AMajor/SoftEtherVPN
1
0
Fork 0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2024-11-26 19:39:53 +03:00
Code Releases Activity
226 Commits 1 Branch 26 Tags 548 MiB
56c4582da8
Commit Graph

226 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Guanzhong Chen
56c4582da8 Allow specifying cipher suites instead of single ciphers (#343) 
* Allow specifying cipher suites instead of single ciphers.

CipherName now specifies all cipher suites instead of the
preferred cipher. This allows insecure ciphers like RC4 to
be permanently disabled, instead of being the default fallback
when the preferred cipher is unsupported.

CipherName is now left for OpenSSL to verify. Should it be
invalid, a secure default is used. The default CipherName setting
for new servers is one such invalid string: "~DEFAULT~". This
allows for future updates to change the default and the servers
can stay secure.

* Remove unused temporary variable.
 2018-02-08 00:13:41 +01:00
Moataz Elmasry
8cafa07d9c Set an initialization value in Network.c to be conform with PR #275 2018-02-01 00:10:04 +01:00
Moataz Elmasry
a5fa265811
Merge pull request #275 from chipitsine/master 
cppcheck findings
 2018-02-01 00:06:08 +01:00
Moataz Elmasry
3de0890a02 Extend authors list 2018-01-25 02:59:08 +01:00
Moataz Elmasry
9d6c1ea0e9 Add missing function definition 2018-01-25 02:58:18 +01:00
Moataz Elmasry
93d9ade990 Merge PR #129 into master. 2018-01-25 02:55:11 +01:00
Moataz Elmasry
93c04d0ddc Update authors list 2018-01-23 21:44:49 +01:00
Maks Naumov
ea4bb811ef Fix log msg for IKE with agressive exchange mode (#425) 2018-01-23 17:42:20 +01:00
Moataz Elmasry
5eb83bbad4
Merge pull request #419 from dnobori/180105-bugfix 
Fixes 11 vulnerabilities
 2018-01-19 17:54:23 +01:00
Daiyuu Nobori
7de986dcca 7 missing memory boundaries checks and similar memory problems. There are no risk of arbitrary code execution or intrusion on these bugs in my analysis. However, these problems may lead to crash the running server process. So these bugs must be fixed. 
Buffer overread in ParseL2TPPacket()
Memory corruption in IcmpParseResult
Missing bounds check in ParseUDP() can lead to invalid memory access
Out-of-bounds read in IPsec_PPP.c (unterminated string buffer)
Overlapping parameters to memcpy() via StrToIp6()
PACK ReadValue() crash vulnerability
Potential use of uninitialized memory via IPToInAddr6()

4 memory leaks. While the amount of leakage is very small per time, these bugs can finally cause process crash by out of memory. So these bugs must be fixed.

Memory leak in NnReadDnsRecord
Memory leak in RadiusLogin()
Memory leak via ParsePacketIPv4WithDummyMacHeader
Remote memory leak in OpenVPN server code

1 coding improvement. This is not a bug, however, I fixed the code to avoid furture misunderstanding.

RecvAll can return success on failure (leading to use of uninitialized memory)

Contributors for this bugfix:

- Max Planck Institute for Molecular Genetics
- Guido Vranken
 2018-01-15 10:25:10 +09:00
Daiyuu Nobori
8edbcd4c0d update recent authors 2018-01-15 10:11:40 +09:00
Moataz Elmasry
b810352f67 Updated AUTHORS.TXT file 2018-01-11 23:57:55 +01:00
macvk
ab4b27ab3c Add parameter "ListenIP" to server configuration (vpn_server.config) (#202) 
* Added parameter "ListenIP" to server configuration (vpn_server.config)

* Fixed bug in VPN client
 2018-01-11 23:53:38 +01:00
Daiyuu Nobori
e391b4d503
Merge pull request #405 from dnobori/dev 
Fixed the bug which occurs the L2TP/IPsec connection error with Android Oreo, etc.
 2018-01-04 17:59:03 +09:00
Daiyuu Nobori
ce3d35c595 Added the function to save the DNS query log on the packet logs. (fix) 2017-12-22 07:26:06 +09:00
Daiyuu Nobori
a0b54d7c6d Added the TCP destination port 3128 (well known as Squid default port) to assume as the HTTP proxy port on the packet logging. 2017-12-21 23:25:08 +09:00
Daiyuu Nobori
bb30535bb6 Fix the function name: RFC3164 -> RFC3339 2017-12-21 23:24:06 +09:00
Daiyuu Nobori
97e7a82be2 Added the function to save the DNS query log on the packet logs. 2017-12-21 23:23:17 +09:00
Daiyuu Nobori
4a01c41d09 Fixed the bug which occurs the L2TP/IPsec connection error with Android Oreo. 2017-12-21 23:21:31 +09:00
Ilya Shipitsin
bed99f9a56 build documentation refactoring (#395) 
BUILD_WINDOWS.TXT, BUILD_UNIX.TXT removed from root folder

src/BUILD_WINDOWS.TXT, src/BUILD_UNIX.TXT converted to "md"

