Ilya Shipitsin
df6df007a3
src/Mayaqua/Str.c: fix denial of service reported by Cisco Talos
...
TALOS-2023-1741
CVE-2023-23581
SoftEther VPN vpnserver EnSafeHttpHeaderValueStr denial of service
vulnerability
A denial of service vulnerability exists in the vpnserver
EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and
5.02. A specially-crafted network packet can lead to denial of service.
2023-04-21 22:38:22 +02:00
Yihong Wu
df7ea3c54a
Mayaqua/Memory: Fix memory corruption in base64
2023-03-31 09:14:39 +00:00
Koichiro IWAO
bedf1cd7e9
Mayaqua/Unix: Make VM detection work on FreeBSD
...
This is just a cosmetic problem in the result of "Caps" command which
gets the list of server functions/capability. There's no behavioural
change in SoftEtherVPN whether running on VM so far.
2023-02-28 20:08:04 +09:00
Yihong Wu
eea1de3d25
Mayaqua/Network: Fix empty packet being treated as error
2023-02-19 05:41:55 +00:00
Evengard
edcdc923ad
Reworked EAP-TLS 1.3 to account for RFC9190, implemented searching by certificate instead of certificate CN
2023-01-31 20:33:18 +03:00
Evengard
149096e13c
* Implementing user search by certificate common name.
...
* Reworking EAP-TLS flow
* Implementing iterative TLS downgrade supporting PPPD TLS 1.3+Tickets, Windows TLS 1.3 w/o Tickets, VPN Client Pro TLS 1.2.
2023-01-23 23:57:19 +03:00
Ilya Shipitsin
c7766d072b
src/Mayaqua/Unix.c: improve memory allocation handling according to Coverity
...
1875 if (mutex == NULL)
1876 {
CID 367204 (#1 of 1): Resource leak (RESOURCE_LEAK)4. leaked_storage: Variable lock going out of scope leaks the storage it points to.
1877 return NULL;
1878 }
2023-01-15 13:30:37 +06:00
Yihong Wu
6e48227d93
Update CMakeLists.txt
2023-01-07 10:27:47 +09:00
Yihong Wu
1b79df7954
Mayaqua/CMakeLists: Fix win32 build without vcpkg
2023-01-06 22:32:28 +09:00
Ilya Shipitsin
86e44e8d7b
LibreSSL-3.7.0 compatibility
2022-12-25 11:35:29 +06:00
Yihong Wu
05fa675d5a
Exclude inactive routes in Windows routing management
2022-09-16 17:25:11 +09:00
Yihong Wu
27d7f4cfbe
Fix route tracking on x86 Windows
2022-05-15 19:42:57 +09:00
Yihong Wu
ca996ed89a
Merge pull request #1522 from domosekai/tls
...
Implement complete server certificate verification
2022-05-12 23:38:38 +08:00
Yihong Wu
b3afbe37e9
Load legacy provider under OpenSSL 3.0
2022-04-26 22:00:15 +08:00
Yihong Wu
d86cf181bf
Fix UDP bulk v2 and protocol display
2022-03-20 16:48:15 +08:00
Daiyuu Nobori
56aedd6817
Memory: Add LittleEndian16(), LittleEndian32() and LittleEndian64()
2022-02-22 19:38:03 +01:00
H William Welliver
fd92c754fc
Add missing headers required for solaris/illumos
2022-01-06 23:06:36 -05:00
Yihong Wu
0a4455ac40
Add more TLS negotiation info in logging and UI
2021-12-29 17:41:29 +08:00
Yihong Wu
f94ac6351e
Implement complete server certificate verification
2021-12-29 17:41:29 +08:00
weidi
09dd8a8b07
endif UNIX_LINUX before BSD
2021-12-26 16:13:53 +01:00
weidi
3c7d78a1bf
Merge branch 'SoftEtherVPN:master' into master
2021-12-26 11:51:55 +01:00
Yihong Wu
adbbe94675
Merge pull request #1528 from updatede/patch-1
...
Mayaqua/Network.h: Fix UDP acceleration under NAT-T connections
2021-12-26 12:32:48 +08:00
Yihong Wu
1c1560f6ca
Apply security level override in azure client mode
2021-12-26 12:12:00 +08:00
Yihong Wu
68dc4e23d8
Improve NAT-T hint string handling
2021-12-26 12:11:51 +08:00
Johannes Weidacher
f1b464e84d
fix alpine compile issue.
