0
0
mirror of https://github.com/OpenVPN/openvpn.git synced 2024-09-20 03:52:28 +02:00
Commit Graph

460 Commits

Author SHA1 Message Date
james
47ae8457f9 Incremented version to 2.1_rc7d.
Support asynchronous authentication by plugins by allowing
OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY to return
OPENVPN_PLUGIN_FUNC_DEFERRED.  See comments in
openvpn-plugin.h for documentation.  Enabled by ENABLE_DEF_AUTH.

Added a simple packet filter functionality that can be driven by
a plugin.  See comments in openvpn-plugin.h for documentation.
Enabled by ENABLE_PF.

See openvpn/plugin/defer/simple.c for examples of ENABLE_DEF_AUTH
and ENABLE_PF.

"TLS Error: local/remote TLS keys are out of sync" is no longer a
fatal error for TCP-based sessions, since the error can arise
normally in the course of deferred authentication.  In a related
change, allow packet-id sequence to begin at some number n > 0 for
TCP sessions, rather than strictly requiring sequence to begin
at 1.

Added a test to configure.ac for LoadLibrary function on Windows.

Modified "make dist" function to include all files from
install-win32 so that ./domake-win can be run from a
tarball-expanded directory.

setenv and setenv-safe directives may now omit a value argument
which defaults to "".


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2978 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-06-04 05:16:44 +00:00
james
7c51fe16b4 Fixed a bug in plugin.c that caused openvpn_plugin_client_destructor_v1
to not be called for the top-level "generic" client template.

Added additional documentation to openvpn-plugin.h that more clearly
illustrates the full sequence and ordering of plugin callbacks
(plugin/defer/simple.c was extended to provide the raw data for this
documentation).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2973 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-05-25 22:31:25 +00:00
james
344ee91817 Support asynchronous/deferred authentication in
OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY plugin handler.

See documentation in openvpn-plugin.h and example
usage in plugin/defer/simple.c.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2969 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-05-24 23:26:11 +00:00
james
4da783f3a5 Did:
svn propset svn:ignore -F .svnignore .
on the modified .svnignore files.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2967 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-05-24 19:17:12 +00:00
james
9e6a5e01b3 Modified .svnignore to only ignore files generated
by the auto* tools and make.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2966 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-05-24 19:05:59 +00:00
james
1bda73a7b0 Moved branch into official BETA21 position.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2959 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-05-12 20:31:43 +00:00
james
9ca8f3cf77 Misc XGUI fixes.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2836 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-03-11 06:03:12 +00:00
james
d4fb6d493a Set tool defaults in pkitool.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2835 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-03-11 05:58:39 +00:00
james
cefe973e4c First working version of XGUI inclusion.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2834 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-03-10 10:02:20 +00:00
james
4fe9708d67 Added new OpenVPN icon and installer graphic.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2783 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-03-05 01:48:30 +00:00
james
5449d7431d Version 2.1_rc7a.
Minor Windows build system changes:
* Fall back to prebuilt-binary if gcc is not available.
* Documentation changes in ./domake-win


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2760 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-02-18 17:47:13 +00:00
james
b4ddf9e434 Clarified tcp-queue-limit man page entry
(Matti Linnanvuori).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2750 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-02-17 08:27:34 +00:00
james
522fccc3f0 The new function extract_x509_field_ssl tends to break
in early versions of OpenSSL 0.9.6.  Now we will fall
back to the old function extract_x509_field for OpenSSL
0.9.6.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2749 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-02-17 08:21:28 +00:00
james
252a728256 Cleanup IP address for persistence interfaces for tap and also using
ifconfig, gentoo#209055 (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2748 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-02-17 07:05:49 +00:00
james
ba865c55a6 Changes to Windows build system: added GENOUT_PREBUILT mode
to allow building an OpenVPN installer with a reduced set
of prerequisites.  See comments in domake-win for more info.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2711 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-02-01 19:44:53 +00:00
james
63082c8a21 Changes to Windows build system to make it easier to do
partial builds, where only a subset of OpenVPN installer
components are built.  See ./domake-win comments.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2710 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-02-01 10:13:59 +00:00
james
81c7d6558e Version 2.1_rc7
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2702 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-30 00:37:54 +00:00
james
4fa5b75834 Fixup null interface on close, don't use ip addr flush
(Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2683 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-26 04:43:13 +00:00
james
67463ad592 Added a few extra files that exist in the svn repo
but were not being copied into the tarball by
make dist.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2674 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-25 01:01:51 +00:00
james
9a569a97c9 VERSION 2.1_rc6
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2666 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-24 07:44:49 +00:00
james
e9a57dcd98 Fixed pkcs11_private_mode undef.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2664 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-24 00:58:14 +00:00
james
ca637afb07 VERSION 2.1_rc5
Updated ChangeLog.

Cleaned up start menu shortcuts in the Windows
installer.

Make sure that the uninstaller deletes SAMPCONF
files.

Minor uninstaller fixes to prevent files from
being left behind after uninstall.

