summaryrefslogtreecommitdiff
path: root/accel-pppd
AgeCommit message (Collapse)Author
2018-02-08pptp: add the ppp-max-mtu option to match l2tp & sstpVladislav Grishenko
2018-02-08ipv6: dhcpv6: fix PD linklocal route for ipoe clientsVladislav Grishenko
peer linklocal address can't be negotiated in ipoe mode unlike ppp, so route may lead to nowhere with non-working PD routing as result. so, instead of guessing peer link-local address, use dhcpv6 client src address as the gateway. since dhcpv6 clients are onlink and there's no dhcpv6 relay support (yet), dhcpv6 source would be exactly final linklocal address, no matter ppp or ipoe is in use. fine tune commit abaa43a307fa7a790dd34034c5fd8013dbd0488c
2018-02-05pppd_compat: call ip-down even if ip-up is not specifiedDmitry Kozlov
2018-01-31ppp: fix mtu/mru negotiation in preallocate/unit-cache modesVladislav Grishenko
2018-01-25ipoe: use DHCP-Server-Identifier attribute as siaddr if ↵Dmitry Kozlov
DHCP-Server-IP-Address is not supplied
2018-01-25ipoe: improved handling of DHCP Request for nonexistent sessionsDmitry Kozlov
Send NAK only to unicast requests or if requested Server-ID matches one of gw-ip-address
2018-01-24ppp: fixed bug in ppp_terminateDmitry Kozlov
2018-01-22ipoe: ipv6: generate intf_id only if not set by upper layerDmitry Kozlov
2018-01-15cmake: add error messages if postgresql or snmp libraries not foundDmitry Kozlov
2018-01-13Merge branch 'master' of https://github.com/xebd/accel-pppDmitry Kozlov
2018-01-13updated default config fileDmitry Kozlov
2018-01-13cli: show sessions: added uptime-raw columnt to print uptime in secondsDmitry Kozlov
2018-01-13ipv6: dhcpv6: route all PD via one linklocal gatewayVladislav Grishenko
2018-01-13ipv6: dhcpv6: fix iaid loggingVladislav Grishenko
2018-01-13ipv6: dhcpv6: fix serverid overflow lead do dhcpv6 malfunctionVladislav Grishenko
2018-01-13ipv6: consolidate and fix interface-id address generation for non-/128Vladislav Grishenko
2018-01-13ipv6: use macro for unspecified address ckeckingVladislav Grishenko
2018-01-13ipv6: fix host scope routesVladislav Grishenko
2018-01-10Merge branch 'master' of github.com:xebd/accel-pppDmitry Kozlov
2018-01-10sstp: drop unnecessary ssl reinitializationVladislav Grishenko
2018-01-10Merge branch 'master' of ssh://git.code.sf.net/p/accel-ppp/codeDmitry Kozlov
2018-01-10Merge pull request #31 from themiron/sstpxebd
sstp support
2018-01-09ipoe: do not create ipoe interface with server's ifindexDmitry Kozlov
2018-01-06sstp: reuse general logging frameworkVladislav Grishenko
2018-01-05sstp: add man & readme recordsVladislav Grishenko
2018-01-05sstp: possible sync ppp mode fixVladislav Grishenko
2018-01-05sstp: fix default max mtu to fit standard 1500 mediaVladislav Grishenko
2018-01-05ipoe: implemented ipv6 in shared modeDmitry Kozlov
2017-12-30sstp: add generic base for parsing http header values, improve host-name ↵Vladislav Grishenko
checking
2017-12-30sstp: log current SSL mode for referenceVladislav Grishenko
2017-12-30sstp: optimize SSL context & config reload handlingVladislav Grishenko
2017-12-30sstp: fix obsolete contexts leakVladislav Grishenko
2017-12-30sstp: rework certificate load, fix build issue with some openssl versionVladislav Grishenko
2017-12-30sstp: fix va_start/va_end usage on x64 platformsVladislav Grishenko
2017-12-30sstp: http: protect against oversized headers and improve parsingVladislav Grishenko
2017-12-30sstp: implement HTTP host header and TLS SNI checkingVladislav Grishenko
2017-12-30sstp: drop ssl_mode_auto_retry, not required afer ↵Vladislav Grishenko
7945857927b4cedab365ba86934d771281eeb213
2017-12-30sstp: use HTTP status code 510 for HTTP method errorsVladislav Grishenko
2017-12-30sstp: http: get rid of static reply bufferVladislav Grishenko
2017-12-30sstp: fix eof result of ssl read/write ops although no harm was really happenedVladislav Grishenko
2017-12-30sstp: allow colons in cert-hash-* hex valuesVladislav Grishenko
Simplify copy-pasting from openssl x509 -fingerprint output: Examples: openssl x509 -in cert.pem -noout -fingerprint -sha1 openssl x509 -in cert.pem -noout -fingerprint -sha256
2017-12-30sstp: use ssl-keyfile option for certificate private keyVladislav Grishenko
if not set, fallback to private key in the same ssl-pemfile
2017-12-30sstp: treat SSL errors as EIOVladislav Grishenko
2017-12-30sstp: keep default ssl ciphers for better compatibilityVladislav Grishenko
2017-12-30sstp: allow to prefer server ciphers with ssl-prefer-server-ciphers optionVladislav Grishenko
2017-12-30sstp: implement Crypto Binding's Certificate hash & proto checking per 3.3.5.2.3Vladislav Grishenko
Warning: config options are changed aligned with general accel-ppp style. Following cases, including no-openssl build are supported: ssl | ssl-pemfile | behavior 1 set get both sha1 & sha256 from the certificate 0 set get both sha1 & sha256 from the certificate 0 unset use cert-hash-sha1 and/or cert-hash-sha256 hex options no-openssl use cert-hash-sha1 and/or cert-hash-sha256 hex options cert-hash-sha1 and/or cert-hash-sha256 hex options override certificate's, so it's possible to turn certficate hash verification off with just empty values (default).
2017-12-30sstp: implement Crypto Binding attr & nonce checking per 3.3.5.2.3Vladislav Grishenko
2017-12-30sstp: fix thread crash on certificate-error diconnectVladislav Grishenko
2017-12-30sstp: zero allocated packets, fix non-zero reserved fieldsVladislav Grishenko
2017-12-30sstp: make sstp great again. simplify ssl handlers, fix crashes, move to ↵Vladislav Grishenko
async ppp TODO: accounting/statistics, minimize syscall & memory usage
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-21 18:12:36 +0000