March 27, 2011
View 0db046f

Added "auth-token" client directive, which is intended to be pushed by server, and that is used to offer a temporary session token to clients that can be used in place of a password on subsequent credential challenges.

James Yonan authored on 2011/03/27 06:16:40
March 10, 2011
View 6c34e74

Added --enable-lzo-stub configure option to build an OpenVPN client without LZO, but that has limited interoperability with LZO-enabled servers.

James Yonan authored on 2011/03/10 09:04:39
February 15, 2011
View 7ae5fb2

Properly handle certificate serial numbers > 32 bits.

James Yonan authored on 2011/02/15 07:03:44
January 5, 2011
View 9356bae

Added --x509-track option.

James Yonan authored on 2011/01/05 09:50:11
December 13, 2010
View ae1884c

Misc fixes to r6708.

James Yonan authored on 2010/12/13 18:27:08
December 9, 2010
View 2a3d17e

Added "management-external-key" option. This option can be used instead of "key" in client mode, and allows the client to run without the need to load the actual private key. When the SSL protocol needs to perform an RSA sign operation, the data to be signed will be sent to the management interface via a notification as follows:

James Yonan authored on 2010/12/09 20:21:04
November 16, 2010
View b2dee7d

In verify_callback, the subject var should be freed by OPENSSL_free, not free, since it is allocated by OpenSSL.

James Yonan authored on 2010/11/16 17:36:18
October 24, 2010
View 3cf9dd8

Implement challenge/response authentication support in client mode, where credentials are entered from stdin. This capability is compiled when ENABLE_CLIENT_CR is defined in syshead.h (enabled by default).

James Yonan authored on 2010/10/24 18:12:47
August 29, 2010
View 2e8ff6c

Allow PKCS12 file content to be included inline in configuration file, rendered as base64.

James Yonan authored on 2010/08/29 14:24:15
July 27, 2010
View dc85dae

Fixed an issue where application payload transmissions on the TLS control channel (such as AUTH_FAILED) that occur during or immediately after a TLS renegotiation might be dropped.

James Yonan authored on 2010/07/27 16:10:01
June 1, 2010
View aaf7297

Implemented a key/value auth channel from client to server.

James Yonan authored on 2010/06/01 16:12:27
April 29, 2010
View 564a210

Updated copyright date to 2010.

James Yonan authored on 2010/04/29 01:31:36
March 12, 2010
View 8c7c6be

Modified ">PASSWORD:Verification Failed" management interface notification to include a client reason string:

James Yonan authored on 2010/03/12 12:05:34
March 7, 2010
View 112e670

Fixed an issue where if reneg-sec was set to 0 on the client, so that the server-side value would take precedence, the auth_deferred_expire_window function would incorrectly return a window period of 0 seconds. In this case, the correct window period should be the handshake window period.

James Yonan authored on 2010/03/07 00:38:23
January 16, 2010
View a345b41

Fixed an issue where AUTH_FAILED was not being properly delivered to the client when a bad password is given for mid-session reauth.

james authored on 2010/01/16 12:24:07