]> git.ipfire.org Git - thirdparty/openvpn.git/log
thirdparty/openvpn.git
18 years agoauth-pam change: link with -lpam rather
james [Wed, 1 Nov 2006 04:58:01 +0000 (04:58 +0000)] 
auth-pam change:  link with -lpam rather
than dlopen (Roy Marples).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1421 e7ae566f-a301-0410-adde-c780ea21d3b5

18 years agoMerged Alon's branch: v2.1_rc1
james [Wed, 1 Nov 2006 00:07:21 +0000 (00:07 +0000)] 
Merged Alon's branch:

svn merge -r1322:1392 https://svn.openvpn.net/projects/openvpn/contrib/alon/21rc/openvpn .

Version 2.1_rc1 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1420 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta16 released
james [Sun, 1 Oct 2006 12:53:33 +0000 (12:53 +0000)] 
Version 2.1_beta16 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1335 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFor Windows build, updated OpenSSL to 0.9.7l.
james [Sun, 1 Oct 2006 11:19:31 +0000 (11:19 +0000)] 
For Windows build, updated OpenSSL to 0.9.7l.

Added small OpenSSL patch to be applied
prior to Windows build.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1328 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoDocumented --socket-flags and the TCP_NODELAY flag.
james [Thu, 21 Sep 2006 07:18:54 +0000 (07:18 +0000)] 
Documented --socket-flags and the TCP_NODELAY flag.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1276 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoChangeLog edits for r1229 and r1230.
james [Thu, 14 Sep 2006 02:53:26 +0000 (02:53 +0000)] 
ChangeLog edits for r1229 and r1230.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1231 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed bug in loopback self-test introduced
james [Thu, 14 Sep 2006 02:42:12 +0000 (02:42 +0000)] 
Fixed bug in loopback self-test introduced
in 2.1-beta15 where self test as invoked by
"make check" would not properly exit after
2 minutes (Paul Howarth).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1230 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoTAP-Win32 fixes to run on Windows Vista.
james [Thu, 14 Sep 2006 02:18:40 +0000 (02:18 +0000)] 
TAP-Win32 fixes to run on Windows Vista.

Modified installer to detect 32-bit vs.
64 bit Windows and install the correct TAP
driver.

TAP-Win32 version number is at 8.4.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1229 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta15 released
james [Tue, 12 Sep 2006 10:10:57 +0000 (10:10 +0000)] 
Version 2.1_beta15 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1226 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoComment about assertion being hit.
james [Mon, 3 Jul 2006 19:54:17 +0000 (19:54 +0000)] 
Comment about assertion being hit.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1079 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed bug introduced with the --port-share directive
james [Fri, 30 Jun 2006 04:13:44 +0000 (04:13 +0000)] 
Fixed bug introduced with the --port-share directive
back in r893 which causes TLS soft resets
(1 per hour by default) in TCP server mode to force
a blockage of tunnel packets and later time-out and
restart the connection.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1076 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agopkcs11 changes:
james [Thu, 29 Jun 2006 19:33:09 +0000 (19:33 +0000)] 
pkcs11 changes:

-r 1046:1053 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21

1. Modified ssl.c to not FATAL and return to init.c so auth-retry will work.
2. Modifed pkcs11-helper.c to fix some problem with multiple providers.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1070 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded two new management states:
james [Thu, 29 Jun 2006 18:57:21 +0000 (18:57 +0000)] 
Added two new management states:
  OPENVPN_STATE_RESOLVE      -- DNS lookup */
  OPENVPN_STATE_TCP_CONNECT  -- Connecting to TCP server

Echo management state change to log.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1068 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMinor syshead.h change for NetBSD to allow
james [Wed, 28 Jun 2006 03:08:19 +0000 (03:08 +0000)] 
Minor syshead.h change for NetBSD to allow
TCP_NODELAY flag to work.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1060 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoRemoved 'keywords' propset from everything
james [Mon, 26 Jun 2006 02:47:53 +0000 (02:47 +0000)] 
Removed 'keywords' propset from everything
except ChangeLog.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1050 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoRemoved spurious executable propset from
james [Mon, 26 Jun 2006 01:35:18 +0000 (01:35 +0000)] 
Removed spurious executable propset from
several source files.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1048 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoModified --port-share code to remove the assumption that
james [Sat, 24 Jun 2006 08:10:10 +0000 (08:10 +0000)] 
Modified --port-share code to remove the assumption that
CMSG_SPACE always evaluates to a constant, to enable
compilation on NetBSD and possibly other BSDs as well.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1041 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoEliminated gcc 3.3.3 warnings on NetBSD
james [Sat, 24 Jun 2006 08:04:42 +0000 (08:04 +0000)] 
Eliminated gcc 3.3.3 warnings on NetBSD
when ./configure --enable-strict is used.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1040 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years ago-r 1026:1032
james [Tue, 13 Jun 2006 17:02:28 +0000 (17:02 +0000)] 
-r 1026:1032
https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21/openvpn

