David Woodhouse [Fri, 19 Nov 2010 17:52:38 +0000 (18:52 +0100)]
openconnect: Pass server certificate hash directly to openconnect
When we spawn openconnect to make a VPN connection, it obviously needs
to validate the server's SSL certificate to protect against a MiTM
attack. But it may not have full access to the user's CA chain, or the
user may have manually accepted a dubious certificate.
To allow for this, the GUI authentication dialog returns a SHA1 of the
server's SSL certificate fingerprint, for the *specific* server that it
managed to authenticate to.
The intention is that this should be passed through to openconnect when
it connects. That way, openconnect doesn't need to do any normal
validation; it only needs to compare the certificate with what's
expected.
From openconnect v2.26, certificate validation is enabled by default;
rather than only when a --cafile option is given. So it's important that
we start passing the certificate fingerprint through, to avoid
connection failures (which we don't currently detect and report
gracefully, btw).
Samuel Ortiz [Fri, 19 Nov 2010 15:34:29 +0000 (16:34 +0100)]
Mention David's contributions
David Woodhouse [Fri, 19 Nov 2010 15:41:00 +0000 (16:41 +0100)]
dnsproxy: Remove TCP receive path potential busy waits
When receiving a DNS over TCP request response back from the server,
ConnMan busy waits for the whole response to arrive, or if the server
closes the TCP connection.
Fixes BMC#9960
Samuel Ortiz [Tue, 16 Nov 2010 16:12:56 +0000 (17:12 +0100)]
wifi-legacy: Set associating to FALSE when disconnecting
Leena Gunda [Tue, 16 Nov 2010 14:14:11 +0000 (15:14 +0100)]
monitor-services: Invalid syntax typo fix
Fixes BMC#9995
Samuel Ortiz [Tue, 16 Nov 2010 14:08:09 +0000 (15:08 +0100)]
iptables-test: Fix build failure against 2.6.37-rc1 headers
Samuel Ortiz [Tue, 16 Nov 2010 14:06:34 +0000 (15:06 +0100)]
iptables: Fix build failure against 2.6.37-rc1 headers
Gustavo Sverzut Barbieri [Mon, 15 Nov 2010 09:30:00 +0000 (07:30 -0200)]
test: Allow setting gateway for a static ip address.
Leena Gunda [Tue, 16 Nov 2010 09:10:48 +0000 (14:40 +0530)]
tethering: Fix for default interface string double free
Samuel Ortiz [Mon, 15 Nov 2010 14:26:48 +0000 (15:26 +0100)]
Mention Patrick's contributions
Samuel Ortiz [Sun, 14 Nov 2010 00:51:52 +0000 (01:51 +0100)]
tethering: Duplicate default interface string
Samuel Ortiz [Sun, 14 Nov 2010 00:10:38 +0000 (01:10 +0100)]
tethering: Start DHCP server on the bridge
Samuel Ortiz [Sat, 13 Nov 2010 23:52:41 +0000 (00:52 +0100)]
tethering: Check for tethering_status to be FALSE when disabling it
Samuel Ortiz [Sat, 13 Nov 2010 23:50:43 +0000 (00:50 +0100)]
tethering: Configure bridge interface when starting tethering
Samuel Ortiz [Sat, 13 Nov 2010 23:13:51 +0000 (00:13 +0100)]
tethering: Flush POSTROUTING table when needed
Samuel Ortiz [Sat, 13 Nov 2010 23:11:47 +0000 (00:11 +0100)]
iptables: Flush netfilter table cache after committing
Samuel Ortiz [Sat, 13 Nov 2010 23:07:37 +0000 (00:07 +0100)]
iptables: Free blob replacement after pushing it
Samuel Ortiz [Sat, 13 Nov 2010 22:28:57 +0000 (23:28 +0100)]
iptables-test: Support for chain flushing
Samuel Ortiz [Sat, 13 Nov 2010 22:19:47 +0000 (23:19 +0100)]
iptables: Support for chain flushing
Samuel Ortiz [Fri, 12 Nov 2010 19:24:46 +0000 (20:24 +0100)]
gdhcp: Fix server function name typo
Samuel Ortiz [Fri, 12 Nov 2010 19:09:45 +0000 (20:09 +0100)]
gdhcp: Send DHCPNAK when receiving a REQUEST before a DISCOVER
Martin Xu [Fri, 12 Nov 2010 16:52:18 +0000 (17:52 +0100)]
dhcp-server-test: Initial implementation
Martin Xu [Fri, 12 Nov 2010 16:45:46 +0000 (17:45 +0100)]
gdhcp: Initial DHCP server implementation
Martin Xu [Fri, 12 Nov 2010 16:07:31 +0000 (17:07 +0100)]
gdhcp: Move get_interface_name and interface_is_up to common.c
This is needed for the dhcp server implementation.
