David Woodhouse [Mon, 12 Dec 2011 14:01:17 +0000 (14:01 +0000)]
Eliminate memcpy() for outgoing packets from tun device
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 9 Dec 2011 13:05:33 +0000 (13:05 +0000)]
Use I_LINK instead of I_PLINK on Solaris
This should avoid leaving stale tunnel devices around, because they'll
automatically go away when the fd gets closed.
This is only for Legacy IP though; We are still plumbing for IPv6 in the
vpnc-script, which is weird and inconsistent. If only I could work out
how to do it in tun.c like we do for IPv4...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 8 Dec 2011 12:14:28 +0000 (12:14 +0000)]
Clean up man page a little
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 8 Dec 2011 11:34:27 +0000 (11:34 +0000)]
IPv6 testing coverage now complete; OSX works too
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 8 Dec 2011 02:20:49 +0000 (02:20 +0000)]
Update IPv6 testing status. {Open,Net,Dragonfly}BSD are now known to work.
As well as Linux, FreeBSD and Solaris/OpenIndiana which were already tested.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Stuart Henderson [Wed, 7 Dec 2011 22:09:29 +0000 (22:09 +0000)]
Fix GNUism in www/Makefile.am
Signed-off-by: Stuart Henderson <stu@openbsd.org>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 7 Dec 2011 22:01:26 +0000 (22:01 +0000)]
Fix typo
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 7 Dec 2011 21:59:23 +0000 (21:59 +0000)]
Print error when write() to tun device fails.
This happens on OpenBSD when writing IPv6 packets, for some reason.
Silent failure is not recommended; much better to bitch about it.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 3 Dec 2011 14:58:33 +0000 (14:58 +0000)]
Before using libproxy without pkg-config, check it actually builds.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 3 Dec 2011 14:51:32 +0000 (14:51 +0000)]
Fix potential crash in processing libproxy results.
Oops. Helps if we start reading the array at element zero.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 1 Dec 2011 12:47:13 +0000 (12:47 +0000)]
Refer to mail.html in usage() output
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 1 Dec 2011 12:40:48 +0000 (12:40 +0000)]
Refer to vpnc-script.html when invoked with no --script argument
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 1 Dec 2011 12:38:38 +0000 (12:38 +0000)]
Clean up vpnc-script web page to make it clearer
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 25 Nov 2011 16:41:19 +0000 (16:41 +0000)]
Tag version 3.15
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 25 Nov 2011 16:31:50 +0000 (16:31 +0000)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 25 Nov 2011 16:26:16 +0000 (16:26 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 24 Nov 2011 20:31:13 +0000 (20:31 +0000)]
Add uninstall rules for translations
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 24 Nov 2011 18:14:30 +0000 (18:14 +0000)]
Call bindtextdomain() to ensure that translations are found in $(prefix)
We may be installing to a location that libintl doesn't search by default.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 24 Nov 2011 17:39:20 +0000 (17:39 +0000)]
Use $(localedir) for installing translations
The $(localedir) variable is provided for us by autoconf; no need to make
it up for ourselves.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Kazuyoshi Aizawa [Wed, 23 Nov 2011 13:25:36 +0000 (13:25 +0000)]
Use getmsg() intead of read() on Solaris tun device
On Solaris, a read from the tun device can return parts of multiple
packets, and there's no safe way to tell where one ends and the next
starts. Use getmsg() instead, which will only return one packet.
[dwmw2: Mangled a little to cope with script_tun mode and simplify loop]
Signed-off-by: Kazuyoshi Aizawa <admin2@whiteboard.ne.jp>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 23 Nov 2011 11:36:15 +0000 (11:36 +0000)]
Update help/mail page to try to encourage people to use the list more
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 23 Nov 2011 11:23:50 +0000 (11:23 +0000)]
Add Developer's Certificate of Origin to contribute web page
Best to spell this out explicitly.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 10 Nov 2011 21:16:47 +0000 (21:16 +0000)]
Fix broken line to non-existent compatibility.html
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 02:11:19 +0000 (02:11 +0000)]
Tag version 3.14
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 01:46:47 +0000 (01:46 +0000)]
Add PGP signature information to changelog and download web pages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 00:37:26 +0000 (00:37 +0000)]
Add tarball signing to Makefile
I managed to screw up the 3.13 signature doing it manually; the .asc file
contained a copy of the tarball data rather than being *just* the signature.