Changes:
1. Updated makefile.w32-vc to include lladdr.*, updated
linkage libraries.
2. Modified lladdr.c to be compiled under visual C.
3. Added retry counter to PKCS#11 PIN hook.
4. Modified PKCS#11 PIN retry loop to return correct error
code when PIN is incorrect.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1038 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded optional minimum-number-of-bytes
james [Sun, 11 Jun 2006 04:22:11 +0000 (04:22 +0000)] 
Added optional minimum-number-of-bytes
parameter to --inactive directive.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1036 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoA few more updates:
james [Sun, 11 Jun 2006 03:56:52 +0000 (03:56 +0000)] 
A few more updates:
-r 1015:1025
https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21

Changes:
1. Fix handling (ignoring) zero sized attributes.
2. Fix gcc-2 issues.
3. Fix openssl 0.9.6 (first version) issues.
4. easy-rsa Makefile (install) is now available so that
distribs will be able to install it safely.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1033 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded credit for CAN-2005-2532.
james [Thu, 11 May 2006 16:21:33 +0000 (16:21 +0000)] 
Added credit for CAN-2005-2532.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1024 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta14 released
james [Thu, 13 Apr 2006 21:46:40 +0000 (21:46 +0000)] 
Version 2.1_beta14 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1013 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded --lladdr option to specify the link layer (MAC) address
james [Thu, 13 Apr 2006 21:09:04 +0000 (21:09 +0000)] 
Added --lladdr option to specify the link layer (MAC) address
for the tap interface on non-Windows platforms (Roy Marples).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1012 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded --route-metric option to set a default route metric
james [Thu, 13 Apr 2006 20:40:39 +0000 (20:40 +0000)] 
Added --route-metric option to set a default route metric
for --route (Roy Marples).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1011 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion number increment.
james [Thu, 13 Apr 2006 20:11:26 +0000 (20:11 +0000)] 
Version number increment.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1010 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoChangeLog edits.
james [Thu, 13 Apr 2006 20:08:47 +0000 (20:08 +0000)] 
ChangeLog edits.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1009 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoRe-added backtrack handling code.
james [Thu, 13 Apr 2006 20:02:27 +0000 (20:02 +0000)] 
Re-added backtrack handling code.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1008 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMerged PKCS#11 extensions to easy-rsa/2.0 (Alon Bar-Lev).
james [Thu, 13 Apr 2006 10:20:43 +0000 (10:20 +0000)] 
Merged PKCS#11 extensions to easy-rsa/2.0  (Alon Bar-Lev).
svn merge -r 995:998 https://svn.openvpn.net/projects/openvpn/contrib/alon/easy-rsa

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1006 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoTemporarily backed out time backtrack handling code
james [Thu, 13 Apr 2006 09:48:11 +0000 (09:48 +0000)] 
Temporarily backed out time backtrack handling code
due to issues on Windows.

Rewrote gettimeofday function for Windows to be
simpler and more efficient.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1005 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta13 released
james [Wed, 12 Apr 2006 09:48:15 +0000 (09:48 +0000)] 
Version 2.1_beta13 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1004 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 999:1000 $SO/trunk/openvpn .
james [Wed, 12 Apr 2006 09:26:10 +0000 (09:26 +0000)] 
svn merge -r 999:1000 $SO/trunk/openvpn .
(Fixed 64-bit counter bug on Windows)

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1002 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded credit and CVE number to security vulnerability fix in 2.0.6.
james [Wed, 12 Apr 2006 09:25:14 +0000 (09:25 +0000)] 
Added credit and CVE number to security vulnerability fix in 2.0.6.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1001 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta12 released
james [Wed, 5 Apr 2006 08:31:23 +0000 (08:31 +0000)] 
Version 2.1_beta12 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@993 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 886:987 $SO/trunk/openvpn .
james [Wed, 5 Apr 2006 07:30:04 +0000 (07:30 +0000)] 
svn merge -r 886:987 $SO/trunk/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@991 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoI've recently worked on a better version of pkcs11-helper. I've also merged
james [Wed, 5 Apr 2006 07:17:02 +0000 (07:17 +0000)] 
I've recently worked on a better version of pkcs11-helper. I've also merged
it into QCA (Qt Cryptographic Architecture), so that KDE 4 will finally be
able to use smartcards.

