David Woodhouse [Tue, 8 Nov 2011 02:11:19 +0000 (02:11 +0000)]
Tag version 3.14
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 01:46:47 +0000 (01:46 +0000)]
Add PGP signature information to changelog and download web pages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 00:37:26 +0000 (00:37 +0000)]
Add tarball signing to Makefile
I managed to screw up the 3.13 signature doing it manually; the .asc file
contained a copy of the tarball data rather than being *just* the signature.
Add it to the Makefile and that should stop me screwing it up later.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 00:21:58 +0000 (00:21 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 8 Nov 2011 00:02:17 +0000 (00:02 +0000)]
Update Dutch translation
It was at 100% until I added the library version warning; it was a shame
to screw that over just before the release so thanks Arjan for translating
the new warning.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 23:23:23 +0000 (23:23 +0000)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 23:18:36 +0000 (23:18 +0000)]
Add upload-pot make target
It happens automatically too, but sometimes it's useful to do it immediately,
for instance when preparing a release...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 22:16:12 +0000 (22:16 +0000)]
Add sanity check that libopenconnect matches the openconnect executable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 21:25:32 +0000 (21:25 +0000)]
Move openconnect to sbin
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 13:06:00 +0000 (13:06 +0000)]
Fix HTML converter output in out-of-tree builds
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 12:00:08 +0000 (12:00 +0000)]
Build version.c correctly in out-of-tree builds
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 11:58:43 +0000 (11:58 +0000)]
Avoid use of $(wildcard) in version.c dependencies
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 7 Nov 2011 11:21:18 +0000 (11:21 +0000)]
Don't remove version.c in distclean
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sun, 6 Nov 2011 16:08:57 +0000 (16:08 +0000)]
Fix GNUism in dependencies for version.c
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:48:06 +0000 (02:48 +0000)]
Add OpenIndiana to supported platform list
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:44:25 +0000 (02:44 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:34:07 +0000 (02:34 +0000)]
Fix Solaris/OpenIndiana warning: no previous declaration for 'local_strcasestr'
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:17:36 +0000 (02:17 +0000)]
Remove unneeded inclusion of <arpa/inet.h> from cstp.c and mainloop.c
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 5 Nov 2011 02:16:03 +0000 (02:16 +0000)]
Fix OpenBSD build warning when printing off_t
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 21:35:57 +0000 (21:35 +0000)]
Remove all _xxx_SOURCE macros from source, do it in configure.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 18:24:34 +0000 (18:24 +0000)]
Fix NetBSD ctype warnings.
We have to cast to int via unsigned char. Ick.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 18:00:04 +0000 (18:00 +0000)]
Fix GNUism in po/Makefile.am handling of $(LINGUAS)
We can't use $(shell...). Make the configure script do it instead.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 17:36:17 +0000 (17:36 +0000)]
Fix GNUism in Makefile.am handling of NODISTHOOK
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 4 Nov 2011 16:58:14 +0000 (16:58 +0000)]
Attempt to find zlib if no pkgconfig for it
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 23:25:56 +0000 (23:25 +0000)]
Make version.sh find git metadata only for openconnect itself, not parent dirs
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 23:04:53 +0000 (23:04 +0000)]
Drop $(GETTEXT_PACKAGE) and just use $(PACKAGE)
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 23:00:27 +0000 (23:00 +0000)]
Use AC_LINK_IFELSE to check for working NLS support
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 21:06:55 +0000 (21:06 +0000)]
Fix build with -ansi and without optimisation.
strdup(), strcasecmp(), vsyslog(), and other things need feature macros
defined. For some reason this only bites when optimisation is disabled.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 01:18:38 +0000 (01:18 +0000)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 00:59:00 +0000 (00:59 +0000)]
Revamp NLS support. Drop intltool, code po/Makefile.am manually
Using $(shell ...) probably isn't portable, so may need to be expanded by
the configure script. But this is a start...
