Feat deferred client connect 2.4.4#1

Open

Snawoot wants to merge 644 commits intofknittel:masterfrom

Snawoot:feat_deferred_client-connect_2.4.4

This pull request is big! We're only showing the most recent 250 commits

Commits on Nov 16, 2016

Remove unused variable in argv_printf_arglist()

dsommers
authored and
cron2
committed

Commits on Nov 17, 2016

Preparing for release v2.4_beta1 (ChangeLog, version.m4)
dsommers
committed

Commits on Nov 18, 2016

Changes.rst: Fixing wrong formatting
dsommers
committed

Commits on Nov 19, 2016

Document that tls-crypt also supports inline

schwabe
authored and
cron2
committed
multi_process_float: revert part of c14c4a9e

syzzer
authored and
cron2
committed
Fix warning that RAND_bytes is undeclared

schwabe
authored and
cron2
committed
Remove compat-stdbool.h.

schwabe
authored and
cron2
committed
Fix various compiler warnings

schwabe
authored and
cron2
committed

Commits on Nov 20, 2016

Remove remaining traces of compat-stdbool.h
cron2
committed

Commits on Nov 21, 2016

Commits on Nov 22, 2016

Handle --dhcp-option DNS6 on Windows using netsh

selvanair
authored and
cron2
committed
Handle DNS6 option on Android

schwabe
authored and
cron2
committed
--tls-crypt fixes

syzzer
authored and
cron2
committed
Change cmocka remote to use https in stead of git protocol

syzzer
authored and
cron2
committed
generate_key_expansion: make assumption explicit, use C99 features

syzzer
authored and
cron2
committed

Commits on Nov 23, 2016

Document the --auth-token option

dsommers
authored and
cron2
committed
Poor man's NCP for non-NCP peers

syzzer
authored and
cron2
committed
Refactor data channel key generation API

syzzer
authored and
cron2
committed

Commits on Nov 24, 2016

Set IPv6 DNS servers using interactive service

selvanair
authored and
cron2
committed
Preparing OpenVPN v2.4_beta2 release
dsommers
committed

Commits on Nov 28, 2016

tls_process: don't set variable that's never read

syzzer
authored and
cron2
committed
Unconditionally enable TLS_AGGREGATE_ACK

syzzer
authored and
cron2
committed
Clean up format_hex_ex()

syzzer
authored and
cron2
committed
update year in copyright message

eworm-de
authored and
cron2
committed
Fix windows path in Changes.rst
cron2
committed

Commits on Nov 29, 2016

Map restart signals from event loop to SIGTERM during exit-notification wait

selvanair
authored and
cron2
committed
Introduce and use secure_memzero() to erase secrets

syzzer
authored and
cron2
committed

Commits on Nov 30, 2016

When parsing '--setenv opt xx ..' make sure a third parameter is present

selvanair
authored and
cron2
committed
Force 'def1' method when --redirect-gateway is done through service

selvanair
authored and
cron2
committed

Commits on Dec 1, 2016

Do not restart dns client service as a part of --register-dns processing

selvanair
authored and
cron2
committed
reload CRL only if file was modified

ordex
authored and
cron2
committed
Mention that OpenVPN 2.4 requires Windows Vista or higher

mattock
authored and
cron2
committed
Use systemd service manager notification

eworm-de
authored and
dsommers
committed
Refuse to daemonize when running from systemd

eworm-de
authored and
dsommers
committed
Preparing OpenVPN v2.4_rc1 release
dsommers
committed

Commits on Dec 6, 2016

Commits on Dec 7, 2016

Arm inotify only in server mode

lstipakov
authored and
dsommers
committed
Add "async push" feature to Changes.rst