Add it to the Makefile and that should stop me screwing it up later.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 00:21:58 +0000 (00:21 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 00:02:17 +0000 (00:02 +0000)]
Update Dutch translation
It was at 100% until I added the library version warning; it was a shame
to screw that over just before the release so thanks Arjan for translating
the new warning.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 23:23:23 +0000 (23:23 +0000)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 23:18:36 +0000 (23:18 +0000)]
Add upload-pot make target
It happens automatically too, but sometimes it's useful to do it immediately,
for instance when preparing a release...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 22:16:12 +0000 (22:16 +0000)]
Add sanity check that libopenconnect matches the openconnect executable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 21:25:32 +0000 (21:25 +0000)]
Move openconnect to sbin
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 13:06:00 +0000 (13:06 +0000)]
Fix HTML converter output in out-of-tree builds
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 12:00:08 +0000 (12:00 +0000)]
Build version.c correctly in out-of-tree builds
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 11:58:43 +0000 (11:58 +0000)]
Avoid use of $(wildcard) in version.c dependencies
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 11:21:18 +0000 (11:21 +0000)]
Don't remove version.c in distclean
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sun, 6 Nov 2011 16:08:57 +0000 (16:08 +0000)]
Fix GNUism in dependencies for version.c
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:48:06 +0000 (02:48 +0000)]
Add OpenIndiana to supported platform list
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:44:25 +0000 (02:44 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:34:07 +0000 (02:34 +0000)]
Fix Solaris/OpenIndiana warning: no previous declaration for 'local_strcasestr'
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:17:36 +0000 (02:17 +0000)]
Remove unneeded inclusion of <arpa/inet.h> from cstp.c and mainloop.c
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:16:03 +0000 (02:16 +0000)]
Fix OpenBSD build warning when printing off_t
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 21:35:57 +0000 (21:35 +0000)]
Remove all _xxx_SOURCE macros from source, do it in configure.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 18:24:34 +0000 (18:24 +0000)]
Fix NetBSD ctype warnings.
We have to cast to int via unsigned char. Ick.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 18:00:04 +0000 (18:00 +0000)]
Fix GNUism in po/Makefile.am handling of $(LINGUAS)
We can't use $(shell...). Make the configure script do it instead.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 17:36:17 +0000 (17:36 +0000)]
Fix GNUism in Makefile.am handling of NODISTHOOK
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 16:58:14 +0000 (16:58 +0000)]
Attempt to find zlib if no pkgconfig for it
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 23:25:56 +0000 (23:25 +0000)]
Make version.sh find git metadata only for openconnect itself, not parent dirs
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 23:04:53 +0000 (23:04 +0000)]
Drop $(GETTEXT_PACKAGE) and just use $(PACKAGE)
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 23:00:27 +0000 (23:00 +0000)]
Use AC_LINK_IFELSE to check for working NLS support
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 21:06:55 +0000 (21:06 +0000)]
Fix build with -ansi and without optimisation.
strdup(), strcasecmp(), vsyslog(), and other things need feature macros
defined. For some reason this only bites when optimisation is disabled.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 01:18:38 +0000 (01:18 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 00:59:00 +0000 (00:59 +0000)]
Revamp NLS support. Drop intltool, code po/Makefile.am manually
Using $(shell ...) probably isn't portable, so may need to be expanded by
the configure script. But this is a start...
