]>
git.ipfire.org Git - thirdparty/openvpn.git/log
james [Wed, 1 Nov 2006 04:58:01 +0000 (04:58 +0000)]
auth-pam change: link with -lpam rather
than dlopen (Roy Marples).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1421
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 1 Nov 2006 00:07:21 +0000 (00:07 +0000)]
Merged Alon's branch:
svn merge -r1322:1392 https://svn.openvpn.net/projects/openvpn/contrib/alon/21rc/openvpn .
Version 2.1_rc1 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1420
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sun, 1 Oct 2006 12:53:33 +0000 (12:53 +0000)]
Version 2.1_beta16 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1335
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sun, 1 Oct 2006 11:19:31 +0000 (11:19 +0000)]
For Windows build, updated OpenSSL to 0.9.7l.
Added small OpenSSL patch to be applied
prior to Windows build.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1328
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 21 Sep 2006 07:18:54 +0000 (07:18 +0000)]
Documented --socket-flags and the TCP_NODELAY flag.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1276
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 14 Sep 2006 02:53:26 +0000 (02:53 +0000)]
ChangeLog edits for r1229 and r1230.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1231
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 14 Sep 2006 02:42:12 +0000 (02:42 +0000)]
Fixed bug in loopback self-test introduced
in 2.1-beta15 where self test as invoked by
"make check" would not properly exit after
2 minutes (Paul Howarth).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1230
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 14 Sep 2006 02:18:40 +0000 (02:18 +0000)]
TAP-Win32 fixes to run on Windows Vista.
Modified installer to detect 32-bit vs.
64 bit Windows and install the correct TAP
driver.
TAP-Win32 version number is at 8.4.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1229
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Tue, 12 Sep 2006 10:10:57 +0000 (10:10 +0000)]
Version 2.1_beta15 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1226
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 3 Jul 2006 19:54:17 +0000 (19:54 +0000)]
Comment about assertion being hit.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1079
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 30 Jun 2006 04:13:44 +0000 (04:13 +0000)]
Fixed bug introduced with the --port-share directive
back in r893 which causes TLS soft resets
(1 per hour by default) in TCP server mode to force
a blockage of tunnel packets and later time-out and
restart the connection.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1076
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 29 Jun 2006 19:33:09 +0000 (19:33 +0000)]
pkcs11 changes:
-r 1046:1053 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21
1. Modified ssl.c to not FATAL and return to init.c so auth-retry will work.
2. Modifed pkcs11-helper.c to fix some problem with multiple providers.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1070
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 29 Jun 2006 18:57:21 +0000 (18:57 +0000)]
Added two new management states:
OPENVPN_STATE_RESOLVE -- DNS lookup */
OPENVPN_STATE_TCP_CONNECT -- Connecting to TCP server
Echo management state change to log.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1068
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 28 Jun 2006 03:08:19 +0000 (03:08 +0000)]
Minor syshead.h change for NetBSD to allow
TCP_NODELAY flag to work.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1060
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 26 Jun 2006 02:47:53 +0000 (02:47 +0000)]
Removed 'keywords' propset from everything
except ChangeLog.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1050
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 26 Jun 2006 01:35:18 +0000 (01:35 +0000)]
Removed spurious executable propset from
several source files.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1048
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 24 Jun 2006 08:10:10 +0000 (08:10 +0000)]
Modified --port-share code to remove the assumption that
CMSG_SPACE always evaluates to a constant, to enable
compilation on NetBSD and possibly other BSDs as well.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1041
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 24 Jun 2006 08:04:42 +0000 (08:04 +0000)]
Eliminated gcc 3.3.3 warnings on NetBSD
when ./configure --enable-strict is used.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1040
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Tue, 13 Jun 2006 17:02:28 +0000 (17:02 +0000)]
-r 1026:1032
https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21/openvpn
Changes:
1. Updated makefile.w32-vc to include lladdr.*, updated
linkage libraries.