Lev Stipakov
authored and
dsommers
committed
Refactor setting close-on-exec for socket FDs
cron2
committed
Fix (and cleanup) crypto flags in combination with NCP

syzzer
authored and
cron2
committed
Deprecate --no-iv

syzzer
authored and
cron2
committed

Commits on Dec 9, 2016

Commits on Dec 15, 2016

Merge 'reformatting' branch into master
dsommers
committed

Commits on Dec 16, 2016

Commits on Dec 21, 2016

Commits on Dec 24, 2016

docs: Further enhance the documentation related to SWEET32
dsommers
committed

Commits on Dec 26, 2016

Commits on Dec 27, 2016

Commits on Jan 4, 2017

Fix push options digest update

selvanair
authored and
cron2
committed
Crash in options.c

gvanem
authored and
cron2
committed

Commits on Jan 9, 2017

Always release dhcp address in close_tun() on Windows.

selvanair
authored and
cron2
committed

Commits on Jan 12, 2017

Commits on Jan 18, 2017

More broadly enforce Allman style and braces-around-conditionals

syzzer
authored and
dsommers
committed

Commits on Jan 20, 2017

Add a check for -Wl, --wrap support in linker

selvanair
authored and
dsommers
committed

Commits on Jan 22, 2017

git: Merge .gitignore files into a single file
dsommers
committed

Commits on Jan 23, 2017

Use SHA256 for the internal digest, instead of MD5

syzzer
authored and
dsommers
committed

Commits on Jan 25, 2017

systemd: Move the READY=1 signalling to an earlier point
dsommers
committed
systemd: Use automake tools to install unit files

eworm-de
authored and
dsommers
committed
systemd: Do not race on RuntimeDirectory

eworm-de
authored and
dsommers
committed
systemd: Add more security feature for systemd units

eworm-de
authored and
dsommers
committed
Clean up plugin path handling

eworm-de
authored and
dsommers
committed

Commits on Jan 27, 2017

plugin: Remove GNUism in openvpn-plugin.h generation

eworm-de
authored and
dsommers
committed

Commits on Jan 29, 2017

Resolve several travis-ci issues

chipitsine
authored and
dsommers
committed

Commits on Feb 16, 2017

Fix building with LibreSSL 2.5.1 by cleaning a hack.

Olivier Wahrenberger
authored and
cron2
committed

Commits on Feb 19, 2017

OpenSSL: check for the SSL reason, not the full error

emmanuel-deloget
authored and
cron2
committed

Commits on Feb 20, 2017

Fix user's group membership check in interactive service to work with domains

selvanair
authored and
cron2
committed
attempt to add IPv6 route even when no IPv6 address was configured

ordex
authored and
cron2
committed

Commits on Feb 21, 2017

fix redirect-gateway behaviour when an IPv4 default route does not exist

ordex
authored and
cron2
committed

Commits on Feb 22, 2017

Commits on Feb 23, 2017

Fix segfault when using crypto lib without AES-256-CTR or SHA256

realsimix
authored and
cron2
committed
Add openssl_compat.h to openvpn_SOURCES
cron2
committed
OpenSSL: 1.1 fallout - fix configure on old autoconf

syzzer
authored and
cron2
committed

Commits on Feb 24, 2017

fix typo in notification message

eworm-de
authored and
cron2
committed
Fix '--dev null'
cron2
committed

Commits on Mar 5, 2017

OpenSSL: don't use direct access to the internal of RSA_METHOD

emmanuel-deloget
authored and
cron2
committed
OpenSSL: SSLeay symbols are no longer available in OpenSSL 1.1

emmanuel-deloget
authored and
cron2
committed
OpenSSL: use EVP_CipherInit_ex() instead of EVP_CipherInit()

emmanuel-deloget
authored and
cron2
committed

Commits on Mar 12, 2017

travis-ci: remove unused files

chipitsine
authored and
cron2
committed
Fix types in WIN32 socket_listen_accept()

syzzer
authored and
cron2
committed

Commits on Mar 15, 2017

Remove duplicate X509 env variables

syzzer
authored and
cron2
committed

Commits on Mar 16, 2017

Fix Building Using MSVC

Eric Thorpe
authored and
cron2
committed
CRL: use time_t instead of struct timespec to store last mtime

ordex
authored and
cron2
committed
Fix non-C99-compliant builds: don't use const size_t as array length

