March 27, 2011
View 0db046f

Added "auth-token" client directive, which is intended to be pushed by server, and that is used to offer a temporary session token to clients that can be used in place of a password on subsequent credential challenges.

James Yonan authored on 2011/03/27 06:16:40
December 9, 2010
View 2a3d17e

Added "management-external-key" option. This option can be used instead of "key" in client mode, and allows the client to run without the need to load the actual private key. When the SSL protocol needs to perform an RSA sign operation, the data to be signed will be sent to the management interface via a notification as follows:

James Yonan authored on 2010/12/09 20:21:04
October 24, 2010
View 3cf9dd8

Implement challenge/response authentication support in client mode, where credentials are entered from stdin. This capability is compiled when ENABLE_CLIENT_CR is defined in syshead.h (enabled by default).

James Yonan authored on 2010/10/24 18:12:47
May 25, 2010
View 3cf6c93

Implemented http-proxy-override and http-proxy-fallback directives to make it easier for OpenVPN client UIs to start a pre-existing client config file with proxy options, or to adaptively fall back to a proxy connection if a direct connection fails.

James Yonan authored on 2010/05/25 07:51:16
April 29, 2010
View 564a210

Updated copyright date to 2010.

James Yonan authored on 2010/04/29 01:31:36
March 31, 2010
View 74fce85

Updated MSVC build scripts to Visual Studio 2008: python msvc\config.py nmake /f msvc\msvc.mak

James Yonan authored on 2010/03/31 15:38:21
August 23, 2009
View 8e9666d

Added --remote-random-hostname option.

james authored on 2009/08/23 03:29:20
May 31, 2009
View d7fa38f

Update copyright to 2009.

james authored on 2009/05/31 06:38:49
November 20, 2008
View 7bb9f5a

Fixed issue introduced in 2.1_rc14 that may cause a segfault when a --plugin module is used.

james authored on 2008/11/20 03:07:52
November 17, 2008
View a828135

* Added additional method parameter to --script-security to preserve backward compatibility with system() call semantics used in OpenVPN 2.1_rc8 and earlier. To preserve backward compatibility use:

james authored on 2008/11/17 13:28:07
October 15, 2008
View 51f7b84

Added additional warning messages about --script-security 2 or higher being required to execute user-defined scripts or executables.

james authored on 2008/10/15 17:20:21
October 6, 2008
View 367ed08

Copyright notice changed to reflect change in name of Telethra to OpenVPN Technologies.

james authored on 2008/10/06 16:33:45
September 30, 2008
View bb564a5

Management interface can now listen on a unix domain socket, for example:

james authored on 2008/09/30 15:11:38
September 6, 2008
View b8fb090

2.1_rc8 and earlier did implicit shell expansion on script arguments since all scripts were called by system(). The security hardening changes made to 2.1_rc9 no longer use system(), but rather use the safer execve or CreateProcess system calls. The security hardening also introduced a backward incompatibility with 2.1_rc8 and earlier in that script parameters were no longer shell-expanded, so for example:

james authored on 2008/09/06 18:42:17
July 27, 2008
View 70899be

Added a warning message when passwords are cached in memory.

james authored on 2008/07/27 09:43:49