mirror/openvpn
0
0
Fork 0
mirror of https://github.com/OpenVPN/openvpn.git synced 2024-09-20 03:52:28 +02:00
Code

Redact "echo" directive strings from log, since

Browse Source 
these strings (going forward) could conceivably
contain security-sensitive data.

Version 2.1.7

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@7480 e7ae566f-a301-0410-adde-c780ea21d3b5
This commit is contained in:
James Yonan 2011-07-28 01:29:12 +00:00 committed by David Sommerseth
parent 20fc33707e
commit 429ab79520
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
misc.c
View File

@ -2408,6 +2408,11 @@ sanitize_control_message(const char *str, struct gc_arena *gc)
cp += 7;
redact = true;
}
else if (c == 'e' && !strncmp(cp, "echo ", 5))
{
cp += 4;
redact = true;
}
else
{
if (c == ',') /* end of session id? */

4
options.c
View File

@ -3886,9 +3886,13 @@ add_option (struct options *options,
}
if (good)
{
#if 0
/* removed for now since ECHO can potentially include
security-sensitive strings */
msg (M_INFO, "%s:%s",
pull_mode ? "ECHO-PULL" : "ECHO",
BSTR (&string));
#endif
#ifdef ENABLE_MANAGEMENT
if (management)
management_echo (management, BSTR (&string), pull_mode);