]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Wed, 6 Dec 2017 16:45:10 +0000 (11:45 -0500)]
turn assertion into complaint
Alan T. DeKok [Wed, 6 Dec 2017 16:34:24 +0000 (11:34 -0500)]
print error on fd_delete failure
But we still keep going, because there's nothing else to do
Arran Cudbard-Bell [Wed, 6 Dec 2017 13:37:14 +0000 (13:37 +0000)]
Quiet clang scan
Arran Cudbard-Bell [Wed, 6 Dec 2017 10:46:21 +0000 (10:46 +0000)]
Add EAP-AKA' KDF and CK' IK' derivation functions
Arran Cudbard-Bell [Mon, 4 Dec 2017 23:41:51 +0000 (23:41 +0000)]
We don't need a request
Alan T. DeKok [Mon, 4 Dec 2017 20:21:27 +0000 (15:21 -0500)]
don't delete the FD event here.
_conn_failed() is only ever called from connection_state_failed()
which has already deleted the event
Alan T. DeKok [Mon, 4 Dec 2017 16:11:26 +0000 (11:11 -0500)]
added talloc type check
Alan T. DeKok [Mon, 4 Dec 2017 15:27:32 +0000 (10:27 -0500)]
set "free on close" only after successful open
Arran Cudbard-Bell [Mon, 4 Dec 2017 11:29:47 +0000 (11:29 +0000)]
Move around identity tags to accomodate AKA-Prime's requirement of '6' to identify the permanent ID
This means we can no longer identify 3GPP pseudonyms
Arran Cudbard-Bell [Sun, 3 Dec 2017 23:32:06 +0000 (23:32 +0000)]
Fix attribute offsets
Now the encoder/decoder work properly we don't need to access things at weird offsets.
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:25:07 +0000 (22:25 +0000)]
Add more tests for rands
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:09:02 +0000 (22:09 +0000)]
Pass in outlen correctly
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:05:35 +0000 (22:05 +0000)]
Add special case for EAP-AKA-Checkcode
Arran Cudbard-Bell [Sun, 3 Dec 2017 22:04:50 +0000 (22:04 +0000)]
Allow fr_pair_value_memcpy to work with zero length values
Arran Cudbard-Bell [Sun, 3 Dec 2017 21:32:06 +0000 (21:32 +0000)]
Remove special case for AUTS
Arran Cudbard-Bell [Sun, 3 Dec 2017 21:31:42 +0000 (21:31 +0000)]
Nonce-MT is fixed length
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:32:40 +0000 (16:32 +0000)]
Set tp to NULL
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:31:46 +0000 (16:31 +0000)]
Set encoder_ctx/decoder_ctx NULL
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:25:26 +0000 (16:25 +0000)]
Careful RFC reading says that any malformed attribute is fatal, even if it's > 128
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:24:48 +0000 (16:24 +0000)]
More detail for subtlv too long
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:24:37 +0000 (16:24 +0000)]
Print the padding data (that's not zeroed)
Arran Cudbard-Bell [Sun, 3 Dec 2017 16:24:21 +0000 (16:24 +0000)]
Missed zero length field check
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:52:12 +0000 (13:52 +0000)]
More tests
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:52:04 +0000 (13:52 +0000)]
Fix test references
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:51:20 +0000 (13:51 +0000)]
In our case OpenSSL doesn't pad, so reduce requirements for outlen by 16 bytes
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:50:22 +0000 (13:50 +0000)]
Formatting
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:50:16 +0000 (13:50 +0000)]
Use actual block size
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:50:00 +0000 (13:50 +0000)]
Brint length values in bits
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:49:47 +0000 (13:49 +0000)]
Add check for min-max of AT_RES
Arran Cudbard-Bell [Sun, 3 Dec 2017 13:43:00 +0000 (13:43 +0000)]
Don't run off the end of the input buffer, or get stuck in an infinite loop if IV is missing
Arran Cudbard-Bell [Sun, 3 Dec 2017 11:46:28 +0000 (11:46 +0000)]
Formatting
Arran Cudbard-Bell [Sun, 3 Dec 2017 11:46:19 +0000 (11:46 +0000)]
Trim back AKA dictionary more, add AKA' attributes
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:12:43 +0000 (01:12 +0000)]
