June 2, 2009
View e7a65df

Fixed compile error on ./configure --enable-small

james authored on 2009/06/02 05:12:15
May 31, 2009
View d7fa38f

Update copyright to 2009.

james authored on 2009/05/31 06:38:49
December 25, 2008
View 1f4309a

Fixed issue where SIGUSR1 restarts would fail if private key was specified as an inline file.

james authored on 2008/12/25 11:33:34
November 18, 2008
View 03bfb22

Added --prng option to control PRNG (pseudo-random number generator) parameters. In previous OpenVPN versions, the PRNG was hardcoded to use the SHA1 hash. Now any OpenSSL hash may be used. This is part of an effort to remove hardcoded references to a specific cipher or cryptographic hash algorithm.

james authored on 2008/11/18 10:25:05
November 17, 2008
View a828135

* Added additional method parameter to --script-security to preserve backward compatibility with system() call semantics used in OpenVPN 2.1_rc8 and earlier. To preserve backward compatibility use:

james authored on 2008/11/17 13:28:07
October 29, 2008
View 24ce3b2

Added server-side --auth-user-pass-optional directive, to allow connections by clients that do not specify a username/password, when a user-defined authentication script/module is in place (via --auth-user-pass-verify, --management-client-auth, or a plugin module).

james authored on 2008/10/29 05:01:05
October 15, 2008
View 51f7b84

Added additional warning messages about --script-security 2 or higher being required to execute user-defined scripts or executables.

james authored on 2008/10/15 17:20:21
October 6, 2008
View 367ed08

Copyright notice changed to reflect change in name of Telethra to OpenVPN Technologies.

james authored on 2008/10/06 16:33:45
September 30, 2008
View bb564a5

Management interface can now listen on a unix domain socket, for example:

james authored on 2008/09/30 15:11:38
September 6, 2008
View b8fb090

2.1_rc8 and earlier did implicit shell expansion on script arguments since all scripts were called by system(). The security hardening changes made to 2.1_rc9 no longer use system(), but rather use the safer execve or CreateProcess system calls. The security hardening also introduced a backward incompatibility with 2.1_rc8 and earlier in that script parameters were no longer shell-expanded, so for example:

james authored on 2008/09/06 18:42:17
August 11, 2008
View 6383b36

Fixed build issue with ./configure --disable-socks --disable-http.

james authored on 2008/08/11 04:29:00
August 5, 2008
View f77c60d

Added additional warnings to flag common gotchas:

james authored on 2008/08/05 13:44:31
July 28, 2008
View c04bc02

Added additional warnings for:

james authored on 2008/07/28 03:20:52
July 26, 2008
View 5a2e9a2

Completely revamped the system for calling external programs and scripts:

james authored on 2008/07/26 16:27:03
July 24, 2008
View 26bb4c7

Added argv_x functions to buffer.[ch] to be used to safely build up argv strings for execve without the possibility of truncation or misinterpretation of mid-argument spacing.

james authored on 2008/07/24 04:51:27