Updated Windows notes.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2660 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-23 21:08:22 +00:00
james
ec3347f59b Forgot to put struct WIN2K_NDIS_MINIPORT_BLOCK outside
of #if ENABLE_NONADMIN block.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2658 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-23 11:00:58 +00:00
james
55e8903b9f Squashed Win2K TAP bug that was introduced by Vista fixes.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2657 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-23 09:37:25 +00:00
james
2f775b1a17 Incremented TAP version number to 9.4.
Added SAMPCONF macros to settings.in and
openvpn.nsi to allow a default configuration
to be loaded by the installer.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2656 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-23 05:03:57 +00:00
james
a032fcb7bc Added --management-forget-disconnect option -- forget
passwords when management session disconnects (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2652 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-23 00:19:51 +00:00
james
44b3dcc892 Upgraded TAP build scripts to use WDK 6001.17121
(Windows 2008 Server pre-RTM).

Fixed typo of DESC_SecPKCS11DLLs in openvpn.nsi.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2651 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-22 23:52:08 +00:00
james
f02576fa8b Incremented version number to 2.1_rc4a.
Windows changes:

Incremented included OpenSSL version to openssl-0.9.7m.

Updated openssl.patch for openssl-0.9.7m and added some
brief usage comments to the head of the patch.

Added build-pkcs11-helper.sh for building the pkcs11-helper
library.

Integrated inclusion of pkcs11-helper into Windows build
system.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2649 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-22 22:08:35 +00:00
james
5aa3cfaf68 Changed ASSERT(0) to a more descriptive fatal error in tun.c
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2641 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:59:58 +00:00
james
62eb401317 Fixed --disable-iproute2 in ./configure to actually disable
iproute2 usage (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2640 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:38:41 +00:00
james
0aee9ca7e7 Allow OpenVPN to run completely unprivileged under Linux
by allowing openvpn --mktun to be used with --user and --group
to set the UID/GID of the tun device node.  Also added --iproute
option to allow an alternative command to be executed in place
of the default iproute2 command (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2639 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:34:13 +00:00
james
7686b1c407 Rewrote extract_x509_field and modified COMMON_NAME_CHAR_CLASS
to allow forward slash characters ("/") in the X509 common name
(Pavel Shramov).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2638 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:09:56 +00:00
james
e342be3fcd Added PLUGIN_LIBDIR preprocessor string to prepend a default plugin
directory to the dlopen search list when the user specifies the basename
of the plugin only (Marius Tomaschewski).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2637 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:00:43 +00:00
james
be8b67cff5 Define ALLOW_NON_CBC_CIPHERS for people who don't
want to use a CBC cipher for OpenVPN's data channel.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2636 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:45:07 +00:00
james
c8c16606cc Simple fix where options->ca_file was used without
first being checked against NULL.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2635 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:39:01 +00:00
james
dd9f2cb7c0 epoll driver in event.c should be prepared to handle an
EPOLLHUP event in the same way as it handles
EPOLLIN, EPOLLPRI, or EPOLLERR events.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2634 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:33:53 +00:00
james
b19bdf671c Fixed interim memory growth issue in TCP connect loop where
"TCP: connect to %s failed, will try again in %d seconds: %s"
is output.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2633 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:26:45 +00:00
james
eba4632dc1 Added note about alternative version of easy-rsa
that supports subjectAltName for multi-domain
web certificates.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2632 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:13:57 +00:00
james
65433d74ad PKCS-11 fixups (Alon Bar-Lev).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2438 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-26 15:20:32 +00:00
james
718526e0e9 Use pkcs11-helper as external library, can be downloaded
from https://www.opensc-project.org/pkcs11-helper (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2418 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 20:06:14 +00:00
james
7256e6b4d6 Modified command line and config file parser to allow
quoted strings using single quotes ('') (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2414 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 19:19:21 +00:00
james
1184b82454 Added --management-signal option to signal SIGUSR1 when the management
interface disconnects (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2413 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 19:12:54 +00:00
james
b1f27cb0d1 Add "forget-passwords" command to the management interface (Alon Bar-Lev).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2412 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 19:02:21 +00:00
james
70f4f82a35 AUTO_USERID feature -- if the auth-user-pass option is used
with some argument ARG, then -ARG will be appended to the
username string that is sent to the server.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2259 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-08-17 08:22:42 +00:00
james
dd048438cd config-win32.h and install-win32/openvpn.nsi are no longer generated
(i.e. they are now original sources), therefore doclean should not
delete them.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2249 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-08-14 19:36:29 +00:00
james
f4df55fbd8 updated icon
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2120 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-07-18 03:16:04 +00:00
james
0b07df0b82 Fixed a variable declaration that wasn't at the start
of a block.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2026 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-06-11 21:06:11 +00:00
james
6102c37149 script comment changes
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1900 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-26 13:50:24 +00:00
james
cf43470647 Version 2.1_rc4
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1881 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-25 23:52:12 +00:00
james
e726b9062d Fixed 64-bit portability bug in time_string function (Thomas Habets).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1880 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-25 23:23:27 +00:00