mirror/openvpn
0
0
Fork 0
mirror of https://github.com/OpenVPN/openvpn.git synced 2024-09-20 12:02:28 +02:00
Code
432 Commits 13 Branches 119 Tags 33 MiB
fdda3135a8
Commit Graph

432 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
james
6aa7fb8de2 Fixed issue of symbol conflicts interfering with Windows CryptoAPI 
functionality (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4475 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-30 19:53:49 +00:00
james
775a6ac279 Added new 'autolocal' redirect-gateway flag. When enabled, the OpenVPN 
client will examine the routing table and determine whether (a) the
OpenVPN server is reachable via a locally connected interface, or (b)
traffic to the server must be forwarded through the default router.
Only add a special bypass route for the OpenVPN server if (b) is true.
If (a) is true, behave as if the 'local' flag is specified, and do not
add a bypass route.

The new 'autolocal' flag depends on the non-portable test_local_addr()
function in route.c, which is currently only implemented for Windows.
The 'autolocal' flag will act as a no-op on platforms that have not
yet defined a test_local_addr() function.

Increased TLS_CHANNEL_BUF_SIZE to 2048 from 1024 (this will allow for
more option content to be pushed from server to client).

Raised D_MULTI_DROPPED debug level to 4 from 3.

Version 2.1_rc16b.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4446 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-24 09:13:58 +00:00
james
b723833ba8 Added "redirect-private" option which allows private subnets 
to be pushed to the client in such a way that they don't accidently
obscure critical local addresses such as the DHCP server address and
DNS server addresses.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4436 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-23 10:30:10 +00:00
james
1b3842c6c9 Fixed race condition in management interface recv code on 
Windows, where sending a set of several commands to the
management interface in quick succession might cause the
latter commands in the set to be ignored.

Increased management interface input command buffer size
from 256 to 1024 bytes.

Minor tweaks to Windows build system.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4414 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-21 10:15:26 +00:00
james
423037e9fb Reduce the debug level (--verb) at which received management interface 
commands are echoed from 7 to 3.  Passwords will be filtered.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4413 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-21 09:53:25 +00:00
james
9670c61873 Version 2.1_rc16 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4363 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-18 00:47:45 +00:00
james
a7eef14a3e Updated Windows build scripts to package openssl-0.9.8k, 
and to use the Server 2008 WDK (6001.18002).

In cryptoapi.c, renamed CryptAcquireCertificatePrivateKey to
OpenVPNCryptAcquireCertificatePrivateKey to work around
a symbol conflict in MinGW-5.1.4.exe.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4318 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-05-13 13:36:23 +00:00
james
b16cd4d28c Added errors-to-stderr option. When enabled, fatal errors 
that result in the termination of the daemon will be written
to stderr.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4131 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-04-13 03:30:30 +00:00
james
86f5c7c9d5 Allow "management-client" directive to be used 
with unix domain sockets.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4128 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-04-10 21:33:14 +00:00
james
f202f14370 Added the ability to read the configuration file 
from stdin, when "stdin" is given as the config
file name.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@4127 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-04-09 21:11:14 +00:00
james
d382bea756 install-win32/buildinstaller will now always sign executable 
if SIGNTOOL is defined, even if EXTRACT_FILES is enabled.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3976 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-02-13 03:36:12 +00:00
james
763602d3e3 Fixed issue involving an #ifdef in a macro reference that breaks early gcc 
compilers.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3903 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-27 21:18:51 +00:00
james
7a36c43332 Updated common.h types for _WIN64. 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3902 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-27 20:10:49 +00:00
james
8d3ed25dc2 Updated configure.ac to work on MinGW. 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3901 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-27 20:05:48 +00:00
james
b110c9c439 Fixed some compile-time warnings. 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3900 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-27 19:32:46 +00:00
james
435f512a1f Fixed some issues with C++ style comments that leaked into the code. 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3899 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-27 19:22:42 +00:00
james
63c9b4973c Version 2.1_rc15e 
Windows installer changes:

* ifdefed out the check Windows version code which is causing
  problems on Windows 7

* don't define SF_SELECTED if it is already defined


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3855 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-21 16:59:41 +00:00
james
08580d0a33 In Windows installer generator, don't sign the installer .exe 
if EXTRACT_FILES is defined in settings.in.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3791 e7ae566f-a301-0410-adde-c780ea21d3b5
 2009-01-01 13:50:59 +00:00
james
60d9e1375a Added daemon_start_time and daemon_pid environmental variables. 
In management interface, added new ">CLIENT:ESTABLISHED" notification.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3763 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-12-26 16:29:28 +00:00
james
1f4309ae87 Fixed issue where SIGUSR1 restarts would fail if private 
key was specified as an inline file.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3743 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-12-25 02:33:34 +00:00
james
ef2ab232b8 Version 2.1_rc15b 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3729 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-12-23 08:16:12 +00:00
james
6ce4a658a3 Added n_clients environmental variable to information passed 
to management interface client when management-client-auth
is enabled.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3718 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-12-18 09:38:11 +00:00
james
4fb4ce12d9 Added "nclients" command to management interface to 
display the current number of authenticated clients
connected to the server.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3717 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-12-18 07:57:19 +00:00
james
63c5d78552 Added MultiFileExtract capability to Windows Installer. 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3620 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-12-01 22:32:06 +00:00
james
bb8f478052 Added ExtractAuxFile capability to Windows Installer. 
Changed Windows installer to use LZMA instead of BZIP2 compression.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3616 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-30 09:51:58 +00:00
james
2e913885f1 Added new management interface command "pid" to show the 
process ID of the current OpenVPN process (Angelo Laub).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3552 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-20 22:37:43 +00:00
james
148329ca88 Added optional "nogw" (no gateway) flag to --server-bridge 
to inhibit the pushing of the route-gateway parameter to
clients.

