 David Woodhouse
|
b2a2c7a9c2
Don't abort if CSD wrapper returns non-zero
|
4 years ago |
 Julien Barbot
|
594c92ed50
Do not process <select/> nodes with no children
|
4 years ago |
 Daniel Lenski
|
ad3ef669b0
Run Cisco CSD script as child, not daemonized grandchild
|
4 years ago |
|
Daniel Lenski
|
7a5974a597
ignore failure in downloading CSD stub if CSD wrapper is specified
|
4 years ago |
|
David Woodhouse
|
ef4a0781b3
Merge branch 'correct_mimetype_and_charset_for_XML_post' of gitlab.com:dlenski/openconnect
|
5 years ago |
|
David Woodhouse
|
0ec5252e57
Fix potential leak on error path in xmlpost_initial_req()
|
5 years ago |
|
David Woodhouse
|
f572e080ff
Fix double-free in xmlpost_initial_req()
|
5 years ago |
|
Daniel Lenski
|
b1edc5d2ab
Set correct mimetype and charset for XML post
|
5 years ago |
|
Daniel Lenski
|
3d4701a10c
bugfix for OTP "challenge" form handling
|
5 years ago |
|
David Woodhouse
|
0c605cfcb0
Move prepare_stoken() call to generic openconnect_obtain_cookie()
|
6 years ago |
 Ralph Schmieder
|
13b641668b
chg: add --version-string
|
6 years ago |
|
David Woodhouse
|
81f1fceaf2
Post CSD results even when no other auth is needed.
|
6 years ago |
|
David Woodhouse
|
6a2ce5d5c1
Merge branch 'master' of gitlab.com:j.l-w/openconnect into HEAD
|
6 years ago |
 James Laird-Wah
|
51f8feb644
Recognise auth forms named "challenge" as token requests
|
6 years ago |
|
Daniel Lenski
|
318d5777a4
GPST should follow --csd-user, as done by CSTP
|
6 years ago |
|
David Woodhouse
|
9b4076679f
Provide unique hostname to CSD script
|
6 years ago |
|
Daniel Lenski
|
313e95ddcb
provide CSD_SHA256 via environment variable rather than command-line argument
|
6 years ago |
|
Daniel Lenski
|
4385272562
use curl with --pinnedpubkey to rely on sha256 hash of peer cert passed by openconnect
|
6 years ago |
 David Woodhouse
|
8d43002ea8
Use oc_text_buf for constructing group-access node
|
8 years ago |
 Mathias Schuepany
|
074da2504f
Patch for servers that do not listen on TCP 443
|
8 years ago |
 Kevin Cernekee
|
3c5887bea7
NaCl: Don't try to use CSD, vsyslog, or setgroups
|
9 years ago |
 Nikos Mavrogiannopoulos
|
3fe0e366ed
When using setuid() also use setgid() and setgroups()
|
9 years ago |
 Stefan Becker
|
2a3df426a4
Daemonize CSD wrapper script process
|
9 years ago |
|
David Woodhouse
|
8856097b51
Fix leak of request_body buf
|
10 years ago |
|
Nikos Mavrogiannopoulos
|
d36343f3f1
limit the number of newgroup attempts
|
10 years ago |
|
David Woodhouse
|
cc2ea5d3bd
Remove liboath dependency
|
10 years ago |
|
David Woodhouse
|
50b6c52249
Allow automatic OATH for Juniper
|
10 years ago |
|
David Woodhouse
|
bf937a6aad
Move protocol-specific decisions about when to use tokencodes into protocol code
|
10 years ago |
|
David Woodhouse
|
70d26b833b
Update copyright year
|
10 years ago |
|
David Woodhouse
|
aaea0801e3
Move some helpers out into auth-common.c
|
10 years ago |