Formatting
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:12:36 +0000 (01:12 +0000)]
Add all example packets from RFC4186 to tests
Add special cases for AT_AUTS and AT_RES
Add more length restrictions for some fields
Remove attributes not included in SIM/AKA
Fix array decoding support
Add tests for SIM error cases
Add support for decoding fixed length octet type attributes
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:08:41 +0000 (01:08 +0000)]
Remove some dictionary restrictions
These really need to be moved into the proto modules
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:08:01 +0000 (01:08 +0000)]
Allow errors to be tested for encoding functions
Copy the complete error stack to the output buffer
Arran Cudbard-Bell [Sun, 3 Dec 2017 01:07:29 +0000 (01:07 +0000)]
Peek at strerror without poping it
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:05:42 +0000 (16:05 +0000)]
Add test points to the DHCP encode/decoder
Use unique test point names to avoid symbol conflicts
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:04:51 +0000 (16:04 +0000)]
Don't link in radius/dhcp to unit_test_attribute
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:04:28 +0000 (16:04 +0000)]
Don't require test ctx functions
Arran Cudbard-Bell [Sat, 2 Dec 2017 16:04:07 +0000 (16:04 +0000)]
Prefix RADIUS tests with radius
Arran Cudbard-Bell [Fri, 1 Dec 2017 22:04:35 +0000 (22:04 +0000)]
Doxygen
Arran Cudbard-Bell [Fri, 1 Dec 2017 22:02:38 +0000 (22:02 +0000)]
Typo
Arran Cudbard-Bell [Fri, 1 Dec 2017 20:42:53 +0000 (20:42 +0000)]
Remove explicit RADIUS support from unit_test_attribute
Arran Cudbard-Bell [Fri, 1 Dec 2017 20:38:13 +0000 (20:38 +0000)]
Add testpoints to the radius encoder/decoder
Arran Cudbard-Bell [Fri, 1 Dec 2017 20:37:23 +0000 (20:37 +0000)]
empty decode is ok
Arran Cudbard-Bell [Fri, 1 Dec 2017 18:44:00 +0000 (18:44 +0000)]
Add "need-feature" command so we can skip tests if we're missing something
Arran Cudbard-Bell [Fri, 1 Dec 2017 17:36:16 +0000 (17:36 +0000)]
Fix linking issues with libfreeradius-eap-sim
Arran Cudbard-Bell [Fri, 1 Dec 2017 17:35:07 +0000 (17:35 +0000)]
If we have a fixed length for an attribute, convert it to a raw attribute if the length doesn't match
Arran Cudbard-Bell [Fri, 1 Dec 2017 17:34:30 +0000 (17:34 +0000)]
Fix ctx leak in unit_test_attribute
Arran Cudbard-Bell [Fri, 1 Dec 2017 15:30:26 +0000 (15:30 +0000)]
Doxygen
Arran Cudbard-Bell [Fri, 1 Dec 2017 15:20:38 +0000 (15:20 +0000)]
Add support for encoding version lists
Arran Cudbard-Bell [Fri, 1 Dec 2017 12:41:29 +0000 (12:41 +0000)]
Move encoding the reserved bytes of the TLV into the TLV value function
Alan T. DeKok [Fri, 1 Dec 2017 14:46:40 +0000 (09:46 -0500)]
add NAS-Type
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:52:40 +0000 (00:52 +0000)]
Quiet clang scan
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:47:41 +0000 (00:47 +0000)]
Many fixes in the SIM encoder/decoder
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:44:53 +0000 (00:44 +0000)]
Consistent variable names
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:43:59 +0000 (00:43 +0000)]
Pass in raw packet instead of reconstructing original packet from EAP-Messages
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:42:06 +0000 (00:42 +0000)]
Add support for arbitrary test points in unit_test_attribute
Arran Cudbard-Bell [Fri, 1 Dec 2017 00:39:06 +0000 (00:39 +0000)]
Print bool values (need for EAP-SIM/AKA/AKA')
Alan T. DeKok [Thu, 30 Nov 2017 15:31:49 +0000 (10:31 -0500)]
document range of lifetime.
Alan T. DeKok [Thu, 30 Nov 2017 15:31:27 +0000 (10:31 -0500)]
lifetime=0 means "it lives forever"
Alan T. DeKok [Wed, 29 Nov 2017 21:35:43 +0000 (16:35 -0500)]
more doxygen
Alan T. DeKok [Wed, 29 Nov 2017 21:04:00 +0000 (16:04 -0500)]
doxygen
Alan T. DeKok [Wed, 29 Nov 2017 20:29:14 +0000 (15:29 -0500)]
remove "read client" functionality.