Miscellaneous man page edits, fixed some formatting issues.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3550 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-20 21:02:10 +00:00
james
d4e801f487 Version 2.1_rc15 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3525 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-19 18:17:39 +00:00
james
7bb9f5aa04 Fixed issue introduced in 2.1_rc14 that may cause a 
segfault when a --plugin module is used.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3524 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-19 18:07:52 +00:00
james
ae3b37460b Added --tcp-nodelay option: Macro that sets TCP_NODELAY socket 
flag on the server as well as pushes it to connecting clients.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3513 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-18 05:15:22 +00:00
james
04663e4205 Cleaned up man page synopsis. 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3507 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-18 03:29:44 +00:00
james
efab6dfced Minor options check fix: --no-name-remapping is a 
server-only option and should therefore generate an
error when used on the client.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3506 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-18 03:24:32 +00:00
james
09cc9c81c8 Added server-side --opt-verify option: clients that connect 
with options that are incompatible with those of the server
will be disconnected.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3505 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-18 03:22:52 +00:00
james
03bfb228ff Added --prng option to control PRNG (pseudo-random 
number generator) parameters.  In previous OpenVPN
versions, the PRNG was hardcoded to use the SHA1
hash.  Now any OpenSSL hash may be used.  This is
part of an effort to remove hardcoded references to
a specific cipher or cryptographic hash algorithm.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3503 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-18 01:25:05 +00:00
james
f158465dad Version 2.1_rc14 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3496 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-17 04:41:05 +00:00
james
a828135275 * Added additional method parameter to --script-security to preserve 
backward compatibility with system() call semantics used in OpenVPN
  2.1_rc8 and earlier.  To preserve backward compatibility use:

    script-security 3 system


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3495 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-17 04:28:07 +00:00
james
29885c58f4 Interim release. 
Version 2.1_rc13b


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3494 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-16 19:51:24 +00:00
james
bd0a5857fb Minor fix to previous commit (r3476). 
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3477 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-05 17:28:09 +00:00
james
373faab1fa Added config file option "setenv FORWARD_COMPATIBLE 1" to relax 
config file syntax checking to allow directives for future OpenVPN
versions to be ignored.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3476 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-04 21:42:56 +00:00
james
2534aa49c8 Fixed revoke-full to deal with issue arising from addition 
of KEY_NAME environmental variable parameter to openssl.cnf


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3472 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-03 13:11:23 +00:00
james
223b2c513b Fixed some ifconfig-pool issues that precluded 
it from being combined with --server directive.

Now, for example, we can configure thusly:

  server 10.8.0.0 255.255.255.0 nopool
  ifconfig-pool 10.8.0.2 10.8.0.99 255.255.255.0

to have ifconfig-pool manage only a subset
of the VPN subnet.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3471 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-11-03 13:07:33 +00:00
james
c421bacf58 Updated docs to reflect the addition of 
--status-version 3.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3468 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-31 07:13:54 +00:00
james
ed3042470f Added --no-name-remapping option to allow Common Name, X509 Subject, 
and username strings to include any printable character including
space, but excluding control characters such as tab, newline, and
carriage-return.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3467 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-31 07:04:51 +00:00
james
eddd5066f0 Added --status-version 3 which is the same as version 2 
except tabs are used as delimiters instead of commas.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3466 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-31 06:14:55 +00:00
james
dbec0a285f Modified pkitool to allow flexibility in separating 
the Common Name convention from the cert/key filename
convention.

For example:

  KEY_CN="James's Laptop" KEY_NAME="james" ./pkitool james

will crete a client certificate/key pair of james.crt/james.key
having a Common Name of "James's Laptop" and a Name of "james".


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3463 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-28 20:29:40 +00:00
james
fd81c00621 Added man page entry for new environmental variable set 
X509_{n}_{subject_field}.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3462 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-28 20:24:46 +00:00
james
24ce3b27fb Added server-side --auth-user-pass-optional directive, to allow 
connections by clients that do not specify a username/password, when a
user-defined authentication script/module is in place (via
--auth-user-pass-verify, --management-client-auth, or a plugin module).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3461 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-28 20:01:05 +00:00
james
d56dec67dd Change to pkitool/openssl.cnf so that calling scripts can 
set the KEY_NAME environmental variable to set the "name"
X509 subject field in generated certificates.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3460 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-28 05:42:02 +00:00
james
0c22645cba Save X509 Subject fields to environment, using the naming convention: 
X509_{cert_depth}_{name}={value}


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3459 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-28 05:38:55 +00:00
james
3cd37fc03d Fixed informational message in ssl.c to properly indicate 
deferred authentication.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3457 e7ae566f-a301-0410-adde-c780ea21d3b5
 2008-10-27 05:58:44 +00:00