0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-20 04:02:15 +02:00
openvpn3/openvpn
Charlie Vigue 075688e180 Implement certcheck used by the appcontrol feature
The AppControl feature provides an internal communications channel that
is described in detail in the relevant commits that implement it. This
change adds two intrinsic app control 'protocols' to the list of
supported handlers in the client. The new protocols are:

- cxa1: This is a request for the client to begin a TLS handshake via
the app control channel.
- cck1: This is the protocol that allows the exchange of the requested
TLS handshake data.

The 'cxa1' handler parses the request and initiates the handshake from
the client. This handshake is exchanged via the 'cck1' protocol and
serves to prove to the server that the client has access to the required
private key.

Signed-off-by: Charlie Vigue <charlie.vigue@openvpn.com>
2024-05-17 09:18:18 +00:00
..
acceptor Remove support for pre-Vista Windows versions 2023-04-20 17:44:14 +02:00
addr IP::PoolType: Fix constructor definition 2024-05-15 16:27:59 +00:00
apple maclife.hpp: synchronize start and stop of lifecycle thread 2023-07-19 22:13:00 +02:00
applecrypto remove 'prng' argument from SSLLib::RandomAPI ctor 2023-11-22 04:49:31 +01:00
asio Use openvpn_io::detail::socket_type instead of "int" 2023-09-28 11:33:41 +02:00
auth Addressed 2nd set of -Wconversion warnings 2023-08-21 13:51:50 +00:00
aws introduce base types for strong and weak RNGs 2023-11-22 04:49:31 +01:00
buffer Replace call of virtual in CTOR w/ non-virtual 2023-11-10 16:05:46 +01:00
client Implement certcheck used by the appcontrol feature 2024-05-17 09:18:18 +00:00
common jsonhelper: Extend disabling -Wdangling-reference to GCC 14+ 2024-05-15 16:27:59 +00:00
compress Refactor compression to allow setting log level at runtime 2024-04-17 14:48:50 +00:00
crypto Spell none cipher with lowercase 2024-05-08 16:39:25 +00:00
dco OpenVPN 3 Core library version 3.8.5 2024-05-03 14:50:21 +02:00
error Refactor reauthentication logic 2024-05-08 16:39:24 +00:00
frame Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
http Eliminate some conversion warnings 2023-03-08 15:21:50 +00:00
init Remove OPENVPN_EXTERN 2023-04-27 23:35:41 +02:00
io copyright: Update to 2022 2022-09-29 12:00:26 +02:00
ip Using new numeric conversion tools 2023-08-23 18:44:29 +02:00
legal Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
linux Eliminate some conversion warnings 2023-03-08 15:21:50 +00:00
log Move test_proto into coreUnittests 2024-04-17 14:48:50 +00:00
mbedtls Replacing logging in ssl context und proto context with new logger 2024-04-17 14:48:50 +00:00
netconf OpenVPN 3 Core library version 3.8.5 2024-05-03 14:50:21 +02:00
omi apply --dns options the new way 2024-05-13 14:07:53 +02:00
openssl Replacing logging in ssl context und proto context with new logger 2024-04-17 14:48:50 +00:00
options Add various moves as suggested by Coverity 2024-01-31 17:02:45 +01:00
ovpnagent apply --dns options the new way 2024-05-13 14:07:53 +02:00
pki Add support for mbed TLS 3.0 2024-02-23 15:32:58 +01:00
proxy Check length of response before accessing it 2024-01-08 21:32:17 +01:00
random add Doxygen comments to randapi.hpp 2023-11-29 22:17:49 +01:00
reliable Port the psid cookie defense from ovpn2 2023-10-03 12:42:29 -07:00
server Refactor ClientProto::Session to use ProtoContext as field insatead of Base 2024-04-11 09:59:05 +00:00
ssl Implement certcheck used by the appcontrol feature 2024-05-17 09:18:18 +00:00
time Make profile errors clearer for users by reporting specific error codes. 2024-03-22 15:15:09 +00:00
transport Make profile errors clearer for users by reporting specific error codes. 2024-03-22 15:15:09 +00:00
tun dns option: handle allow_local_dns_resolvers 2024-05-13 14:07:53 +02:00
win add Windows network utilities and abstraction layer 2024-05-13 14:07:53 +02:00
ws Do not check for C++ <= 17 2024-03-19 12:23:44 +01:00