]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
8 years agoturn assertion into complaint
Alan T. DeKok [Wed, 6 Dec 2017 16:45:10 +0000 (11:45 -0500)] 
turn assertion into complaint

8 years agoprint error on fd_delete failure
Alan T. DeKok [Wed, 6 Dec 2017 16:34:24 +0000 (11:34 -0500)] 
print error on fd_delete failure

But we still keep going, because there's nothing else to do

8 years agoQuiet clang scan
Arran Cudbard-Bell [Wed, 6 Dec 2017 13:37:14 +0000 (13:37 +0000)] 
Quiet clang scan

8 years agoAdd EAP-AKA' KDF and CK' IK' derivation functions
Arran Cudbard-Bell [Wed, 6 Dec 2017 10:46:21 +0000 (10:46 +0000)] 
Add EAP-AKA' KDF and CK' IK' derivation functions

8 years agoWe don't need a request
Arran Cudbard-Bell [Mon, 4 Dec 2017 23:41:51 +0000 (23:41 +0000)] 
We don't need a request

8 years agodon't delete the FD event here.
Alan T. DeKok [Mon, 4 Dec 2017 20:21:27 +0000 (15:21 -0500)] 
don't delete the FD event here.

_conn_failed() is only ever called from connection_state_failed()
which has already deleted the event

8 years agoadded talloc type check
Alan T. DeKok [Mon, 4 Dec 2017 16:11:26 +0000 (11:11 -0500)] 
added talloc type check

8 years agoset "free on close" only after successful open
Alan T. DeKok [Mon, 4 Dec 2017 15:27:32 +0000 (10:27 -0500)] 
set "free on close" only after successful open

8 years agoMove around identity tags to accomodate AKA-Prime's requirement of '6' to identify...
Arran Cudbard-Bell [Mon, 4 Dec 2017 11:29:47 +0000 (11:29 +0000)] 
Move around identity tags to accomodate AKA-Prime's requirement of '6' to identify the permanent ID

This means we can no longer identify 3GPP pseudonyms

8 years agoFix attribute offsets
Arran Cudbard-Bell [Sun, 3 Dec 2017 23:32:06 +0000 (23:32 +0000)] 
Fix attribute offsets

Now the encoder/decoder work properly we don't need to access things at weird offsets.

8 years agoAdd more tests for rands
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:25:07 +0000 (22:25 +0000)] 
Add more tests for rands

8 years agoPass in outlen correctly
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:09:02 +0000 (22:09 +0000)] 
Pass in outlen correctly

8 years agoAdd special case for EAP-AKA-Checkcode
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:05:35 +0000 (22:05 +0000)] 
Add special case for EAP-AKA-Checkcode

8 years agoAllow fr_pair_value_memcpy to work with zero length values
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:04:50 +0000 (22:04 +0000)] 
Allow fr_pair_value_memcpy to work with zero length values

8 years agoRemove special case for AUTS
Arran Cudbard-Bell [Sun, 3 Dec 2017 21:32:06 +0000 (21:32 +0000)] 
Remove special case for AUTS

8 years agoNonce-MT is fixed length
Arran Cudbard-Bell [Sun, 3 Dec 2017 21:31:42 +0000 (21:31 +0000)] 
Nonce-MT is fixed length

8 years agoSet tp to NULL
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:32:40 +0000 (16:32 +0000)] 
Set tp to NULL

8 years agoSet encoder_ctx/decoder_ctx NULL
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:31:46 +0000 (16:31 +0000)] 
Set encoder_ctx/decoder_ctx NULL

8 years agoCareful RFC reading says that any malformed attribute is fatal, even if it's > 128
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:25:26 +0000 (16:25 +0000)] 
Careful RFC reading says that any malformed attribute is fatal, even if it's > 128

8 years agoMore detail for subtlv too long
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:24:48 +0000 (16:24 +0000)] 
More detail for subtlv too long

8 years agoPrint the padding data (that's not zeroed)
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:24:37 +0000 (16:24 +0000)] 
Print the padding data (that's not zeroed)

8 years agoMissed zero length field check
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:24:21 +0000 (16:24 +0000)] 
Missed zero length field check

8 years agoMore tests
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:52:12 +0000 (13:52 +0000)] 
More tests

8 years agoFix test references
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:52:04 +0000 (13:52 +0000)] 
Fix test references

8 years agoIn our case OpenSSL doesn't pad, so reduce requirements for outlen by 16 bytes
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:51:20 +0000 (13:51 +0000)] 
In our case OpenSSL doesn't pad, so reduce requirements for outlen by 16 bytes

