2013 +0200

    updated header

commit 8b2169908959c3436c1d057d7ad697140aafa82c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 20 11:03:08 2013 +0200

    updated license information

commit e5fd319026b38927f46a0e919ed4dfe8e053fad4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 20 11:01:29 2013 +0200

    emulate gettime

commit 7eef598a2993a24618834387a07c3fc0fca384d3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 20 10:56:54 2013 +0200

    updated gnulib

commit 3b158b19b46037e1c940e18267b4e052e0d43fc4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 19 20:08:02 2013 +0200

    doc fix

commit 026c31e72aef57584bcccf29746d093f25ce7550
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 19 19:05:13 2013 +0200

    do not restrict worker's memory

commit f803b2bdf65b62091589a189cc95d9acee962941
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 19 14:10:08 2013 +0200

    estream ciphersuite was given priority

commit dac888f1f501db95ecde14de46c694d8d2557d3e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 19 11:52:16 2013 +0200

    increased priority

commit d98a9c48c28ea94860ff94dcbd406068fd700514
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun May 19 11:24:00 2013 +0200

    print DTLS ciphersuite

commit d568b4f920593d191a6b53e0070d2e31447e3ec0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 18 22:46:14 2013 +0200

    doc update

commit 5646c055a1845909d5d07a209adb054b2be1b891
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 18 17:28:38 2013 +0200

    added missing files.

commit 3be923c77842570d811990e726c591b11133883e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat May 18 15:40:32 2013 +0200

    configure proceeds if regex library isn't found

commit f0afab67828fb5e63d5c6e6795c2e3c01e10983d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 17 22:01:53 2013 +0200

    corrected cipher names

commit e8458828ee3913dcee0d07ccfe4e4e857d71b7d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 17 21:15:24 2013 +0200

    Allow for a ciphersuite negotiation

commit 766d3bec7e5406f99a2ee5131dbe6e457b6438e2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 17 20:21:08 2013 +0200

    small fixes

commit e679fd643f7f50bb825a5c24c2df000b7764cff0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 17 20:07:58 2013 +0200

    reorganized HTTP header reading.

commit 0aff05f0d28ab10c4ee540d88781c3f07c69c271
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri May 17 08:35:29 2013 +0200

    corrected typo

commit 9a39ec0ce6b7e4abb343715105b6fd5c2cc1704a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 16 23:10:32 2013 +0200

    documented fix

commit 3071bda08a8c211d18b303487d34c7a9adadffd2
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Thu May 16 17:16:36 2013 +0300

    Make seccomp failures non-fatal & lower log prio
    
    Building a binary with --enable-seccomp and then running it on a < 3.5
    kernel, results in seccomp_load() failing and ocserv's worker process
    aborting. This might be okay-ish for users who ./configure && make
    install on their own systems but it's obviously non-ideal for e.g.
    distributions that need to distribute binaries.
    
    Unfortunately there doesn't seem to be a good way (that I could find) to
    check if the running kernel has seccomp -- uname/uts isn't a good
    solution as Ubuntu has backported it to 3.2, custom kernels might have
    CONFIG_SECCOMP=n etc.
    
    So, this makes a tradeoff call and removes the exit_worker() call on
    seccomp failures, lowers the seccomp error logs to LOG_DEBUG from
    LOG_WARNING and the "could not disable system calls" to LOG_INFO from
    LOG_ERR.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 3bfbe1a37119ad2da6d2c92725b556da79dabefd
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Thu May 16 17:16:35 2013 +0300

    Workaround libseccomp bug & fix error handling
    
    libseccomp has a bug where -EDOM is returned when seccomp_rule_add is
    called for pseudo system calls (i.e. < -99). This was triggered by
    adding the send() system call on my x86_64 machine. The bug seems to
    have been recently (May 7th, 2013) reported and fixed on libseccomp
    upstream but it will take a while to find its way to a release and
    distributions.
    
    Additionally, there was a bug on how libseccomp calls were error
    handled: libseccomp functions don't actually set errno, but set errno
    values in their return value instead. This resulted in the
    seccomp_rule_add call above to print "could not add send to seccomp
    filter: Success".
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 7bb5056d98a91cd2e458b5dfeb13ba99779e9c96
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 16 22:33:16 2013 +0200

    fixed length checks

commit ddae1e8339e19a4065d68713315e5b4cbc781ed1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 13 22:53:18 2013 +0200

    check for children cleanup prior to checking for termination.
    
    That allows to quickly terminate after the secmod death is detected.

commit 30efc0433e927d02091412f2d258878c435e857e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 13 22:50:35 2013 +0200

    updated example

commit 200e0cfaaa0a2c9ef9d97ff8c43fee84031c76a4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 13 22:43:54 2013 +0200

    use gnulib's ctype

commit 538d90913418ec2a6e4781ff39c03d7da72a404c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 7 23:48:07 2013 +0200

    released

commit 037db7a52c2c2a716181f06871985bb86f7abe27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 7 19:32:03 2013 +0200

    do not check for a working libregex if it is disabled

commit ebe956aec62ecbc296e39a82cbb21411b6886140
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 7 19:29:23 2013 +0300

    bumped version

commit c688a6fb4392ace5412406af0327ef7fa540d106
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 7 19:25:01 2013 +0300

    check for setproctitle

commit e9b60cbe4d2f4c64b366453896bf934c1295211e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue May 7 00:47:30 2013 +0300

    added missing files

commit bc30d9b20fa9718fa18729191bcb7dfd4099c02f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 6 12:11:44 2013 +0300

    design update

commit e0a7ad9fe6c744700be62356e1d36c58d8253a6e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon May 6 10:56:21 2013 +0300

    Added X-CSTP-Default-Domain option.

commit 67e83f89d78a70490204692ba5b35863e4ee4e20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu May 2 11:46:02 2013 +0300

    Use sigaction() to have a consistent behavior across systems for signals.

commit a84664733af1eecd9c772ac881a819423d119b89
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Apr 30 00:02:16 2013 +0300

    updated TODO

commit dd3571bc9909a1e717994524fe12d12aaaa09ff8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 29 14:07:52 2013 +0300

    Updates for cisco's client.

commit 6ee0af050ca4ae26fd72fbb1bbbd235cdb4a3195
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 29 02:27:29 2013 +0300

    corrected bug in anyconnect compat

commit d38aaf4d2fee6cc6e8ca931388a0fb6259be5ea0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 29 00:17:11 2013 +0300

    doc update

commit 58a4e81c94fbb27c9ad76257437e8af68c4d28c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 29 00:16:42 2013 +0300

    verify the ICMP IDs prior to checking response.

commit 947214a9a4a9d6af489a20df68ee33fcd7b9bca7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Apr 29 00:12:37 2013 +0300

    Added config file option ping-leases.

