]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Ignore auth-nocache for auth-user-pass if auth-token is pushed
authorAntonio Quartulli <a@unstable.cc>
Sat, 25 Feb 2017 00:40:14 +0000 (08:40 +0800)
committerDavid Sommerseth <davids@openvpn.net>
Mon, 19 Jun 2017 09:59:30 +0000 (11:59 +0200)
commit571165360db0392fa83ec8e6f8de145f623c53fe
treea65b0519745e450749e25282b551028a586c6851
parent22046a88342878cf43a9a553c83470eeaf97f000
Ignore auth-nocache for auth-user-pass if auth-token is pushed

When the auth-token option is pushed from the server to the client,
the latter has to ignore the auth-nocache directive (if specified).

The password will now be substituted by the unique token, therefore
it can't be wiped out, otherwise the next renegotiation will fail.

Trac: #840
Cc: David Sommerseth <openvpn@sf.lists.topphemmelig.net>
Signed-off-by: Antonio Quartulli <a@unstable.cc>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <20170225004014.28638-1-a@unstable.cc>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14194.html
Signed-off-by: David Sommerseth <davids@openvpn.net>
src/openvpn/init.c
src/openvpn/misc.c
src/openvpn/misc.h
src/openvpn/ssl.c
src/openvpn/ssl.h