Permalink
Commits on Jan 16, 2019
  1. free request->coa on cancel, too

    alandekok committed Jan 16, 2019
  2. disable TLS 1.3 for OpenSSL >1.1, AND PSK AND certs

    alandekok committed Jan 16, 2019
    because OpenSSL doesn't support it.  Should help with #2390
  3. move "check for connection down" to coa_retransmit

    alandekok committed Jan 16, 2019
    as it is called from multiple places, it should check for
    error conditions that apply to it.
  4. add CANCELLED state to request state machine.

    alandekok committed Jan 16, 2019
    This is administratively cancelled, to distinguish it from a
    "finished normally" state.  The main difference is that for
    "finished normally", we send CoA packets.  On cancellation,
    we do not.
  5. don't free request->coa on a timer

    alandekok committed Jan 16, 2019
    the timer is hit multiple times, and not just at max_request_time
Commits on Jan 15, 2019
  1. note recent changes

    alandekok committed Jan 15, 2019
  2. request->home_server may be NULL

    alandekok committed Jan 15, 2019
  3. don't print two error messages

    alandekok committed Jan 15, 2019
  4. Fix timers with CoA. May help with #2308 and #2328

    alandekok committed Jan 15, 2019
    The maximum time for CoA packets should be enforced from
    when the CoA packet started, OR from `mrd`.  Further, the
    max time calculation shouldn't touch `request->delay`, because
    that is used by `coa_retransmit()`
  5. and more...

    alandekok committed Jan 15, 2019
  6. remove more spurious commits

    alandekok committed Jan 15, 2019
  7. remove merge text

    alandekok committed Jan 15, 2019
  8. fix typos From #2296

    alandekok committed Jan 15, 2019
  9. typo. Fixes #2357

    alandekok committed Jan 15, 2019
  10. note recent changes

    alandekok committed Jan 15, 2019
  11. Merge pull request #2387 from mcnewton/hintsfix

    alandekok committed Jan 15, 2019
    Fix crash processing hints when using Fall-Through
  12. Remove unnecessary pointer

    mcnewton committed Jan 15, 2019
    radius_pairmove can change request->packet->vps in some situations
    meaning request_pairs is left dangling at an old address.
    
    This restores the v2 "Fall-Through = Yes" behaviour, too (i.e.
    match on the current version of the request, not the original
    incoming packet attributes).
    
    Fixes #2380
  13. Merge pull request #2386 from alejandro-perez/v3.0.x

    arr2036 committed Jan 15, 2019
    Fix typo when verifying psk_identity and psk_password status
  14. Fix merge issue

    arr2036 committed Jan 15, 2019
  15. Fix relatively severe memory leak in EAP-PWD

    arr2036 committed Jan 15, 2019
    # Conflicts:
    #	src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c
Commits on Jan 14, 2019
  1. allow certs && PSK.

    alandekok committed Jan 14, 2019
    Also document this in the default config
  2. rearrange checks and make the error messages more descriptive

    alandekok committed Jan 14, 2019
  3. change test to soft fail if there's no session

    alandekok committed Jan 14, 2019
    in SSL init isn't finished, it's a soft fail if SSL_get_session()
    doesn't return a session.
Commits on Jan 13, 2019
  1. bump copyright

    alandekok committed Jan 13, 2019
Commits on Jan 11, 2019
  1. note recent changes

    alandekok committed Jan 11, 2019
  2. Merge pull request #2384 from alejandro-perez/v3.0.x

    alandekok committed Jan 11, 2019
    Add libssl1.1 as patched for Heartbleed
  3. Merge pull request #2383 from SearchLightNZ/sqlippool_skip_locked

    arr2036 committed Jan 11, 2019
    Include SKIP LOCKED queries as options for sqlippool, some notes, and some tidy up.
  4. Add libssl1.1 as patched for Heartbleed

    alejandro-perez committed Jan 10, 2019
  5. Add a note that ORDER BY RANDOM() is very slow.

    Nathan Ward
    Nathan Ward committed Jan 11, 2019
    This first gets all the free IPs, then randomises them, then selects the first one.
  6. Comment out sqlippool PostgreSQL allocate_find query, so only one all…

    Nathan Ward
    Nathan Ward committed Jan 11, 2019
    …ocate_find query is uncommented, mirroring MySQL and Oracle queries configs.