syzzer
authored and
cron2
committed

Commits on Mar 19, 2017

Deprecate --ns-cert-type

syzzer
authored and
cron2
committed
Be less picky about keyUsage extensions

syzzer
authored and
cron2
committed
plugin: Improve the handling of default plug-in directory

dsommers
authored and
cron2
committed
ignore remote-random-hostname if a numeric host is provided

ordex
authored and
cron2
committed
cleanup: Remove faulty env processing functions

dsommers
authored and
cron2
committed

Commits on Mar 20, 2017

Commits on Mar 21, 2017

Preparing for release v2.4.1 (ChangeLog, version.m4)
cron2
committed

Commits on Mar 29, 2017

Commits on Apr 11, 2017

Make --cipher/--auth none more explicit on the risks
dsommers
committed

Commits on May 5, 2017

cleanup: merge packet_id_alloc_outgoing() into packet_id_write()

syzzer
authored and
cron2
committed
Don't run packet_id unit tests for --disable-crypto builds

syzzer
authored and
dsommers
committed
Fix Changes.rst layout

syzzer
authored and
dsommers
committed

Commits on May 8, 2017

Fix extract_x509_field_ssl for external objects, v2

hvenev
authored and
dsommers
committed
Fix memory leak in x509_verify_cert_ku()

syzzer
authored and
dsommers
committed

Commits on May 9, 2017

mbedtls: correctly check return value in pkcs11_certificate_dn()

syzzer
authored and
dsommers
committed
plugin: Fix documentation typo for type_mask
dsommers
committed
Restore pre-NCP frame parameters for new sessions

syzzer
authored and
dsommers
committed
plugin: Export secure_memzero() to plug-ins
dsommers
committed
Always clear username/password from memory on error

syzzer
authored and
dsommers
committed
In auth-pam plugin clear the password after use

selvanair
authored and
dsommers
committed
Document tls-crypt security considerations in man page

syzzer
authored and
dsommers
committed

Commits on May 10, 2017

Don't assert out on receiving too-large control packets (CVE-2017-7478)

syzzer
authored and
dsommers
committed
Drop packets instead of assert out if packet id rolls over (CVE-2017-7479)

syzzer
authored and
dsommers
committed
Set a low interface metric for tap adapter when block-outside-dns is in use

ValdikSS
authored and
dsommers
committed

Commits on May 11, 2017

Preparing v2.4.2 release
dsommers
committed

Commits on May 13, 2017

Pass correct buffer size to GetModuleFileNameW()

selvanair
authored and
cron2
committed

Commits on May 17, 2017

Log the negotiated (NCP) cipher

syzzer
authored and
cron2
committed

Commits on May 18, 2017

Commits on May 20, 2017

Remove erroneous limitation on max number of args for --plugin
cron2
committed

Commits on Jun 8, 2017

refactor my_strupr

guidovranken
authored and
cron2
committed

Commits on Jun 9, 2017

Fix 2 memory leaks in proxy authentication routine

guidovranken
authored and
cron2
committed

Commits on Jun 10, 2017

Fix memory leak in add_option() for option 'connection'

guidovranken
authored and
cron2
committed

Commits on Jun 11, 2017

Fix an unaligned access on OpenBSD/sparc64

jcourreges
authored and
cron2
committed
Missing include for socket-flags TCP_NODELAY on OpenBSD

jcourreges
authored and
cron2
committed

Commits on Jun 12, 2017

Ensure option array p[] is always NULL-terminated

guidovranken
authored and
cron2
committed
Skip tls-crypt unit tests if required crypto mode not supported

syzzer
authored and
cron2
committed

Commits on Jun 13, 2017

openssl: fix overflow check for long --tls-cipher option

syzzer
authored and
cron2
committed

Commits on Jun 16, 2017

Fix a null-pointer dereference in establish_http_proxy_passthru()

guidovranken
authored and
cron2
committed
copyright: Update GPLv2 license texts

dsommers
authored and
cron2
committed

Commits on Jun 18, 2017

Fix edge case with clients failing to set up cipher on empty PUSH_REPLY.
cron2
committed
OpenSSL: don't use direct access to the internal of X509

