June 1, 2010
View aaf7297

Implemented a key/value auth channel from client to server.

James Yonan authored on 2010/06/01 16:12:27
April 29, 2010
View 564a210

Updated copyright date to 2010.

James Yonan authored on 2010/04/29 01:31:36
March 12, 2010
View 8c7c6be

Modified ">PASSWORD:Verification Failed" management interface notification to include a client reason string:

James Yonan authored on 2010/03/12 12:05:34
March 7, 2010
View 112e670

Fixed an issue where if reneg-sec was set to 0 on the client, so that the server-side value would take precedence, the auth_deferred_expire_window function would incorrectly return a window period of 0 seconds. In this case, the correct window period should be the handshake window period.

James Yonan authored on 2010/03/07 00:38:23
January 16, 2010
View a345b41

Fixed an issue where AUTH_FAILED was not being properly delivered to the client when a bad password is given for mid-session reauth.

james authored on 2010/01/16 12:24:07
November 13, 2009
View b9437c6

Increase MAX_CERT_DEPTH to 16 (from 8), and when exceeded, make it a hard failure, rather than just a warning.

james authored on 2009/11/13 20:09:47
October 26, 2009
View ec4a500

On server, lock client-provided certs against mid-session TLS renegotiations -- this is similer to how the common name is also locked.

james authored on 2009/10/26 00:51:04
October 24, 2009
View 71b557b

On server, lock session username against changes in mid-session TLS renegotiations -- this is similer to how the common name is also locked.

james authored on 2009/10/24 10:08:30
September 30, 2009
View 5733ef6

Added the ability for the server to provide a custom reason string when an AUTH_FAILED message is returned to the client. This string can be set by the server-side managment interface and read by the client-side management interface.

james authored on 2009/09/30 08:10:14
September 27, 2009
View 3eee126

Eliminated the limitation on the number of options that can be pushed to clients, including routes. Previously, all pushed options needed to fit within a 1024 byte options string.

james authored on 2009/09/27 11:12:15
May 31, 2009
View d7fa38f

Update copyright to 2009.

james authored on 2009/05/31 06:38:49
View 6aa7fb8

Fixed issue of symbol conflicts interfering with Windows CryptoAPI functionality (Alon Bar-Lev).

james authored on 2009/05/31 04:53:49
January 28, 2009
View 763602d

Fixed issue involving an #ifdef in a macro reference that breaks early gcc compilers.

james authored on 2009/01/28 06:18:51
November 18, 2008
View 09cc9c8

Added server-side --opt-verify option: clients that connect with options that are incompatible with those of the server will be disconnected.

james authored on 2008/11/18 12:22:52
October 31, 2008
View ed30424

Added --no-name-remapping option to allow Common Name, X509 Subject, and username strings to include any printable character including space, but excluding control characters such as tab, newline, and carriage-return.

james authored on 2008/10/31 16:04:51