commit ce9fb618e537ec5f4227607501805dc36e77580f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 16:57:39 2013 +0300

    corrected bug which prevented ocpasswd adding more than a single user.

commit bdc6ed39413ab65100911a1161b3a9d4f89d0421
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 15:37:48 2013 +0300

    more files to ignore

commit cb35f8f6ac20a4fd2aa65e28b971cc32e85eb89a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 15:36:14 2013 +0300

    updated ocpasswd doc

commit 09b34ee745769bf99051f1dbb462520fbb809dd8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 15:33:46 2013 +0300

    make ocpasswd manpage

commit 38464bd822394203231561e6e9b126ba9b387540
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 15:16:29 2013 +0300

    Updated autogen generated files, and added more options to ocpasswd.
    
    ocpasswd now accepts the --lock and --unlock options and accepts the
    username as the last argument.

commit 66d9e9404dc7924f5e8299ca680438f88dd2b065
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Apr 28 15:01:17 2013 +0300

    updated libopts

commit fed7861b89cb276152874d28d98f64bccbe6560c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Apr 27 19:49:36 2013 +0300

    Prior to leasing an IPv4 ping it to check if it is already in use.

commit b0ff05dee9aa9b68dd003223964d5ad513292ce4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 12 17:29:16 2013 +0200

    read device name in FreeBSD

commit 6c43eedf50f399c24a191c6a4038609742118a4d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Apr 12 17:00:26 2013 +0200

    several updates to allow compilation on FreeBSD

commit 8f5e98579af3c3b86998e8b12250138f9586be5b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 3 19:02:22 2013 +0200

    updated doc

commit 78e46e59e5dc860e2b9ca65c6f002fd99e13334e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Apr 3 18:46:28 2013 +0200

    updated

commit 02895efaf7c9decdd5ce2c7afc959d1f20a556dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 25 20:02:15 2013 +0100

    Added license file

commit 74d84d1b641b96cb39730562df3b6cbe9f889d99
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 25 08:13:50 2013 +0100

    updated

commit 376fea950fbf5a11b7e14adefa6d2f71af818751
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 18:53:30 2013 +0100

    removed session ticket support

commit be87110e7cc8e01839940e094e2cf9c5befd9640
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 18:45:46 2013 +0100

    bumped version

commit a5ad896899fad633f278b37ab08700d44062a5c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 18:44:16 2013 +0100

    doc update

commit f275f8ac4c93953f77e4b96c1c8631be7286b9a7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 17:45:07 2013 +0100

    removed unused variable

commit b42857ffdd781de41005c4dd5abbb3ddca328897
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 16:03:26 2013 +0100

    MTU discovery simplified

commit fc6e385abe192b619b5bde62bcc47802a47766a8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 13:19:51 2013 +0100

    MTU handling updates

commit 123eae651080d129f14e322be97237ab766a8a4e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 09:36:42 2013 +0100

    clear any lists prior to running sec mod

commit 2a8bd08288946bbd30ceecb13d15e7001d3be924
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 09:31:46 2013 +0100

    Revert "run sec mod earlier to save memory"
    
    This reverts commit a8152e8c59fb7007b9dee5718bcb46f55b3d0e68.

commit b433e206828d4fa97a6ad7694cc9cab14d1b1642
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 09:11:02 2013 +0100

    when debugging do not set memory limits

commit a8152e8c59fb7007b9dee5718bcb46f55b3d0e68
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 08:50:40 2013 +0100

    run sec mod earlier to save memory

commit c1db9b97116aae2762426475a33a67df1c6f06af
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 08:46:16 2013 +0100

    deinitialize memory taken by configuration parser.

commit 1baa8d8a6f722c52481a1de12372240383f772fa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 24 08:42:43 2013 +0100

    disable dh-params by default

commit cbcb97cc79fecd9c183fd9b17ddec045645dda70
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 23 23:25:29 2013 +0100

    doc update

commit 42d532c3a310b8ad71bd02d4facbb798f838a1f5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 23 10:08:03 2013 +0100

    doc update

commit 6da505a0a1214d11d36d084c8983c7e49c5da751
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 23 09:48:06 2013 +0100

    added dh-params option into sample file

commit 4f49779015d461d8b0cce781a1f9abf17e620af1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 23 09:45:10 2013 +0100

    make clear that anyconnect compat layer is experimental

commit b994462ce1ab0744cbefe4caf911543e9035e84c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 23 09:41:28 2013 +0100

    depend on gnutls 3.1.10

commit 6632f53f58c26352185e46f4d7af2c76f2639cc3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 22 08:56:55 2013 +0100

    updated doc

commit 55c62d25b9a3af1338f124c66038c93d07dca698
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 17 09:56:07 2013 +0100

    use quotes when printing password file

commit c6f3f5b428413021b5ea3c4159c9d91a9188e945
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 17 09:54:13 2013 +0100

    cookies are overwritten prior to fork

commit a3b4a742bfd039bdb2987b36cbb6426cb58f9a27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Mar 17 00:00:25 2013 +0100

    Added anyconnect options to sample config

commit 0b87653241b586dd5b47b2caf1524012438f836c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 23:41:52 2013 +0100

    updated

commit dd3f304091e999bdd8fec330e6adf1c09fcf800f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 23:28:51 2013 +0100

    readjusted log levels

commit 530dbc71f1a5e772a56729533243f59275cd2826
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 23:25:19 2013 +0100

    reduce MTU on mtu failure in a less steep way

commit a29e6847c92f83e91bc0cdf96cbd4440668a8f59
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 23:24:15 2013 +0100

    changed level of messages

commit 9f18e7db9a38bb4a07f8f9a4a919e4f730da7ec1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 23:02:50 2013 +0100

    consider chroot environment when creating socket file.

commit c69c86cfdd337c3d54ec87630eba5e106ce13ece
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 22:54:05 2013 +0100

    simplified umask

commit 82df00f0b0cb078c3260e395265481a2c90496c6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 21:27:58 2013 +0100

    updates in unix socket creation

commit f941e6af69acfc415e514d19ac4211d43a108898
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 19:38:12 2013 +0100

    added missing file

commit 0dba2cbcff52b4b1b6017b96084dce9ac7390e83
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 19:38:05 2013 +0100

    use pkcs11_reinit() only when defined.

commit 40c99e2b4aa28ac9ccb4b4eeb6d6df9752472c9b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 19:33:01 2013 +0100

    bumped version

commit 37f03034247d5a90acf5121eedeb63db3907445d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 19:31:18 2013 +0100

    adjust buffer size if needed.

commit 70b7f3d6d975b0400205aeeae8b2c724e777193d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 16 19:25:23 2013 +0100

    consider TCP MSS in MTU calculations.

commit be6033e7b416a452156904acddf9f4e8b7fad389
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 20:01:56 2013 +0100

    set certain limits on the worker process using setrlimit()

commit 6746b1851f38b9611942e33127be03ba4eabee0d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 19:46:20 2013 +0100

    Added copyright headers

commit 08efccdfb19e48c5c9a8e30b2c57d92dc5b010e7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 19:45:14 2013 +0100

    include config.h in all files

commit 3d0530958fd6b96a49a742abb76a23a2651d4d84
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 19:40:24 2013 +0100

    reinitialize PKCS #11 modules after fork

commit 72e086be00be636b8c5c76228a937cd5c4e95d49
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 18:49:54 2013 +0100

    combine writes to a single system call.

commit 3883e930c7ebb2020567e00a0642ced9bf6148c1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 18:42:32 2013 +0100

    updated syscall list in seccomp

commit 5a4ce846b7253c7edaf069bf8e86dd748c24945a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 15 17:54:36 2013 +0100

    The TLS private keys are kept into a privileged process.
    