2. Modified lladdr.c to be compiled under visual C.
3. Added retry counter to PKCS#11 PIN hook.
4. Modified PKCS#11 PIN retry loop to return correct error
code when PIN is incorrect.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1038
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sun, 11 Jun 2006 04:22:11 +0000 (04:22 +0000)]
Added optional minimum-number-of-bytes
parameter to --inactive directive.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1036
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sun, 11 Jun 2006 03:56:52 +0000 (03:56 +0000)]
A few more updates:
-r 1015:1025
https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21
Changes:
1. Fix handling (ignoring) zero sized attributes.
2. Fix gcc-2 issues.
3. Fix openssl 0.9.6 (first version) issues.
4. easy-rsa Makefile (install) is now available so that
distribs will be able to install it safely.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1033
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 11 May 2006 16:21:33 +0000 (16:21 +0000)]
Added credit for CAN-2005-2532.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1024
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 21:46:40 +0000 (21:46 +0000)]
Version 2.1_beta14 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1013
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 21:09:04 +0000 (21:09 +0000)]
Added --lladdr option to specify the link layer (MAC) address
for the tap interface on non-Windows platforms (Roy Marples).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1012
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 20:40:39 +0000 (20:40 +0000)]
Added --route-metric option to set a default route metric
for --route (Roy Marples).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1011
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 20:11:26 +0000 (20:11 +0000)]
Version number increment.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1010
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 20:08:47 +0000 (20:08 +0000)]
ChangeLog edits.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1009
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 20:02:27 +0000 (20:02 +0000)]
Re-added backtrack handling code.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1008
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 10:20:43 +0000 (10:20 +0000)]
Merged PKCS#11 extensions to easy-rsa/2.0 (Alon Bar-Lev).
svn merge -r 995:998 https://svn.openvpn.net/projects/openvpn/contrib/alon/easy-rsa
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1006
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 13 Apr 2006 09:48:11 +0000 (09:48 +0000)]
Temporarily backed out time backtrack handling code
due to issues on Windows.
Rewrote gettimeofday function for Windows to be
simpler and more efficient.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1005
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 12 Apr 2006 09:48:15 +0000 (09:48 +0000)]
Version 2.1_beta13 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1004
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 12 Apr 2006 09:26:10 +0000 (09:26 +0000)]
svn merge -r 999:1000 $SO/trunk/openvpn .
(Fixed 64-bit counter bug on Windows)
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1002
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 12 Apr 2006 09:25:14 +0000 (09:25 +0000)]
Added credit and CVE number to security vulnerability fix in 2.0.6.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1001
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 5 Apr 2006 08:31:23 +0000 (08:31 +0000)]
Version 2.1_beta12 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@993
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 5 Apr 2006 07:30:04 +0000 (07:30 +0000)]
svn merge -r 886:987 $SO/trunk/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@991
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 5 Apr 2006 07:17:02 +0000 (07:17 +0000)]
I've recently worked on a better version of pkcs11-helper. I've also merged
it into QCA (Qt Cryptographic Architecture), so that KDE 4 will finally be
able to use smartcards.
The changes allows the following features:
1. Thread safe, is activated if USE_PTHREAD.
2. Slot event - Will allow us in the future to disconnect VPN when smartcard
is removed. In order to support this OpenVPN must support threading... At
least SIGUSR1 from a different thread. Threading should be supported in both
Windows and Linux. -- currently disabled.
When I talk about threading support it is just support in configuration script
and that the method that SIGUSR1 self can be called from a different thread.
I already handle the monitor threads.
3. Certificate enumeration - Will allow us to finally have one configuration
file for all users! When you add the plugin GUI stuff you talked about, we will
be able to display a list of available certificates for the user to select.
-- currently disabled.
4. Data object manipulation - Will allow us to store tls-auth on the smartcard
as well. -- currently disabled.
