Commit graph

230 commits

Author SHA1 Message Date
james
0aee9ca7e7 Allow OpenVPN to run completely unprivileged under Linux
by allowing openvpn --mktun to be used with --user and --group
to set the UID/GID of the tun device node.  Also added --iproute
option to allow an alternative command to be executed in place
of the default iproute2 command (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2639 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:34:13 +00:00
james
7686b1c407 Rewrote extract_x509_field and modified COMMON_NAME_CHAR_CLASS
to allow forward slash characters ("/") in the X509 common name
(Pavel Shramov).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2638 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:09:56 +00:00
james
e342be3fcd Added PLUGIN_LIBDIR preprocessor string to prepend a default plugin
directory to the dlopen search list when the user specifies the basename
of the plugin only (Marius Tomaschewski).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2637 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 19:00:43 +00:00
james
be8b67cff5 Define ALLOW_NON_CBC_CIPHERS for people who don't
want to use a CBC cipher for OpenVPN's data channel.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2636 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:45:07 +00:00
james
c8c16606cc Simple fix where options->ca_file was used without
first being checked against NULL.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2635 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:39:01 +00:00
james
dd9f2cb7c0 epoll driver in event.c should be prepared to handle an
EPOLLHUP event in the same way as it handles
EPOLLIN, EPOLLPRI, or EPOLLERR events.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2634 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:33:53 +00:00
james
b19bdf671c Fixed interim memory growth issue in TCP connect loop where
"TCP: connect to %s failed, will try again in %d seconds: %s"
is output.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2633 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:26:45 +00:00
james
eba4632dc1 Added note about alternative version of easy-rsa
that supports subjectAltName for multi-domain
web certificates.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2632 e7ae566f-a301-0410-adde-c780ea21d3b5
2008-01-21 03:13:57 +00:00
james
65433d74ad PKCS-11 fixups (Alon Bar-Lev).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2438 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-26 15:20:32 +00:00
james
718526e0e9 Use pkcs11-helper as external library, can be downloaded
from https://www.opensc-project.org/pkcs11-helper (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2418 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 20:06:14 +00:00
james
7256e6b4d6 Modified command line and config file parser to allow
quoted strings using single quotes ('') (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2414 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 19:19:21 +00:00
james
1184b82454 Added --management-signal option to signal SIGUSR1 when the management
interface disconnects (Alon Bar-Lev).


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2413 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 19:12:54 +00:00
james
b1f27cb0d1 Add "forget-passwords" command to the management interface (Alon Bar-Lev).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2412 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-10-22 19:02:21 +00:00
james
70f4f82a35 AUTO_USERID feature -- if the auth-user-pass option is used
with some argument ARG, then -ARG will be appended to the
username string that is sent to the server.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2259 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-08-17 08:22:42 +00:00
james
dd048438cd config-win32.h and install-win32/openvpn.nsi are no longer generated
(i.e. they are now original sources), therefore doclean should not
delete them.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2249 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-08-14 19:36:29 +00:00
james
f4df55fbd8 updated icon
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2120 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-07-18 03:16:04 +00:00
james
0b07df0b82 Fixed a variable declaration that wasn't at the start
of a block.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2026 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-06-11 21:06:11 +00:00
james
6102c37149 script comment changes
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1900 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-26 13:50:24 +00:00
james
cf43470647 Version 2.1_rc4
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1881 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-25 23:52:12 +00:00
james
e726b9062d Fixed 64-bit portability bug in time_string function (Thomas Habets).
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1880 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-25 23:23:27 +00:00
james
52d84f6eaf misc Windows build system changes
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1875 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-25 22:58:21 +00:00
james
657ecf14ac TAP driver now passes signing tests on Vista x64.
Added new settings to settings.in to better control
build process.

Removed some unneeded JYFIXMEs from source code.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1874 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-25 21:37:49 +00:00
james
8edd43829b Forgot to add changelog item about OpenVPN GUI being
included in 2.1-rc3.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1869 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-23 06:49:36 +00:00
james
fd3384e0f8 Version 2.1_rc3
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1868 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-23 01:55:10 +00:00
james
1568d7f428 Version is now specified in version.m4 for both
unix and windows versions.
Reworked the Windows build scripting system, with
settings (other than version #) specified in settings.in.
Moved the native scripting grammar as defined by trans.pl
away from NSIS and to something more generic. 


