|
|
|
/*
|
|
|
|
* OpenVPN-GUI -- A Windows GUI for OpenVPN.
|
|
|
|
*
|
|
|
|
* Copyright (C) 2004 Mathias Sundman <mathias@nilings.se>
|
|
|
|
* 2010 Heiko Hund <heikoh@users.sf.net>
|
|
|
|
* 2016 Selva Nair <selva.nair@gmail.com>
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program (see the file COPYING included with this
|
|
|
|
* distribution); if not, write to the Free Software Foundation, Inc.,
|
|
|
|
* 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef OPTIONS_H
|
|
|
|
#define OPTIONS_H
|
|
|
|
|
|
|
|
typedef struct connection connection_t;
|
|
|
|
|
|
|
|
#include <windows.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <time.h>
|
|
|
|
#include <lmcons.h>
|
|
|
|
|
|
|
|
#include "manage.h"
|
Parse and display messages received by echo msg commands
Process four new echo commands to construct messages to be
displayed to the user:
echo msg message-text
echo msg-n message-text
echo msg-window message-title
echo msg-notify message-title
Note: All rules of push and echo processing apply and determine
what is received as echo commands by the GUI. In addition,
'url-encoded' characters (% followed by two hex digits) are
decoded and displayed.
The message is constructed in the GUI by concatenating the text
specified in one or more "echo msg text" or "echo msg-n text"
commands. In case of "echo msg text" text is appended with a new
line. An empty text in this case will
just add a new line.
The message ends and gets displayed when one of the following
are receieved:
echo msg-window title
echo msg-notify title
where "title" becomes the title of the message window. In case of
msg-window, a modeless window shows the message, in the latter case
a notification balloon is shown.
Example: when pushed from the server:
push "echo msg I say let the world go to hell%2C"
push "echo msg I must have my cup of tea."
push "echo msg-window Notes from the underground"
will display a modeless window with title
"Notes from the underground" and a two line body
--
I say let the world go to hell,
I must have my cup of tea.
--
Note that the message itself is not quoted in the above examples
and so it relies on the server's option-parser combining
individual words into a space separated string. Number of words
on a line is limited by the maximum number of parameters allowed
in openvpn commands (16). This limitation may be avoided by quoting
the text that follows so that the option parser sees it as one
parameter.
The comma character is not allowed in pushed strings, so
it has to be sent encoded as %2C as shown above.
Such encoding of arbitrary bytes is suppored. For example,
newlines may be embedded as %0A, though discouraged. Instead
use multiple "echo msg" commands to separate lines by new line.
An example with embedded spaces and multiple lines concatenated
without a new line in between (note use of single quotes):
push "echo msg-n I swear to you gentlemen%2C that to be"
push "echo msg-n ' overly conscious is a sickness%2C ' "
push "echo msg-n a real%2C thorough sickness."
push "echo msg-notify Quote of the Day"
will show up as a notification that displays for an
OS-dependent interval as:
--
Quote of the Day
I swear to you gentlemen, that to be overly conscious
is a sickness, a real, thorough sickness.
--
where the location of the line break is automatically determined
by the notification API and is OS version-dependent.
Commands like "echo msg ..." in the config file are also
processed the same way. It gets displayed when the GUI connects
to the management interface and receives all pending echo.
Pushed message(s) get displayed when the client daemon
processes push-reply and passes on echo directives to the
GUI.
TODO: The actual window that displays the messages is
implemented in the next commit.
Signed-off-by: Selva Nair <selva.nair@gmail.com>
7 years ago
|
|
|
#include "echo.h"
|
|
|
|
#include "pkcs11.h"
|
|
|
|
|
|
|
|
#define MAX_NAME (UNLEN + 1)
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Maximum number of parameters associated with an option,
|
|
|
|
* including the option name itself.
|
|
|
|
*/
|
|
|
|
#define MAX_PARMS 5 /* Max number of parameters per option */
|
|
|
|
|
|
|
|
typedef enum {
|
|
|
|
service_noaccess = -1,
|
|
|
|
service_disconnected = 0,
|
|
|
|
service_connecting = 1,
|
|
|
|
service_connected = 2
|
|
|
|
} service_state_t;
|
|
|
|
|
|
|
|
typedef enum {
|
|
|
|
config,
|
|
|
|
windows,
|
|
|
|
manual
|
|
|
|
} proxy_source_t;
|
|
|
|
|
|
|
|
typedef enum {
|
|
|
|
http,
|
|
|
|
socks
|
|
|
|
} proxy_t;
|
|
|
|
|
|
|
|
/* connection states */
|
|
|
|
typedef enum {
|
|
|
|
disconnected,
|
|
|
|
onhold,
|
|
|
|
connecting,
|
|
|
|
reconnecting,
|
|
|
|
connected,
|
|
|
|
disconnecting,
|
|
|
|
suspending,
|
|
|
|
suspended,
|
|
|
|
resuming,
|
|
|
|
detaching,
|
|
|
|
detached,
|
|
|
|
} conn_state_t;
|
|
|
|
|
|
|
|
/* Interactive Service IO parameters */
|
|
|
|
typedef struct {
|
|
|
|
OVERLAPPED o; /* This has to be the first element */
|
|
|
|
HANDLE pipe;
|
|
|
|
HANDLE hEvent;
|
|
|
|
WCHAR readbuf[512];
|
|
|
|
} service_io_t;
|
|
|
|
|
|
|
|
#define FLAG_ALLOW_CHANGE_PASSPHRASE (1<<1)
|
|
|
|
#define FLAG_SAVE_KEY_PASS (1<<4)
|
|
|
|
#define FLAG_SAVE_AUTH_PASS (1<<5)
|
|
|
|
#define FLAG_DISABLE_SAVE_PASS (1<<6)
|
Parse and display messages received by echo msg commands
Process four new echo commands to construct messages to be
displayed to the user:
echo msg message-text
echo msg-n message-text
echo msg-window message-title
echo msg-notify message-title
Note: All rules of push and echo processing apply and determine
what is received as echo commands by the GUI. In addition,
'url-encoded' characters (% followed by two hex digits) are
decoded and displayed.
