Yihong Wu
f94ac6351e
Implement complete server certificate verification
2021-12-29 17:41:29 +08:00
Yihong Wu
1c1560f6ca
Apply security level override in azure client mode
2021-12-26 12:12:00 +08:00
Yihong Wu
68dc4e23d8
Improve NAT-T hint string handling
2021-12-26 12:11:51 +08:00
Yihong Wu
f6edb5e165
Fix a typo that causes CascadeList to show blank hub name
2021-12-26 12:03:59 +08:00
Yihong Wu
a5565fce4b
Fix cascade links may start before configuration is loaded
2021-12-26 12:03:59 +08:00
Yihong Wu
d95d8ddefa
Fix account name in wrong case after editing
2021-12-26 12:03:59 +08:00
Yihong Wu
51585e63e3
Fix server manager setting compatibility since build 9658
2021-12-25 13:25:34 +08:00
Yihong Wu
77ee848caa
Cedar/SM.c: Fix pointer usage before initialization
2021-12-23 17:23:15 +08:00
Yihong Wu
2a40d21ef9
Merge pull request #1512 from domosekai/he
...
Perform TCP connection via IPv6 and IPv4 in parallel threads
2021-12-11 17:20:12 +08:00
Yihong Wu
02ee7b45d7
Save the correct server IP for route management
2021-12-10 16:53:28 +08:00
Yihong Wu
14f5854ecf
Fix IPv6 address display in session info dialog
2021-12-07 15:48:32 +08:00
Yihong Wu
2d1c8765aa
Merge pull request #1433 from domosekai/chain
...
Support user-specified server trust chain
2021-11-25 17:15:53 +08:00
Davide Beatrici
2955dc5580
Merge PR #1507 : Change default hub option to allow default router in IPv6 RA
2021-11-24 00:22:04 +01:00
Yihong Wu
e095283641
Change default hub option to allow default router in IPv6 RA
2021-11-23 23:54:42 +08:00
Yihong Wu
fb004345b4
Cedar/Proto_PPP: Fix IPC DHCP renewal
2021-11-23 19:48:46 +08:00
Yihong Wu
2990b5ae93
Fix memory overrun in policy copy
2021-09-30 19:36:36 +08:00
Yihong Wu
462ebfb960
Fix policy dialog
2021-09-30 16:59:22 +08:00
Yihong Wu
582a739179
Fix auto refreshing of client manager
2021-09-28 20:15:41 +08:00
Yihong Wu
3a2d588722
Merge pull request #1483 from domosekai/ecc
...
Support ECDSA certificates on server side and show parameters in dialog
2021-09-25 20:58:18 +08:00
Yihong Wu
9c2a573cf2
Display key algorithm and parameters in cert dialog
2021-09-24 17:12:51 +08:00
Tetsuo Sugiyama
c9508b7fb7
Password change from client increments config file revision
...
Fixed an issue where changing the password from the client did not increment the revision of the server config file and the changes were not saved
2021-09-21 18:28:17 +09:00
Yihong Wu
2853337b81
Allow ECDSA certificates on server side
2021-09-20 08:18:36 +00:00
Yihong Wu
03859eb515
Merge pull request #1443 from domosekai/win32
...
Add IPv6 route management for Windows client
2021-09-18 22:12:27 +08:00
Yihong Wu
82af38c482
Cedar/Protocol.c: Fix connection to server clusters
2021-09-18 08:06:10 +00:00
Steve Muskiewicz
472dde05de
apply permission fix suggested by @hornos (for #1457 )
2021-08-19 08:14:50 -04:00
Davide Beatrici
7f8e527883
CMake: Fix BLAKE2 build failure with MSVC due to it not defining __SSE2__
2021-08-10 22:58:28 +02:00
domosekai
9b3077d955
Store interface metric separately as it mau change
2021-08-02 16:18:37 +08:00
domosekai
dd9c3546f7
Prevent IPv6 leak if only IPv4 default route is added
2021-08-02 16:18:37 +08:00
domosekai
ce0591d924
Add IPv6 route management for Windows client
2021-08-02 16:18:36 +08:00
Ilya Shipitcin
37b5644291
src/Cedar/SW.c: treat "0" build as legitimate
...
installers built for PR have "0" build. let us treat them as legitimate
2021-08-01 12:26:51 +05:00
domosekai
8b87c9d4ef
Cedar/Proto_PPP.c: Fix memory leak in EAP-MSCHAPv2
...