5. Many other minor improvements.
Alon Bar-Lev
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@990
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 5 Apr 2006 06:57:31 +0000 (06:57 +0000)]
Added man page entry for --setenv-safe.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@989
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 5 Apr 2006 06:28:19 +0000 (06:28 +0000)]
"topology subnet" fix for FreeBSD (Benoit Bourdin).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@986
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 5 Apr 2006 06:01:08 +0000 (06:01 +0000)]
Security Vulnerability -- An OpenVPN client connecting to a
malicious or compromised server could potentially receive
"setenv" configuration directives from the server which could
cause arbitrary code execution on the client via a LD_PRELOAD
attack. A successful attack appears to require that (a) the
client has agreed to allow the server to push configuration
directives to it by including "pull" or the macro "client" in
its configuration file, (b) the client configuration file uses
a scripting directive such as "up" or "down", (c) the client
succesfully authenticates the server, (d) the server is
malicious or has been compromised and is under the control of
the attacker, and (e) the attacker has at least some level of
pre-existing control over files on the client (this might be
accomplished by having the server respond to a client web request
with a specially crafted file).
The fix is to disallow "setenv" to be pushed to clients from
the server, and to add a new directive "setenv-safe" which is
pushable from the server, but which appends "OPENVPN_" to the
name of each remotely set environmental variable.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@983
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 23 Feb 2006 13:14:55 +0000 (13:14 +0000)]
Minor fixes for gcc (GCC) 4.0.2 warnings.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@905
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sun, 19 Feb 2006 12:17:59 +0000 (12:17 +0000)]
Version 2.1_beta11 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@904
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 18 Feb 2006 22:40:55 +0000 (22:40 +0000)]
Port share proxy bug fixes.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@903
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 18 Feb 2006 16:35:21 +0000 (16:35 +0000)]
ps.c debug code
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@902
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 18 Feb 2006 10:33:41 +0000 (10:33 +0000)]
Added comments to ps.c (port share proxy code).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@901
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 17 Feb 2006 07:43:32 +0000 (07:43 +0000)]
Version 2.1_beta10 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@899
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 16 Feb 2006 18:35:22 +0000 (18:35 +0000)]
Version 2.1_beta9 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@896
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 16 Feb 2006 18:17:32 +0000 (18:17 +0000)]
svn merge -r 888:889 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21 21
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@894
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 16 Feb 2006 18:12:24 +0000 (18:12 +0000)]
Added --port-share option for allowing OpenVPN and HTTPS
server to share the same port number.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@893
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 10 Feb 2006 10:01:46 +0000 (10:01 +0000)]
Added "bytecount" command to management interface.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@887
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 3 Feb 2006 09:04:52 +0000 (09:04 +0000)]
Added feature to --management-client to confirm connection
by writing IP addr and port to a file.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@885
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 23 Jan 2006 14:08:27 +0000 (14:08 +0000)]
Added --management-client option to connect as a client to
management GUI app rather than be connected to as a server.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@884
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 14 Jan 2006 21:12:22 +0000 (21:12 +0000)]
pkcs11 fixes.
svn merge -r 879:881 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@882
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 7 Jan 2006 03:21:49 +0000 (03:21 +0000)]
Small fixes:
* Fixed variable declaration in crypto.c that is not at
the head of a block.
* Added library to Visual C makefile.
* In server.conf config sample, add additional comment
text on "dev tap" usage.