    That process is called security-module (sec-mod) and communicates
    with the workers using a unix domain socket.

commit 73a532b5c5c1b88bca38387bffe3e17a9efc30d2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 14 19:53:23 2013 +0100

    Always send the provided password to PAM irrespective of the prompt.

commit 0be2b2a054062f180ffd83f0ca172bd7160d8437
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 14 19:43:03 2013 +0100

    crypt(3) is used in the plain password file.
    
    In addition, ocpasswd program was added to generate password file entries.

commit 8d6af501c0cd1e10568d3ca679529676409597d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 14 11:35:46 2013 +0100

    Added ocpasswd

commit 9224a02b7723bcfd310b90661d70b1c84369f619
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 13 19:19:38 2013 +0100

    Updated sample script.

commit b552f27ddbf2a8bb46c2e1d07ba059f78c8e0d50
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 13 18:45:48 2013 +0100

    Do not let scripts block the server operation.

commit 0c4b013b3ff61fbd50207fe188cd8029614a41f9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 12 23:38:52 2013 +0100

    Added plain password format

commit 4c5c9110e808338547364f8a321b2da2f4272014
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 11 19:51:12 2013 +0100

    small doc updates

commit 1eeb33d5d7ee3fa2996bd866f08508ed6c55e9cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 11 19:49:06 2013 +0100

    enable session tickets.

commit 979729e8a3d7e37f171221d4f41c449f4919a140
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 7 10:45:36 2013 +0100

    manual page moved to section 8

commit b0a99ad57cebe55961a74bfb6cf6aef7ff9376bc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 7 10:43:45 2013 +0100

    doc update

commit 23977b53592f985bf58431f045144fd3fea90eec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 7 09:51:20 2013 +0100

    Added ability to specify multiple certificate and key pairs.

commit a0f1867c58fa4f00dcfc78c936d301d4d253f6f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 7 00:56:03 2013 +0100

    Allow setting DH parameters.

commit fcd075e6ac6eb7abbaa601f8415533b9fc73d208
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Mar 7 00:26:52 2013 +0100

    check the server certificate prior to initialization

commit 67c6f0f4d5a5636a3fa8386cc6679fcf6f5c7638
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 6 23:46:41 2013 +0100

    Added sanity check on certificate and key reading.

commit f828de76b48aba8e124d7ade2d56e69a008a90cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 6 23:46:05 2013 +0100

    Exit when mandatory configuration options are not present

commit b2e8137ddefddeaf13da1fa02031eebe7b8e762a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Mar 6 23:43:51 2013 +0100

    rate-limit-ms is no longer mandatory to set

commit 66a8ab6ad815961010fe201e646379314fc50bd6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 5 22:09:43 2013 +0100

    updated doc

commit 99e34f13a21bed1ee25bded98cecadfd38036758
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 5 09:05:01 2013 +0100

    updated

commit b87baa4b3be550e251dd42d6e6ec63618f7a4796
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 5 08:54:27 2013 +0100

    released 0.0.2

commit f68a039e591d1d3da883a280691448896546038b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 5 08:50:35 2013 +0100

    updated text

commit d47d4b8da52d2818e326a847da11c6dab1d95a1e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 5 08:39:55 2013 +0100

    seccomp is disabled by default

commit 6c54a37e6964fd519d9c81983a982bc57f55c7e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Mar 5 01:42:25 2013 +0100

    Allow setting OCSP responses.

commit 8ffe2f9d264f46fcda0c3434d1ef2ca2cec0ee90
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 22:22:27 2013 +0100

    corrected advertized address

commit f05c0c839ed07e3a4d32fbe7a164c0bd0e8b3bf6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 21:18:15 2013 +0100

    small optimizations

commit d547cbea65b91cf66b400b9e28f41d39dc107b27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 20:45:42 2013 +0100

    doc update

commit 90517977e27a9e89e250ef57c98b8142ae4c00ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 20:19:37 2013 +0100

    updated

commit 4a114e76415d4c726c5290ddac897b1a61c7ff80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 20:07:30 2013 +0100

    unified POST handlers, and auto-detect xml content

commit 244135268fe910bb0ca8ee145f40f6ca8ba99b3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 19:50:08 2013 +0100

    corrected check for banned entries

commit efd36016a5a41b1a1bd6aef11a9f421e6292fa04
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 19:43:32 2013 +0100

    Eliminated memory leaks on lists.

commit 432a2da897c830344ddedd5f526b38a1e0892be0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 19:42:10 2013 +0100

    Allow setting a reconnection delay time after a failed authentication attempt (added min-reauth-time option).

commit 2674af5aecf5aad9572393646ba35dab594c69ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 18:52:47 2013 +0100

    Allow longer sleeps than a second.

commit ce3bf1c22a3c09fafa83d80261ce1ff11c70c8e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 18:43:29 2013 +0100

    corrected typo

commit ecd90b533ea3440d8e4ed1094984d4681bae3613
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 06:23:58 2013 +0100

    Allow setting a rate limit on the number of connections.

commit 2037c62b6e55070d908193e9bdcc4af7f54fea8a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 06:05:49 2013 +0100

    updated doc

commit e086214aa30d3a52f32c1e88c7bcd75ee67805ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Mar 4 06:03:08 2013 +0100

    do not link against 3.1.7 or 8 version of gnutls.

commit 62392660cd385948435168c6afacf932e28bb5da
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Mar 2 15:32:51 2013 +0100

    Anyconnect client compatibility is optional.

commit 9900ff6060530a15f4782d6f7f49c0266c7b6462
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 23:39:47 2013 +0100

    simplified certificate request and require setting.

commit 4ca6484129f9c360c4259d033c50545f1abaa8dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 23:32:06 2013 +0100

    fix the 'local' keyword in DNS server settings.

commit 10d1215a1f24b2bf7c125fa58ac6c0fd1d895bc3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 22:07:37 2013 +0100

    doc update

commit f532a7275c9b9ab4847d6a18d44ad04a0ad524f3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 22:01:18 2013 +0100

    corrected cert require rule

commit ef188512378863d70dde9b0f5f61c8f158995313
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 21:52:57 2013 +0100

    Added option to allow sending a cookie without the corresponding certificate.
    
