8b26ff69b3
* Fixed potential local privilege escalation vulnerability in
Windows service.
* Added Python-based based alternative build system for Windows using
Visual Studio 2008 (in win directory).
* When aborting in a non-graceful way, try to execute do_close_tun in
init.c prior to daemon exit to ensure that the tun/tap interface is
closed and any added routes are deleted.
* Fixed an issue where AUTH_FAILED was not being properly delivered
to the client when a bad password is given for mid-session reauth,
causing the connection to fail without an error indication.
* Don't advance to the next connection profile on AUTH_FAILED errors.
* Fixed an issue in the Management Interface that could cause
a process hang with 100% CPU utilization in --management-client
mode if the management interface client disconnected at the
point where credentials are queried.
* Fixed an issue where if reneg-sec was set to 0 on the client,
so that the server-side value would take precedence,
the auth_deferred_expire_window function would incorrectly
return a window period of 0 seconds. In this case, the
correct window period should be the handshake window period.
* Modified ">PASSWORD:Verification Failed" management interface
notification to include a client reason string:
>PASSWORD:Verification Failed: 'AUTH_TYPE' ['REASON_STRING']
* Enable exponential backoff in reliability layer retransmits.
* Set socket buffers (SO_SNDBUF and SO_RCVBUF) immediately after
socket is created rather than waiting until after connect/listen.
* Management interface performance optimizations:
1. Added env-filter MI command to perform filtering on env vars
passed through as a part of --management-client-auth
2. man_write will now try to aggregate output into larger blocks
(up to 1024 bytes) for more efficient i/o
* Fixed minor issue in Windows TAP driver DEBUG builds
where non-null-terminated unicode strings were being
printed incorrectly.
* Fixed issue on Windows with MSVC compiler, where TCP_NODELAY support
was not being compiled in.
* Proxy improvements:
* Implemented http-proxy-override and http-proxy-fallback directives to make it
easier for OpenVPN client UIs to start a pre-existing client config file with
proxy options, or to adaptively fall back to a proxy connection if a direct
connection fails.
* Implemented a key/value auth channel from client to server.
* Fixed issue where bad creds provided by the management interface
for HTTP Proxy Basic Authentication would go into an infinite
retry-fail loop instead of requerying the management interface for
new creds.
58 lines
2.2 KiB
Text
58 lines
2.2 KiB
Text
@comment $NetBSD: PLIST,v 1.11 2010/09/05 20:33:48 adam Exp $
|
|
man/man8/openvpn.8
|
|
sbin/openvpn
|
|
share/examples/openvpn/config/README
|
|
share/examples/openvpn/config/client.conf
|
|
share/examples/openvpn/config/firewall.sh
|
|
share/examples/openvpn/config/home.up
|
|
share/examples/openvpn/config/loopback-client
|
|
share/examples/openvpn/config/loopback-server
|
|
share/examples/openvpn/config/office.up
|
|
share/examples/openvpn/config/openvpn-shutdown.sh
|
|
share/examples/openvpn/config/openvpn-startup.sh
|
|
share/examples/openvpn/config/server.conf
|
|
share/examples/openvpn/config/static-home.conf
|
|
share/examples/openvpn/config/static-office.conf
|
|
share/examples/openvpn/config/tls-home.conf
|
|
share/examples/openvpn/config/tls-office.conf
|
|
share/examples/openvpn/config/xinetd-client-config
|
|
share/examples/openvpn/config/xinetd-server-config
|
|
share/examples/openvpn/keys/README
|
|
share/examples/openvpn/keys/ca.crt
|
|
share/examples/openvpn/keys/ca.key
|
|
share/examples/openvpn/keys/client.crt
|
|
share/examples/openvpn/keys/client.key
|
|
share/examples/openvpn/keys/dh1024.pem
|
|
share/examples/openvpn/keys/pass.crt
|
|
share/examples/openvpn/keys/pass.key
|
|
share/examples/openvpn/keys/pkcs12.p12
|
|
share/examples/openvpn/keys/server.crt
|
|
share/examples/openvpn/keys/server.key
|
|
share/examples/openvpn/scripts/auth-pam.pl
|
|
share/examples/openvpn/scripts/bridge-start
|
|
share/examples/openvpn/scripts/bridge-stop
|
|
share/examples/openvpn/scripts/openvpn.init
|
|
share/examples/openvpn/scripts/ucn.pl
|
|
share/examples/openvpn/scripts/verify-cn
|
|
share/examples/rc.d/openvpn
|
|
share/openvpn/easy-rsa/README
|
|
share/openvpn/easy-rsa/build-ca
|
|
share/openvpn/easy-rsa/build-dh
|
|
share/openvpn/easy-rsa/build-inter
|
|
share/openvpn/easy-rsa/build-key
|
|
share/openvpn/easy-rsa/build-key-pass
|
|
share/openvpn/easy-rsa/build-key-pkcs12
|
|
share/openvpn/easy-rsa/build-key-server
|
|
share/openvpn/easy-rsa/build-req
|
|
share/openvpn/easy-rsa/build-req-pass
|
|
share/openvpn/easy-rsa/clean-all
|
|
share/openvpn/easy-rsa/inherit-inter
|
|
share/openvpn/easy-rsa/list-crl
|
|
share/openvpn/easy-rsa/openssl-0.9.6.cnf
|
|
share/openvpn/easy-rsa/openssl.cnf
|
|
share/openvpn/easy-rsa/pkitool
|
|
share/openvpn/easy-rsa/revoke-full
|
|
share/openvpn/easy-rsa/sign-req
|
|
share/openvpn/easy-rsa/vars
|
|
share/openvpn/easy-rsa/whichopensslcnf
|
|
${PLIST.pam}lib/openvpn/openvpn-auth-pam.so
|