github
/
openvpn-gui
mirror of https://github.com/OpenVPN/openvpn-gui
1
0
Fork 0
Code Issues Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
771 Commits
3 Branches
112 Tags
18 MiB
Tree: 6c6bf9e4e6
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '6c6bf9e4e6'
${ noResults }
openvpn-gui/Makefile.am

121 lines
3.2 KiB
Raw Normal View History Unescape

use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
# OpenVPN-GUI -- A Windows GUI for OpenVPN.
#
# Copyright (C) 2004 Mathias Sundman <mathias@nilings.se>
# 2010 Heiko Hund <heikoh@users.sf.net>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program (see the file COPYING included with this
# distribution); if not, write to the Free Software Foundation, Inc.,
# 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
RCCOMPILE = $(WINDRES) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) \
$(AM_CPPFLAGS) $(CPPFLAGS)
AUTOMAKE_OPTIONS = foreign 1.9
MAINTAINERCLEANFILES = \
config.log config.status \
$(srcdir)/Makefile.in $(srcdir)/configure \
$(srcdir)/config.h.in $(srcdir)/config.h.in~\
$(srcdir)/install-sh $(srcdir)/missing \
$(srcdir)/depcomp $(srcdir)/aclocal.m4 \
File 'compile' now removed as well When using `make maintainer-clean` the file 'compile' was not removed.
9 years ago
$(srcdir)/config.guess $(srcdir)/config.sub \
$(srcdir)/compile
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
Implement Pre-Logon Access Provider for start before logon - COM interfaces for ICredentialProvider and IConnectableCredentialProviderCredential combined with a trimmed down user-interface implemented as libopenvpn_plap.dll - Connections autostarted by OpenVPNService are enumerated as possible PLAP connections. The user is expected to leave these in management hold so that "connect" will popup any required user dialogs. To use: - Register the dll as a PLAP provider (see included .reg files) - The enumerated connections will show up as tiles in the PLAP screen of the login desktop (secure desktop). Signed-off-by: Selva Nair <selva.nair@gmail.com>
2 years ago
SUBDIRS = . plap
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
bin_PROGRAMS = openvpn-gui
dist_doc_DATA = \
COPYRIGHT.GPL \
COPYING
Support for OpenVPN 3 This adds optional support for using OpenVPN3 client as an alternative to openvpn2. Just replacing one client with another will not work: - OpenVPN3 doesn't use interactive service, it uses "agent" service with completely different protocol. OpenVPN GUI needs to talk to agent using HTTP and JSON. - OpenVPN3 management interface realtime notifications must be explicitly turned on in order for GUI to work. To enable using openvpn3: - use any of *-ovpn3 presets (cmake build system) - ./configure --enable-ovpn3 (mingw) To switch betweet openvpn2 and openvpn3, see "OpenVPN Engine" radiobutton group in Settings -> Advanced dialog. OnReady() implementation was slighly changed - "log all on" replaced with "log on all" - according to management interface documentation this is the right way to do it, and also OpenVPN3 only supports "on all" order. Management interface - enabled OpenVPN3 client (omiclient.exe) and agent (ovpnagent.exe) are now part of openvpn3 repo. Co-authored-by: Christopher Ng <facboy@gmail.com> Signed-off-by: Christopher Ng <facboy@gmail.com> Signed-off-by: Lev Stipakov <lev@openvpn.net>
5 years ago
AM_CPPFLAGS = $(OPENSSL_CRYPTO_CFLAGS) -D_UNICODE $(JSON_CFLAGS)
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
AM_CFLAGS = -municode
openvpn_gui_RESOURCES = \
res/openvpn-gui-res.rc \
Fix builds from release tarballs The openvpn-gui-res-cs.rc file was not included in release tarballs, which made tarball-based builds fail. URL: https://github.com/OpenVPN/openvpn-gui/issues/131 Signed-off-by: Samuli Seppänen <samuli@openvpn.net>
8 years ago
res/openvpn-gui-res-cs.rc \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
res/openvpn-gui-res-de.rc \
res/openvpn-gui-res-dk.rc \
res/openvpn-gui-res-en.rc \
res/openvpn-gui-res-es.rc \
Add Farsi language package to tarballs Lack of this caused official release builds to fail Signed-off-by: Samuli Seppänen <samuli@openvpn.net>
4 years ago
res/openvpn-gui-res-fa.rc \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
res/openvpn-gui-res-fi.rc \
res/openvpn-gui-res-fr.rc \
res/openvpn-gui-res-it.rc \
res/openvpn-gui-res-jp.rc \
add Korean localization by JoungKyun Kim
8 years ago
res/openvpn-gui-res-kr.rc \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
res/openvpn-gui-res-nl.rc \
res/openvpn-gui-res-no.rc \
res/openvpn-gui-res-pl.rc \
res/openvpn-gui-res-pt.rc \
add Russian localization by Roman Azarenko
12 years ago