    This option is required for the cisco clients, that do not always use the
    client certificate. When this option is set to false it means that the cookie
    itself is sufficient for authentication. This is bad practice of smart cards
    are in use.

commit 394493dbcb638b1a9b100730143b5e3959bf1a47
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 21:26:19 2013 +0100

    use chdir prior to chroot.

commit 41e8d020b581e053c1ebabb8f98c04c16581a784
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Mar 1 19:52:10 2013 +0100

    Several updates to handle URLs requested by the cisco client.

commit 27b3378d4004e6c1fbb800b2d58903a40aaad2d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 23:29:07 2013 +0100

    Send correct replies.

commit 0dd43943a2e1e9ec3143663fcdfd2f1735ee0cab
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 23:20:52 2013 +0100

    Added title into success message

commit 6636541d7c1655743fb2db79f24aed1c91f2a6db
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 23:10:28 2013 +0100

    always set max-age

commit 83c979303319e4556d369d19800ac1154cf8722e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 22:29:10 2013 +0100

    include banner in the XML success message.

commit cb89a7438dad0f124eaafa272f4cb3aa4e2dbb18
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 21:14:30 2013 +0100

    ocserv.1 built is optional

commit 724a7ac3b5f5eb3e9468377ce9919379294f72d7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 20:31:34 2013 +0100

    more verbose in client methods

commit 306fb61d9076f1c8ad255d3ef0a55123640dccb4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 19:39:25 2013 +0100

    bumped version

commit 62ff6e467e9d8325b0bed49673f6640ae6bcbbb5
Author: Jason Cooper <jason@lakedaemon.net>
Date:   Tue Feb 26 15:32:14 2013 -0500

    warn if autogen isn't installed
    
    Signed-off-by: Jason Cooper <jason@lakedaemon.net>

commit 833b1979ecd36ccbe958fc4af5c742c8920dadb8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 27 19:03:38 2013 +0100

    Banner was made configurable.

commit 1ff5bfdec82486f15c53627bc91951aad6ff2245
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 26 23:47:46 2013 +0100

    log message updates

commit c1b9f307a0fe436e6351c46ac7ff4d5ea75e5548
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 26 23:47:04 2013 +0100

    Added timeout to handshake().

commit ac3b34da79590e3e7292e8730e008ccb7fefc700
Author: Jason Cooper <jason@lakedaemon.net>
Date:   Tue Feb 26 14:34:52 2013 -0500

    doc/ocserv.1 is generated, don't track it
    
    Signed-off-by: Jason Cooper <jason@lakedaemon.net>

commit d5a4948e222bc9d08020427e1f332e454e6dc3a2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 26 18:41:32 2013 +0100

    doc update

commit 2facb61dae63971af91f1d3d8f054809c390b4f7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 26 18:41:21 2013 +0100

    message updates

commit 992601bbd84468fd74b4b99d4a3168156073d68a
Author: Jason Cooper <jason@lakedaemon.net>
Date:   Tue Feb 26 16:49:57 2013 +0000

    add cscope/ctags make targets
    
    Newcomers to the code often use these tools to learn their way around.
    Integrate them into the build so that we don't accidentally track their
    files.
    
    Signed-off-by: Jason Cooper <jason@lakedaemon.net>
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit a01700430239086f2091b99889cd6b841a63b504
Author: Jason Cooper <jason@lakedaemon.net>
Date:   Tue Feb 26 16:10:40 2013 +0000

    main: check return of daemon()
    
    Signed-off-by: Jason Cooper <jason@lakedaemon.net>
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 15ef08a19af8c8faf2a4e879444565a2abbefaa3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 25 21:34:45 2013 +0100

    remove Werror from automake flags

commit faf47365326cf9056ea48329f9247df101e80091
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 25 21:22:19 2013 +0100

    updated

commit 6d036bc28083def013b05f740162cd55504f3389
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 25 21:18:22 2013 +0100

    Added autogen file.

commit ba9e6d115643fadd772a5a05b38364cbbf2a6310
Author: Jason Cooper <jason@lakedaemon.net>
Date:   Mon Feb 25 09:09:31 2013 -0500

    don't track aclocal.m4, it's a generated file
    
    Signed-off-by: Jason Cooper <jason@lakedaemon.net>
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 9cb139bdb06f4dd387216a02054df48e3be70543
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 25 21:12:14 2013 +0100

    Added support for TCP wrappers (libwrap)

commit 72e237698ef85a0c77723df55a3d2109f98f1237
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 24 11:29:03 2013 +0100

    Added some more CSTP headers

commit d06de0c46bd5cd1f57c926147874e72f23730e75
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 24 11:24:14 2013 +0100

    Allow setting NBNS.

commit d52e71b21b6d17c2ab473f66b3f30722c5a7f073
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 23 20:07:04 2013 +0100

    documented update

commit 6f2e6ce82a61aa075272dcc28134a62ed58a85e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 23 20:02:59 2013 +0100

    updated installation instructions

commit b3e6f486cf61db73d6544b7bd9f21332ce652a2a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 23 19:29:53 2013 +0100

    depend on automake 1.11.3

commit d2df8a3e4f8355535c79af61401b1755a59f6079
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 23:41:35 2013 +0100

    more complete http body handling

commit 82db04ad4db94d6410df968e8af0ca9348b33179
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 22:42:55 2013 +0100

    better initialization of req.

commit e727cafddce022ded72eb8e86566f95786bc8830
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 20:00:29 2013 +0100

    Added AM_PROG_AR to keep automake-1.12 happy. Reported by David Woodhouse.

commit 7c16f09cf5913a38cdfc3946c38dae1489e505f0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 19:58:48 2013 +0100

    Corrected issue with openconnect <= 4.00. Reported by Mike Miller.

commit 5a1f73f5b9a250491f6415c8f713c21f0789f486
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 19:36:43 2013 +0100

    Fix out-of-source tree build. Patch by Mike Miller.

commit b489e0f912a32611471fc83cfde0624883eafca7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 22 19:35:50 2013 +0100

    doc update

commit 6a5efd629b51e25aed952b01206873a712846031
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 20 21:27:21 2013 +0100

    small update

commit b16690b8cac5dcfbd8b0021cfd7b1f89c06005c4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 20 21:26:24 2013 +0100

    small update

commit bbca1c2736f8bd34753477581fde84c34d97a92c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 20 21:23:26 2013 +0100

    updated manual

commit 04abc9067f399ab3a2f7d2223e1d58a99b0656dc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 20 18:35:33 2013 +0100

    added news

commit b7516902a42f42baacbff626050928320350073f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 22:17:13 2013 +0100

    updates in DPD handling
    
    When have not received DPD for long try sending instead of immediately failing.
    Also treat any received message as DPD to prevent kicking an active client.