8 years agoFormatting
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:50:22 +0000 (13:50 +0000)] 
Formatting

8 years agoUse actual block size
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:50:16 +0000 (13:50 +0000)] 
Use actual block size

8 years agoBrint length values in bits
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:50:00 +0000 (13:50 +0000)] 
Brint length values in bits

8 years agoAdd check for min-max of AT_RES
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:49:47 +0000 (13:49 +0000)] 
Add check for min-max of AT_RES

8 years agoDon't run off the end of the input buffer, or get stuck in an infinite loop if IV...
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:43:00 +0000 (13:43 +0000)] 
Don't run off the end of the input buffer, or get stuck in an infinite loop if IV is missing

8 years agoFormatting
Arran Cudbard-Bell [Sun, 3 Dec 2017 11:46:28 +0000 (11:46 +0000)] 
Formatting

8 years agoTrim back AKA dictionary more, add AKA' attributes
Arran Cudbard-Bell [Sun, 3 Dec 2017 11:46:19 +0000 (11:46 +0000)] 
Trim back AKA dictionary more, add AKA' attributes

8 years agoFormatting
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:12:43 +0000 (01:12 +0000)] 
Formatting

8 years agoAdd all example packets from RFC4186 to tests
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:12:36 +0000 (01:12 +0000)] 
Add all example packets from RFC4186 to tests

Add special cases for AT_AUTS and AT_RES

Add more length restrictions for some fields

Remove attributes not included in SIM/AKA

Fix array decoding support

Add tests for SIM error cases

Add support for decoding fixed length octet type attributes

8 years agoRemove some dictionary restrictions
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:08:41 +0000 (01:08 +0000)] 
Remove some dictionary restrictions

These really need to be moved into the proto modules

8 years agoAllow errors to be tested for encoding functions
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:08:01 +0000 (01:08 +0000)] 
Allow errors to be tested for encoding functions

Copy the complete error stack to the output buffer

8 years agoPeek at strerror without poping it
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:07:29 +0000 (01:07 +0000)] 
Peek at strerror without poping it

8 years agoAdd test points to the DHCP encode/decoder
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:05:42 +0000 (16:05 +0000)] 
Add test points to the DHCP encode/decoder

Use unique test point names to avoid symbol conflicts

8 years agoDon't link in radius/dhcp to unit_test_attribute
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:04:51 +0000 (16:04 +0000)] 
Don't link in radius/dhcp to unit_test_attribute

8 years agoDon't require test ctx functions
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:04:28 +0000 (16:04 +0000)] 
Don't require test ctx functions

8 years agoPrefix RADIUS tests with radius
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:04:07 +0000 (16:04 +0000)] 
Prefix RADIUS tests with radius

8 years agoDoxygen
Arran Cudbard-Bell [Fri, 1 Dec 2017 22:04:35 +0000 (22:04 +0000)] 
Doxygen

8 years agoTypo
Arran Cudbard-Bell [Fri, 1 Dec 2017 22:02:38 +0000 (22:02 +0000)] 
Typo

8 years agoRemove explicit RADIUS support from unit_test_attribute
Arran Cudbard-Bell [Fri, 1 Dec 2017 20:42:53 +0000 (20:42 +0000)] 
Remove explicit RADIUS support from unit_test_attribute

8 years agoAdd testpoints to the radius encoder/decoder
Arran Cudbard-Bell [Fri, 1 Dec 2017 20:38:13 +0000 (20:38 +0000)] 
Add testpoints to the radius encoder/decoder

8 years agoempty decode is ok
Arran Cudbard-Bell [Fri, 1 Dec 2017 20:37:23 +0000 (20:37 +0000)] 
empty decode is ok

8 years agoAdd "need-feature" command so we can skip tests if we're missing something
Arran Cudbard-Bell [Fri, 1 Dec 2017 18:44:00 +0000 (18:44 +0000)] 
Add "need-feature" command so we can skip tests if we're missing something

8 years agoFix linking issues with libfreeradius-eap-sim
Arran Cudbard-Bell [Fri, 1 Dec 2017 17:36:16 +0000 (17:36 +0000)] 
Fix linking issues with libfreeradius-eap-sim

8 years agoIf we have a fixed length for an attribute, convert it to a raw attribute if the...
Arran Cudbard-Bell [Fri, 1 Dec 2017 17:35:07 +0000 (17:35 +0000)] 
If we have a fixed length for an attribute, convert it to a raw attribute if the length doesn't match

8 years agoFix ctx leak in unit_test_attribute
Arran Cudbard-Bell [Fri, 1 Dec 2017 17:34:30 +0000 (17:34 +0000)] 
Fix ctx leak in unit_test_attribute

