November 5, 2010
View 4eb21d2

Prepared for a OpenVPN v2.1.4 release

David Sommerseth authored on 2010/11/05 04:35:24
August 21, 2010
View 5f866d9

Attempt to fix issue where domake-win build system was not properly signing drivers and .exe files.

James Yonan authored on 2010/08/21 05:24:42
August 16, 2010
View 4f79d3e

Windows security issue: Fixed potential local privilege escalation vulnerability in Windows service. The Windows service did not properly quote the executable filename passed to CreateService. A local attacker with write access to the root directory C:\ could create an executable that would be run with the same privilege level as the OpenVPN Windows service. However, since non-Administrative users normally lack write permission on C:\, this vulnerability is generally not exploitable except on older versions of Windows (such as Win2K) where the default permissions on C:\ would allow any user to create files there. Credit: Scott Laurie, MWR InfoSecurity

James Yonan authored on 2010/08/16 06:53:00
July 28, 2010
View 75dfe3d

Added "net stop dnscache" and "net start dnscache" in front of existing --register-dns commands.

James Yonan authored on 2010/07/28 06:46:34
July 27, 2010
View dc85dae

Fixed an issue where application payload transmissions on the TLS control channel (such as AUTH_FAILED) that occur during or immediately after a TLS renegotiation might be dropped.

James Yonan authored on 2010/07/27 16:10:01
July 17, 2010
View b90c6f1

Added --register-dns option for Windows.

James Yonan authored on 2010/07/17 03:01:11
July 12, 2010
View f9b2ada

Implemented multi-address DNS expansion on the network field of route commands.

James Yonan authored on 2010/07/12 10:55:54
July 10, 2010
View 9c110e8

Version 2.1.1k

James Yonan authored on 2010/07/10 12:13:25
June 10, 2010
View d222fcc

Fixed issue where bad creds provided by the management interface for HTTP Proxy Basic Authentication would go into an infinite retry-fail loop instead of requerying the management interface for new creds.

James Yonan authored on 2010/06/10 12:17:21
June 1, 2010
View aaf7297

Implemented a key/value auth channel from client to server.

James Yonan authored on 2010/06/01 16:12:27
May 25, 2010
View 3cf6c93

Implemented http-proxy-override and http-proxy-fallback directives to make it easier for OpenVPN client UIs to start a pre-existing client config file with proxy options, or to adaptively fall back to a proxy connection if a direct connection fails.

James Yonan authored on 2010/05/25 07:51:16
April 22, 2010
View 059739e

Added Python-based build system for Windows in win directory.

James Yonan authored on 2010/04/22 21:53:31
April 16, 2010
View 7e1c085

Management interface performance optimizations:

James Yonan authored on 2010/04/16 16:04:45
March 31, 2010
View 74fce85

Updated MSVC build scripts to Visual Studio 2008: python msvc\config.py nmake /f msvc\msvc.mak

James Yonan authored on 2010/03/31 15:38:21
March 30, 2010
View 2b9b4c8

Set socket buffers (SO_SNDBUF and SO_RCVBUF) immediately after socket is created rather than waiting until after connect/listen.

James Yonan authored on 2010/03/30 13:20:55