openvpn

mirror of https://github.com/OpenVPN/openvpn.git synced 2026-05-28 04:03:29 -04:00

History

Frank Lichtenheld f94a3ad2ba Some checks are pending Build / Check code style with clang-format (push) Waiting to run Details Build / Android - arm64-v8a (push) Waiting to run Details Build / gcc-mingw - x64 - Debug - OSSL (push) Waiting to run Details Build / gcc-mingw - x64 - Release - OSSL (push) Waiting to run Details Build / gcc-mingw - x86 - Debug - OSSL (push) Waiting to run Details Build / gcc-mingw - x86 - Release - OSSL (push) Waiting to run Details Build / mingw unittest argv - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest auth_token - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest buffer - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest crypto - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest cryptoapi - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest misc - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest ncp - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest options_parse - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest packet_id - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest pkt - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest provider - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest ssl - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest tls_crypt - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest user_pass - x64 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest argv - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest auth_token - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest buffer - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest crypto - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest cryptoapi - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest misc - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest ncp - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest options_parse - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest packet_id - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest pkt - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest provider - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest ssl - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest tls_crypt - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest user_pass - x64 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest argv - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest auth_token - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest buffer - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest crypto - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest cryptoapi - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest misc - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest ncp - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest options_parse - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest packet_id - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest pkt - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest provider - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest ssl - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest tls_crypt - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest user_pass - x86 - Debug - OSSL (push) Blocked by required conditions Details Build / mingw unittest argv - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest auth_token - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest buffer - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest crypto - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest cryptoapi - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest misc - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest ncp - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest options_parse - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest packet_id - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest pkt - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest provider - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest ssl - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest tls_crypt - x86 - Release - OSSL (push) Blocked by required conditions Details Build / mingw unittest user_pass - x86 - Release - OSSL (push) Blocked by required conditions Details Build / gcc - ubuntu-24.04 - OpenSSL 3.0.13 --enable-pkcs11 (push) Waiting to run Details Build / gcc - ubuntu-22.04 - OpenSSL 3.0.2 --enable-pkcs11 (push) Waiting to run Details Build / clang-asan - ubuntu-22.04 - openssl (push) Waiting to run Details Build / clang-asan - ubuntu-24.04 - openssl (push) Waiting to run Details Build / macos-14 - libressl - asan (push) Waiting to run Details Build / macos-14 - openssl@3 - asan (push) Waiting to run Details Build / macos-15 - libressl - asan (push) Waiting to run Details Build / macos-15 - openssl@3 - asan (push) Waiting to run Details Build / macos-26 - libressl - asan (push) Waiting to run Details Build / macos-26 - openssl@3 - asan (push) Waiting to run Details Build / macos-14 - libressl - normal (push) Waiting to run Details Build / macos-14 - openssl@3 - normal (push) Waiting to run Details Build / macos-15 - libressl - normal (push) Waiting to run Details Build / macos-15 - openssl@3 - normal (push) Waiting to run Details Build / macos-26 - libressl - normal (push) Waiting to run Details Build / macos-26 - openssl@3 - normal (push) Waiting to run Details Build / msbuild - amd64 - openssl (push) Waiting to run Details Build / msbuild - amd64-clang - openssl (push) Waiting to run Details Build / msbuild - arm64 - openssl (push) Waiting to run Details Build / msbuild - x86 - openssl (push) Waiting to run Details Build / msbuild - x86-clang - openssl (push) Waiting to run Details Build / clang asan - ubuntu-22.04 - libressl (push) Waiting to run Details Build / gcc normal - ubuntu-22.04 - libressl (push) Waiting to run Details Build / clang asan - ubuntu-22.04 - mbedtls3 (push) Waiting to run Details Build / gcc normal - ubuntu-22.04 - mbedtls3 (push) Waiting to run Details Build / clang asan - ubuntu-24.04 - awslc (push) Waiting to run Details Build / gcc normal - ubuntu-24.04 - awslc (push) Waiting to run Details Deploy Doxygen documentation to Pages / build (push) Waiting to run Details Deploy Doxygen documentation to Pages / deploy (push) Blocked by required conditions Details Update Copyright statements to 2026 Change-Id: I1728fcb75284ba106e5c37ef53f6e568b64fb647 Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com> Acked-by: Gert Doering <gert@greenie.muc.de> Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1456 Message-Id: <20260108074915.9417-1-gert@greenie.muc.de> URL: https://sourceforge.net/p/openvpn/mailman/message/59280815/ Signed-off-by: Gert Doering <gert@greenie.muc.de>		2026-01-08 10:59:57 +01:00
..
client.ovpn	sample-plugin: TLS Keying Material Exporter [RFC-5705] demonstration plug-in	2015-10-10 00:03:07 +02:00
http-client.py	sample-plugin: TLS Keying Material Exporter [RFC-5705] demonstration plug-in	2015-10-10 00:03:07 +02:00
http-server.py	sample-plugin: TLS Keying Material Exporter [RFC-5705] demonstration plug-in	2015-10-10 00:03:07 +02:00
keyingmaterialexporter.c	Update Copyright statements to 2026	2026-01-08 10:59:57 +01:00
README	sample-plugin: TLS Keying Material Exporter [RFC-5705] demonstration plug-in	2015-10-10 00:03:07 +02:00
server.ovpn	Remove use of 'dh dh2048.pem' from sample configs, remove 'dh2048.pem' file	2025-08-20 23:11:33 +02:00