8 years agoDoxygen
Arran Cudbard-Bell [Fri, 1 Dec 2017 15:30:26 +0000 (15:30 +0000)] 
Doxygen

8 years agoAdd support for encoding version lists
Arran Cudbard-Bell [Fri, 1 Dec 2017 15:20:38 +0000 (15:20 +0000)] 
Add support for encoding version lists

8 years agoMove encoding the reserved bytes of the TLV into the TLV value function
Arran Cudbard-Bell [Fri, 1 Dec 2017 12:41:29 +0000 (12:41 +0000)] 
Move encoding the reserved bytes of the TLV into the TLV value function

8 years agoadd NAS-Type
Alan T. DeKok [Fri, 1 Dec 2017 14:46:40 +0000 (09:46 -0500)] 
add NAS-Type

8 years agoQuiet clang scan
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:52:40 +0000 (00:52 +0000)] 
Quiet clang scan

8 years agoMany fixes in the SIM encoder/decoder
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:47:41 +0000 (00:47 +0000)] 
Many fixes in the SIM encoder/decoder

8 years agoConsistent variable names
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:44:53 +0000 (00:44 +0000)] 
Consistent variable names

8 years agoPass in raw packet instead of reconstructing original packet from EAP-Messages
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:43:59 +0000 (00:43 +0000)] 
Pass in raw packet instead of reconstructing original packet from EAP-Messages

8 years agoAdd support for arbitrary test points in unit_test_attribute
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:42:06 +0000 (00:42 +0000)] 
Add support for arbitrary test points in unit_test_attribute

8 years agoPrint bool values (need for EAP-SIM/AKA/AKA')
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:39:06 +0000 (00:39 +0000)] 
Print bool values (need for EAP-SIM/AKA/AKA')

8 years agodocument range of lifetime.
Alan T. DeKok [Thu, 30 Nov 2017 15:31:49 +0000 (10:31 -0500)] 
document range of lifetime.

8 years agolifetime=0 means "it lives forever"
Alan T. DeKok [Thu, 30 Nov 2017 15:31:27 +0000 (10:31 -0500)] 
lifetime=0 means "it lives forever"

8 years agomore doxygen
Alan T. DeKok [Wed, 29 Nov 2017 21:35:43 +0000 (16:35 -0500)] 
more doxygen

8 years agodoxygen
Alan T. DeKok [Wed, 29 Nov 2017 21:04:00 +0000 (16:04 -0500)] 
doxygen

8 years agoremove "read client" functionality.
Alan T. DeKok [Wed, 29 Nov 2017 20:29:14 +0000 (15:29 -0500)] 
remove "read client" functionality.

It can now be better done via dynamic clients

8 years agoFormatting
Arran Cudbard-Bell [Wed, 29 Nov 2017 19:09:55 +0000 (19:09 +0000)] 
Formatting

8 years agoFirst attempt at making the SIM/AKA encoder produce encrypted attributes
Arran Cudbard-Bell [Wed, 29 Nov 2017 19:09:48 +0000 (19:09 +0000)] 
First attempt at making the SIM/AKA encoder produce encrypted attributes

8 years ago128 bits is 16 bytes
Arran Cudbard-Bell [Wed, 29 Nov 2017 15:16:55 +0000 (15:16 +0000)] 
128 bits is 16 bytes

...and I knew this a few weeks ago because the original tests used 16 byte keys *sigh*

8 years agoremove unused variable
Alan T. DeKok [Wed, 29 Nov 2017 16:16:01 +0000 (11:16 -0500)] 
remove unused variable

8 years agouse worker->max_request_time
Alan T. DeKok [Wed, 29 Nov 2017 16:01:28 +0000 (11:01 -0500)] 
use worker->max_request_time

it should be configurable, but that can come later

8 years agopackets can be in the localized list for seconds
Alan T. DeKok [Wed, 29 Nov 2017 15:55:57 +0000 (10:55 -0500)] 
packets can be in the localized list for seconds

8 years agodon't check times, just rely on the timer event
Alan T. DeKok [Wed, 29 Nov 2017 15:55:29 +0000 (10:55 -0500)] 
don't check times, just rely on the timer event

8 years agostupid doxygen
Alan T. DeKok [Wed, 29 Nov 2017 15:05:46 +0000 (10:05 -0500)] 
stupid doxygen

8 years agoignore "do_not_respond", and treat it as "success"
Alan T. DeKok [Wed, 29 Nov 2017 14:22:19 +0000 (09:22 -0500)] 
ignore "do_not_respond", and treat it as "success"

8 years agomove checks to after "we have work to do"
Alan T. DeKok [Wed, 29 Nov 2017 14:05:10 +0000 (09:05 -0500)] 
move checks to after "we have work to do"

8 years agomore debug3 messages
Alan T. DeKok [Wed, 29 Nov 2017 14:00:27 +0000 (09:00 -0500)] 
more debug3 messages

8 years agodon't delete cleanup timer immediately.
Alan T. DeKok [Wed, 29 Nov 2017 13:59:08 +0000 (08:59 -0500)] 
don't delete cleanup timer immediately.

