September 6, 2008
View b8fb090

2.1_rc8 and earlier did implicit shell expansion on script arguments since all scripts were called by system(). The security hardening changes made to 2.1_rc9 no longer use system(), but rather use the safer execve or CreateProcess system calls. The security hardening also introduced a backward incompatibility with 2.1_rc8 and earlier in that script parameters were no longer shell-expanded, so for example:

james authored on 2008/09/06 18:42:17
August 11, 2008
View 6383b36

Fixed build issue with ./configure --disable-socks --disable-http.

james authored on 2008/08/11 04:29:00
August 5, 2008
View f77c60d

Added additional warnings to flag common gotchas:

james authored on 2008/08/05 13:44:31
July 28, 2008
View c04bc02

Added additional warnings for:

james authored on 2008/07/28 03:20:52
July 26, 2008
View 5a2e9a2

Completely revamped the system for calling external programs and scripts:

james authored on 2008/07/26 16:27:03
July 24, 2008
View 26bb4c7

Added argv_x functions to buffer.[ch] to be used to safely build up argv strings for execve without the possibility of truncation or misinterpretation of mid-argument spacing.

james authored on 2008/07/24 04:51:27
July 18, 2008
View 6cd276b

status_printf function will now set error flag on output truncation or failure of write() to write the expected number of bytes.

james authored on 2008/07/18 16:15:27
View ddad0a8

gen_path will no longer silently truncate the generated filename at 256 bytes.

james authored on 2008/07/18 09:55:59
View 31f90e6

Added warning when using chroot without specifying user and group.

james authored on 2008/07/18 05:47:12
July 15, 2008
View 1c0cc4a

Copyright change OpenVPN Solutions LLC -> Telethra, Inc.

james authored on 2008/07/15 03:59:09
June 12, 2008
View eca8691

Updated copyright notice to 2008.

james authored on 2008/06/12 06:59:26
June 11, 2008
View 4e9a51d

Merged connection profiles from http://svn.openvpn.net/projects/openvpn/test/conn

james authored on 2008/06/11 19:48:50
View 90efcac

Updated version to 2.1_rc7e.

james authored on 2008/06/11 17:45:09
June 4, 2008
View 47ae845

Incremented version to 2.1_rc7d.

james authored on 2008/06/04 14:16:44
May 25, 2008
View 344ee91

Support asynchronous/deferred authentication in OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY plugin handler.

james authored on 2008/05/25 08:26:11