* Added some short documentation on revoke-full script.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@877
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Tue, 3 Jan 2006 09:46:04 +0000 (09:46 +0000)]
Version 2.1_beta8 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@874
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Tue, 3 Jan 2006 03:03:24 +0000 (03:03 +0000)]
incremented version number to 2.1_beta7b
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@872
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 30 Dec 2005 04:44:42 +0000 (04:44 +0000)]
Added patch to modify openvpn.nsi for building
a turnkey installer.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@866
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 29 Dec 2005 07:47:47 +0000 (07:47 +0000)]
Fixed bug with tls-auth and key-direction parameter
which was introduced in r844.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@865
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 29 Dec 2005 02:13:30 +0000 (02:13 +0000)]
svn merge -r 854:863 $SO/trunk/openvpn
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@864
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 28 Dec 2005 06:58:19 +0000 (06:58 +0000)]
Added OPENVPN_PLUGIN_TLS_FINAL plugin callback.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@862
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 23 Dec 2005 17:34:46 +0000 (17:34 +0000)]
Minor ChangeLog edit.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@861
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 23 Dec 2005 17:29:22 +0000 (17:29 +0000)]
Some PKCS11-related code wasn't properly #ifdefed.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@860
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 22 Dec 2005 19:50:48 +0000 (19:50 +0000)]
Man page and usage message changes to reflect
--ip-win32 adaptive and --route-method adaptive.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@859
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 22 Dec 2005 18:55:49 +0000 (18:55 +0000)]
Added new option --route-method adaptive (Win32)
which tries IP helper API first, then falls back to
route.exe.
Made --route-method adaptive the default.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@858
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 22 Dec 2005 18:09:40 +0000 (18:09 +0000)]
--ip-win32 adaptive is now the default.
--ip-win32 netsh (or --ip-win32 adaptive when in netsh
mode) can now set DNS/WINS addresses on the TAP-Win32
adapter.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@857
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 17 Dec 2005 22:23:28 +0000 (22:23 +0000)]
Fixed bug in automatic Win32 PATH setting code.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@856
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 14 Dec 2005 01:09:11 +0000 (01:09 +0000)]
svn merge -r 845:854 $SO/trunk/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@855
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Tue, 13 Dec 2005 19:41:07 +0000 (19:41 +0000)]
Don't warn user if he uses user/group/chroot and
did not specify persist-key but uses PKCS#11.
svn merge -r 847:848 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@853
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 12 Dec 2005 19:46:10 +0000 (19:46 +0000)]
Added --auto-proxy directive to auto-detect HTTP or SOCKS
proxy settings (currently Windows only).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@850
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 8 Dec 2005 23:10:22 +0000 (23:10 +0000)]
First attempt at automatic proxy detection,
Windows-only at this point. Proxy settings
are taken from IE.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@846
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 8 Dec 2005 18:29:38 +0000 (18:29 +0000)]
Inline file capability now works for
--secret and --tls-auth. For example:
<secret>
[ascii key data]
</secret>
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@844
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 8 Dec 2005 15:36:27 +0000 (15:36 +0000)]
Fixed some gcc 4 warnings in misc.c.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@843
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 5 Dec 2005 04:00:00 +0000 (04:00 +0000)]
Fixed segfault that occurred if remote_cert_eku is undefined and no
server certificate verification method was enabled.
Don't declare pkcs11 variables in struct options unless pkcs11
support is enabled.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@833
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 5 Dec 2005 01:21:49 +0000 (01:21 +0000)]
Patch to support --topology subnet on Mac OS X (Mathias Sundman).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@832
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 28 Nov 2005 05:50:52 +0000 (05:50 +0000)]
svn merge -r 780:820 $SO/trunk/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@828
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 28 Nov 2005 05:09:54 +0000 (05:09 +0000)]
svn merge -r 823:825 $SO/contrib/alon/BETA21/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@827
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Mon, 28 Nov 2005 04:59:19 +0000 (04:59 +0000)]
Modified nonblocking connect code so that this works as it should:
./openvpn --dev tap --proto tcp-client --verb 4 --remote [Black-Hole-IP-Addr] --connect-retry-max 1 --remap-usr1 SIGTERM
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@826
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 25 Nov 2005 00:05:56 +0000 (00:05 +0000)]
Added --connect-timeout option to control the timeout
on TCP client connection attempts (doesn't work on all
OSes). This patch also makes OpenVPN signalable during
TCP connection attempts.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@823
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 24 Nov 2005 18:44:57 +0000 (18:44 +0000)]
--remap-usr1 will now also remap signals thrown during initialization.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@822
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 24 Nov 2005 18:25:38 +0000 (18:25 +0000)]
Fixed minor man page formatting issue.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@821
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 19 Nov 2005 01:48:58 +0000 (01:48 +0000)]
Merged PKCS11 changes from Alon:
svn merge -r 813:814 $SO/contrib/alon/BETA21/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@816
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sun, 13 Nov 2005 01:35:45 +0000 (01:35 +0000)]
Version 2.1_beta7 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@806
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 12 Nov 2005 23:11:18 +0000 (23:11 +0000)]
For Windows, set ip-win32 default back to dynamic.