README

OpenVPN plugin examples.                            Daniel Kubec <niel@rtfm.cz>

Examples provided:

keyingmaterialexporter.c   -- Example based on TLS Keying Material Exporters over HTTP [RFC-5705]
                              (openvpn/doc/keying-material-exporter.txt)

This example demonstrates authenticating a user over HTTP who have already
established an OpenVPN connecting using the --keying-material-exporter
feature.

Requires:
OpenVPN RFC-5705 Support, OpenSSL >= 1.0.1

Files:
  http-server.py -- Example HTTP Server listen  0.0.0.0:8080
  http-client.py -- Example HTTP Client connect 10.8.0.1:8080 [GET /$SESSIONID]

  server.ovpn    -- Example HTTP SSO VPN Server configuration
  client.ovpn    -- Example HTTP SSO VPN Client configuration

  keyingmaterialexporter.c,
  keyingmaterialexporter.so  -- Example OpenVPN Client and Server plugin

To build:
  ./build keyingmaterialexporter

To use in OpenVPN:

Enter openvpn/sample/sample-plugins/keyingmaterialexporter directory
and in separate terminals, start these four processes:

$ openvpn --config ./server.ovpn
$ openvpn --config ./client.ovpn
$ ./http-server.py
$ ./http-client.py

Test:

openvpn --config ./server.ovpn
##############################

PLUGIN SSO: app session created
PLUGIN_CALL: POST ./keyingmaterialexporter.so/PLUGIN_TLS_VERIFY status=0
PLUGIN SSO: app session key:  a5885abc84d361803f58ede1ef9c0adf99e720cd
PLUGIN SSO: app session file: /tmp/openvpn_sso_a5885abc84d361803f58ede1ef9c0adf99e720cd
PLUGIN SSO: app session user: Test-Client

openvpn --config ./client.ovpn
##############################
PLUGIN SSO: app session created
PLUGIN_CALL: POST ./keyingmaterialexporter.so/PLUGIN_TLS_VERIFY status=0
PLUGIN SSO: app session key:  a5885abc84d361803f58ede1ef9c0adf99e720cd
PLUGIN SSO: app session file: /tmp/openvpn_sso_user
PLUGIN_CALL: POST ./keyingmaterialexporter.so/PLUGIN_TLS_FINAL status=0

HTTP_SERVER:
http-server.py
################
http server started
session file: /tmp/openvpn_sso_a5885abc84d361803f58ede1ef9c0adf99e720cd
10.8.0.1 - - [02/Apr/2015 15:03:33] "GET /a5885abc84d361803f58ede1ef9c0adf99e720cd HTTP/1.1" 200 -
session user: Test-Client
session key:  a5885abc84d361803f58ede1ef9c0adf99e720cd

HTTP_SERVER:
http-client.py
<html><body><h1>Greetings Test-Client. You are authorized</h1></body></html>