September 6, 2008
View b8fb090

2.1_rc8 and earlier did implicit shell expansion on script arguments since all scripts were called by system(). The security hardening changes made to 2.1_rc9 no longer use system(), but rather use the safer execve or CreateProcess system calls. The security hardening also introduced a backward incompatibility with 2.1_rc8 and earlier in that script parameters were no longer shell-expanded, so for example:

james authored on 2008/09/06 18:42:17
July 26, 2008
View 5a2e9a2

Completely revamped the system for calling external programs and scripts:

james authored on 2008/07/26 16:27:03
July 19, 2008
View d1dcc3e

Added a warning when plugins are specified without an absolute pathname.

james authored on 2008/07/19 08:49:50
July 18, 2008
View 093e7eb

Previously, OpenVPN might log a client's auth-user-pass password if the verbosity was set to a high debug level such as 7 or higher. Normally this would only be used by developers. Now, even at high debug levels, the password will not be output.

james authored on 2008/07/18 08:31:16
July 15, 2008
View 1c0cc4a

Copyright change OpenVPN Solutions LLC -> Telethra, Inc.

james authored on 2008/07/15 03:59:09
June 12, 2008
View eca8691

Updated copyright notice to 2008.

james authored on 2008/06/12 06:59:26
June 11, 2008
View 4e9a51d

Merged connection profiles from http://svn.openvpn.net/projects/openvpn/test/conn

james authored on 2008/06/11 19:48:50
May 25, 2008
View 344ee91

Support asynchronous/deferred authentication in OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY plugin handler.

james authored on 2008/05/25 08:26:11
May 13, 2008
View 1bda73a

Moved branch into official BETA21 position.

james authored on 2008/05/13 05:31:43
January 22, 2008
View 0aee9ca

Allow OpenVPN to run completely unprivileged under Linux by allowing openvpn --mktun to be used with --user and --group to set the UID/GID of the tun device node. Also added --iproute option to allow an alternative command to be executed in place of the default iproute2 command (Alon Bar-Lev).

james authored on 2008/01/22 04:34:13
August 17, 2007
View 70f4f82

AUTO_USERID feature -- if the auth-user-pass option is used with some argument ARG, then -ARG will be appended to the username string that is sent to the server.

james authored on 2007/08/17 17:22:42
November 24, 2006
View 2a64816

Fixed issue where struct env_set methods that change the value of an existing name=value pair would delay the freeing of the memory held by the previous name=value pair until the underlying client instance object is closed.

james authored on 2006/11/24 07:05:14
November 13, 2006
View 5f31881

New try at AUTO_USERID.

james authored on 2006/11/13 18:44:10
November 8, 2006
View a783c40

Added time_ascii, time_duration, and time_unix environmental variables for plugins and callback scripts.

james authored on 2006/11/08 15:54:20
November 1, 2006
View 1d89886

Merged Alon's branch:

james authored on 2006/11/01 09:07:21