commit 4d7b353ed5aa1663d962d0a953e49702c5461b1b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 22:04:25 2013 +0100

    DPD_TRIES was defined and increased to 5 from 3

commit a9658a7f5f2b1293b35d42b124507901461ab3c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 21:59:26 2013 +0100

    small optimizations

commit 4bfbe6d7bd7b1731180802e6e067f3682c9966c2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 21:40:11 2013 +0100

    updated sample config

commit 3361d97cad54ecb2b322713ff27bfdd025620f04
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 21:30:05 2013 +0100

    updated

commit e9c2482e3d3101c74713e65bbe6bc4ad8330ab5e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 19:51:45 2013 +0100

    print the DPD time.

commit a98e48b9b71272b451df4991ebaa11459c70ac7b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 19:12:05 2013 +0100

    when receive a new UDP session, forward the fd and replace the old.

commit e5198dd40fd632fa10f57e565294a906220808b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 07:42:38 2013 +0100

    simplified TLS file load and reload.

commit 214bec96f02be161fb2956329181a6530729cc29
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 19 07:35:11 2013 +0100

    Load PINs early.

commit 628877881d58d0803d8a85ebe329658bf676ad11
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 18 22:24:00 2013 +0100

    Added configuration options for PIN files.

commit 6ddb1ff6318c39359f9a9fc9c8175a244d46550e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 17 22:02:25 2013 +0100

    print debugging information on the received HTTP headers

commit f1d769d5be45a9518587451ab2b980f302cb3f3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 16 18:46:25 2013 +0100

    doc update

commit ba80139452a5ded46d7b15b306a532db1d175863
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 16 16:46:37 2013 +0100

    mtu discovery via DPD is optional

commit 2b1626f494ddcbb332714e233ccf907d649c883c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 16 16:40:38 2013 +0100

    Added version.def.in

commit 04bebb32f22ffe33bccc0dadd3e25f5c717eaeac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 16 16:33:43 2013 +0100

    doc update

commit a7f14b7e686003270dfb4432e06052f5a613dbd7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 15 23:01:39 2013 +0100

    updated bug report address

commit 4ab7238051e036094bc788557136e9f528e8cbdc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 15 23:00:03 2013 +0100

    doc update

commit 0ff3f6de3c7c0a00d24171dfe0fb73e129717ab7
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 15 22:45:41 2013 +0100

    when restoring a cookie connection, extend the lifetime of the cookie.

commit 59026fb8f18043ea387e92ef3dba32c79a9e6ba5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 15 22:23:35 2013 +0100

    Added some kind of path MTU discovery using DPD.

commit 94304a2ff455418bd6a6fbeffab23320ebcdf812
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 15 22:03:57 2013 +0100

    simplified messages

commit 56cfac6887ced273628b98b7b9d21a23884ea237
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 14 09:08:35 2013 +0100

    updated

commit 8519cfc23427cb9f6788d6c0a4cb4a5a698cdfcf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 14 08:16:46 2013 +0100

    better log messages

commit 334338c73bb4aeb30732fd18d135178e225e9bfc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 14 08:11:16 2013 +0100

    Enable maintainance when maximum TLS sessions have been reached. Set more sane defaults for max sessions.

commit 6b702007775cc144334756ee71be25b4ca4734a5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 14 08:04:48 2013 +0100

    When the cookie DB is full enforce maintainance.

commit 85a5db06045382c3c14f5b9ba1e8816b25c72c86
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 13 22:40:27 2013 +0100

    updated

commit 8caff361c9376f43592ade7010e785ec261cc824
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 13 21:31:21 2013 +0100

    simplified (and corrected) TUN device creation and re-use

commit 2262d1c34ae203c907b1b43315fb9a7429045ddf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 13 21:10:25 2013 +0100

    postpone usage of cork and uncork

commit 56d1847e2967116109f4eb128eb4a88c891b92ae
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 13 21:06:33 2013 +0100

    corrected typo

commit c60be929e0009a434fcf83b10fc4928432bf1dba
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 13 18:04:33 2013 +0100

    simplified main loop

commit bbd9a588db5554b2bd3ed6b753814c1dc7b6578e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 13 17:58:52 2013 +0100

    reduced the default hash table size.

commit 7ba28c0131425e0f35a6f6a0cef6f04a85252d20
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 21:19:58 2013 +0100

    Added missing ioctl().

commit e49fbbe547cc1c7310398238411ab928520b3445
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 21:12:35 2013 +0100

    Allow NULL PAM auth token. This would allow to have password authentication on certain users that have a certificate.

commit 0e31edee4a0a0b4f8f9bed1208a56b50da7fa797
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 19:18:57 2013 +0100

    Added example scripts and updated documentation.

commit 35ce549e9e60dbcb19d8d086b86b00dbab19c62a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:56:33 2013 +0100

    Added missing files

commit 64a91f2b44ef50b3031a89f3979981223c3417ff
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:55:40 2013 +0100

    Simplify script calling by using the environment

commit 2f1cdb58009d0a49387d73bfd4482258ee11dbf0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:54:59 2013 +0100

    quit if no TCP port is available.

commit 7270341e627334825f5c0933a4189753b26f6fca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:54:15 2013 +0100

    write the correct PID in pid file

commit e8f6332f3682389b4566bf2e6d5643022f366f27
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:53:25 2013 +0100

    Use PAM account management and added support for user groups.

commit 121b2491aa7183142c77fb09f4adc1479efb6162
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:51:34 2013 +0100

    HUP signal reloads configuration

commit 8da6d44d8fbaec9c0cb212483f9515a122193f80
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:50:16 2013 +0100

    Updated documentation

commit 718d07208c163f51c3b82d52bcdfc4a6a85c3fa9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:49:41 2013 +0100

    use common function to exit

commit fba61159235c4d9ea9e235a1b857796f925568b4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:49:00 2013 +0100

    small updates

commit 8cba144e77561543419b0a82d11671826ddc5493
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 18:01:25 2013 +0100

    Added support for seccomp (untested)

commit 356da3fbe4ca1227f3246aa8fcf3c8205345f39c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 17:22:10 2013 +0100

    connect occurs before sending the fd to worker.

commit 217a5e48e252e6632da30f4a114cdb0777111cca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 12 09:35:01 2013 +0100

    set time to entry only when writing the WTMP file

commit 9bf5d7100faeb39672d50a4f37b3648381d6ea3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 11 20:41:33 2013 +0100

    corrected definition

commit 2e20c3f444a6a6639ce5d26ac40ff6c77ba2ed3d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 11 20:39:13 2013 +0100