The changes allows the following features:

1. Thread safe, is activated if USE_PTHREAD.

2. Slot event - Will allow us in the future to disconnect VPN when smartcard
is removed. In order to support this OpenVPN must support threading... At
least SIGUSR1 from a different thread. Threading should be supported in both
Windows and Linux. -- currently disabled.

When I talk about threading support it is just support in configuration script
and that the method that SIGUSR1 self can be called from a different thread.
I already handle the monitor threads.

3. Certificate enumeration - Will allow us to finally have one configuration
file for all users! When you add the plugin GUI stuff you talked about, we will
be able to display a list of available certificates for the user to select.
-- currently disabled.

4. Data object manipulation - Will allow us to store tls-auth on the smartcard
as well. -- currently disabled.

5. Many other minor improvements.

Alon Bar-Lev

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@990 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded man page entry for --setenv-safe.
james [Wed, 5 Apr 2006 06:57:31 +0000 (06:57 +0000)] 
Added man page entry for --setenv-safe.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@989 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years ago"topology subnet" fix for FreeBSD (Benoit Bourdin).
james [Wed, 5 Apr 2006 06:28:19 +0000 (06:28 +0000)] 
"topology subnet" fix for FreeBSD (Benoit Bourdin).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@986 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoSecurity Vulnerability -- An OpenVPN client connecting to a
james [Wed, 5 Apr 2006 06:01:08 +0000 (06:01 +0000)] 
Security Vulnerability -- An OpenVPN client connecting to a
malicious or compromised server could potentially receive
"setenv" configuration directives from the server which could
cause arbitrary code execution on the client via a LD_PRELOAD
attack.  A successful attack appears to require that (a) the
client has agreed to allow the server to push configuration
directives to it by including "pull" or the macro "client" in
its configuration file, (b) the client configuration file uses
a scripting directive such as "up" or "down", (c) the client
succesfully authenticates the server, (d) the server is
malicious or has been compromised and is under the control of
the attacker, and (e) the attacker has at least some level of
pre-existing control over files on the client (this might be
accomplished by having the server respond to a client web request
with a specially crafted file).

The fix is to disallow "setenv" to be pushed to clients from
the server, and to add a new directive "setenv-safe" which is
pushable from the server, but which appends "OPENVPN_" to the
name of each remotely set environmental variable.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@983 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMinor fixes for gcc (GCC) 4.0.2 warnings.
james [Thu, 23 Feb 2006 13:14:55 +0000 (13:14 +0000)] 
Minor fixes for gcc (GCC) 4.0.2 warnings.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@905 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta11 released
james [Sun, 19 Feb 2006 12:17:59 +0000 (12:17 +0000)] 
Version 2.1_beta11 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@904 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoPort share proxy bug fixes.
james [Sat, 18 Feb 2006 22:40:55 +0000 (22:40 +0000)] 
Port share proxy bug fixes.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@903 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agops.c debug code
james [Sat, 18 Feb 2006 16:35:21 +0000 (16:35 +0000)] 
ps.c debug code

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@902 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded comments to ps.c (port share proxy code).
james [Sat, 18 Feb 2006 10:33:41 +0000 (10:33 +0000)] 
Added comments to ps.c (port share proxy code).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@901 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta10 released
james [Fri, 17 Feb 2006 07:43:32 +0000 (07:43 +0000)] 
Version 2.1_beta10 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@899 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta9 released
james [Thu, 16 Feb 2006 18:35:22 +0000 (18:35 +0000)] 
Version 2.1_beta9 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@896 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 888:889 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21 21
james [Thu, 16 Feb 2006 18:17:32 +0000 (18:17 +0000)] 
svn merge -r 888:889 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21 21

