[PATCH 13/10] Replace static auth form for GlobalProtect portal with a dynamic auth form

2018-01-12 Thread Daniel Lenski
(Also adds more memory-allocation checks to the portal auth form) Signed-off-by: Daniel Lenski --- auth-globalprotect.c | 64 1 file changed, 34 insertions(+), 30 deletions(-) diff --git a/auth-globalprotect.c

[PATCH 12/10] Check all oc_text_buf for errors (e.g. out-of-memory) before using their contents

2018-01-12 Thread Daniel Lenski
Signed-off-by: Daniel Lenski --- auth-globalprotect.c | 19 ++- gpst.c | 26 +++--- 2 files changed, 33 insertions(+), 12 deletions(-) diff --git a/auth-globalprotect.c b/auth-globalprotect.c index d3799d6..4ef37f7 100644 ---

[PATCH on top of 82d4430] Smarter MTU calculation for GlobalProtect

2018-01-12 Thread Daniel Lenski
- If we have no ESP support, ESP disabled, or no ESP keys received, then we're definitely using the TLS tunne and we should calculate tunnel MTU based on the TCP MSS, subtracting the TLS+GPST overhead (and only use the base/wire MTU as a crude fallback if necessary). - If we've got ESP