David Sommerseth daab0a9fa8 auth-token: Ensure tokens are always wiped on de-auth ... If tls_deauthenticate() was called, it could in some scenarios leave the authentication token for a session in memory. This change just ensures auth-tokens are always wiped as soon as a TLS session is considered broken. Signed-off-by: David Sommerseth <davids@openvpn.net> Acked-by: Steffan Karger <steffan@karger.me> Message-Id: <20170328205346.18844-1-davids@openvpn.net> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14344.html Signed-off-by: David Sommerseth <davids@openvpn.net>		2017-03-29 12:04:19 +02:00
..
compat	More broadly enforce Allman style and braces-around-conditionals	2017-01-18 20:51:27 +01:00
openvpn	auth-token: Ensure tokens are always wiped on de-auth	2017-03-29 12:04:19 +02:00
openvpnserv	Fix user's group membership check in interactive service to work with domains	2017-02-20 12:00:09 +01:00
plugins	More broadly enforce Allman style and braces-around-conditionals	2017-01-18 20:51:27 +01:00
Makefile.am	Update copyrights	2016-12-21 21:57:58 +01:00