Samuel Ortiz [Fri, 12 Nov 2010 15:30:39 +0000 (16:30 +0100)]
dnsproxy: Handle POLLERR and POLLHUP on the nameserver UDP socket
poll is restarted when ConnMan receives a new UDP request from the client.
Fixes BMC#9960
Marcel Holtmann [Fri, 12 Nov 2010 23:57:55 +0000 (08:57 +0900)]
Show WISPr abort login URL if present
Marcel Holtmann [Fri, 12 Nov 2010 22:59:13 +0000 (07:59 +0900)]
For consistency use err instead of ret variable name
Marcel Holtmann [Fri, 12 Nov 2010 22:57:37 +0000 (07:57 +0900)]
Report error when enabling IP forwarding
Marcel Holtmann [Fri, 12 Nov 2010 22:50:18 +0000 (07:50 +0900)]
Use technology information when reporting Tethering status
Marcel Holtmann [Fri, 12 Nov 2010 22:40:43 +0000 (07:40 +0900)]
Use a proper technology callback to report Tethering status
Marcel Holtmann [Fri, 12 Nov 2010 22:30:08 +0000 (07:30 +0900)]
Break line to not exceed 80 characters
Marcel Holtmann [Fri, 12 Nov 2010 22:28:26 +0000 (07:28 +0900)]
Use static volatile for atomic global reference counters
Marcel Holtmann [Fri, 12 Nov 2010 22:24:08 +0000 (07:24 +0900)]
Don't take reference count based on if result
To make the code more readable turn the failure into a clear error case
and only take the reference count later in the code flow.
Lucas De Marchi [Fri, 12 Nov 2010 14:18:52 +0000 (15:18 +0100)]
iptables-test: Fix build failure
tools/iptables-test.c:786:5: error: cast from pointer to integer of
different size
tools/iptables-test.c:788:5: error: cast from pointer to integer of
different size
Mohamed Abbas [Thu, 11 Nov 2010 21:12:19 +0000 (13:12 -0800)]
Fix for crash with new proxy lookup callbacks
This crash happens when the service disconnects before
the proxy callback is called.
Samuel Ortiz [Fri, 12 Nov 2010 01:48:13 +0000 (02:48 +0100)]
tethering: Enable NAT
Samuel Ortiz [Fri, 12 Nov 2010 01:42:06 +0000 (02:42 +0100)]
iptables-test: Set builtin flag before inserting new entry
Samuel Ortiz [Fri, 12 Nov 2010 01:39:07 +0000 (02:39 +0100)]
iptables: Set builtin flag before inserting new entry
Samuel Ortiz [Fri, 12 Nov 2010 00:46:38 +0000 (01:46 +0100)]
iptables: Duplicate table name when inserting it
Samuel Ortiz [Thu, 11 Nov 2010 23:39:42 +0000 (00:39 +0100)]
iptables: Update builtin chain hook entry and underflow arrays
Those arrays track the builtin chains positions.
Samuel Ortiz [Thu, 11 Nov 2010 23:20:22 +0000 (00:20 +0100)]
iptables-test: Fix builtin chain rule addition
Samuel Ortiz [Thu, 11 Nov 2010 15:37:48 +0000 (16:37 +0100)]
iptables-test: Update builtin hooks and underflow arrays
Samuel Ortiz [Wed, 10 Nov 2010 22:54:33 +0000 (23:54 +0100)]
device: Check for a device driver pointer before de-referencing it
Samuel Ortiz [Wed, 10 Nov 2010 17:15:15 +0000 (18:15 +0100)]
tethering: Add async tethering_enabled callback
Leena Gunda [Wed, 10 Nov 2010 11:10:00 +0000 (12:10 +0100)]
Fix get-proxy-autoconfig method checking
The script should check for the "auto" method, not the "auto-config".
Fixes BMC#9178
Samuel Ortiz [Wed, 10 Nov 2010 10:58:33 +0000 (11:58 +0100)]
dnsproxy: Remove TCP connection lookup from create_server()
The TCP connections are opened and closed for each DNS over TCP request,
no need to try to find an already opened one.