    DTLS-Rekey time is set to be the 2/3 of cookie validity

commit 4060c80469a705c5b2375e4509710be233d56126
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 10 13:50:56 2013 +0100

    fork moved to gdbm backend expiration

commit 528f1e0ce8765239a5945ad09ee132a208a9371f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 10 13:41:29 2013 +0100

    more files to ignore

commit f3b085df6145aea768d784f0f8812a28b504861d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 10 13:41:00 2013 +0100

    added missing file

commit f8713edc3fac4a74ad7a74e65fc38826ad4d4663
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 10 13:40:29 2013 +0100

    better set socket options

commit db9f441e6e94683284583171afd4b594d13d8eca
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 10 13:35:50 2013 +0100

    Write wtmp file if possible.

commit 3784aa6ddc8eab9f8a8933c58ba4e8bac358bd3b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 10 10:04:42 2013 +0100

    increased cookie hash table size and better cleanup resources on errors

commit 985da9e2647738fd2ba6766fae54efe742b06f2b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 21:28:30 2013 +0100

    erase cookie data before forking to unprivileged process.

commit 478c6ca2cefcd090381397a88651d3c7ab20f016
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 21:13:46 2013 +0100

    when expiring stuff, do it on the main process unless we use gdbm.

commit 184b8d7a669bcc6c553fcfcd49b590ee55de6474
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 20:19:00 2013 +0100

    enforce maximum number of same clients

commit 429b0bb21384f373db5fe9c305f8f302e852c9f1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 20:10:01 2013 +0100

    Set a default config file.

commit 8b2ae25e5810287313aa8315fdc5d5b975c9197e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 20:06:10 2013 +0100

    Added PID file

commit a5257b61671811e7488cc2d075cce913088f82b2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 19:54:25 2013 +0100

    small reorganization

commit 4ac5d57b405933556b699fb95e97036433a995ac
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 19:49:27 2013 +0100

    Added OID examples

commit 8ad4e50db6625753f0f0491434d950b5419701be
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 13:22:19 2013 +0100

    ignore certificate in DTLS session

commit e94ad7590547a8181a202ff33303b4ff793d5368
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 13:09:18 2013 +0100

    more explicit debug messages.

commit 6b20fa9193ef068b483efffbb12cf460c602f012
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 13:09:08 2013 +0100

    do not require certificate on DTLS session

commit 43fed529bbe9cebf393f006a0bbbf4b482b10405
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 12:39:57 2013 +0100

    simplified logging in debug mode

commit 519f0a13ef8200a7ada71a020d0ba0d669be3b14
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 12:15:55 2013 +0100

    Several changes to compile on old linux kernels, and in constrained libgnutls libraries

commit 0fdc35505a54d433484403e116c3506763cfaca5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 01:53:03 2013 +0100

    kick out the peer if non DPD packets are received for 3x the DPD time

commit da60bbebe148965038952eee77e79453ddf28916
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 01:35:40 2013 +0100

    Ignore non-fatal DTLS errors.

commit 779ed618931e512d0e1f16300ddf15d530ce5f1a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 00:33:39 2013 +0100

    Use a compatible with BSD's setproctitle.

commit 39373b605c3333ed7fc25e3d4919971d7d7f0905
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 00:23:00 2013 +0100

    changes in debugging messages

commit 6c04ab31917d261acb8ed035524727097ed79c2c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Feb 9 00:18:30 2013 +0100

    Added wait_fd state in UDP channel

commit d6da960b1ea29d7ea631410388a67ae5e23032db
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 22:49:02 2013 +0100

    updated

commit 0fee2289bed72bc88404cfed9ce9b4530210e788
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 22:48:45 2013 +0100

    used a more sane setproctitle

commit 6aae1d60d5430b3151b4fe73489f505bbfb6f1c8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 22:37:41 2013 +0100

    set process title

commit b70a0251ba3d96506daffa5c871e2fa1f66d4d7a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 22:31:09 2013 +0100

    added license

commit d1946bbb3c3142abbc3712ccafe52b2aff0b5daa
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 22:16:53 2013 +0100

    MTU is now set via the main server

commit 5f4b8711ef7de98d06c13c5a13ee14a9bbd14264
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 21:51:58 2013 +0100

    Added configurable DPD

commit 6ac798634212e764828c3c6cf5caf325c0c78c5c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 19:30:14 2013 +0100

    explicitly close the logging subsystem

commit b6f7abb3f4aaaab6dd88ed4085b570da8ffd752c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 19:26:30 2013 +0100

    separated tun handling code from main worker code.

commit d6a87ee88ef252d7a8988400de9d596957dee850
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 19:21:05 2013 +0100

    correctly send termination signal to peer

commit 089bbed715917097fe16d80cfece2a0f79c18198
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 19:19:11 2013 +0100

    added a more graceful termination of workers.

commit 4434fd70fe76f8f75910af32838dd8947e63e223
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 18:22:18 2013 +0100

    several updates in cookies, and tun handling.

commit 1f5f288742753cb8718188d6d9c10ba65d79989d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 18:17:44 2013 +0100

    fixes for newer gnutls

commit b09c51d4f64922280e83c604bd3b209b96870711
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 18:15:22 2013 +0100

    set tun device MTU based on minimum MTU of DTLS and TLS.

commit f3a7c7d42226f2b2afaf5e184f45159b4bef5869
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 18:10:08 2013 +0100

    sample config uses cookie DB

commit 288766f6286976beee0f40a4ab740e68ec324289
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 18:02:39 2013 +0100

    use gnutls cork() and uncork() when available

commit bacf82195314709e8fe1b737f35d438911d61068
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 17:46:16 2013 +0100

    cleaned up TLS code which was moved to tlslib

commit 8f77d18b28f581d9ec9b0dafbe21ccfd87a43a79
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 8 17:26:51 2013 +0100

    mtu cleanups

commit 14460456e7b8d0fb32b83eb32020ad8b3efea73d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 20:43:11 2013 +0100

    gdbm was re-added and made optional.

commit 6606883665a00589027ad570dad2cdf3082c761f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 18:26:40 2013 +0100

    updated readme

commit a01acce3db7fc0c30f7ebf8caefbded10e13415e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 18:19:18 2013 +0100

    updated

commit 534ddfbfcc5704b3afd1af6bc13ea8af3423e81c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 18:19:10 2013 +0100

    Honour client's MTU choice.

commit 2478c519b28d73a4fb4b9115b0a1191dbb69b63f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 18:08:11 2013 +0100

    removed warning

commit a9c7c088c99a7540642dad90705500b24be8f093
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 18:06:34 2013 +0100

    Added a description of the server

commit 1cb7ab38e98e896b27c0a63a1d54b73def78e5e6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 17:48:16 2013 +0100

    Use a single UDP port in the server.
    
