ebd1d281dd
use SSL_SECOP_VERSION macro instead of OPENSSL_VERSION
...
OPENSSL_VERSION is fragile in LibreSSL, BoringSSL.
security level manipulation is openssl specific defined in
b362ccab5c
2021-02-20 17:48:26 +05:00
44447e9762
Merge PR #1252 : Bump ini from 1.3.5 to 1.3.7 in /src/bin/hamcore/wwwroot/admin/default
2020-12-11 21:38:11 +01:00
394354ff8a
Bump ini from 1.3.5 to 1.3.7 in /src/bin/hamcore/wwwroot/admin/default
...
Bumps [ini](https://github.com/isaacs/ini ) from 1.3.5 to 1.3.7.
- [Release notes](https://github.com/isaacs/ini/releases )
- [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.7 )
Signed-off-by: dependabot[bot] <support@github.com >
2020-12-11 09:21:51 +00:00
6ff00f637b
Merge pull request #1249 from davidebeatrici/proto-sstp-handleconnection-crash-fix
...
Cedar/Proto.c: fix crash in ProtoHandleConnection()
2020-12-08 21:26:20 -08:00
5611156ca8
Cedar/Proto.c: fix crash in ProtoHandleConnection()
...
The bug was introduced in 8685fe0da1
.
2020-12-09 01:17:59 +01:00
f03e83369e
Merge PR #1248 : Bug fix: Proxy button not enabled for SOCKS5
2020-12-08 08:23:33 +01:00
501fe217ff
Bug fix: Proxy button not enabled for SOCKS5
...
https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1247
2020-12-08 14:12:21 +08:00
bf1201aa26
Merge pull request #1245 from dnobori/201130_fix_bad_remove
...
Found the bad remove for lock files.
2020-11-30 04:29:44 -08:00
a207260e38
Found the bad remove for lock files.
2020-11-30 18:15:37 +09:00
eddf593e22
Merge PR #1243 : update Install requirements on macOS
2020-11-23 21:57:05 +01:00
3fa24c6731
update Install requirements on macOS
...
Ruby-based Homebrew installer is deprecated by original authors, and replaced Bash-based Installer.
(ref1: https://github.com/Homebrew/install/blob/master/README.md )
(ref2: 2680637777 (diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5)
)
note: /Homebrew/install/master/install also runs Bash-based installer now.
2020-11-23 21:22:29 +09:00
5f12684b42
Merge PR #1240 : Fixed setting change trigger of keepalive function
2020-11-17 07:17:02 +01:00
5f6306d5e5
Fixed setting change trigger of keepalive function
...
To solve the problem that the escape condition of the loop that tries name resolution in UDP mode was reversed in the keep-alive function of the Internet connection, so the name resolution retry is set to 250 msec interval instead of the normal 60 second interval.
2020-11-17 12:23:14 +09:00
16ca0694fb
Merge PR #1236 : wait for vpnserver to listen localhost:443 in live tests
2020-11-04 20:30:03 +01:00
99e99a46b1
wait for vpnserver to listen localhost:443 in live tests
2020-11-04 22:45:56 +05:00
fffed52f3b
Merge PR #1235 : Manage security level
2020-10-31 22:12:08 +01:00
69b4001355
Merge pull request #1231 from chipitsine/master
...
Cedar/Session.c: fix "use after free" in CleanupSession()
2020-10-31 22:28:20 +03:00
c029b34b80
Run SSL_CTX_set_ssl_version earlier
...
SSL_CTX_set_ssl_version may change security level.
2020-10-31 20:19:32 +01:00
7fdacec2a6
Manage OpenSSL security level
...
Add SslAcceptSettings option Override_Security_Level and Override_Security_Level_Value
to allow user to choose.
2020-10-31 20:19:23 +01:00
190672bd84
Set RSA bits considering OpenSSL security Level
2020-10-31 20:11:11 +01:00
5ca62bdd8a
Refact: manage SSL_OP_NO_SSLv3 in NewSSLCtx
2020-10-31 20:11:11 +01:00
d0b3cde485
Refact: move SSL_CTX_set_ssl_version to NewSSLCtx
2020-10-31 20:11:11 +01:00
bb2e2ff997
Cedar/Session.c: fix "use after free" in CleanupSession()
...
Fixes #1226 .
2020-10-31 20:03:22 +01:00
a2d15615f3
Merge pull request #1115 from takotakot/import_v4_change
...
Add Tls_Disable1_3 (Import v4 change)
2020-10-31 20:04:20 +03:00
945715e4bb
Merge PR #1227 : README.md: update build status badges
2020-10-15 07:18:29 +02:00
1ac7602b3a
README.md: update build status badges
...
This commit:
- Replaces the broken GitLab CI badge link (reference: https://docs.gitlab.com/ee/ci/pipelines/settings.html#pipeline-status-badge ).
- Adds the Azure Pipelines badge for the Nightly pipeline.
- Adds the Cirrus CI badge.
- Rearranges the badges in a table.