emmanuel-deloget
authored and
cron2
committed
OpenSSL: don't use direct access to the internal of EVP_PKEY

emmanuel-deloget
authored and
cron2
committed
OpenSSL: don't use direct access to the internal of RSA

emmanuel-deloget
authored and
cron2
committed
OpenSSL: don't use direct access to the internal of DSA

emmanuel-deloget
authored and
cron2
committed
OpenSSL: force meth->name as non-const when we free() it

emmanuel-deloget
authored and
cron2
committed
Add a DSA test key/cert pair to sample-keys

syzzer
authored and
cron2
committed
Fix mbedtls fingerprint calculation

syzzer
authored and
cron2
committed
OpenSSL: don't use direct access to the internal of EVP_MD_CTX

emmanuel-deloget
authored and
cron2
committed
OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX

emmanuel-deloget
authored and
cron2
committed
OpenSSL: don't use direct access to the internal of HMAC_CTX

emmanuel-deloget
authored and
cron2
committed
Fix potential 1-byte overread in TCP option parsing.
cron2
committed

Commits on Jun 19, 2017

Ignore auth-nocache for auth-user-pass if auth-token is pushed

ordex
authored and
dsommers
committed
auth-token with auth-nocache fix broke --disable-crypto builds
dsommers
committed
mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)

syzzer
authored and
cron2
committed
mbedtls: require C-string compatible types for --x509-username-field

syzzer
authored and
cron2
committed
Fix remote-triggerable memory leaks (CVE-2017-7521)

syzzer
authored and
cron2
committed
Restrict --x509-alt-username extension types

syzzer
authored and
cron2
committed
Fix potential double-free in --x509-alt-username (CVE-2017-7521)

syzzer
authored and
cron2
committed
Prevent two kinds of stack buffer OOB reads and a crash for invalid input data

guidovranken
authored and
cron2
committed
Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
cron2
committed

Commits on Jun 20, 2017

Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst)
cron2
committed

Commits on Jun 22, 2017

OpenSSL: remove pre-1.1 function from the OpenSSL compat interface

emmanuel-deloget
authored and
cron2
committed
Fix typo in extract_x509_extension() debug message

syzzer
authored and
cron2
committed

Commits on Jun 27, 2017

crypto: correct typ0 in error message

ordex
authored and
cron2
committed
Set tls-cipher restriction before loading certificates

schwabe
authored and
cron2
committed
Move adjust_power_of_2() to integer.h

syzzer
authored and
cron2
committed
travis-ci: add 3 missing patches from master to release/2.4

chipitsine
authored and
cron2
committed

Commits on Jun 29, 2017

Commits on Jul 17, 2017

use M_ERRNO instead of explicitly printing errno

ordex
authored and
cron2
committed
don't print errno twice

ordex
authored and
cron2
committed
ntlm: avoid useless cast

ordex
authored and
cron2
committed
ntlm: unwrap multiple function calls

ordex
authored and
cron2
committed

Commits on Jul 20, 2017

Remove strerror_ts()

syzzer
authored and
cron2
committed
Move openvpn_sleep() to manage.c

syzzer
authored and
cron2
committed
fixup: also change missed openvpn_sleep() occurrences

syzzer
authored and
cron2
committed
route: improve error message

ordex
authored and
cron2
committed

Commits on Jul 24, 2017

management: preserve wait_for_push field when asking for user/pass

ordex
authored and
dsommers
committed

Commits on Jul 25, 2017

Commits on Aug 11, 2017

ntlm: convert binary buffers to uint8_t *

ordex
authored and
dsommers
committed
ntlm: restyle compressed multiple function calls

ordex
authored and
dsommers
committed
ntlm: improve code style and readability

ordex
authored and
dsommers
committed
Print ec bit details, refuse management-external-key if key is not RSA

schwabe
authored and
dsommers
committed
contrib: Remove keychain-mcd code
dsommers
committed
cleanup: Move init_random_seed() to where it is being used
dsommers
committed
travis-ci: update openssl to 1.0.2l, update mbedtls to 2.5.1

