Jamie Cameron
9817085c70
Delete PID file on shutdown
2024-05-29 13:22:47 -07:00
Ilia Ross
2641985b98
Fix typo
2024-05-20 19:06:18 +03:00
Ilia Ross
736e514766
Fix to always use log function
2024-05-20 18:48:44 +03:00
Jamie Cameron
35e9f0a01d
Limit UDP replies to 1 every 5 seconds per IP
2024-05-11 15:20:19 -07:00
Jamie Cameron
c4c2c5c38e
Add a 10 second timeout to handle the case where a client connects but doesn't start a valid SSL session
2023-10-09 22:55:18 -07:00
Jamie Cameron
bbe7e78516
Log timeout to wait for
2023-10-09 21:59:50 -07:00
Jamie Cameron
3d482d2bf5
Support CF-Connecting-IPv6 header
2023-08-22 18:46:43 -07:00
Jamie Cameron
31af9f996c
Also support CF-Connecting-IP https://github.com/webmin/webmin/issues/1956
2023-08-21 10:04:16 -07:00
Jamie Cameron
fd06605f51
Add support for True-Client-IP header as used by Cloudflare https://github.com/webmin/webmin/issues/1956
2023-08-20 21:22:08 -07:00
Jamie Cameron
4197e61772
Allow use of proxied SSL client name even when in non-SSL mode https://github.com/webmin/webmin/issues/1962
2023-08-11 20:35:57 -07:00
Jamie Cameron
b3b5fff0dc
If trusting the remote IP, also trust the proxied SSL client cert https://github.com/webmin/webmin/issues/1962
2023-07-28 18:33:48 -07:00
iliajie
486b323990
Add ability to control Server: response header #1945
...
This change:
1. Adds ability for an admin to set custom response header for `Server:`
2. Fixes displaying of running Webmin version for unauthenticated user
2023-07-11 15:05:04 +03:00
Jamie Cameron
e552c68f7e
SSL need to be shut down properly
2023-06-13 07:41:09 -07:00
Jamie Cameron
ada885ef41
Update session DB with actual remote IP https://github.com/webmin/authentic-theme/issues/1653
2023-05-25 16:50:15 -07:00
Jamie Cameron
3996ff205f
Handle case where the root user for testing PAM has no password https://github.com/webmin/webmin/issues/1911
2023-05-20 16:26:54 -07:00
iliajie
cdf715ad2e
Fix to test expired password correctly
2023-05-04 13:09:16 +03:00
Jamie Cameron
81a8607628
Use lc to lower case
2023-04-28 13:59:19 -07:00
iliajie
5dc2281e66
Fix password change screen pop up on every login 20d07a17a8
2023-04-28 11:02:19 +03:00
Jamie Cameron
9bcee57c7c
Try lower case username if upper case doesn't exist https://github.com/virtualmin/virtualmin-gpl/issues/553
2023-04-25 20:47:07 -07:00
Jamie Cameron
20d07a17a8
Sync password expiry logic with Linux https://forum.virtualmin.com/t/personalized-warning-in-password-policy/120228
2023-04-18 21:43:15 -07:00
Jamie Cameron
22e7e5c553
Deal with backquotes
2023-01-24 20:55:31 -08:00
Jamie Cameron
726d28d807
Verify long-running websockets sessions in miniserv
2022-12-14 11:18:28 -08:00
iliajie
a9349c7fe5
Add new LIBROOT env var
2022-12-05 19:03:10 +02:00
iliajie
f1a434b65a
Fix to always set vendor_perl if perllib config option is set
...
https://sourceforge.net/p/webadmin/bugs/5595/
2022-12-02 00:22:43 +02:00
iliajie
2f21d0b067
Fix to call setup_ssl_contexts conditionally
2022-12-01 14:42:20 +02:00
iliajie
e72415952c
Fix to check if Net::SSLeay::get_servername exists (on CentOS 6)
...
https://github.com/webmin/webmin/issues/1798#issuecomment-1328295876
2022-11-27 19:19:15 +02:00
Jamie Cameron
e3792a48e0
Check for timeouts at more places when reading headers https://github.com/webmin/webmin/issues/1767
2022-11-02 23:21:59 -07:00
iliajie
c8e94c8cdc
Fix to use Digest::SHA instead
2022-10-30 21:49:52 +02:00
Jamie Cameron
6d96dd6a13
Add option to use existing websockets key instead of session ID
2022-10-30 12:21:34 -07:00
Jamie Cameron
c23c334eed
Connection: header may be more than just upgrade
2022-10-26 09:47:27 -07:00
Jamie Cameron
98c2ce24c1
Include the session ID in the websockets key so that it can be verified on the backend to prevent misuse of the session
2022-10-22 18:17:15 -07:00
Jamie Cameron
b049ba6c3b
Add more debug info
2022-10-22 12:13:27 -07:00
Jamie Cameron
d7c34eab2b
Limit a connection to a user
2022-10-20 22:22:45 -07:00
Jamie Cameron
a87f3fbf89
No need for forked command mode for now
2022-10-20 21:41:14 -07:00
Jamie Cameron
6546ad5e4a
Merge branch 'master' of github.com:webmin/webmin
2022-10-17 11:26:46 -07:00
Jamie Cameron
8919aafc19
Use correct cert and key file when there is a hostname-specific cert
2022-10-17 11:26:20 -07:00
iliajie
d3fe07cecc
Fix typo
2022-10-17 17:36:13 +03:00
Jamie Cameron
0895b4724f
Pass SSL cert and key files for this connection on to CGI scripts
2022-10-16 17:20:58 -07:00
Jamie Cameron
f00a322d94
Actually forward the websockets protocol properly in proxy mode
2022-10-15 16:27:27 -07:00
Jamie Cameron
340b883f92
Don't lose debug log on reload
2022-10-14 23:35:24 -07:00
Jamie Cameron
2fad122571
Delete obsolete inets support
2022-10-14 16:22:30 -07:00
Jamie Cameron
5507f501df
Log SSL redirects
2022-10-14 15:30:05 -07:00
Jamie Cameron
273100ec6e
Add support for websockets proxying via Webmin
2022-10-14 12:31:32 -07:00
Jamie Cameron
fa465d0f76
Start of work on websockets proxy support
2022-10-02 21:23:31 -07:00
Jamie Cameron
15f9f8f206
Re-read SSL certs on USR1 signal
2022-09-17 17:47:16 -07:00
Jamie Cameron
b45d55ac1b
Further caching of SSL contexts
2022-09-17 17:32:28 -07:00
Jamie Cameron
339ec2178a
Merge branch 'master' of github.com:webmin/webmin
2022-09-17 16:31:37 -07:00
Jamie Cameron
7cb916d64d
Clear out contexts hash on reload
2022-09-17 16:31:32 -07:00
iliajie
3747f930b0
Fix wording
2022-09-17 21:53:15 +03:00
iliajie
5e521515d9
Fix to use correct URL name ; consider musthost option
2022-09-17 21:46:57 +03:00