May 13, 2008
View 1bda73a

Moved branch into official BETA21 position.

james authored on 2008/05/13 05:31:43
January 22, 2008
View 0aee9ca

Allow OpenVPN to run completely unprivileged under Linux by allowing openvpn --mktun to be used with --user and --group to set the UID/GID of the tun device node. Also added --iproute option to allow an alternative command to be executed in place of the default iproute2 command (Alon Bar-Lev).

james authored on 2008/01/22 04:34:13
August 17, 2007
View 70f4f82

AUTO_USERID feature -- if the auth-user-pass option is used with some argument ARG, then -ARG will be appended to the username string that is sent to the server.

james authored on 2007/08/17 17:22:42
November 24, 2006
View 2a64816

Fixed issue where struct env_set methods that change the value of an existing name=value pair would delay the freeing of the memory held by the previous name=value pair until the underlying client instance object is closed.

james authored on 2006/11/24 07:05:14
November 13, 2006
View 5f31881

New try at AUTO_USERID.

james authored on 2006/11/13 18:44:10
November 8, 2006
View a783c40

Added time_ascii, time_duration, and time_unix environmental variables for plugins and callback scripts.

james authored on 2006/11/08 15:54:20
November 1, 2006
View 1d89886

Merged Alon's branch:

james authored on 2006/11/01 09:07:21
April 5, 2006
View 07d19ba

Security Vulnerability -- An OpenVPN client connecting to a malicious or compromised server could potentially receive "setenv" configuration directives from the server which could cause arbitrary code execution on the client via a LD_PRELOAD attack. A successful attack appears to require that (a) the client has agreed to allow the server to push configuration directives to it by including "pull" or the macro "client" in its configuration file, (b) the client configuration file uses a scripting directive such as "up" or "down", (c) the client succesfully authenticates the server, (d) the server is malicious or has been compromised and is under the control of the attacker, and (e) the attacker has at least some level of pre-existing control over files on the client (this might be accomplished by having the server respond to a client web request with a specially crafted file).

james authored on 2006/04/05 15:01:08
November 9, 2005
View eadf16a

Removed annoying 'i' variable from add_option.

james authored on 2005/11/09 16:30:14
November 5, 2005
View e8c1720

svn merge -r 771:780 $SO/trunk/openvpn

james authored on 2005/11/05 16:42:33
October 31, 2005
View c67d59c

Windows reliability changes: * Added code to make sure that the local PATH environmental variable points to the Windows system32 directory. * Added new --ip-win32 adaptive mode which tries 'dynamic' and then fails over to 'netsh' if the DHCP negotiation fails. * Made --ip-win32 adaptive the default.

james authored on 2005/10/31 12:01:17
October 20, 2005
View 984cf00

Merged with Alon's r688.

james authored on 2005/10/20 14:58:08
September 26, 2005
View 6fbf66f

This is the start of the BETA21 branch. It includes the --topology feature, and TAP-Win32 driver changes to allow non-admin access.

james authored on 2005/09/26 14:28:27