accel-ppp.git/accel-pppd/extra/chap-secrets.c, branch stable

crypto: Removed CRYPTO_OPENSSL definition.

2025-12-10T17:17:36+00:00

OpenSSL is now mandatory. Signed-off-by: Andrii Melnychenko

crypto: Removed internal tomcat crypto.

2025-12-10T17:16:42+00:00

Signed-off-by: Andrii Melnychenko

Add safeguards to parse_gw_ip_address helper functions

2024-03-10T15:35:33+00:00

In case of invalid configuration we might get stack overflow with unexpected consequences. Signed-off-by: Denys Fedoryshchenko

auth/chap-secrets/dhcpv4: fix big-endian arch support

2020-09-05T22:09:01+00:00

ipv6pool: add per-proto ipv6-pool and ipv6-pool-delegate options

2020-01-10T20:57:14+00:00

also, disable ipv6 pools via chap-secrets, need to find another syntax for it, may be with comments.

ipv6pool/radius: implement named ipv6 pools

2020-01-10T00:42:16+00:00

default stateful ipv6 address & prefix radius attrs are per-rfc6911: 171 Delegated-IPv6-Prefix-Pool 172 Stateful-IPv6-Address-Pool the single pool name from chap-secret file pool is shared for ipv4/ipv6/ipv6 dp, new config syntax TBD. per-proto pool names are still for ipv4 only, new config syntax TBD.

fix gateway address setup fail due memory corruption

2018-10-25T00:16:55+00:00

log: libnetlink: RTNETLINK answers: Invalid argument ppp0: f7bb00a79ef667d2: failed to set IPv4 address: Invalid argument ipaddr_add_peer() called only with mask equeal 0 or 32, but w/o zero-allocated structs it contans garbage in some cases. so, instead ipaddr_add() was called with wrong mask value. also, init chap-secrets mask for the same reason.

chap-secrets: assume 4th field as pool name

2017-12-06T23:50:04+00:00

Simplify previous commit, if 4th field isn't empty and doesn't start with reserved chars (*-!), assume it as pool name. Also, fix build warn without OPENSSL.

chap-secrets: allow to use pool name instead of address to specify ipv4 pool

2017-12-05T19:11:13+00:00

Chap-secrets' ipdb uses 4th field as static peer ipv4 address. With no radius and multiple same username sessions, it's impossible to use non-default pool for such sessions. Abuse chap-secret's 4th field as pool=name to specify session's pool name. With ippool module loaded after chap-secrets (default order), it will be used for allocation from the specified poll name. Compatibility considerations: * pppd will skip 'pool=*' with warn 'unknown host in auth. address list' same as 5th field - shaper, because starting from 4th field pppd parse list of value. so, no new effects here. * previous versions of accel-ppp will parse 'pool=*' as empty address. * with no 'pool=*' in chap-secrets or with no chap-secrets loaded, no behavior change. * with no ippool loaded, session will get no peer address. * with ippool loaded before chap-secrets, chap-secrets's ipdb will not be used, therefore neither ip addess not pool name will has no effect. * if chap-secrets' pool is invalid or not found, default pool will be used by ippool or address came from radius. * chap-secret's pool name might override pool came from radius, if radius module is loaded after chap-secrets and no address came from radius.

support for openssl-1.1

2017-07-04T05:28:54+00:00