2021-12-25 21:22:06 +01:00
Yihong Wu
51585e63e3
Fix server manager setting compatibility since build 9658
2021-12-25 13:25:34 +08:00
Johannes Weidacher
73ffa10f50
Fix build error on alpine
2021-12-23 20:59:48 +01:00
updatede
0b74a8e4ce
Update Network.h
...
Missing argument check lead to wrong value of IsIPv6 of struct UDP_ACCEL in NewUdpAccel(), eventually lead to UdpAccelInitClient() fail.
2021-12-22 13:19:50 +08:00
Yihong Wu
fc94843579
Fix the creation of a zero IPv6 address
...
Fix #1517
2021-12-12 20:05:36 +08:00
Yihong Wu
b91d9af5e3
Mayaqua/DNS: Fix memory safety in DNS operation threads
...
Fix #1329
2021-12-12 20:05:36 +08:00
Yihong Wu
2a40d21ef9
Merge pull request #1512 from domosekai/he
...
Perform TCP connection via IPv6 and IPv4 in parallel threads
2021-12-11 17:20:12 +08:00
Yihong Wu
384ab07996
Perform TCP connection attempts via IPv6 and IPv4 in parallel
2021-12-10 16:18:45 +08:00
Yihong Wu
e6bf956806
Return and cache all addresses from DNS resolver
2021-12-10 16:18:45 +08:00
Yihong Wu
528f313dbe
Merge pull request #1511 from domosekai/ipstr
...
Fix IPv6 address display in session info dialog
2021-12-09 12:55:10 +08:00
Yihong Wu
b4aad09f21
Restore R-UDP listener when ListenIP is ::
2021-12-07 21:55:41 +08:00
Yihong Wu
14f5854ecf
Fix IPv6 address display in session info dialog
2021-12-07 15:48:32 +08:00
Yihong Wu
b178f26e52
Reduce redundant loop
...
Co-authored-by: Davide Beatrici <github@davidebeatrici.dev>
2021-12-04 16:16:22 +08:00
Yihong Wu
9692a8d961
Fix DNS resolution when no IPv6 address is configured
2021-12-03 14:18:43 +08:00
Yihong Wu
2d1c8765aa
Merge pull request #1433 from domosekai/chain
...
Support user-specified server trust chain
2021-11-25 17:15:53 +08:00
Yihong Wu
8392ccd1fa
Merge pull request #1391 from domosekai/master
2021-11-25 11:09:12 +08:00
Yihong Wu
03859eb515
Merge pull request #1443 from domosekai/win32
...
Add IPv6 route management for Windows client
2021-09-18 22:12:27 +08:00
Davide Beatrici
ffc095f95a
CMake: Add build time check for EVP_PKEY_get_raw_public_key() availability
...
We need the function since 9dbbfcd388
, but unfortunately it's not provided by LibreSSL.
By introducing a build time check we inform the user about the issue explicitly instead of just letting compilation fail.
2021-08-08 19:29:32 +02:00
Rosen Penev
ee3bf7f507
fix compilation without OpenSSL engines
...
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-07 20:05:04 -07:00
domosekai
9b3077d955
Store interface metric separately as it mau change
2021-08-02 16:18:37 +08:00
domosekai
4ddf39e760
Remove obsolete Win32 functions
2021-08-02 16:18:37 +08:00
domosekai
ce0591d924
Add IPv6 route management for Windows client
2021-08-02 16:18:36 +08:00
domosekai
9182a9b4e9
Mayaqua/Network.c: Fix race condition in TUBE operation
2021-07-22 11:59:15 +00:00
domosekai
2761c1ca42
Support user-specified server trust chain
2021-07-21 07:02:42 +00:00
domosekai
1bb01e55e5
Mayaqua/TcpIp.c: Fix building DHCP static routes in new format
...
Fixes: 1708998
(Change IP structure so that IPv4 addresses are stored in RFC3493 format)
2021-07-14 08:11:05 +00:00
domosekai
a1dff0f594
Mayaqua/Network.c: Create UDP listener for every interface if ListenIP is wildcard
2021-07-11 16:15:29 +00:00