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@894 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded --port-share option for allowing OpenVPN and HTTPS
james [Thu, 16 Feb 2006 18:12:24 +0000 (18:12 +0000)] 
Added --port-share option for allowing OpenVPN and HTTPS
server to share the same port number.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@893 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded "bytecount" command to management interface.
james [Fri, 10 Feb 2006 10:01:46 +0000 (10:01 +0000)] 
Added "bytecount" command to management interface.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@887 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded feature to --management-client to confirm connection
james [Fri, 3 Feb 2006 09:04:52 +0000 (09:04 +0000)] 
Added feature to --management-client to confirm connection
by writing IP addr and port to a file.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@885 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded --management-client option to connect as a client to
james [Mon, 23 Jan 2006 14:08:27 +0000 (14:08 +0000)] 
Added --management-client option to connect as a client to
management GUI app rather than be connected to as a server.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@884 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agopkcs11 fixes.
james [Sat, 14 Jan 2006 21:12:22 +0000 (21:12 +0000)] 
pkcs11 fixes.

svn merge -r 879:881 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@882 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoSmall fixes:
james [Sat, 7 Jan 2006 03:21:49 +0000 (03:21 +0000)] 
Small fixes:
* Fixed variable declaration in crypto.c that is not at
  the head of a block.
* Added library to Visual C makefile.
* In server.conf config sample, add additional comment
  text on "dev tap" usage.
* Added some short documentation on revoke-full script.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@877 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta8 released
james [Tue, 3 Jan 2006 09:46:04 +0000 (09:46 +0000)] 
Version 2.1_beta8 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@874 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoincremented version number to 2.1_beta7b
james [Tue, 3 Jan 2006 03:03:24 +0000 (03:03 +0000)] 
incremented version number to 2.1_beta7b

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@872 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded patch to modify openvpn.nsi for building
james [Fri, 30 Dec 2005 04:44:42 +0000 (04:44 +0000)] 
Added patch to modify openvpn.nsi for building
a turnkey installer.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@866 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed bug with tls-auth and key-direction parameter
james [Thu, 29 Dec 2005 07:47:47 +0000 (07:47 +0000)] 
Fixed bug with tls-auth and key-direction parameter
which was introduced in r844.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@865 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 854:863 $SO/trunk/openvpn
james [Thu, 29 Dec 2005 02:13:30 +0000 (02:13 +0000)] 
svn merge -r 854:863 $SO/trunk/openvpn

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@864 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded OPENVPN_PLUGIN_TLS_FINAL plugin callback.
james [Wed, 28 Dec 2005 06:58:19 +0000 (06:58 +0000)] 
Added OPENVPN_PLUGIN_TLS_FINAL plugin callback.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@862 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMinor ChangeLog edit.
james [Fri, 23 Dec 2005 17:34:46 +0000 (17:34 +0000)] 
Minor ChangeLog edit.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@861 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoSome PKCS11-related code wasn't properly #ifdefed.
james [Fri, 23 Dec 2005 17:29:22 +0000 (17:29 +0000)] 
Some PKCS11-related code wasn't properly #ifdefed.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@860 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMan page and usage message changes to reflect
james [Thu, 22 Dec 2005 19:50:48 +0000 (19:50 +0000)] 
Man page and usage message changes to reflect
--ip-win32 adaptive and --route-method adaptive.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@859 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded new option --route-method adaptive (Win32)
james [Thu, 22 Dec 2005 18:55:49 +0000 (18:55 +0000)] 
Added new option --route-method adaptive (Win32)
which tries IP helper API first, then falls back to
route.exe.
Made --route-method adaptive the default.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@858 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years ago--ip-win32 adaptive is now the default.
james [Thu, 22 Dec 2005 18:09:40 +0000 (18:09 +0000)] 
--ip-win32 adaptive is now the default.
--ip-win32 netsh (or --ip-win32 adaptive when in netsh
mode) can now set DNS/WINS addresses on the TAP-Win32
adapter.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@857 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed bug in automatic Win32 PATH setting code.
james [Sat, 17 Dec 2005 22:23:28 +0000 (22:23 +0000)] 
Fixed bug in automatic Win32 PATH setting code.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@856 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 845:854 $SO/trunk/openvpn .
james [Wed, 14 Dec 2005 01:09:11 +0000 (01:09 +0000)] 
svn merge -r 845:854 $SO/trunk/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@855 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoDon't warn user if he uses user/group/chroot and
james [Tue, 13 Dec 2005 19:41:07 +0000 (19:41 +0000)] 
Don't warn user if he uses user/group/chroot and
did not specify persist-key but uses PKCS#11.