Using gettextize seemed to pull in a bunch of other crap; I'd rather just
disable NLS support on crappy platforms where the msgfmt tool doesn't exist,
or where dgettext() isn't even available in -lintl.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 00:57:22 +0000 (00:57 +0000)]
Fix out-of-source-tree invocation of version.sh
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 3 Nov 2011 00:51:50 +0000 (00:51 +0000)]
Fix out-of-source-tree build of web pages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 31 Oct 2011 12:28:54 +0000 (12:28 +0000)]
Remove -Wundef and -Wmissing-noreturn from default CFLAGS
These just cause unwanted noise.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sat, 29 Oct 2011 13:33:36 +0000 (15:33 +0200)]
Attempt to build without NLS if intltool isn't available
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 22:04:12 +0000 (00:04 +0200)]
Pointers to translated strings must be const
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 21:42:12 +0000 (23:42 +0200)]
Fix arithmetic on void pointers in cstp.c
This is a gccism and not portable. And could have been dereferencing an
unaligned pointer too. Thanks to Florian Wobbe for pointing it out.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 10:19:21 +0000 (12:19 +0200)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 28 Oct 2011 10:19:08 +0000 (12:19 +0200)]
Fix newlines in nl translations
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Mon, 24 Oct 2011 12:01:59 +0000 (14:01 +0200)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 23:30:18 +0000 (00:30 +0100)]
Make usage help output translatable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:57:42 +0000 (23:57 +0100)]
Add maintainer mode
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:54:20 +0000 (23:54 +0100)]
Make more strings translatable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:41:31 +0000 (23:41 +0100)]
Fix newlines in nl translations
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 7 Oct 2011 22:04:09 +0000 (23:04 +0100)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 4 Oct 2011 13:25:30 +0000 (14:25 +0100)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 4 Oct 2011 11:29:34 +0000 (12:29 +0100)]
Add update-translations make target
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 30 Sep 2011 21:46:17 +0000 (22:46 +0100)]
Tag version 3.13
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 30 Sep 2011 20:18:58 +0000 (21:18 +0100)]
Add openconnect_set_cert_expiry_warning() to library
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 30 Sep 2011 12:49:49 +0000 (13:49 +0100)]
Update translations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 19:57:59 +0000 (20:57 +0100)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 15:47:49 +0000 (16:47 +0100)]
Add --cert-expire-warning,-e option to set warning level
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 15:18:01 +0000 (16:18 +0100)]
Make certificate expiry warning time variable (still default 60 days)
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 15:17:41 +0000 (16:17 +0100)]
Clean up DTLS Session-ID length warning
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 29 Sep 2011 12:45:23 +0000 (13:45 +0100)]
Switch to using PNG image in web site. Android can't show SVG. Still!
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 23:16:43 +0000 (00:16 +0100)]
Update transations from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 23:15:44 +0000 (00:15 +0100)]
Add OpenSuSE to distribution status list
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:51:20 +0000 (23:51 +0100)]
Man page update: clarify which fsid is used, forget Solaris tuntap IPv6 patch.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:06:33 +0000 (23:06 +0100)]
Add links to manual page, don't number 'started' subpages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:06:23 +0000 (23:06 +0100)]
Fix header on connecting page
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 22:05:34 +0000 (23:05 +0100)]
Fix up distro status page.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 01:41:37 +0000 (02:41 +0100)]
Use automake for www/ directory
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 28 Sep 2011 00:40:06 +0000 (01:40 +0100)]
Update new web pages in release, not openconnect.html
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 22:47:17 +0000 (23:47 +0100)]
Add new version of web pages
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 14:22:21 +0000 (15:22 +0100)]
Translatability fix for 'Discard bad split xxclude' message
Thanks to Jussi Kukkonen for pointing it out.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 10:52:39 +0000 (11:52 +0100)]
Add Transifex config file so 'tx pull' works in any checkout.
Would be nicer if it worked anonymously rather than having to have an account.
For that see http://trac.transifex.org/ticket/740
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 27 Sep 2011 10:51:54 +0000 (11:51 +0100)]
Add (empty) translation files from Transifex
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sun, 25 Sep 2011 22:27:00 +0000 (23:27 +0100)]
Add error message when SSL cert fails
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 23 Sep 2011 20:32:00 +0000 (21:32 +0100)]
Fix build instructions on web page.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 23 Sep 2011 09:50:49 +0000 (10:50 +0100)]
Reduce certificate warning to PRG_INFO
We're going to call back into the validate_peer_cert() function anyway.
Let it handle things properly.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 22:01:00 +0000 (23:01 +0100)]
Use dgettext() so the domain is always correct even in libopenconnect
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 21:09:27 +0000 (22:09 +0100)]
Make user-visible strings translatable
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 14:50:50 +0000 (15:50 +0100)]
Add translation support
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 13:38:24 +0000 (14:38 +0100)]
Fix libproxy build.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 22 Sep 2011 13:11:06 +0000 (14:11 +0100)]
Fix DTLS-may-fail warning when built against OpenSSL 1.0.0e and run with older
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 22:18:13 +0000 (23:18 +0100)]
Update changelog
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 20:56:27 +0000 (21:56 +0100)]
Refactor xmlnode_msg() not to use server-provided string as asprintf() format.
auth.c: In function 'xmlnode_msg':
auth.c:287:2: warning: format not a string literal, argument types not checked [-Wformat-nonliteral]
There wasn't actually a problem here; we *were* vetting the string. But this
is cleaner and stops the compiler bitching.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:41:04 +0000 (18:41 +0100)]
Fix handling of vpninfo->ifname. Always strdup()
We don't actually free it; there will only be one instance during the whole
lifetime of the openconnect process. But stop the compiler bitching about it.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:40:20 +0000 (18:40 +0100)]
Make in_ex and route args to process_split_xxclude const
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:38:19 +0000 (18:38 +0100)]
Fix another const char warning in start_cstp_connection()
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:35:15 +0000 (18:35 +0100)]
Make vpninfo->quit_reason const to avoid compiler complaints
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:24:17 +0000 (18:24 +0100)]
Avoid unused 'autoproxy' variable when built without libproxy support.
If we change the way we detect and abort, we can *check* that variable
that the compiler is complaining about.
