ocserv 0.9.0

Nikos Mavrogiannopoulos nmav at gnutls.org
Tue Jan 20 12:14:15 PST 2015


Hello,
 I've just released ocserv 0.9.0. This release integrates supports for
the radius protocol using the freeradius-client library, and adds support
for compression using LZS and LZ4. 
 
ocserv is a VPN server that implements the AnyConnect SSL VPN protocol
and targets small embedded Linux devices.

* Version 0.9.0 (released 2015-01-20)
- Added native support for radius. That adds the new auth configuration
  option "radius", which has as parameters the freeradius-client
  configuration file and optionally the groupconfig option which
  instructs to read configuration from radius; the stats-report-time
  option enables interim-updates. That adds the dependency to
  freeradius-client (see doc/README.radius).
- Reply using the same address that received UDP packets are sent.
- Simplify the input of IPv6 network addresses.
- Use a separate IPC and PID namespace in Linux systems for worker
  processes. That effectively puts each worker process in a separate
  container. This can be enabled at compile time using --enable-linux-namespaces.
- Configuration option 'use-seccomp' was replaced by 'isolate-workers',
  which in addition to seccomp it enables the Linux namespaces restrictions.
- Added support for stateless compression using LZ4 and LZS. This
  is disabled by default. 

The current release is available at:
ftp://ftp.infradead.org/pub/ocserv/ocserv-0.9.0.tar.xz
ftp://ftp.infradead.org/pub/ocserv/ocserv-0.9.0.tar.xz.sig

The VPN server's web-site is at:
http://www.infradead.org/ocserv

regards,
Nikos





More information about the openconnect-devel mailing list