svn merge -r 847:848 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@853 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded --auto-proxy directive to auto-detect HTTP or SOCKS
james [Mon, 12 Dec 2005 19:46:10 +0000 (19:46 +0000)] 
Added --auto-proxy directive to auto-detect HTTP or SOCKS
proxy settings (currently Windows only).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@850 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFirst attempt at automatic proxy detection,
james [Thu, 8 Dec 2005 23:10:22 +0000 (23:10 +0000)] 
First attempt at automatic proxy detection,
Windows-only at this point.  Proxy settings
are taken from IE.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@846 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoInline file capability now works for
james [Thu, 8 Dec 2005 18:29:38 +0000 (18:29 +0000)] 
Inline file capability now works for
--secret and --tls-auth.  For example:

<secret>
[ascii key data]
</secret>

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@844 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed some gcc 4 warnings in misc.c.
james [Thu, 8 Dec 2005 15:36:27 +0000 (15:36 +0000)] 
Fixed some gcc 4 warnings in misc.c.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@843 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed segfault that occurred if remote_cert_eku is undefined and no
james [Mon, 5 Dec 2005 04:00:00 +0000 (04:00 +0000)] 
Fixed segfault that occurred if remote_cert_eku is undefined and no
server certificate verification method was enabled.
Don't declare pkcs11 variables in struct options unless pkcs11
support is enabled.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@833 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoPatch to support --topology subnet on Mac OS X (Mathias Sundman).
james [Mon, 5 Dec 2005 01:21:49 +0000 (01:21 +0000)] 
Patch to support --topology subnet on Mac OS X (Mathias Sundman).

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@832 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 780:820 $SO/trunk/openvpn .
james [Mon, 28 Nov 2005 05:50:52 +0000 (05:50 +0000)] 
svn merge -r 780:820 $SO/trunk/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@828 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 823:825 $SO/contrib/alon/BETA21/openvpn .
james [Mon, 28 Nov 2005 05:09:54 +0000 (05:09 +0000)] 
svn merge -r 823:825 $SO/contrib/alon/BETA21/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@827 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoModified nonblocking connect code so that this works as it should:
james [Mon, 28 Nov 2005 04:59:19 +0000 (04:59 +0000)] 
Modified nonblocking connect code so that this works as it should:
./openvpn --dev tap --proto tcp-client --verb 4 --remote [Black-Hole-IP-Addr] --connect-retry-max 1 --remap-usr1 SIGTERM

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@826 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded --connect-timeout option to control the timeout
james [Fri, 25 Nov 2005 00:05:56 +0000 (00:05 +0000)] 
Added --connect-timeout option to control the timeout
on TCP client connection attempts (doesn't work on all
OSes).  This patch also makes OpenVPN signalable during
TCP connection attempts.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@823 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years ago--remap-usr1 will now also remap signals thrown during initialization.
james [Thu, 24 Nov 2005 18:44:57 +0000 (18:44 +0000)] 
--remap-usr1 will now also remap signals thrown during initialization.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@822 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed minor man page formatting issue.
james [Thu, 24 Nov 2005 18:25:38 +0000 (18:25 +0000)] 
Fixed minor man page formatting issue.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@821 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMerged PKCS11 changes from Alon:
james [Sat, 19 Nov 2005 01:48:58 +0000 (01:48 +0000)] 
Merged PKCS11 changes from Alon:
svn merge -r 813:814 $SO/contrib/alon/BETA21/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@816 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoVersion 2.1_beta7 released
james [Sun, 13 Nov 2005 01:35:45 +0000 (01:35 +0000)] 
Version 2.1_beta7 released