Samuel Ortiz [Wed, 10 Nov 2010 00:13:51 +0000 (01:13 +0100)]
dnsproxy: Handle TCP receive loop retries
On the TCP nonblocking socket, EAGAIN or EWOULDBLOCK recv() errors should
be handled more carefully.
Fixes BMC#9834
Leena Gunda [Tue, 9 Nov 2010 14:03:00 +0000 (15:03 +0100)]
service: Use correct string for Proxy.Method
Fixes BMC#9735
Samuel Ortiz [Mon, 8 Nov 2010 22:56:54 +0000 (23:56 +0100)]
bluetooth: Implement tethering hook
Samuel Ortiz [Mon, 8 Nov 2010 15:25:15 +0000 (16:25 +0100)]
technology: Add bridge name to the tethering hook
Samuel Ortiz [Mon, 8 Nov 2010 10:25:47 +0000 (11:25 +0100)]
device: Do not disable technology twice
The technology disabling is done by the technology plugins.
Fixes BMC#8074
Marcel Holtmann [Mon, 8 Nov 2010 01:05:35 +0000 (10:05 +0900)]
Don't report zero length success status back to client
Marcel Holtmann [Mon, 8 Nov 2010 00:46:07 +0000 (09:46 +0900)]
Fix issue with non-blocking TLS connections
Marcel Holtmann [Mon, 8 Nov 2010 00:24:53 +0000 (09:24 +0900)]
Add extra debug statement for when TLS encryption is used
Marcel Holtmann [Mon, 8 Nov 2010 00:23:22 +0000 (09:23 +0900)]
Use file descriptor directly instead of GIOChannel
Marcel Holtmann [Sun, 7 Nov 2010 20:46:23 +0000 (05:46 +0900)]
Use URI escape helpers for WISPr login request
Marcel Holtmann [Sun, 7 Nov 2010 20:28:19 +0000 (05:28 +0900)]
Add extra debug for result function return value
Marcel Holtmann [Sun, 7 Nov 2010 20:20:43 +0000 (05:20 +0900)]
Add parameters for setting user agent and HTTP version
Marcel Holtmann [Sun, 7 Nov 2010 20:15:56 +0000 (05:15 +0900)]
Add support for setting the HTTP version information
Marcel Holtmann [Sun, 7 Nov 2010 20:00:42 +0000 (05:00 +0900)]
Read IO flags first before setting channel to non-blocking
Marcel Holtmann [Sun, 7 Nov 2010 19:53:37 +0000 (04:53 +0900)]
Add support for printing result in GWeb test tool
Marcel Holtmann [Sun, 7 Nov 2010 19:45:53 +0000 (20:45 +0100)]
Add some extra HTTP body context debug
Marcel Holtmann [Sun, 7 Nov 2010 11:35:47 +0000 (12:35 +0100)]
Use send buffer to handle non-blocking GIOChannel usage
Marcel Holtmann [Sun, 7 Nov 2010 11:33:23 +0000 (12:33 +0100)]
Deal with EAGAIN and GnuTLS channels
Marcel Holtmann [Sun, 7 Nov 2010 09:10:43 +0000 (10:10 +0100)]
Add support for handling non-blocking GnuTLS channels
Marcel Holtmann [Sat, 6 Nov 2010 23:04:21 +0000 (00:04 +0100)]
Remove outdated portal test program
Marcel Holtmann [Sat, 6 Nov 2010 23:01:30 +0000 (00:01 +0100)]
Use GWeb for portal detection support
Marcel Holtmann [Sat, 6 Nov 2010 22:31:50 +0000 (23:31 +0100)]
Add interface for setting proxy for GWeb sessions
Marcel Holtmann [Sat, 6 Nov 2010 21:56:37 +0000 (22:56 +0100)]
Use proxy framework for portal check
Marcel Holtmann [Sat, 6 Nov 2010 21:35:14 +0000 (22:35 +0100)]
Add basic implementation for internal proxy framework
Marcel Holtmann [Sat, 6 Nov 2010 19:18:29 +0000 (20:18 +0100)]
Remove unused device->control value
Marcel Holtmann [Sat, 6 Nov 2010 19:15:49 +0000 (20:15 +0100)]
Remove unused connman_device_get_control function
Marcel Holtmann [Sat, 6 Nov 2010 19:14:07 +0000 (20:14 +0100)]
Remove unused connman_device_get_name function
Marcel Holtmann [Sat, 6 Nov 2010 19:09:19 +0000 (20:09 +0100)]
Add skeleton for integration of WISPr support
Marcel Holtmann [Sat, 6 Nov 2010 19:06:05 +0000 (20:06 +0100)]
Add workaround for not linking against GnuTLS
Marcel Holtmann [Sat, 6 Nov 2010 12:45:24 +0000 (13:45 +0100)]
Remove some leftovers from Device/Network interface removal
Mohamed Abbas [Sat, 6 Nov 2010 01:20:46 +0000 (18:20 -0700)]
Support chunk encode in HTTP response.
