@@ -98,6 +98,12 @@ AC_ARG_ENABLE(plugins,

    [PLUGINS="yes"]

 )

+AC_ARG_ENABLE(eurephia,

+   [  --disable-eurephia      Disable support for the eurephia plug-in],

+   [EUREPHIA="$enableval"],

+   [EUREPHIA="yes"]

+)

+

 AC_ARG_ENABLE(management,

    [  --disable-management    Disable management server support],

    [MANAGEMENT="$enableval"],

@@ -641,6 +647,9 @@ if test "${WIN32}" != "yes"; then

            )],

            [AC_MSG_RESULT([libdl headers not found.])]

       )

+      if test "$EUREPHIA" = "yes"; then

+         AC_DEFINE(ENABLE_EUREPHIA, 1, [Enable support for the eurephia plug-in])

+      fi

    fi

 fi

@@ -7,6 +7,9 @@

  *

  *  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>

  *

+ *  Additions for eurephia plugin done by:

+ *         David Sommerseth <dazo@users.sourceforge.net> Copyright (C) 2009

+ *

  *  This program is free software; you can redistribute it and/or modify

  *  it under the terms of the GNU General Public License version 2

  *  as published by the Free Software Foundation.

@@ -73,6 +76,9 @@ const char title_string[] =

 #ifdef ENABLE_PKCS11

   " [PKCS11]"

 #endif

+#ifdef ENABLE_EUREPHIA

+  " [eurephia]"

+#endif

   " built on " __DATE__

 ;

@@ -7,6 +7,10 @@

  *

  *  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>

  *

+ *  Additions for eurephia plugin done by:

+ *         David Sommerseth <dazo@users.sourceforge.net> Copyright (C) 2008-2009

+ *

+ *

  *  This program is free software; you can redistribute it and/or modify

  *  it under the terms of the GNU General Public License version 2

  *  as published by the Free Software Foundation.

@@ -780,6 +784,16 @@ verify_callback (int preverify_ok, X509_STORE_CTX * ctx)

   openvpn_snprintf (envname, sizeof(envname), "tls_id_%d", ctx->error_depth);

   setenv_str (opt->es, envname, subject);

+#ifdef ENABLE_EUREPHIA

+  /* export X509 cert SHA1 fingerprint */

+  {

+    struct gc_arena gc = gc_new ();

+    openvpn_snprintf (envname, sizeof(envname), "tls_digest_%d", ctx->error_depth);

+    setenv_str (opt->es, envname,

+		format_hex_ex(ctx->current_cert->sha1_hash, SHA_DIGEST_LENGTH, 0, 1, ":", &gc));

+    gc_free(&gc);

+  }

+#endif

 #if 0

   /* export common name string as environmental variable */

   openvpn_snprintf (envname, sizeof(envname), "tls_common_name_%d", ctx->error_depth);