openvpn-gui/service.h

/*
 *  OpenVPN-GUI -- A Windows GUI for OpenVPN.
 *
 *  Copyright (C) 2004 Mathias Sundman <mathias@nilings.se>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program (see the file COPYING included with this
 *  distribution); if not, write to the Free Software Foundation, Inc.,
 *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

VOID CheckServiceStatus();

BOOL CheckIServiceStatus(BOOL warn);

/* Attempt to start OpenVPN Automatc Service */
void StartAutomaticService(void);

/* Get the processId of the Interactive Service */
ULONG GetServicePid(void);
convert files to unix style end-of-line 13 years ago			`/*`
			`* OpenVPN-GUI -- A Windows GUI for OpenVPN.`
			`*`
			`* Copyright (C) 2004 Mathias Sundman <mathias@nilings.se>`
			`*`
			`* This program is free software; you can redistribute it and/or modify`
			`* it under the terms of the GNU General Public License as published by`
			`* the Free Software Foundation; either version 2 of the License, or`
			`* (at your option) any later version.`
			`*`
			`* This program is distributed in the hope that it will be useful,`
			`* but WITHOUT ANY WARRANTY; without even the implied warranty of`
			`* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the`
			`* GNU General Public License for more details.`
			`*`
			`* You should have received a copy of the GNU General Public License`
			`* along with this program (see the file COPYING included with this`
			`* distribution); if not, write to the Free Software Foundation, Inc.,`
			`* 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA`
			`*/`

service: change CheckServiceStatus() return type to VOID CheckServiceStatus() return value is never used - the status is set to global options_t struct. While on it, remove unneccessary "false" argument and reformat the code. Signed-off-by: Lev Stipakov <lev@openvpn.net> 2 years ago			`VOID CheckServiceStatus();`
Reformat source code with uncrustify Closes: #445 Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com> 1 year ago
Handle interactive service policy restrictions When a connection is attempted using a config in a location that would fail, offer an option to add the user to the "OpenVPN Administrators" group. This is done using shell-execute which will show a UAC prompt for elevation. If it fails (due to user chooses NO or the UAC dialog fails) the connection is not started. v2 Changes - Rebase to master - Automaticlaly add the admin group if it doesn't exist - Allow unicode strings in debug output - Use domain\username to identify user - Fix the PrintDebug macro Minor changes based on user feedback - Bring the window back to foreground after UAC prompt completion - Show a message if another connection is tried during authorization - Do not add user to ovpn_admin_group if it is same as the built-in admin group Signed-off-by: Selva Nair <selva.nair@gmail.com> 9 years ago			`BOOL CheckIServiceStatus(BOOL warn);`
Reformat source code with uncrustify Closes: #445 Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com> 1 year ago
PLAP: try to start automatic service if not running Connection profiles shown on the login screen using PLAP requires automatic service that starts openvpn.exe processes for these profiles. This commit adds an attempt to start the service from PLAP dll. The service is started only if any PLAP enabled profiles are found. As starting the service can spawn up OpenVPN.exe processes and the GUI may attach to them, auto-connect in the GUI is suspended during session lock to leave the connections free to be controlled from PLAP screen. Signed-off-by: Selva Nair <selva.nair@gmail.com> 2 years ago			`/* Attempt to start OpenVPN Automatc Service */`
			`void StartAutomaticService(void);`
Validate the service pipe to avoid connecting to a bogus pipe If an attacker with SeImeprsonatePrivilege manages to create a namedpipe server with a name matching that used by the "Interactive Service", the GUI connecting to it could allow the attacker to impersonate the GUI user. Fix by validating the service pipe by comparing the pid of the pipe server with that of the "Interactive Service". Note: GetNamedPipeServerProcessId() returns the pid of the process that created the first instance of the pipe. So, this patch only guards against a rogue pipe instance created before the service has started. This has to work in combination with a patch for the service that disallows creation of additional pipe instances when the service is running. CVE: CVE-2024-4877 Reported by: Zeze with TeamT5 <zeze7w@gmail.com> Acked-by: Lev Stipakov <lstipakov@gmail.com> Signed-off-by: Selva Nair <selva.nair@gmail.com> 7 months ago
			`/* Get the processId of the Interactive Service */`
			`ULONG GetServicePid(void);`