radsecproxy.git, branch radsecproxy-1.6.2

Mention CVE number in ChangeLog.

2012-10-25T11:46:00+00:00

radsecproxy-1.6.2

2012-10-25T11:21:57+00:00

Don't mix up pre- and post-handshake verification of DTLS clients.

2012-10-22T16:13:45+00:00

Commit db965c9b addressed TLS clients only.

When verifying DTLS clients, don't consider config blocks with CA
settings ('tls') which differ from the one used for verifying the
certificate chain.

Original issue reported and analysed by Ralf Paffrath. DTLS being
vulnerable reported by Raphael Geisser.

Addresses issue RADSECPROXY-43, CVE-2012-4523.

Update documentation on default secret for TLS and DTLS.

2012-10-22T15:47:18+00:00

The change was done in radsecproxy-1.6 (2012-04-27) but wasn't
documented properly.

Bump version.

2012-10-22T14:08:56+00:00

Update ChangeLog with CVE id for RADSECPROXY-43.

2012-10-18T12:35:13+00:00

Bump version in configure.ac too.

2012-09-14T11:19:58+00:00

radsecproxy-1.6.1

2012-09-14T11:15:12+00:00

Document the effects of RADSECPROXY-43.

2012-09-14T11:07:06+00:00

https://project.nordu.net/browse/RADSECPROXY-43

Don't mix up pre- and post-handshake verification of clients.

2012-09-13T13:19:22+00:00

When verifying clients, don't consider config blocks with CA
settings ('tls') which differ from the one used for verifying the
certificate chain. Reported by Ralf Paffrath.

Reported and analysed by Ralf Paffrath.

Addresses issue RADSECPROXY-43.