chipitsine
authored and
dsommers
committed
travis-ci: update pkcs11-helper to 1.22

chipitsine
authored and
dsommers
committed
OpenSSL: remove unreachable call to SSL_CTX_get0_privatekey()

ordex
authored and
dsommers
committed
make function declarations C99 compliant

ordex
authored and
dsommers
committed
remove unused functions

ordex
authored and
dsommers
committed
use NULL instead of 0 when assigning pointers

ordex
authored and
dsommers
committed

Commits on Aug 14, 2017

add missing static attribute to functions

ordex
authored and
dsommers
committed
Always use default keysize for NCP'd ciphers

syzzer
authored and
dsommers
committed
Move create_temp_file() out of #ifdef ENABLE_CRYPTO

syzzer
authored and
dsommers
committed
Use provided env vars in up/down script.

bitfehler
authored and
dsommers
committed
Document down-root plugin usage in client.down

bitfehler
authored and
dsommers
committed
sample-plugins: fix ASN1_STRING_to_UTF8 return value checks
dsommers
committed

Commits on Aug 15, 2017

Deprecate --keysize

syzzer
authored and
dsommers
committed
Deprecate --no-replay

syzzer
authored and
dsommers
committed
Fix socks_proxy_port pointing to invalid data

Thomas Veerman via Openvpn-devel
authored and
dsommers
committed

Commits on Aug 16, 2017

ntlm: avoid breaking anti-aliasing rules

ordex
authored and
dsommers
committed
remove the --disable-multi config switch

ordex
authored and
dsommers
committed
Move run_up_down() to init.c

syzzer
authored and
dsommers
committed
tls-crypt: introduce tls_crypt_kt()

syzzer
authored and
dsommers
committed

Commits on Aug 17, 2017

Commits on Aug 18, 2017

Add coverity static analysis to Travis CI config

syzzer
authored and
dsommers
committed

Commits on Sep 6, 2017

route: avoid definition of unused variables in certain configurations

ordex
authored and
dsommers
committed
tls-crypt: don't leak memory for incorrect tls-crypt messages

syzzer
authored and
dsommers
committed
fix a couple of typ0s in comments and strings

ordex
authored and
dsommers
committed
man: Corrections to doc/openvpn.8

Richard Bonhomme
authored and
dsommers
committed
travis: reorder matrix to speed up build

syzzer
authored and
dsommers
committed
docs: Replace all PolarSSL references to mbed TLS
dsommers
committed
fragment.c: simplify boolean expression

ordex
authored and
dsommers
committed
Warn that DH config option is only meaningful in a tls-server context

gertvdijk
authored and
dsommers
committed
OpenSSL: Always set SSL_OP_CIPHER_SERVER_PREFERENCE flag

c0r0n3r
authored and
dsommers
committed

Commits on Sep 21, 2017

Commits on Sep 22, 2017

lz4: Move towards a newer LZ4 API
dsommers
committed

Commits on Sep 25, 2017

Prepare the release of OpenVPN 2.4.4
dsommers
committed

Commits on Nov 15, 2017

client-connect: Split multi_connection_established into separate functions

fknittel
authored and
Snawoot
committed
client-connect: Properly indent all functions

fknittel
authored and
Snawoot
committed
client-connect: Refactor multi_client_connect_source_ccd

fknittel
authored and
Snawoot
committed
client-connect: Move multi_client_connect_setenv into early_setup

fknittel
authored and
Snawoot
committed
client-connect: Refactor to use return values instead of modifying a passed-in flag

fknittel
authored and
Snawoot
committed
client-connect: Refactor client-connect handling to calling a bunch of hooks in a loop

fknittel
authored and
Snawoot
committed
client-connect: Add CC_RET_DEFERRED and cope with deferred client-connect

fknittel
authored and
Snawoot
committed
client-connect: Add deferred support to the client-connect script handler

fknittel
authored and
Snawoot
committed
client-connect: Add deferred support to the client-connect plugin v1 handler

fknittel
authored and
Snawoot
committed
recover 2.3->2.4 changes in multi.c
Snawoot
committed
modificator fix
Snawoot
committed