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@806 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFor Windows, set ip-win32 default back to dynamic.
james [Sat, 12 Nov 2005 23:11:18 +0000 (23:11 +0000)] 
For Windows, set ip-win32 default back to dynamic.
To use new adaptive mode, set explicitly.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@805 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoPKCS#11 fixes to interact with new backtrack-hardened
james [Sat, 12 Nov 2005 23:06:53 +0000 (23:06 +0000)] 
PKCS#11 fixes to interact with new backtrack-hardened
openvpn_time function.
svn merge -r 802:803 $SO/contrib/alon/BETA21/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@804 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoReduce sensitivity to system clock instability
james [Sat, 12 Nov 2005 10:59:41 +0000 (10:59 +0000)] 
Reduce sensitivity to system clock instability
and backtracks.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@799 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed minor typos in --remote-cert-* documentation.
james [Sat, 12 Nov 2005 08:36:00 +0000 (08:36 +0000)] 
Fixed minor typos in --remote-cert-* documentation.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@798 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMerged --remote-cert-ku, --remote-cert-eku, and
james [Sat, 12 Nov 2005 08:26:57 +0000 (08:26 +0000)] 
Merged --remote-cert-ku, --remote-cert-eku, and
--remote-cert-tls from Alon's branch:
svn merge -r 793:796 $SO/contrib/alon/BETA21/openvpn .

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@797 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoBacked out change to update_time to handle time
james [Wed, 9 Nov 2005 21:13:57 +0000 (21:13 +0000)] 
Backed out change to update_time to handle time
backtracks.  Will reimplement as a more comprehensive
patch.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@790 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoFixed update_time to use a better algorithm for
james [Wed, 9 Nov 2005 10:03:50 +0000 (10:03 +0000)] 
Fixed update_time to use a better algorithm for
preventing time backtracks even if the system
clock backtracks.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@789 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoupdated version number to 2.1_beta7
james [Wed, 9 Nov 2005 08:39:50 +0000 (08:39 +0000)] 
updated version number to 2.1_beta7

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@787 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMerged (with some changes) Alon's
james [Wed, 9 Nov 2005 08:36:26 +0000 (08:36 +0000)] 
Merged (with some changes) Alon's
connect-retry-max option from
/contrib/alon/BETA21@783.

Added uninit_management_callback call to
init_instance_handle_signals so that
signals thrown during initialization can
bring us back to a management hold.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@786 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoRemoved annoying 'i' variable from add_option.
james [Wed, 9 Nov 2005 07:30:14 +0000 (07:30 +0000)] 
Removed annoying 'i' variable from add_option.

Allow plugin and push directives to have multiple
parameters specified instead of only 1 quoted
parameter.

Allow plugin and push directives to have multi-line
parameter lists, such as:

<plugin>
  my-plugin.so
  parm1
  parm2
</plugin>

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@785 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAdded ENABLE_INLINE_FILES feature.
james [Tue, 8 Nov 2005 12:50:11 +0000 (12:50 +0000)] 
Added ENABLE_INLINE_FILES feature.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@784 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoMerged /contrib/alon/BETA21@778
james [Sat, 5 Nov 2005 07:48:05 +0000 (07:48 +0000)] 
Merged /contrib/alon/BETA21@778

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@782 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 771:780 $SO/trunk/openvpn
james [Sat, 5 Nov 2005 07:42:33 +0000 (07:42 +0000)] 
svn merge -r 771:780 $SO/trunk/openvpn

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@781 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoAllow blank passwords to be passed via the management interface.
james [Fri, 4 Nov 2005 02:37:39 +0000 (02:37 +0000)] 
Allow blank passwords to be passed via the management interface.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@773 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 770:771 $SO/trunk/openvpn
james [Fri, 4 Nov 2005 00:05:02 +0000 (00:05 +0000)] 
svn merge -r 770:771 $SO/trunk/openvpn

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@772 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoChangelog note about Windows build
james [Thu, 3 Nov 2005 06:49:21 +0000 (06:49 +0000)] 
Changelog note about Windows build
being linked with LZO2.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@769 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoDocumented --ip-win32 adaptive.
james [Thu, 3 Nov 2005 02:46:31 +0000 (02:46 +0000)] 
Documented --ip-win32 adaptive.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@768 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agoDocumented --route-nopull.
james [Thu, 3 Nov 2005 01:57:37 +0000 (01:57 +0000)] 
Documented --route-nopull.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@767 e7ae566f-a301-0410-adde-c780ea21d3b5

19 years agosvn merge -r 760:764 $SO/trunk/openvpn
james [Thu, 3 Nov 2005 01:43:43 +0000 (01:43 +0000)] 
svn merge -r 760:764 $SO/trunk/openvpn

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@766 e7ae566f-a301-0410-adde-c780ea21d3b5