2020-10-15 06:30:08 +02:00
3c140dde8d
Merge PR #1218 : Cedar: DHCP server now assigns static IPv4 address, if present in user note
2020-10-12 05:18:41 +02:00
d29d1f516a
Add myself to AUTHORS
2020-10-12 04:56:37 +02:00
b890c7d813
Cedar: DHCP server now assigns static IPv4 address, if present in user note
...
This works for all VPN protocols.
In SessionMain(): for DHCPDISCOVER and DHCPREQUEST frames, write the static IP address (which is retrieved from the user notes) in the SIADDR field of DHCPHEADER.
In VirtualDhcpServer(): for DHCPDISCOVER and DHCPREQUEST frames, read the static IP address from the SIADDR field of DHCPHEADER and assign it to the client.
2020-10-12 04:56:33 +02:00
8bb787f233
Merge pull request #1225 from chipitsine/master
...
travis-ci: do not use aggressive LD_LIBRARY_PATH anymore
2020-10-11 15:38:45 +03:00
819f2f92f6
travis-ci: do not use aggressive LD_LIBRARY_PATH anymore
...
switch to more elegant "rpath" linking
2020-10-11 00:25:45 +05:00
e6a80fb4f2
Merge pull request #1223 from chipitsine/master
...
travis-ci: fix coverity build (broken since 20 Jul 2020)
2020-10-10 22:18:03 +03:00
249575a5a5
Merge PR #1224 : fix build documentation
2020-10-10 21:10:38 +02:00
2c9ac51c84
fix build documentation
2020-10-10 17:20:56 +05:00
9e7d87bea6
travis-ci: fix coverity build (broken since 20 Jul 2020)
2020-10-10 17:04:34 +05:00
3cf23e58a3
Merge pull request #1210 from nokia/openssl_engine_auth
...
Openssl engine certificate authentication
2020-10-09 12:31:18 +03:00
f52ccc6493
Add translation for pw_type5 for the non-english languages
2020-10-09 11:03:55 +02:00
2e0c24f6c8
Add english translation to each language for openssl engine auth
2020-10-09 10:22:23 +02:00
d1ad4196bb
Change from unix only implementation to all os and skip ENGINE_load_dynamic if oss is 1.1.0 or later
2020-10-09 09:58:34 +02:00
1e164ecc4e
Fix openssl engine's internationalisation
...
Only english yet
2020-10-09 09:30:50 +02:00
51ffe4be2c
Add accountcertget for openssl engine authentication type
...
retrigger build
2020-10-09 07:35:28 +02:00
20b84f3928
Change openssl version checking to api compat
2020-10-09 04:58:25 +02:00
dec532a8eb
Increase required openssl version for openssl engines implementation
2020-10-09 03:32:53 +02:00
ff3910eb86
Openssl engine certificate authentication
...
TODO cert get, call finish engine, call init engine in another step, handle authentication, internatiolazion (help is needed)
2020-10-09 02:56:51 +02:00
684d17e86a
Merge PR #813 : BuildUtil: fix an issue encountered with Visual Studio 2008 on Windows XP
2020-09-19 01:31:28 +02:00
efd24133be
BuildUtil: fix an issue encountered with Visual Studio 2008 on Windows XP
...
- When building on Windows XP using Visual Studio 2008, I encountered the following issue.
- I did a fresh install of Windows XP SP3 32-bit, then applied updates including .NET 3.5. Next I installed MS Visual Studio 2008, then updated with sp1. All of this according to the documentation in your readme for building on Windows.
- In file src/BuildUtils/VpnBuilder.cs, there are two "if" statements testing the same thing, which is to determine if it is a 32-bit or 64-bit machine/compiler. But the then and else clauses are reversed, so clearly, one of them is wrong. The result I saw is that the SDK path being used to run RC.exe is left as the NULL string and so it fails to run the RC.exe program.
- This happens early in the build process, building the build utils. The two "if" statements are used to set paths for the Visual Studio VC and SDK directories. Depending on the integer pointer size, it uses different paths in the registry.
- When I looked in the registry on my Windows XP machine, there is no key HKLM\SOFTWARE\Wow6432Node, I have only seen that on 64-bit machines.
- For the fix, I consolidated the two "if" statements into one, the existing statement on line 380 would only set a value for Paths.VisualStudioVCDir (which got set correctly). Now I moved the code for also setting Paths.MicrosoftSDKDir, while reversing the values from the incorrectly coded "if" statement.
- I can understand that under certain circumstances, this issue would not be encountered, but should be easily reproducible when installing a clean system.
2020-09-19 00:35:13 +02:00
1c4b257a1b
Merge PR #1211 : Fix Parameter Descriptions in the JSON-RPC Documentation
2020-09-09 20:40:47 +02:00
77aee2d21c
Fix Parameter Descriptions
...
Fix the packet count and bytes being mismatched in the JSON-RPC documentation.
2020-09-09 21:26:05 +10:00
f22b013dda
Merge pull request #1201 from metalefty/japanese
...
Japanese translation
2020-09-04 16:21:53 +03:00
488eb06d64
hamcore(ja): translate leftovers
2020-09-04 22:19:10 +09:00