wireguard-openbsd/libexec/login_radius, branch master

Check auth_mkvalue(3) return value for NULL (malloc failure).

2021-01-02T20:32:20Z

For constant strings we don't actually need to use auth_mkvalue(3). Problem reported by Ross L Richardson.

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:32:41Z

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

challenge is an array, not a pointer, therefore cannot be NULL.

2017-04-27T20:55:52Z

Quiets a clang warning.

convert to use readpassphrase() instead of DEPRECATED/getpass()

2016-09-03T11:04:23Z

OK millert@

pledge in login_radius(8).

2015-11-26T19:59:18Z

ok deraadt

Use explicit_bzero() instead of memset() for zeroing out secrets.

2015-10-05T17:31:17Z

OK deraadt@

Talk about 'RADIUS server' in most cases, rather than referring specifically

2015-10-02T13:50:17Z

to radiusd(8) (which doesn't support everything that login_radius(8) talks about) - theo buehler (who provided previous diff) agrees with this. Capitalise RADIUS as per the naming in the RFC. Add STANDARDS section referring to the RFC. Discussed with/suggestions from jmc.

some radiusd updates, from theo buehler

2015-10-01T20:35:55Z

Replace with and other less dirty headers where

2015-01-16T06:39:28Z

possible. Annotate lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)

Only need and not all of here

2014-08-10T05:06:38Z