I just noticed that libproxy support isn't working; OPENCONNECT_LIBPROXY
is never being defined. Will fix that shortly...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:09:43 +0000 (18:09 +0100)]
Make 'base' arg to openconnect_create_useragent() const
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:06:45 +0000 (18:06 +0100)]
Make usage() static to avoid compiler complaints
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:01:48 +0000 (18:01 +0100)]
Fix compiler warnings about constness of csd_argv[]
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 17:00:12 +0000 (18:00 +0100)]
Make parse_xml_response() method and request_body_type args const
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 16:57:57 +0000 (17:57 +0100)]
Make 'print_equals' string const to avoid compiler complaints
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 16:48:54 +0000 (17:48 +0100)]
Fix char pointers in check_certificate_expiry() to be const
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 16:47:06 +0000 (17:47 +0100)]
Make match_cert_hostname() static to avoid compiler complaints
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 11:33:09 +0000 (12:33 +0100)]
Enable various compiler warnings
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 10:24:19 +0000 (11:24 +0100)]
Enable AM_SILENT_RULES so that warnings are more visible.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 15 Sep 2011 12:37:42 +0000 (13:37 +0100)]
Clean up DTLS timer workaround to make it work with Debian OpenSSL, hopefully
The Debian libraries don't export dtls1_stop_timer() since it's supposed to
be an internal function. But thankfully I think we can do it manually. This
sucks; it means that a misguided attempt at restricting us has forced us
into poking at even *more* internal stuff than we ever wanted to. Yay Debian.
Try to make it slightly less insane by putting upper and lower bounds on
the versions for which we'll do it: We know that OpenSSL 1.0.0e and
above won't be resending the ChangeCipherSpec messages anyway, because
of the fix for OpenSSL RT#2505. I'm dubious about that being the correct
thing to do, but it's working and it matches the Cisco client so I'm going
to try not to think about it too hard.
Also stop *defining* SSL_OP_CISCO_ANYCONNECT for ourselves, and simply
refuse to build DTLS support if it's absent. That patch is merged into
OpenSSL long ago, so we are effectively requiring 0.9.8m or above.
That version is, by coincidence, also the first version where our own
dirty reimplementation of dtls1_stop_timer() is valid. If someone does
backport the Cisco compatibility patch to even-more-ancient OpenSSL than
that, they'd best make sure they backport the other fixes too.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Sun, 11 Sep 2011 23:56:23 +0000 (00:56 +0100)]
Tag version 3.12
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Fri, 9 Sep 2011 20:18:43 +0000 (21:18 +0100)]
Print SHA1 fingerprint with server certificate details.
...so that it can be used with --servercert next time.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Steven Allen [Fri, 9 Sep 2011 20:10:53 +0000 (21:10 +0100)]
Add --pid-file option
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 8 Sep 2011 13:05:46 +0000 (14:05 +0100)]
Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
It seems to get very upset when we resend our ChangeCipherSpec messages,
as the RFC says we're supposed to do. Without a periodic resend, if the
original did get lost in transit, the server wouldn't be able to decrypt
any of our data packets.
Perhaps there's something "wrong" with our packets; the ChangeCipherSpec
messages is is one of the areas in which Cisco's "speshul" version of
DTLS differs from RFC4347. But the Cisco client doesn't seem to resend it
at all, ever. Making it hard to tell what Cisco want it to look like,
unless we wanted to reverse-engineer their code. Which we don't.
If Cisco get away without resending, I suppose we can, until/unless we
work it out. DPD should mostly let us get away with it, because if the
first packet *does* get lost, DPD will soon tell us that the DTLS
connection is dead and we'll make a new one. Sucks, but that's what you
get for using crappy not-quite-RFC-compliant kit. Yay Cisco. Why not join
us in 2006 and start using the proper standard? It's not even as if it'd
be hard to support both in parallel for a while.
Thanks to Eric Barkie for the initial diagnosis.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Wed, 24 Aug 2011 08:56:16 +0000 (09:56 +0100)]
Changelog entry for build fixes
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Tue, 16 Aug 2011 11:09:34 +0000 (05:09 -0600)]
Fix build failure with ancient OpenSSL lacking SSL_OP_NO_TICKET
If it doesn't support the ticket extension, that means we don't need
to stop it from *sending* the ticket extension...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Svante Signell [Tue, 16 Aug 2011 10:24:19 +0000 (12:24 +0200)]
Fix build failure on GNU Hurd (Debian bug #637362)
Currently openconnect does not compile on hurd-i386. The problem is a
missing inclusion of sys/statfs.h in ssl.c. The inlined patch fixes
this issue.
Signed-off-by: svante.signell@telia.com
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Ilia Kats [Tue, 26 Jul 2011 16:14:21 +0000 (18:14 +0200)]
Add zlib to linker line to fix building on Debian
Signed-off-by: Ilia Kats <ilia-kats@gmx.net>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
David Woodhouse [Thu, 21 Jul 2011 00:36:36 +0000 (17:36 -0700)]
Tag version 3.11
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>