It can now be better done via dynamic clients
Arran Cudbard-Bell [Wed, 29 Nov 2017 19:09:55 +0000 (19:09 +0000)]
Formatting
Arran Cudbard-Bell [Wed, 29 Nov 2017 19:09:48 +0000 (19:09 +0000)]
First attempt at making the SIM/AKA encoder produce encrypted attributes
Arran Cudbard-Bell [Wed, 29 Nov 2017 15:16:55 +0000 (15:16 +0000)]
128 bits is 16 bytes
...and I knew this a few weeks ago because the original tests used 16 byte keys *sigh*
Alan T. DeKok [Wed, 29 Nov 2017 16:16:01 +0000 (11:16 -0500)]
remove unused variable
Alan T. DeKok [Wed, 29 Nov 2017 16:01:28 +0000 (11:01 -0500)]
use worker->max_request_time
it should be configurable, but that can come later
Alan T. DeKok [Wed, 29 Nov 2017 15:55:57 +0000 (10:55 -0500)]
packets can be in the localized list for seconds
Alan T. DeKok [Wed, 29 Nov 2017 15:55:29 +0000 (10:55 -0500)]
don't check times, just rely on the timer event
Alan T. DeKok [Wed, 29 Nov 2017 15:05:46 +0000 (10:05 -0500)]
stupid doxygen
Alan T. DeKok [Wed, 29 Nov 2017 14:22:19 +0000 (09:22 -0500)]
ignore "do_not_respond", and treat it as "success"
Alan T. DeKok [Wed, 29 Nov 2017 14:05:10 +0000 (09:05 -0500)]
move checks to after "we have work to do"
Alan T. DeKok [Wed, 29 Nov 2017 14:00:27 +0000 (09:00 -0500)]
more debug3 messages
Alan T. DeKok [Wed, 29 Nov 2017 13:59:08 +0000 (08:59 -0500)]
don't delete cleanup timer immediately.
We may receive another packet within the same second
Alan T. DeKok [Wed, 29 Nov 2017 13:35:24 +0000 (08:35 -0500)]
move reset timer check so it isn't done multiple times
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:20:34 +0000 (22:20 +0000)]
Printing the whole ID is misleading
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:20:19 +0000 (22:20 +0000)]
Fix length check
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:16:16 +0000 (22:16 +0000)]
Wind cursor to head before popping
Arran Cudbard-Bell [Tue, 28 Nov 2017 22:16:00 +0000 (22:16 +0000)]
Enable custom format specifiers in radlog_request_perror
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:07:46 +0000 (20:07 +0000)]
Update doc
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:07:36 +0000 (20:07 +0000)]
Formatting
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:06:00 +0000 (20:06 +0000)]
Formatting
Matthew Newton [Tue, 28 Nov 2017 20:21:32 +0000 (20:21 +0000)]
wordsmithing and whitespace
Arran Cudbard-Bell [Tue, 28 Nov 2017 20:00:39 +0000 (20:00 +0000)]
shhh...
Alan T. DeKok [Tue, 28 Nov 2017 19:09:10 +0000 (14:09 -0500)]
remove ldap client tests
Arran Cudbard-Bell [Tue, 28 Nov 2017 19:43:45 +0000 (19:43 +0000)]
Travis fixes
Arran Cudbard-Bell [Tue, 28 Nov 2017 19:05:43 +0000 (19:05 +0000)]
Should check decr_len
Arran Cudbard-Bell [Tue, 28 Nov 2017 19:04:02 +0000 (19:04 +0000)]
Add xlats to encrypt/decrypt 3gpp pseudonyms
Alan T. DeKok [Tue, 28 Nov 2017 18:47:31 +0000 (13:47 -0500)]
remove clients loaded at module instantiate time
Alan T. DeKok [Tue, 28 Nov 2017 18:11:01 +0000 (13:11 -0500)]
udpate dynamic client example
Alan T. DeKok [Tue, 28 Nov 2017 18:01:13 +0000 (13:01 -0500)]
we don't use 3.1.x
Alan T. DeKok [Tue, 28 Nov 2017 16:39:42 +0000 (11:39 -0500)]
allow "make deb" before running "configure"
as "make deb" runs "configure" itself in a fake root
Alan T. DeKok [Tue, 28 Nov 2017 16:07:29 +0000 (11:07 -0500)]
don't automatically regenerate 'configure'
instead, warn about it. And tell the developer to run
'make reconfig'
Arran Cudbard-Bell [Tue, 28 Nov 2017 10:53:32 +0000 (10:53 +0000)]
Switch to the official libkqueue repo
Alan T. DeKok [Mon, 27 Nov 2017 20:58:24 +0000 (15:58 -0500)]
basic sanity checking on changing shared secrets while packets are live
Alan T. DeKok [Mon, 27 Nov 2017 20:50:26 +0000 (15:50 -0500)]
expire and renew packets
Alan T. DeKok [Mon, 27 Nov 2017 20:50:01 +0000 (15:50 -0500)]
remember to remove it from the pending list...