April 14, 2006
View e12fe28

Added --lladdr option to specify the link layer (MAC) address for the tap interface on non-Windows platforms (Roy Marples).

james authored on 2006/04/14 06:09:04
View 40ac3d7

Added --route-metric option to set a default route metric for --route (Roy Marples).

james authored on 2006/04/14 05:40:39
April 5, 2006
View 18597b9

I've recently worked on a better version of pkcs11-helper. I've also merged it into QCA (Qt Cryptographic Architecture), so that KDE 4 will finally be able to use smartcards.

james authored on 2006/04/05 16:17:02
View 07d19ba

Security Vulnerability -- An OpenVPN client connecting to a malicious or compromised server could potentially receive "setenv" configuration directives from the server which could cause arbitrary code execution on the client via a LD_PRELOAD attack. A successful attack appears to require that (a) the client has agreed to allow the server to push configuration directives to it by including "pull" or the macro "client" in its configuration file, (b) the client configuration file uses a scripting directive such as "up" or "down", (c) the client succesfully authenticates the server, (d) the server is malicious or has been compromised and is under the control of the attacker, and (e) the attacker has at least some level of pre-existing control over files on the client (this might be accomplished by having the server respond to a client web request with a specially crafted file).

james authored on 2006/04/05 15:01:08
February 17, 2006
View 6117b63

svn merge -r 888:889 https://svn.openvpn.net/projects/openvpn/contrib/alon/BETA21 21

james authored on 2006/02/17 03:17:32
View 6add6b2

Added --port-share option for allowing OpenVPN and HTTPS server to share the same port number.

james authored on 2006/02/17 03:12:24
February 3, 2006
View 8d33c06

Added feature to --management-client to confirm connection by writing IP addr and port to a file.

james authored on 2006/02/03 18:04:52
January 23, 2006
View 4f404ad

Added --management-client option to connect as a client to management GUI app rather than be connected to as a server.

james authored on 2006/01/23 23:08:27
December 23, 2005
View 33e81c4

Man page and usage message changes to reflect --ip-win32 adaptive and --route-method adaptive.

james authored on 2005/12/23 04:50:48
View 6215931

Added new option --route-method adaptive (Win32) which tries IP helper API first, then falls back to route.exe. Made --route-method adaptive the default.

james authored on 2005/12/23 03:55:49
View a9c802b

--ip-win32 adaptive is now the default. --ip-win32 netsh (or --ip-win32 adaptive when in netsh mode) can now set DNS/WINS addresses on the TAP-Win32 adapter.

james authored on 2005/12/23 03:09:40
December 14, 2005
View 92bbb06

svn merge -r 845:854 $SO/trunk/openvpn .

james authored on 2005/12/14 10:09:11
December 13, 2005
View f214bb2

Added --auto-proxy directive to auto-detect HTTP or SOCKS proxy settings (currently Windows only).

james authored on 2005/12/13 04:46:10
December 9, 2005
View df5722c

First attempt at automatic proxy detection, Windows-only at this point. Proxy settings are taken from IE.

james authored on 2005/12/09 08:10:22
View c959fc7

Inline file capability now works for --secret and --tls-auth. For example:

james authored on 2005/12/09 03:29:38