res/openvpn-gui-res-ru.rc \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
res/openvpn-gui-res-se.rc \
res/openvpn-gui-res-tr.rc \
Add Ukrainian localization
9 years ago
res/openvpn-gui-res-ua.rc \
add Chinese (Simplified) localization
7 years ago
res/openvpn-gui-res-zh-hans.rc \
add Chinese (trad.) localization by Yi-Wen Cheng
13 years ago
res/openvpn-gui-res-zh-hant.rc \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
res/connected.ico \
res/connecting.ico \
res/disconnected.ico \
res/openvpn-gui.ico \
res/reconnecting.ico \
res/openvpn-gui.manifest
removed unused nsis installer
8 years ago
EXTRA_DIST = $(openvpn_gui_RESOURCES)
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
openvpn_gui_SOURCES = \
main.c main.h \
openvpn.c openvpn.h \
localization.c localization.h \
tray.c tray.h \
viewlog.c viewlog.h \
service.c service.h \
options.c options.h \
passphrase.c passphrase.h \
proxy.c proxy.h \
registry.c registry.h \
scripts.c scripts.h \
manage.c manage.h \
remove limit for user/pass length, closes #3498438 Generation of the "username" and "password" management commands now happens centrally in the helper function ManagementCommandFromInput() in misc.c
13 years ago
misc.c misc.h \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
openvpn_config.c \
openvpn_config.h \
Handle interactive service policy restrictions When a connection is attempted using a config in a location that would fail, offer an option to add the user to the "OpenVPN Administrators" group. This is done using shell-execute which will show a UAC prompt for elevation. If it fails (due to user chooses NO or the UAC dialog fails) the connection is not started. v2 Changes - Rebase to master - Automaticlaly add the admin group if it doesn't exist - Allow unicode strings in debug output - Use domain\username to identify user - Fix the PrintDebug macro Minor changes based on user feedback - Bring the window back to foreground after UAC prompt completion - Show a message if another connection is tried during authorization - Do not add user to ovpn_admin_group if it is same as the built-in admin group Signed-off-by: Selva Nair <selva.nair@gmail.com>
9 years ago
access.c access.h \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
chartable.h \
Save username and optionally passwords - Username and, optionally, password as well as the private key passphrase are saved in config-specific registry keys - All saved data are kept encrypted using DPAPI - The passphrase dialog is skipped if a valid saved private key password is available. However, the user-auth dialog is always presented, prefilled with the saved username and password. Note: A text string "Save password" is added to three dialogs in all language resource files. Additional text with ids IDS_MENU_CLEARPASS and IDS_NFO_DELETE_PASS are added to the STRINGTABLE only in the English language resource file. All these need translations. Signed-off-by: Selva Nair <selva.nair@gmail.com>
9 years ago
save_pass.c save_pass.h \
Support for 'setenv name var' using echo - Implement connection specific env variables. These are merged with the process environment strings and passed to scripts. - To set an env variable, use 'echo setenv name value' in the config or push from the server. This will set "OPENVPN_name=value" in the connections's env set. Note that "name" is mangled as "OPENVPN_name" to avoid servers overwriting sensitive variables such as PATH. Names are set in the order received and same name overwrites any previously set value. - Environment variable names are allowed to contain only alpha numeric characters and underscore as in openvpn.exe. But, unlike openvpn.exe, invalid names are ignored, not sanitized. v2 changes (Dec 16, 2017): - If value is missing, the directive is interpreted as a delete command and the env var with matching name in the connection's env set is removed. - Windows needs env block to be ordered: While merging connection specific env vars with process env block, order the entries 'alphabetically' (locale independent, case insensitive unicode ordinal order). In case of duplicates, the value in connection env set replaces the one in process env. Signed-off-by: Selva Nair <selva.nair@gmail.com>
8 years ago
env_set.c env_set.h \
