0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-19 19:52:15 +02:00
openvpn3/client
Lev Stipakov e34094e30d Refactor reauthentication logic
The reauthentication logic differs from openvpn2
and the code is a bit hard to follow. Simplify
the code and make it behave like in openvpn2.

 - password is cached by default

 - password is purged when auth-nocache is presented in a local config or pushed

 - when AUTH_FAILED is received and we have no session-id, throw a fatal error

 - when AUTH_FAILED is received and user interaction is required for
   authentication (MFA), throw a fatal error

 - when AUTH_FAILED is received, user interaction is not required
   for authentication and either we have a cached password OR password is not
   needed, we reconnect.

Password is "needed" when non-empty password is provided.

User interaction is required for static/dynamic challenge and SAML.

Signed-off-by: Lev Stipakov <lev@openvpn.net>
2024-05-08 16:39:24 +00:00
..
CMakeLists.txt client: Switch to UseSWIG instead of manual custom command 2024-03-07 00:29:36 +02:00
ovpncli.cpp Refactor reauthentication logic 2024-05-08 16:39:24 +00:00
ovpncli.hpp Refactor reauthentication logic 2024-05-08 16:39:24 +00:00
ovpncli.i client: Explicitely use int as socket type in SWIG 2024-03-06 13:00:04 +01:00