If chunk encode is used them make sure we strip the chunk
body only.
Mohamed Abbas [Sat, 6 Nov 2010 01:20:45 +0000 (18:20 -0700)]
Add chunk encode support when doing HTTP request.
Allow user to send chunked HTTP post request by calling the
input callback function on write until the user indicate no
more data then we send the 0 length chunk to indicate end of
request body.
Now we use a new watch for sending data. This watch is only
active if more data need to be send.
Samuel Ortiz [Sat, 6 Nov 2010 00:21:44 +0000 (01:21 +0100)]
iptables: Add support for interface and IP option inversion
Samuel Ortiz [Sat, 6 Nov 2010 00:11:50 +0000 (01:11 +0100)]
iptables: Add source and destination IP option support
Samuel Ortiz [Fri, 5 Nov 2010 23:30:36 +0000 (00:30 +0100)]
iptables: Add in and out interface option support
Samuel Ortiz [Fri, 5 Nov 2010 23:12:32 +0000 (00:12 +0100)]
iptables: Dump ipt_entry ip field
Marcel Holtmann [Fri, 5 Nov 2010 15:42:27 +0000 (16:42 +0100)]
Remove unused connman_device_get_path function
Marcel Holtmann [Fri, 5 Nov 2010 15:40:17 +0000 (16:40 +0100)]
Remove unused __connman_element_get_*_path functions
Marcel Holtmann [Fri, 5 Nov 2010 15:37:33 +0000 (16:37 +0100)]
Remove unused connman_network_get_path function
Marcel Holtmann [Fri, 5 Nov 2010 15:10:57 +0000 (16:10 +0100)]
Remove DBusConnection reference from device/network interfaces
Marcel Holtmann [Fri, 5 Nov 2010 10:51:23 +0000 (11:51 +0100)]
Remove test scripts for no longer existing interfaces
Marcel Holtmann [Fri, 5 Nov 2010 10:44:47 +0000 (11:44 +0100)]
Remove documentation for no longer existing interfaces
Marcel Holtmann [Thu, 4 Nov 2010 22:22:38 +0000 (23:22 +0100)]
Remove device list from Technology interface
Marcel Holtmann [Thu, 4 Nov 2010 22:22:21 +0000 (23:22 +0100)]
Fix fallout within plugins
Marcel Holtmann [Thu, 4 Nov 2010 22:08:50 +0000 (23:08 +0100)]
Remove unneeded CONNMAN_DEVICE_INTERFACE
Marcel Holtmann [Thu, 4 Nov 2010 22:03:39 +0000 (23:03 +0100)]
Remove unneeded CONNMAN_NETWORK_INTERFACE
Marcel Holtmann [Thu, 4 Nov 2010 21:50:54 +0000 (22:50 +0100)]
Remove unneeded enum connman_network_protocol
Marcel Holtmann [Thu, 4 Nov 2010 21:47:30 +0000 (22:47 +0100)]
Remove unneeded enum connman_device_mode
Samuel Ortiz [Thu, 4 Nov 2010 16:57:08 +0000 (17:57 +0100)]
Fix wifi plugin build issues when not built-in.
Marcel Holtmann [Thu, 4 Nov 2010 16:00:35 +0000 (17:00 +0100)]
Don't use O_CLOEXEC flag to open()
Marcel Holtmann [Thu, 4 Nov 2010 12:04:10 +0000 (13:04 +0100)]
Use * characters for hidden password input
Marcel Holtmann [Thu, 4 Nov 2010 11:59:37 +0000 (12:59 +0100)]
Add support for WISPr username/password input dialogs
Marcel Holtmann [Wed, 3 Nov 2010 20:45:27 +0000 (21:45 +0100)]
Release 0.63
Samuel Ortiz [Wed, 3 Nov 2010 16:48:19 +0000 (17:48 +0100)]
service: Try to autoconnect favorite but failed services at boot