From 36bf63761d168e5e01125b406422e88fc8a7c3c2 Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Mon, 30 Nov 2015 16:59:06 +0100
Subject: [PATCH] updated to 0.10.10

---
 .gitignore  |  2 ++
 ocserv.conf | 19 +++++++++++++++++++
 ocserv.spec |  6 +++++-
 sources     |  4 ++--
 4 files changed, 28 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index d2dab91..0c9a132 100644
--- a/.gitignore
+++ b/.gitignore
@@ -32,3 +32,5 @@
 /ocserv-0.10.8.tar.xz
 /ocserv-0.10.9.tar.xz.sig
 /ocserv-0.10.9.tar.xz
+/ocserv-0.10.10.tar.xz.sig
+/ocserv-0.10.10.tar.xz
diff --git a/ocserv.conf b/ocserv.conf
index df18a8a..62ea00b 100644
--- a/ocserv.conf
+++ b/ocserv.conf
@@ -391,6 +391,13 @@ default-domain = example.com
 # The IPv6 subnet that leases will be given from.
 #ipv6-network = fda9:4efe:7e3b:03ea::/64
 
+# Specify the size of the network to provide to clients. It is
+# generally recommended to provide clients with a /64 network in
+# IPv6, but any subnet may be specified. To provide clients only
+# with a single IP use the prefix 128.
+#ipv6-subnet-prefix = 128
+#ipv6-subnet-prefix = 64
+
 # The advertized DNS server. Use multiple lines for
 # multiple servers.
 # dns = fc00::4be0
@@ -440,6 +447,18 @@ ping-leases = false
 
 #no-route = 192.168.5.0/255.255.255.0
 
+# If set, the script /usr/bin/ocserv-fw will be called to restrict
+# the user to its allowed routes and prevent him from accessing
+# any other routes. In case of defaultroute, the no-routes are restricted.
+# All the routes applied by ocserv can be reverted using /usr/bin/ocserv-fw
+# --removeall. This option can be set globally or in the per-user configuration.
+#restrict-user-to-routes = true
+
+# When set to true, all client's iroutes are made visible to all
+# connecting clients except for the ones offering them. This option
+# only makes sense if config-per-user is set.
+#expose-iroutes = true
+
 # Groups that a client is allowed to select from.
 # A client may belong in multiple groups, and in certain use-cases
 # it is needed to switch between them. For these cases the client can
diff --git a/ocserv.spec b/ocserv.spec
index 8cfee07..ec51bf9 100644
--- a/ocserv.spec
+++ b/ocserv.spec
@@ -1,7 +1,7 @@
 %global _hardened_build 1
 
 Name:		ocserv
-Version:	0.10.9
+Version:	0.10.10
 Release:	1%{?dist}
 Summary:	OpenConnect SSL VPN server
 
@@ -150,6 +150,7 @@ rm -rf %{buildroot}
 %{_mandir}/man8/ocpasswd.8*
 %{_bindir}/ocpasswd
 %{_bindir}/occtl
+%{_bindir}/ocserv-fw
 %{_bindir}/ocserv-script
 %{_sbindir}/ocserv
 %{_sbindir}/ocserv-genkey
@@ -157,6 +158,9 @@ rm -rf %{buildroot}
 %{_localstatedir}/lib/ocserv/profile.xml
 
 %changelog
+* Mon Nov 30 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.10-1
+- new upstream release
+
 * Thu Oct  8 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.10.9-1
 - new upstream release (#1269479)
 
diff --git a/sources b/sources
index 34833c2..3c0611b 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-650c80e96ef429f34787347a59476d07  ocserv-0.10.9.tar.xz.sig
-74834c59aa96beaa222c21ee6521adb2  ocserv-0.10.9.tar.xz
+1de2ff2dfdb1b3a9e06b5a884438c8db  ocserv-0.10.10.tar.xz.sig
+1f73ccb66d36cd51279323e95ae99e68  ocserv-0.10.10.tar.xz