BUILD_WINDOWS.TXT, BUILD_UNIX.TXT are now hyperlinks in README.md
 2017-12-05 13:17:14 +01:00
Moataz Elmasry
671407dcfa Add travis-ci Badge to README.md 2017-12-04 23:40:39 +01:00
Moataz Elmasry
87c659e089 Update AUTHORS.TXT 2017-12-04 16:59:30 +01:00
Moataz Elmasry
d94d5ed2e7
Reformat README. Add compile requirements (#379) 
* Reformat README. Add compile requirements

* Expand the list of required packages for a successful compilation

* Renamed README to README.md  (Default name in github)
 2017-12-03 20:51:07 +01:00
Nguyễn Hồng Quân
1f33fbdff4 Fix: vpncmd thinks that "hamcore.se2" is missing or broken (#339) 2017-12-03 20:50:12 +01:00
Den Lesnov
0796249525 fix aarch64 build (#281) 
Fix build error under ARM 64 bit (aarch64)
 2017-12-03 20:48:39 +01:00
Ilya Shipitsin
d1c543eecd initial travis-ci support (#348) 2017-12-03 20:47:31 +01:00
Moataz Elmasry
feb268c404
Initial Commit of gitignore (#380) 
* Initial Commit of gitignore

* Remove extra line in .gitignore
 2017-11-22 16:05:30 +01:00
Daiyuu Nobori
4f23c7d08a Added the board members list on README 2017-11-06 00:57:29 +09:00
Daiyuu Nobori
1f2c052dfb Fixed the bug on the OpenVPN Server function. 2017-10-23 02:54:51 +09:00
Daiyuu Nobori
fd7707d95a Fixed the service title. 2017-10-19 15:28:28 +09:00
Daiyuu Nobori
d8bf734baa Fixed the service title. 2017-10-19 15:24:51 +09:00
Daiyuu Nobori
804b9f1a19 Preparing the development branch 2017-10-19 15:18:42 +09:00
Daiyuu Nobori
d7d0e6d36f Merge branch 'master' of github.com:SoftEtherVPN/SoftEtherVPN 2017-10-19 15:01:10 +09:00
Daiyuu Nobori
9f9dc459a7 Preparing the development branch 2017-10-19 15:00:41 +09:00
Daiyuu Nobori
d8ab9c00ec Preparing the development branch 2017-10-19 14:54:56 +09:00
dnobori
faee11ff09 v4.23-9647-beta 2017-10-18 18:24:21 +09:00
Daiyuu Nobori
acf49ad536 Merge pull request #344 from quantum5/openssl1.1 
OpenSSL 1.1 Port
 2017-10-18 16:58:46 +09:00
Daiyuu Nobori
1b73778e3f Merge pull request #315 from rel22/SoftetherVPN-RuToken-S-patch-1 
Added support for RuToken USB key PKCS#11
 2017-10-18 16:58:19 +09:00
Daiyuu Nobori
f9436daa6f Merge pull request #313 from zulzardi/patch-2 
Fixed RSA key bits wrong calculation for certain x509 certificate
 2017-10-18 16:58:09 +09:00
Daiyuu Nobori
2241b9a366 Merge pull request #309 from moatazelmasry2/openvpn-extend-ciphers 
Openvpn extend ciphers
 2017-10-18 16:57:52 +09:00
Daiyuu Nobori
c32310205d Merge pull request #294 from moatazelmasry2/add-sha2 
Add HMAC SHA2-256, HMAC SHA2-384, HMAC SHA2-512 support
 2017-10-18 16:57:36 +09:00
Daiyuu Nobori
056c322601 Merge branch 'master' into add-sha2 2017-10-18 16:57:26 +09:00
Daiyuu Nobori
936815f2d4 Merge pull request #293 from moatazelmasry2/expand-dh-groups 
Add DH groups 2048,3072,4096 to IPSec_IKE
 2017-10-18 16:37:22 +09:00
Daiyuu Nobori
8ae035420b Merge pull request #282 from NoahO/NoahO-PPP-patch 
Stop Radius Delay from counting to next_resend
 2017-10-18 16:37:02 +09:00
Daiyuu Nobori
270cd9c17e Merge pull request #276 from DDGo/master 
Remove blank line at the start from init file (Debian)
 2017-10-18 16:36:44 +09:00
Daiyuu Nobori
b61882598f Merge pull request #256 from cm0x4D/master 
Using client parameter in function CtConnect
 2017-10-18 16:36:24 +09:00
cm0x4d
78bcc07fa9 Peer info optional in OvsParseKeyMethod2() 2017-09-28 10:37:24 +02:00
Quantum
0746be43a2 OpenSSL 1.1 Port. 
Some potential problems with Ssl_Init_Async_SendAlert.
 2017-07-29 22:31:25 -04:00
Daiyuu Nobori
e9006faf0c Merge pull request #287 from chipitsine/github-templates 
added github PR template
 2017-07-16 11:53:31 +09:00
rel22
61e71be380 Add support for RuToken USB key PKCS#11 
Test on RuToken-S key.
https://www.rutoken.ru/products/all/rutoken-s/
 2017-03-13 18:17:24 +03:00