We may receive another packet within the same second

8 years agomove reset timer check so it isn't done multiple times
Alan T. DeKok [Wed, 29 Nov 2017 13:35:24 +0000 (08:35 -0500)] 
move reset timer check so it isn't done multiple times

8 years agoPrinting the whole ID is misleading
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:20:34 +0000 (22:20 +0000)] 
Printing the whole ID is misleading

8 years agoFix length check
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:20:19 +0000 (22:20 +0000)] 
Fix length check

8 years agoWind cursor to head before popping
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:16:16 +0000 (22:16 +0000)] 
Wind cursor to head before popping

8 years agoEnable custom format specifiers in radlog_request_perror
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:16:00 +0000 (22:16 +0000)] 
Enable custom format specifiers in radlog_request_perror

8 years agoUpdate doc
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:07:46 +0000 (20:07 +0000)] 
Update doc

8 years agoFormatting
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:07:36 +0000 (20:07 +0000)] 
Formatting

8 years agoFormatting
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:06:00 +0000 (20:06 +0000)] 
Formatting

8 years agowordsmithing and whitespace
Matthew Newton [Tue, 28 Nov 2017 20:21:32 +0000 (20:21 +0000)] 
wordsmithing and whitespace

8 years agoshhh...
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:00:39 +0000 (20:00 +0000)] 
shhh...

8 years agoremove ldap client tests
Alan T. DeKok [Tue, 28 Nov 2017 19:09:10 +0000 (14:09 -0500)] 
remove ldap client tests

8 years agoTravis fixes
Arran Cudbard-Bell [Tue, 28 Nov 2017 19:43:45 +0000 (19:43 +0000)] 
Travis fixes

8 years agoShould check decr_len
Arran Cudbard-Bell [Tue, 28 Nov 2017 19:05:43 +0000 (19:05 +0000)] 
Should check decr_len

8 years agoAdd xlats to encrypt/decrypt 3gpp pseudonyms
Arran Cudbard-Bell [Tue, 28 Nov 2017 19:04:02 +0000 (19:04 +0000)] 
Add xlats to encrypt/decrypt 3gpp pseudonyms

8 years agoremove clients loaded at module instantiate time
Alan T. DeKok [Tue, 28 Nov 2017 18:47:31 +0000 (13:47 -0500)] 
remove clients loaded at module instantiate time

8 years agoudpate dynamic client example
Alan T. DeKok [Tue, 28 Nov 2017 18:11:01 +0000 (13:11 -0500)] 
udpate dynamic client example

8 years agowe don't use 3.1.x
Alan T. DeKok [Tue, 28 Nov 2017 18:01:13 +0000 (13:01 -0500)] 
we don't use 3.1.x

8 years agoallow "make deb" before running "configure"
Alan T. DeKok [Tue, 28 Nov 2017 16:39:42 +0000 (11:39 -0500)] 
allow "make deb" before running "configure"

as "make deb" runs "configure" itself in a fake root

8 years agodon't automatically regenerate 'configure'
Alan T. DeKok [Tue, 28 Nov 2017 16:07:29 +0000 (11:07 -0500)] 
don't automatically regenerate 'configure'

instead, warn about it.  And tell the developer to run
'make reconfig'

8 years agoSwitch to the official libkqueue repo
Arran Cudbard-Bell [Tue, 28 Nov 2017 10:53:32 +0000 (10:53 +0000)] 
Switch to the official libkqueue repo

8 years agobasic sanity checking on changing shared secrets while packets are live
Alan T. DeKok [Mon, 27 Nov 2017 20:58:24 +0000 (15:58 -0500)] 
basic sanity checking on changing shared secrets while packets are live

8 years agoexpire and renew packets
Alan T. DeKok [Mon, 27 Nov 2017 20:50:26 +0000 (15:50 -0500)] 
expire and renew packets

8 years agoremember to remove it from the pending list...
Alan T. DeKok [Mon, 27 Nov 2017 20:50:01 +0000 (15:50 -0500)] 
remember to remove it from the pending list...