To use new adaptive mode, set explicitly.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@805
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 12 Nov 2005 23:06:53 +0000 (23:06 +0000)]
PKCS#11 fixes to interact with new backtrack-hardened
openvpn_time function.
svn merge -r 802:803 $SO/contrib/alon/BETA21/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@804
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 12 Nov 2005 10:59:41 +0000 (10:59 +0000)]
Reduce sensitivity to system clock instability
and backtracks.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@799
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 12 Nov 2005 08:36:00 +0000 (08:36 +0000)]
Fixed minor typos in --remote-cert-* documentation.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@798
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 12 Nov 2005 08:26:57 +0000 (08:26 +0000)]
Merged --remote-cert-ku, --remote-cert-eku, and
--remote-cert-tls from Alon's branch:
svn merge -r 793:796 $SO/contrib/alon/BETA21/openvpn .
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@797
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 9 Nov 2005 21:13:57 +0000 (21:13 +0000)]
Backed out change to update_time to handle time
backtracks. Will reimplement as a more comprehensive
patch.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@790
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 9 Nov 2005 10:03:50 +0000 (10:03 +0000)]
Fixed update_time to use a better algorithm for
preventing time backtracks even if the system
clock backtracks.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@789
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 9 Nov 2005 08:39:50 +0000 (08:39 +0000)]
updated version number to 2.1_beta7
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@787
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 9 Nov 2005 08:36:26 +0000 (08:36 +0000)]
Merged (with some changes) Alon's
connect-retry-max option from
/contrib/alon/BETA21@783.
Added uninit_management_callback call to
init_instance_handle_signals so that
signals thrown during initialization can
bring us back to a management hold.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@786
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Wed, 9 Nov 2005 07:30:14 +0000 (07:30 +0000)]
Removed annoying 'i' variable from add_option.
Allow plugin and push directives to have multiple
parameters specified instead of only 1 quoted
parameter.
Allow plugin and push directives to have multi-line
parameter lists, such as:
<plugin>
my-plugin.so
parm1
parm2
</plugin>
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@785
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Tue, 8 Nov 2005 12:50:11 +0000 (12:50 +0000)]
Added ENABLE_INLINE_FILES feature.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@784
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 5 Nov 2005 07:48:05 +0000 (07:48 +0000)]
Merged /contrib/alon/BETA21@778
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@782
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Sat, 5 Nov 2005 07:42:33 +0000 (07:42 +0000)]
svn merge -r 771:780 $SO/trunk/openvpn
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@781
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 4 Nov 2005 02:37:39 +0000 (02:37 +0000)]
Allow blank passwords to be passed via the management interface.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@773
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Fri, 4 Nov 2005 00:05:02 +0000 (00:05 +0000)]
svn merge -r 770:771 $SO/trunk/openvpn
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@772
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 3 Nov 2005 06:49:21 +0000 (06:49 +0000)]
Changelog note about Windows build
being linked with LZO2.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@769
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 3 Nov 2005 02:46:31 +0000 (02:46 +0000)]
Documented --ip-win32 adaptive.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@768
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 3 Nov 2005 01:57:37 +0000 (01:57 +0000)]
Documented --route-nopull.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@767
e7ae566f -a301-0410-adde-
c780ea21d3b5
james [Thu, 3 Nov 2005 01:43:43 +0000 (01:43 +0000)]
svn merge -r 760:764 $SO/trunk/openvpn
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@766
e7ae566f -a301-0410-adde-
c780ea21d3b5