Parse and display messages received by echo msg commands Process four new echo commands to construct messages to be displayed to the user: echo msg message-text echo msg-n message-text echo msg-window message-title echo msg-notify message-title Note: All rules of push and echo processing apply and determine what is received as echo commands by the GUI. In addition, 'url-encoded' characters (% followed by two hex digits) are decoded and displayed. The message is constructed in the GUI by concatenating the text specified in one or more "echo msg text" or "echo msg-n text" commands. In case of "echo msg text" text is appended with a new line. An empty text in this case will just add a new line. The message ends and gets displayed when one of the following are receieved: echo msg-window title echo msg-notify title where "title" becomes the title of the message window. In case of msg-window, a modeless window shows the message, in the latter case a notification balloon is shown. Example: when pushed from the server: push "echo msg I say let the world go to hell%2C" push "echo msg I must have my cup of tea." push "echo msg-window Notes from the underground" will display a modeless window with title "Notes from the underground" and a two line body -- I say let the world go to hell, I must have my cup of tea. -- Note that the message itself is not quoted in the above examples and so it relies on the server's option-parser combining individual words into a space separated string. Number of words on a line is limited by the maximum number of parameters allowed in openvpn commands (16). This limitation may be avoided by quoting the text that follows so that the option parser sees it as one parameter. The comma character is not allowed in pushed strings, so it has to be sent encoded as %2C as shown above. Such encoding of arbitrary bytes is suppored. For example, newlines may be embedded as %0A, though discouraged. Instead use multiple "echo msg" commands to separate lines by new line. An example with embedded spaces and multiple lines concatenated without a new line in between (note use of single quotes): push "echo msg-n I swear to you gentlemen%2C that to be" push "echo msg-n ' overly conscious is a sickness%2C ' " push "echo msg-n a real%2C thorough sickness." push "echo msg-notify Quote of the Day" will show up as a notification that displays for an OS-dependent interval as: -- Quote of the Day I swear to you gentlemen, that to be overly conscious is a sickness, a real, thorough sickness. -- where the location of the line break is automatically determined by the notification API and is OS version-dependent. Commands like "echo msg ..." in the config file are also processed the same way. It gets displayed when the GUI connects to the management interface and receives all pending echo. Pushed message(s) get displayed when the client daemon processes push-reply and passes on echo directives to the GUI. TODO: The actual window that displays the messages is implemented in the next commit. Signed-off-by: Selva Nair <selva.nair@gmail.com>
7 years ago
echo.c echo.h \
URL profile import: download and import profile Use WinInet to download profile into memory buffer. If there are certain certificate errors (invalid CN, wrong date, unknown CA, revocation check failed), ask if user wants to continue. Extract profile name from content, sanitize name and save profile in temp directory. Then import profile using existing facilities. Signed-off-by: Lev Stipakov <lev@openvpn.net>
3 years ago
as.c as.h \
Handle pkcs11-id query from daemon Add support for selecting pkcs11-id from the GUI. Requires --management-pkcs11-id in the config file. This option is not added by the GUI. A list of all available pkcs11 certificates are presented to the user with buttons OK, Cancel, Retry. OK submits the selected entry, Cancel closes the connection, Retry reconstructs the list of certificates by querying the daemon again. The latter can be used to retry after inserting a token. If no certificates are found, a message suggesting to insert a token and press 'Retry' is displayed. The list shows the "Issued-to", "Issued-by" names (usually the subject & issuer common names) and valid-until date in current locale for each certificate. Signed-off-by: Selva Nair <selva.nair@gmail.com>
3 years ago
pkcs11.c pkcs11.h \
Add a parser for ovpn config files - This will be used for reading the management i/f parameters for externally started (persistent) openpvn.exe TODO: replace the parsing of config file in passphrase.c using this. Signed-off-by: Selva Nair <selva.nair@gmail.com>
2 years ago
config_parser.c config_parser.h \
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
openvpn-gui-res.h
openvpn_gui_LDFLAGS = -mwindows
openvpn_gui_LDADD = \
openvpn-gui-res.o \
$(OPENSSL_CRYPTO_LIBS) \
-lws2_32 \
supply system proxy settings to management itf Proxy settings are fetched from the users Internet Options for the active connection. If WPAD or a PAC script is configured they are preferred and used for automatic proxy detection. Proxy bypass configuration is completely ignored.