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1867 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-22 08:21:16 +00:00
james
ce3515838b Moved OpenVPN version number from configure.ac
to version.m4


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1866 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-21 22:19:48 +00:00
james
93c423ea64 Added a Windows README file to the installer than
contains quick-start instructions.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1864 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-21 21:01:38 +00:00
james
7239477808 Added OpenVPN GUI (Mathias Sundman version) as install
option in Windows installer.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1863 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-21 19:58:11 +00:00
james
4030142857 The easy-rsa directory installed by the windows installer comes with the
old easy-rsa 1.0 files. (even current openvpn-2.1_rc2-install.exe)

This bug is not that critical, but it is annoying that easy-rsa still
creates server certificates without extended key usage per default
(openssl.cnf), making the windows user wonder about error messages if
the recommended "remote-cert-tls" option is used. (In this case simply
copying the openssl.cnf from the 2.0 directory did the job, for regular
usage the path to opensc in the newly added pkcs11 section should be
changed).

And if possible please add the following three files to the "Windows"
directory if easy-rsa. They allow to build password protected versions
of the keys (I just copied the files and remove the "-nodes" parameter).
Except of build-key-server-pass.bat i think that they are vital for
security (e.g. the key files are in an unencrypted directory and
physical access is possible).  -- Daniel Zauft


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1862 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-21 18:28:59 +00:00
james
8d54351056 Clean up configure on FreeBSD for recent autotool versions that
require that all .h files have to be compiled.

Also, FreeBSD install does not support GNU long options which the
Makefile in easy-rsa/2.0 uses (not checked the others as we don't
install those on Gentoo) -- Roy Marples


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1861 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-21 17:59:40 +00:00
james
7e90ca24c0 Use Server 2003 rather than Vista as x64 target for tap/tapinstall.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1853 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-19 22:03:54 +00:00
james
35a3c167a1 Updated build system and tap driver to work with
version 5600 of the Windows DDK.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1851 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-19 10:20:57 +00:00
james
d710d36dde Added options to version.nsi that allow prebuilt
amd64 tap/tapinstall to be specified.

Verify that tapinstall directory exists before trying
to build it.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1838 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-04-14 10:35:25 +00:00
james
464d33ae42 Revert r1773
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1776 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-16 20:39:04 +00:00
james
7f61d53b97 Don't build special x64 version of tapinstall.exe
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1773 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-08 09:37:45 +00:00
james
6a6a068ecb Windows TAP driver license text changes.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1764 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-07 10:09:53 +00:00
james
0039dd4046 Cleaned up Windows build scripts.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1763 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-07 07:08:49 +00:00
james
54e2ebca24 Forgot to svn add buildinstaller before last commit.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1762 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-06 12:06:57 +00:00
james
e5514a90c4 ./domake-win will now do a full build of the installer
from source.



git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1761 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-06 11:37:47 +00:00
james
a4d3945020 Added maketapinstall.
Added makebin to build bin directory.

Modified openvpn.nsi to read distribution
files from the new locations.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1760 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-06 10:49:18 +00:00
james
af897cabdc Added maketap and signtap scripts.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1759 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-06 09:40:31 +00:00
james
d6d79149fa Added service configuration to install-win32/winconfig
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1758 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-06 07:15:25 +00:00
james
f9ad66c789 Changes to Windows build environment, to allow straightforward building
directly from an svn checkout or export.

install-win32/version.nsi contains high-level version info.

The script install-win32/winconfig should be run initially to set up
build configuration files.

Then make can be executed as such:

   . autodefs/nsidefs.sh
   make -f makefile.w32 -j 2


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1757 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-06 06:48:09 +00:00
james
c833aa11d2 Allow installation of TAP-Win64
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1755 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-05 22:30:52 +00:00
james
89dc6e77c7 TAP driver fix for Vista x64 BSOD.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1754 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-05 20:44:08 +00:00
james
3038f342dc Include tap.cat (TAP driver catalog file) in Windows
installer.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1753 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-03-05 20:36:31 +00:00
james
bc27ad47d6 Version 2.1_rc2 released
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1750 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-02-28 09:50:11 +00:00
james
384fd1376b On Windows, revert to "ip-win32 dynamic" as the default.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1749 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-02-28 03:57:41 +00:00
james
94a4350003 Worked around an incompatibility in the Windows Vista
version of CreateIpForwardEntry as described in
http://www.nynaeve.net/?p=59
This issue would cause route additions using the
IP Helper API to fail on Vista.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1748 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-02-28 03:49:33 +00:00
james
3a79e2e10c The Windows version will now use a default route-delay
of 5 seconds to deal with an apparent routing table race
condition on Vista.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1747 e7ae566f-a301-0410-adde-c780ea21d3b5
2007-02-27 23:51:27 +00:00