Fixes : #1420 (Implement EAP-MSCHAPv2)
2021-07-21 11:16:35 +00:00
domosekai
2761c1ca42
Support user-specified server trust chain
2021-07-21 07:02:42 +00:00
domosekai
7863ce8a8e
Cedar/IPC.c: Add hub release in NewIPC()
2021-07-12 08:37:12 +00:00
Ilya Shipitsin
7881f8657a
Merge pull request #1420 from domosekai/eap
...
Implement EAP-MSCHAPv2
2021-07-10 23:27:10 +05:00
domosekai
dfb105c2d7
Fix use-after-free timeout issue for L2TP and SSTP
2021-07-10 16:07:09 +00:00
domosekai
66dc5ee581
Cedar/Radius.c: Fix EAP Message buffer overflow
2021-07-10 08:15:03 +00:00
domosekai
56bd9733d6
Cedar/Proto_PPP.c: Use unified format for negative condition
2021-07-10 05:30:06 +00:00
domosekai
eff784b624
Improve EAP behavior with RADIUS
2021-07-10 05:29:23 +00:00
domosekai
22a9231c33
Implement EAP-MSCHAPv2
2021-07-08 14:26:31 +00:00
Ilya Shipitsin
60db1962f9
Merge pull request #1416 from domosekai/listener
...
Fix TCP and UDP listener behavior
2021-07-07 16:08:05 +05:00
domosekai
6e400c19af
Fix TCP and UDP listener behavior
2021-07-07 10:50:23 +00:00
Ilya Shipitsin
f2466eb919
Merge pull request #1415 from davidebeatrici/vpncmd-wireguard-keys
...
Cedar/Command: Add GenX25519 and GetPublicX25519 commands
2021-07-07 13:04:13 +05:00
Davide Beatrici
c310163244
Cedar/Command: Add GenX25519 and GetPublicX25519 commands
...
GenX25519 command - Create new X25519 keypair
Help for command "GenX25519"
Purpose:
Create new X25519 keypair
Description:
Use this to create a new X25519 keypair, which can be used for WireGuard.
Both the private and public key will be shown.
The public key can be shared and is used to identify a peer.
Also, it can always be retrieved from the private key using the GetPublicX25519 command.
The private key should be kept in a secure place and never be shared.
It cannot be recovered once lost.
Usage:
GenX25519
==========================================================================================
GetPublicX25519 command - Retrieve public X25519 key from a private one
Help for command "GetPublicX25519"
Purpose:
Retrieve public X25519 key from a private one
Description:
Use this if you have a private X25519 key and want to get its corresponding public key.
Usage:
GetPublicX25519 [private]
Parameters:
private - The private X25519 key you want to get the corresponding public key of.
2021-07-07 08:43:41 +02:00
Davide Beatrici
4328e6e5ab
CMake: Link Cedar to Mayaqua directly
...
It's Cedar itself that depends on Mayaqua, not the executables.
2021-07-07 08:08:12 +02:00
domosekai
bcba88ca73
Cedar/Protocol.c: Use real server IP in creating node info under direct mode
2021-07-05 12:17:57 +00:00
domosekai
f6adcd6bfc
Cedar/Connection.c: Fix buffer overflow when inserting NAT-T information
2021-07-04 05:53:24 +00:00
Davide Beatrici
233e28f38c
Refactor Base64 functions, encode/decode using OpenSSL's EVP interface
...
Our own implementation works fine, however we should use OpenSSL's one since we already link to the library.
Base64Decode() and Base64Encode() return the required buffer size when "dst" is NULL.
This allows to efficiently allocate a buffer, without wasting memory or risking an overflow.
Base64FromBin() and Base64ToBin() perform all steps, returning a heap-allocated buffer with the data in it.
2021-07-02 09:24:41 +02:00
Davide Beatrici
46ca5f7b98
Use "%S" instead of "%s" for LA_SET_PORTS_UDP and LA_SET_PROTO_OPTIONS
...
Turns out %S refers to ANSI/UTF-8 and %s to UTF-16.
This commit fixes a buffer overflow reported by AddressSanitizer and removes an unnecessary conversion to UTF-16.
2021-06-27 21:08:26 +02:00
Davide Beatrici
4221579e95
Remove obsolete hardcoded build number checks
...
The open-source project began with version 1.00, build 9022.
With the exception of an informative message fallback for builds older than 9428 (2014), all checks were for closed-source builds.
2021-06-27 07:21:06 +02:00
domosekai
682052e0dc
Cedar/Proto_PPP: Fix EAP-TLS fragmentation
2021-06-17 11:34:09 +00:00
