updated to 0.10.10

.gitignore

@@ -32,3 +32,5 @@
 /ocserv-0.10.8.tar.xz
 /ocserv-0.10.9.tar.xz.sig
 /ocserv-0.10.9.tar.xz
+/ocserv-0.10.10.tar.xz.sig
+/ocserv-0.10.10.tar.xz

ocserv.conf

@@ -390,6 +390,13 @@ default-domain = example.com
 # The IPv6 subnet that leases will be given from.
 #ipv6-network = fda9:4efe:7e3b:03ea::/64
 
+# Specify the size of the network to provide to clients. It is
+# generally recommended to provide clients with a /64 network in
+# IPv6, but any subnet may be specified. To provide clients only
+# with a single IP use the prefix 128.
+#ipv6-subnet-prefix = 128
+#ipv6-subnet-prefix = 64
+
 # The advertized DNS server. Use multiple lines for
 # multiple servers.
 # dns = fc00::4be0
@@ -439,6 +446,18 @@ ping-leases = false
 
 #no-route = 192.168.5.0/255.255.255.0
 
+# If set, the script /usr/bin/ocserv-fw will be called to restrict
+# the user to its allowed routes and prevent him from accessing
+# any other routes. In case of defaultroute, the no-routes are restricted.
+# All the routes applied by ocserv can be reverted using /usr/bin/ocserv-fw
+# --removeall. This option can be set globally or in the per-user configuration.
+#restrict-user-to-routes = true
+
+# When set to true, all client's iroutes are made visible to all
+# connecting clients except for the ones offering them. This option
+# only makes sense if config-per-user is set.
+#expose-iroutes = true
+
 # Groups that a client is allowed to select from.
 # A client may belong in multiple groups, and in certain use-cases
 # it is needed to switch between them. For these cases the client can

ocserv.spec

@@ -1,7 +1,7 @@
 %global _hardened_build 1
 
 Name:		ocserv
-Version:	0.10.9
+Version:	0.10.10
 Release:	1%{?dist}
 Summary:	OpenConnect SSL VPN server
 
@@ -151,6 +151,7 @@ rm -rf %{buildroot}
 %{_mandir}/man8/ocpasswd.8*
 %{_bindir}/ocpasswd
 %{_bindir}/occtl
+%{_bindir}/ocserv-fw
 %{_bindir}/ocserv-script
 %{_sbindir}/ocserv
 %{_sbindir}/ocserv-genkey
@@ -158,6 +159,9 @@ rm -rf %{buildroot}
 %{_localstatedir}/lib/ocserv/profile.xml
 
 %changelog
+* Mon Nov 30 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.10-1
+- new upstream release
+
 * Thu Oct  8 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.9-1
 - new upstream release (#1269479)
 

sources

@@ -1,2 +1,2 @@
-650c80e96ef429f34787347a59476d07  ocserv-0.10.9.tar.xz.sig
-74834c59aa96beaa222c21ee6521adb2  ocserv-0.10.9.tar.xz
+1de2ff2dfdb1b3a9e06b5a884438c8db  ocserv-0.10.10.tar.xz.sig
+1f73ccb66d36cd51279323e95ae99e68  ocserv-0.10.10.tar.xz