    Several modifications to use a single UDP port in the server. This
    is currently done using a hack, i.e., pass the UDP socket to worker,
    close it on the main server and then re-open it (using REUSEADDR).
    
    Also several updates in TUN handling to allow more than one clients connecting.

commit dd31208d4a2d60d6562a925dbcf6e6f7359d3c95
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 16:19:20 2013 +0100

    removed unneeded warning

commit 7bbfc546ea5b8cf123684b2e569ff56af6d4f4ce
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 08:04:04 2013 +0100

    updated

commit 4370f88001e7871cc247d3a9951fc28302c800fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 00:57:17 2013 +0100

    dropped dependency on gdbm. Cookies are stored in a hash.

commit bf3aef7fd04508d957be0abfa1a1988297c37b41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 00:16:45 2013 +0100

    updated

commit 2124d34e7fe8c81bed6b368330fb6e9096e75ab1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Feb 7 00:09:26 2013 +0100

    corrected issue in utmp

commit e743a8830aab6fd305ffbccdd576b01638d01f59
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 6 23:47:30 2013 +0100

    removed uneeded text

commit e380053caa7c5379a15a1116418cd617661766e5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 6 19:03:02 2013 +0100

    Added explicit logging to UTMP file.

commit 10d9b144bedf37b3344728ad3511eeec931f7cdc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 6 09:18:16 2013 +0100

    Use CCAN hashes and lists.

commit f101d7194ad048af78855c0546e5b2dbf38f8d2d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Feb 6 07:43:09 2013 +0100

    added fixme

commit 99824ebd945c0b0a6ff7d5e29ad3fc5b5bc9c1ea
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 23:56:17 2013 +0100

    corrected DTLS packet handling.

commit 1e0bcc269da83e5dd33b321066cdc5ce4070e598
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 22:11:38 2013 +0100

    reorganized headers

commit 40c9a094a717c96ddc24764bb547f3c2c5590e66
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 21:21:40 2013 +0100

    store hostname of the user, and pass it to scripts.

commit 83a07083fdab33c83a020e90c2359c617e2c14dd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 21:08:18 2013 +0100

    reply to the correct interface

commit 03edf5b5bc596979973f99818733cea299f9a751
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 21:03:40 2013 +0100

    changes to enable VPN functionality.

commit 75a394bec68fe0332b1ff3b05caa5f2fb15de279
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 20:17:21 2013 +0100

    be less verbose about children dying

commit 1759016be52c8ab1a3d70377535c85089e36fee8
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 19:44:58 2013 +0100

    call connect script with explicit lease

commit 7c3900176e4b1e5a1b986ca2cd5b9ae0a73474d4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 19:31:57 2013 +0100

    Send X-CSTP-Version and read hostname.

commit 2e43570fde39de8d15dd5aaba11c25182c6186c5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Feb 5 09:03:58 2013 +0100

    deinitialize the TLS cache prior to fork

commit 7d3a83a1e309a3b808406e344c03ecedc0b09d29
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 22:42:37 2013 +0100

    depend on the correct gnutls version

commit 7afe1849447dc7fe71df4890107cb444d84f259a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 22:35:59 2013 +0100

    added missing files

commit 013cc82993ae2e3e6ef084ade3d27428a8608b7f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 22:17:33 2013 +0100

    simplified call to expire cookies

commit 1222fcf8038a4c3bb23d88a2daac5e5812099978
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 22:00:12 2013 +0100

    updated

commit 490d0814ee6ff8fb81d92fce1698f090734ceeef
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 21:54:33 2013 +0100

    Check for root permissions after parsing command line

commit e08baf862402c05e83088b3a861880b438e5430e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 21:50:50 2013 +0100

    use close-on-exec flag on fds

commit 734a6911a92732c1587e8c2b15a79646e028d71c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 21:20:09 2013 +0100

    added cloexec module

commit f5507a7161a83c31db17a1da67df761e84b8b7cb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 20:56:35 2013 +0100

    clear all fds and mem prior to exec

commit c8c90ffeda1dbffc87fe348ef5269d37b285447c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 20:43:49 2013 +0100

    updated

commit 61ae5a9c06d19cec7a2b9c443c2fedc039205469
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 20:43:28 2013 +0100

    Added connect and disconnect scripts

commit 087e1f852247d9116921bf6e14b6ad6c72793ac3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 20:08:08 2013 +0100

    handle disconnections

commit cf179000a0c7331620f0d606a39717760cfb59a2
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 19:53:52 2013 +0100

    print the pid of dying processes

commit 9b072c22bad9d8a6f4a6c7759624ebc42ff9d8bf
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 19:26:12 2013 +0100

    removed debugging info

commit ceca40369113833a856eeabc8364d19b0733a8b9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 19:05:17 2013 +0100

    Added automatic TLS session expiration.

commit 6572f2a0821a8c84e2504c7b3c784fac22ce9783
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Feb 4 01:48:09 2013 +0100

    reduce the number of data exchanged during a resumption.

commit 4d344f2017a4e1204233b84e7de4854e8b56e062
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 3 21:43:33 2013 +0100

    Added missing file

commit 1fb76ce89056998c25d628cbc703e210e6c47086
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Feb 3 21:23:29 2013 +0100

    Added session resumption to TLS server.

commit 7d962401a1095b2a4be53765f4c41850933684cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 20:07:58 2013 +0100

    updated

commit 20df5f8d60e1e30c67a18af9d6343f4501d8631d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 20:07:05 2013 +0100

    updated

commit ea434d50f96802b0f19d60f0b45250d2220afe70
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 20:06:58 2013 +0100

    updated config.h.in

commit a4b588eebc12f605c9075cbb88e9d6d055095cbe
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 20:00:34 2013 +0100

    use the full certificate DN if no username is set

commit 24cead11d4ff65a2253a1bfe6a2805d611881a41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 19:58:23 2013 +0100

    Added some primitive mtu handling

commit 035b81209d105fa6ead01aa198f4f98c5df93055
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 19:53:41 2013 +0100

    Added missing files

commit 65a3ac4cb44394c9c2375a22ef0885c438aa5e38
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 08:16:18 2013 +0100

    better name for db_file

commit 366d47cdf326e8fdf733be0c8b15898762bab6c0
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 08:15:38 2013 +0100

    updated

commit 73c36c31f93d23df64f99c227d54d0ed88c1da77
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Feb 1 08:13:03 2013 +0100

    master secret doesn't need to be generated by the server

commit 92b1d573ebbecb15eb49c476a200519c72d6b340
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 31 22:52:39 2013 +0100

    set a maximum number of clients

commit a923a8a29aff6f61a0d05e0b0ab1e9030bfa71de
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 31 22:40:45 2013 +0100

    set a default priority string if not set.

