Commit Graph

365 Commits

Author SHA1 Message Date
Jamie Cameron
9817085c70 Delete PID file on shutdown 2024-05-29 13:22:47 -07:00
Ilia Ross
2641985b98 Fix typo 2024-05-20 19:06:18 +03:00
Ilia Ross
736e514766 Fix to always use log function 2024-05-20 18:48:44 +03:00
Jamie Cameron
35e9f0a01d Limit UDP replies to 1 every 5 seconds per IP 2024-05-11 15:20:19 -07:00
Jamie Cameron
c4c2c5c38e Add a 10 second timeout to handle the case where a client connects but doesn't start a valid SSL session 2023-10-09 22:55:18 -07:00
Jamie Cameron
bbe7e78516 Log timeout to wait for 2023-10-09 21:59:50 -07:00
Jamie Cameron
3d482d2bf5 Support CF-Connecting-IPv6 header 2023-08-22 18:46:43 -07:00
Jamie Cameron
31af9f996c Also support CF-Connecting-IP https://github.com/webmin/webmin/issues/1956 2023-08-21 10:04:16 -07:00
Jamie Cameron
fd06605f51 Add support for True-Client-IP header as used by Cloudflare https://github.com/webmin/webmin/issues/1956 2023-08-20 21:22:08 -07:00
Jamie Cameron
4197e61772 Allow use of proxied SSL client name even when in non-SSL mode https://github.com/webmin/webmin/issues/1962 2023-08-11 20:35:57 -07:00
Jamie Cameron
b3b5fff0dc If trusting the remote IP, also trust the proxied SSL client cert https://github.com/webmin/webmin/issues/1962 2023-07-28 18:33:48 -07:00
iliajie
486b323990 Add ability to control Server: response header #1945
This change:

  1. Adds ability for an admin to set custom response header for `Server:`
  2. Fixes displaying of running Webmin version for unauthenticated user
2023-07-11 15:05:04 +03:00
Jamie Cameron
e552c68f7e SSL need to be shut down properly 2023-06-13 07:41:09 -07:00
Jamie Cameron
ada885ef41 Update session DB with actual remote IP https://github.com/webmin/authentic-theme/issues/1653 2023-05-25 16:50:15 -07:00
Jamie Cameron
3996ff205f Handle case where the root user for testing PAM has no password https://github.com/webmin/webmin/issues/1911 2023-05-20 16:26:54 -07:00
iliajie
cdf715ad2e Fix to test expired password correctly 2023-05-04 13:09:16 +03:00
Jamie Cameron
81a8607628 Use lc to lower case 2023-04-28 13:59:19 -07:00
iliajie
5dc2281e66 Fix password change screen pop up on every login 20d07a17a8 2023-04-28 11:02:19 +03:00
Jamie Cameron
9bcee57c7c Try lower case username if upper case doesn't exist https://github.com/virtualmin/virtualmin-gpl/issues/553 2023-04-25 20:47:07 -07:00
Jamie Cameron
20d07a17a8 Sync password expiry logic with Linux https://forum.virtualmin.com/t/personalized-warning-in-password-policy/120228 2023-04-18 21:43:15 -07:00
Jamie Cameron
22e7e5c553 Deal with backquotes 2023-01-24 20:55:31 -08:00
Jamie Cameron
726d28d807 Verify long-running websockets sessions in miniserv 2022-12-14 11:18:28 -08:00
iliajie
a9349c7fe5 Add new LIBROOT env var 2022-12-05 19:03:10 +02:00
iliajie
f1a434b65a Fix to always set vendor_perl if perllib config option is set
https://sourceforge.net/p/webadmin/bugs/5595/
2022-12-02 00:22:43 +02:00
iliajie
2f21d0b067 Fix to call setup_ssl_contexts conditionally 2022-12-01 14:42:20 +02:00
iliajie
e72415952c Fix to check if Net::SSLeay::get_servername exists (on CentOS 6)
https://github.com/webmin/webmin/issues/1798#issuecomment-1328295876
2022-11-27 19:19:15 +02:00
Jamie Cameron
e3792a48e0 Check for timeouts at more places when reading headers https://github.com/webmin/webmin/issues/1767 2022-11-02 23:21:59 -07:00
iliajie
c8e94c8cdc Fix to use Digest::SHA instead 2022-10-30 21:49:52 +02:00
Jamie Cameron
6d96dd6a13 Add option to use existing websockets key instead of session ID 2022-10-30 12:21:34 -07:00
Jamie Cameron
c23c334eed Connection: header may be more than just upgrade 2022-10-26 09:47:27 -07:00
Jamie Cameron
98c2ce24c1 Include the session ID in the websockets key so that it can be verified on the backend to prevent misuse of the session 2022-10-22 18:17:15 -07:00
Jamie Cameron
b049ba6c3b Add more debug info 2022-10-22 12:13:27 -07:00
Jamie Cameron
d7c34eab2b Limit a connection to a user 2022-10-20 22:22:45 -07:00
Jamie Cameron
a87f3fbf89 No need for forked command mode for now 2022-10-20 21:41:14 -07:00
Jamie Cameron
6546ad5e4a Merge branch 'master' of github.com:webmin/webmin 2022-10-17 11:26:46 -07:00
Jamie Cameron
8919aafc19 Use correct cert and key file when there is a hostname-specific cert 2022-10-17 11:26:20 -07:00
iliajie
d3fe07cecc Fix typo 2022-10-17 17:36:13 +03:00
Jamie Cameron
0895b4724f Pass SSL cert and key files for this connection on to CGI scripts 2022-10-16 17:20:58 -07:00
Jamie Cameron
f00a322d94 Actually forward the websockets protocol properly in proxy mode 2022-10-15 16:27:27 -07:00
Jamie Cameron
340b883f92 Don't lose debug log on reload 2022-10-14 23:35:24 -07:00
Jamie Cameron
2fad122571 Delete obsolete inets support 2022-10-14 16:22:30 -07:00
Jamie Cameron
5507f501df Log SSL redirects 2022-10-14 15:30:05 -07:00
Jamie Cameron
273100ec6e Add support for websockets proxying via Webmin 2022-10-14 12:31:32 -07:00
Jamie Cameron
fa465d0f76 Start of work on websockets proxy support 2022-10-02 21:23:31 -07:00
Jamie Cameron
15f9f8f206 Re-read SSL certs on USR1 signal 2022-09-17 17:47:16 -07:00
Jamie Cameron
b45d55ac1b Further caching of SSL contexts 2022-09-17 17:32:28 -07:00
Jamie Cameron
339ec2178a Merge branch 'master' of github.com:webmin/webmin 2022-09-17 16:31:37 -07:00
Jamie Cameron
7cb916d64d Clear out contexts hash on reload 2022-09-17 16:31:32 -07:00
iliajie
3747f930b0 Fix wording 2022-09-17 21:53:15 +03:00
iliajie
5e521515d9 Fix to use correct URL name ; consider musthost option 2022-09-17 21:46:57 +03:00