13 years ago
-lcomctl32 \
make auth popups show when returning from suspend
12 years ago
-lwinhttp \
Adding static-challenge support
9 years ago
-lwtsapi32 \
Handle interactive service policy restrictions When a connection is attempted using a config in a location that would fail, offer an option to add the user to the "OpenVPN Administrators" group. This is done using shell-execute which will show a UAC prompt for elevation. If it fails (due to user chooses NO or the UAC dialog fails) the connection is not started. v2 Changes - Rebase to master - Automaticlaly add the admin group if it doesn't exist - Allow unicode strings in debug output - Use domain\username to identify user - Fix the PrintDebug macro Minor changes based on user feedback - Bring the window back to foreground after UAC prompt completion - Show a message if another connection is tried during authorization - Do not add user to ovpn_admin_group if it is same as the built-in admin group Signed-off-by: Selva Nair <selva.nair@gmail.com>
9 years ago
-lcrypt32 \
-lnetapi32 \
Use file associations to open config and log - Use ShellExecute to open config and log files so that file associations can be used. If that fails fall-back to the default editor (notepad.exe). - Remove the keys editor and log_viewer from registry. The user can change the editor/viewer through fie association. Signed-off-by: Selva Nair <selva.nair@gmail.com>
9 years ago
-lole32 \
Make options saved in registry editable by user Option ediitng dialogs are in two tabs: General and Advanced. Proxy related options are left in the proxy tab. Options config_dir, config_ext, log_dir, script timeouts and service-only flag are in the Advanced tab. All other more commonly used flags and options are in the General tab. - As options are editable, save values in registry only when they differ from the default values. This leaves the registry clean and makes changing options and their defaults during updates easier. - Entries for config_dir and log_dir must be absolute paths. Environemental variables such as %PROFILEDIR% may be used to construct these. - Empty config_dir, config_ext and log_dir entries are silently ignored (i.e., the current values are left unchanged). - Store all numeric and boolean parameters in registry as DWORD instead of strings. - On startup, the default parameters are loaded, then the registry is read and finally command-line parameters parsedi. - Out of range script timeout values in registry truncated with a warning instead of fatal error. This allows the user to access the settings dialog and make corrections. - Save proxy and language settings under the same HKCU\Software\OpenVPN-GUI key as other options instead of under Nilings. - Save the current version of the GUI in regsitry so that updates can be detected and any needed registry cleanup done. - If no version info is present in the registry any values in OpenVPN-GUI key in HKCU are deleted for a clean start as this is the first version to save registry values in HKCU. Language and proxy data if present under Nilings is migrated. Note: new controls in the General tab and newly added Advanced tab dialog are copied to all language files from the English version. These need to be translated. Signed-off-by: Selva Nair <selva.nair@gmail.com>
8 years ago
-lshlwapi \
URL profile import: download and import profile Use WinInet to download profile into memory buffer. If there are certain certificate errors (invalid CN, wrong date, unknown CA, revocation check failed), ask if user wants to continue. Extract profile name from content, sanitize name and save profile in temp directory. Then import profile using existing facilities. Signed-off-by: Lev Stipakov <lev@openvpn.net>
3 years ago
-lsecur32 \
Support for OpenVPN 3 This adds optional support for using OpenVPN3 client as an alternative to openvpn2. Just replacing one client with another will not work: - OpenVPN3 doesn't use interactive service, it uses "agent" service with completely different protocol. OpenVPN GUI needs to talk to agent using HTTP and JSON. - OpenVPN3 management interface realtime notifications must be explicitly turned on in order for GUI to work. To enable using openvpn3: - use any of *-ovpn3 presets (cmake build system) - ./configure --enable-ovpn3 (mingw) To switch betweet openvpn2 and openvpn3, see "OpenVPN Engine" radiobutton group in Settings -> Advanced dialog. OnReady() implementation was slighly changed - "log all on" replaced with "log on all" - according to management interface documentation this is the right way to do it, and also OpenVPN3 only supports "on all" order. Management interface - enabled OpenVPN3 client (omiclient.exe) and agent (ovpnagent.exe) are now part of openvpn3 repo. Co-authored-by: Christopher Ng <facboy@gmail.com> Signed-off-by: Christopher Ng <facboy@gmail.com> Signed-off-by: Lev Stipakov <lev@openvpn.net>
5 years ago
-lwininet \
$(JSON_LIBS)
use automake in build Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Edited to not use libtool and implicit automake rule to build resource object
13 years ago
openvpn-gui-res.o: $(openvpn_gui_RESOURCES) $(srcdir)/openvpn-gui-res.h
$(RCCOMPILE) -i $< -o $@