commit 9b9f8daead80ff370b58dd11c9e41c739bd82263
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 31 20:38:23 2013 +0100

    updated

commit 599c3d6b59771e81ead1cd7c2d8748b980d7ac9e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 31 20:36:49 2013 +0100

    cleanups

commit 6608f7ad7f2ce92a0a11437e0dfe43aca513a22e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Thu Jan 31 20:18:29 2013 +0100

    Fixed UDP side.

commit 103f32c311a4d568cecc91096f300d46fd03eb45
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 22:29:41 2013 +0100

    Allow a graceful shutdown.

commit 995d31069495e6bf1296d63a692441ca53065392
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 22:21:08 2013 +0100

    Allow worker to received asynchronous commands from main.

commit 014d54e2353ea0b6968baf614685635da253c993
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 21:56:36 2013 +0100

    chroot worker process

commit 853d5341c02232c66ccee26aa8da937ceedf88d1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 21:48:50 2013 +0100

    added missing file

commit 5838f376759218f982fe54c72c970bdec0e5ae34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 21:47:59 2013 +0100

    Added todo

commit b8f04d80278ab97906dd6a3ef0ce83b10217608e
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 21:43:10 2013 +0100

    Added PAM authentication.

commit 0a8b95102248cd69e08f101819af8aee6aa9305b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 21:20:16 2013 +0100

    several updates and fixes in auth

commit 25b06170817718b488ac18f8d8c3058ad203a678
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 19:00:29 2013 +0100

    better file structure

commit ac0f207579c5afbb3b02033309c60d06eb433ead
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:57:42 2013 +0100

    silence background operation

commit e34d54318d9db5ee504c344cacf18f439bd8399d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:55:16 2013 +0100

    notify that root access is required

commit c465a2748209a6841873c936898ea4f2d397d1fd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:53:59 2013 +0100

    daemonize

commit ba82188003185ff5936a5d9a24e73a79ba30ec41
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:52:25 2013 +0100

    small updates. Added sample configuration.

commit d462edcf354972bfab6f48ebcbb8f3a72dd30b9f
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:43:36 2013 +0100

    Associate a gnutls session with the worker state ptr.

commit 0b6fc4c696721dfa0f974d2634f781d703c8e341
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:18:45 2013 +0100

    Read configuration file

commit e54667b71c99b2ec72e6b6a676b13b817da1a46c
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:18:00 2013 +0100

    make local option work

commit f4985166a9e0ef509cbfbf1beffc3090be98b5a6
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 17:08:30 2013 +0100

    Added compile

commit 8c2735d1e172208c3c1a70da256743e0e15a31bb
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 30 01:39:00 2013 +0100

    use autogen for command line options

commit 18becb9640c75bb88c7ad84812ec478855bf84cc
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 29 20:59:15 2013 +0100

    better notation

commit 23fe42f5d46a1dfb648fa1760ad0f1208e940538
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 29 20:24:17 2013 +0100

    Allow a certain number of requests to the HTTP server

commit b24a3bf74b9815346184240656327cb6cd48eaf5
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 29 20:19:23 2013 +0100

    server_st -> worker_st

commit b8da3bd6ce8674a108f92c58e1076e9981557c62
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 29 20:16:39 2013 +0100

    bring up tun interface

commit 3a78e632f72f0d7562ec9e6ab6be4daf385c3a05
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 29 20:16:29 2013 +0100

    initialize memory

commit 1a0cc31925cbec85c0f08ac7674baf59cc02ae90
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Tue Jan 29 20:03:38 2013 +0100

    Provide client with normal leased IPs.

commit bd11f34cc6993dee90fb970966ffc91d82b3d283
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 28 23:38:06 2013 +0100

    use const

commit ba3705529e83f383825153336fc6bc9befb1e16d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 28 23:34:59 2013 +0100

    main server keeps list of client IPs

commit 8060601a33b4eedb5cc63623c237e96677b0a5e9
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 28 21:48:10 2013 +0100

    updated

commit be55e646389bca1579fdc679c3e0acefc165abd4
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 28 20:38:40 2013 +0100

    separated tun code from main

commit f751a9702aafe9de85c082758147fed916021792
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 28 20:27:34 2013 +0100

    Added missing files

commit ba72042e03b4a04f40dc3c4e90b80d8d24b9e24d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Mon Jan 28 19:01:12 2013 +0100

    updated server.

commit 2aa1bf3993719f6c5e883e85d819ea722ad99453
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 16 19:25:36 2013 +0100

    Added missing file

commit 9045bcac64c77aa298cf3129d03a6830d3dc7dd3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Wed Jan 16 19:24:58 2013 +0100

    Fixed connection issue with new openconnect client.

commit a78a99e1c7214a03ae50196becb6c1ea5f2c3c34
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 14:47:28 2013 +0100

    small fixes

commit 9f8db00c2e8ab129a0458109abbb0f5bceb6d5b3
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 14:28:38 2013 +0100

    Allow dropping privileges

commit ee6e6a63cbf6aae23d317d1331ff0fd582b83138
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 13:57:32 2013 +0100

    set configured addresses to tun device.

commit 04f9a4ae9ea1259a33bd99a16d4a3c43f7351ebd
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 13:32:48 2013 +0100

    tls_print -> tls_puts to distinguish from printf

commit 6db0cf229a7ca4cd224bc3418f57a70ab6768b33
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 13:31:38 2013 +0100

    preliminary configuration for networks.

commit cd440afc7e322a535784d730c15db4a3d13a9715
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 11:49:21 2013 +0100

    Added internal logging subsystem.

commit f210a96e02eca73dfdb5752bfcf158a97a968431
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 11:16:02 2013 +0100

    Added automake/autoconf system

commit dd99c391100e07540132182ab82eb75d7143e49b
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 10:57:27 2013 +0100

    Moved sources

commit 2a2c39fbb26ec6e3d72cb9053eebe34937feb83a
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 10:53:40 2013 +0100

    better handling of headers.

commit 6255e2f5f40debea80451ac9a59611b8ae4b4ec1
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 01:32:09 2013 +0100

    extract username from certificate.

commit 2ea9b5fdf7e221508782da6ff1e793fdef224369
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 01:10:42 2013 +0100

    removed unused code

commit 3803553ba247f96ad689dd17cfb361485801a2ec
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sun Jan 13 01:07:28 2013 +0100

    updated server

commit 09b7fd57e1384cf5c6a96a6ece07d9979547c3df
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Sat Jan 5 00:21:16 2013 +0100

    a.out -> server
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit 5ada6654f100f87dc0fa973cd48f6474e4cca55d
Author: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
Date:   Fri Jan 4 19:09:43 2013 +0100

    updated for gnutls
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

commit eb3bd0e27e8ad85405e511c61c4d6071d3db0b34
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Fri Jan 4 00:15:27 2013 +0000

    Initial import of test hack
    
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>