Using gettextize seemed to pull in a bunch of other crap; I'd rather just
disable NLS support on crappy platforms where the msgfmt tool doesn't exist,
or where dgettext() isn't even available in -lintl.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 00:57:22 +0000 (00:57 +0000)]
Fix out-of-source-tree invocation of version.sh
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 00:51:50 +0000 (00:51 +0000)]
Fix out-of-source-tree build of web pages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 31 Oct 2011 12:28:54 +0000 (12:28 +0000)]
Remove -Wundef and -Wmissing-noreturn from default CFLAGS
These just cause unwanted noise.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 29 Oct 2011 13:33:36 +0000 (15:33 +0200)]
Attempt to build without NLS if intltool isn't available
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 22:04:12 +0000 (00:04 +0200)]
Pointers to translated strings must be const
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 21:42:12 +0000 (23:42 +0200)]
Fix arithmetic on void pointers in cstp.c
This is a gccism and not portable. And could have been dereferencing an
unaligned pointer too. Thanks to Florian Wobbe for pointing it out.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 10:19:21 +0000 (12:19 +0200)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 10:19:08 +0000 (12:19 +0200)]
Fix newlines in nl translations
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 24 Oct 2011 12:01:59 +0000 (14:01 +0200)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 23:30:18 +0000 (00:30 +0100)]
Make usage help output translatable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:57:42 +0000 (23:57 +0100)]
Add maintainer mode
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:54:20 +0000 (23:54 +0100)]
Make more strings translatable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:41:31 +0000 (23:41 +0100)]
Fix newlines in nl translations
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:04:09 +0000 (23:04 +0100)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 4 Oct 2011 13:25:30 +0000 (14:25 +0100)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 4 Oct 2011 11:29:34 +0000 (12:29 +0100)]
Add update-translations make target
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 30 Sep 2011 21:46:17 +0000 (22:46 +0100)]
Tag version 3.13
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 30 Sep 2011 20:18:58 +0000 (21:18 +0100)]
Add openconnect_set_cert_expiry_warning() to library
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 30 Sep 2011 12:49:49 +0000 (13:49 +0100)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 19:57:59 +0000 (20:57 +0100)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 15:47:49 +0000 (16:47 +0100)]
Add --cert-expire-warning,-e option to set warning level
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 15:18:01 +0000 (16:18 +0100)]
Make certificate expiry warning time variable (still default 60 days)
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 15:17:41 +0000 (16:17 +0100)]
Clean up DTLS Session-ID length warning
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 12:45:23 +0000 (13:45 +0100)]
Switch to using PNG image in web site. Android can't show SVG. Still!
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 23:16:43 +0000 (00:16 +0100)]
Update transations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 23:15:44 +0000 (00:15 +0100)]
Add OpenSuSE to distribution status list
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:51:20 +0000 (23:51 +0100)]
Man page update: clarify which fsid is used, forget Solaris tuntap IPv6 patch.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:06:33 +0000 (23:06 +0100)]
Add links to manual page, don't number 'started' subpages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:06:23 +0000 (23:06 +0100)]
Fix header on connecting page
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:05:34 +0000 (23:05 +0100)]
Fix up distro status page.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 01:41:37 +0000 (02:41 +0100)]
Use automake for www/ directory
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 00:40:06 +0000 (01:40 +0100)]
Update new web pages in release, not openconnect.html
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 22:47:17 +0000 (23:47 +0100)]
Add new version of web pages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 14:22:21 +0000 (15:22 +0100)]
Translatability fix for 'Discard bad split xxclude' message
Thanks to Jussi Kukkonen for pointing it out.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 10:52:39 +0000 (11:52 +0100)]
Add Transifex config file so 'tx pull' works in any checkout.
Would be nicer if it worked anonymously rather than having to have an account.
For that see http://trac.transifex.org/ticket/740
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 10:51:54 +0000 (11:51 +0100)]
Add (empty) translation files from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sun, 25 Sep 2011 22:27:00 +0000 (23:27 +0100)]
Add error message when SSL cert fails
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 23 Sep 2011 20:32:00 +0000 (21:32 +0100)]
Fix build instructions on web page.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 23 Sep 2011 09:50:49 +0000 (10:50 +0100)]
Reduce certificate warning to PRG_INFO
We're going to call back into the validate_peer_cert() function anyway.
Let it handle things properly.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 22:01:00 +0000 (23:01 +0100)]
Use dgettext() so the domain is always correct even in libopenconnect
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 21:09:27 +0000 (22:09 +0100)]
Make user-visible strings translatable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 14:50:50 +0000 (15:50 +0100)]
Add translation support
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 13:38:24 +0000 (14:38 +0100)]
Fix libproxy build.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 13:11:06 +0000 (14:11 +0100)]
Fix DTLS-may-fail warning when built against OpenSSL 1.0.0e and run with older
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 22:18:13 +0000 (23:18 +0100)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 20:56:27 +0000 (21:56 +0100)]
Refactor xmlnode_msg() not to use server-provided string as asprintf() format.
auth.c: In function 'xmlnode_msg':
auth.c:287:2: warning: format not a string literal, argument types not checked [-Wformat-nonliteral]
There wasn't actually a problem here; we *were* vetting the string. But this
is cleaner and stops the compiler bitching.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:41:04 +0000 (18:41 +0100)]
Fix handling of vpninfo->ifname. Always strdup()
We don't actually free it; there will only be one instance during the whole
lifetime of the openconnect process. But stop the compiler bitching about it.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>