The message is constructed in the GUI by concatenating the text
specified in one or more "echo msg text" or "echo msg-n text"
commands. In case of "echo msg text" text is appended with a new
line. An empty text in this case will
just add a new line.
The message ends and gets displayed when one of the following
are receieved:
echo msg-window title
echo msg-notify title
where "title" becomes the title of the message window. In case of
msg-window, a modeless window shows the message, in the latter case
a notification balloon is shown.
Example: when pushed from the server:
push "echo msg I say let the world go to hell%2C"
push "echo msg I must have my cup of tea."
push "echo msg-window Notes from the underground"
will display a modeless window with title
"Notes from the underground" and a two line body
--
I say let the world go to hell,
I must have my cup of tea.
--
Note that the message itself is not quoted in the above examples
and so it relies on the server's option-parser combining
individual words into a space separated string. Number of words
on a line is limited by the maximum number of parameters allowed
in openvpn commands (16). This limitation may be avoided by quoting
the text that follows so that the option parser sees it as one
parameter.
The comma character is not allowed in pushed strings, so
it has to be sent encoded as %2C as shown above.
Such encoding of arbitrary bytes is suppored. For example,
newlines may be embedded as %0A, though discouraged. Instead
use multiple "echo msg" commands to separate lines by new line.
An example with embedded spaces and multiple lines concatenated
without a new line in between (note use of single quotes):
push "echo msg-n I swear to you gentlemen%2C that to be"
push "echo msg-n ' overly conscious is a sickness%2C ' "
push "echo msg-n a real%2C thorough sickness."
push "echo msg-notify Quote of the Day"
will show up as a notification that displays for an
OS-dependent interval as:
--
Quote of the Day
I swear to you gentlemen, that to be overly conscious
is a sickness, a real, thorough sickness.
--
where the location of the line break is automatically determined
by the notification API and is OS version-dependent.
Commands like "echo msg ..." in the config file are also
processed the same way. It gets displayed when the GUI connects
to the management interface and receives all pending echo.
Pushed message(s) get displayed when the client daemon
processes push-reply and passes on echo directives to the
GUI.
TODO: The actual window that displays the messages is
implemented in the next commit.
Signed-off-by: Selva Nair <selva.nair@gmail.com>
7 years ago
|
|
|
#define FLAG_DISABLE_ECHO_MSG (1<<7)
|
|
|
|
#define FLAG_DAEMON_PERSISTENT (1<<8)
|
|
|
|
#define FLAG_WAIT_UNLOCK (1<<9)
|
|
|
|
|
|
|
|
#define CONFIG_VIEW_AUTO (0)
|
|
|
|
#define CONFIG_VIEW_FLAT (1)
|
|
|
|
#define CONFIG_VIEW_NESTED (2)
|
|
|
|
|
|
|
|
#define OPENVPN_ENGINE_OVPN2 (0)
|
|
|
|
#define OPENVPN_ENGINE_OVPN3 (1)
|
|
|
|
|
|
|
|
typedef struct {
|
|
|
|
unsigned short major, minor, build, revision;
|
|
|
|
} version_t;
|
|
|
|
|
|
|
|
/* A node of config groups tree that can be navigated from the end
|
|
|
|
* node (where config file is attached) to the root. The nodes are stored
|
|
|
|
* as array (o.groups[]) with each node linked to its parent.
|
|
|
|
* Not a complete tree: only navigation from child to parent is supported
|
|
|
|
* which is enough for our purposes.
|
|
|
|
*/
|
|
|
|
typedef struct config_group {
|
|
|
|
int id; /* A unique id for the group >= 0*/
|
|
|
|
wchar_t name[40]; /* Name of the group -- possibly truncated */
|
|
|
|
int parent; /* Id of parent group. -1 implies no parent */
|
|
|
|
BOOL active; /* Displayed in the menu if true -- used to prune empty groups */
|
|
|
|
int children; /* Number of children groups and configs */
|
|
|
|
int pos; /* Index within the parent group -- used for rendering */
|
|
|
|
HMENU menu; /* Handle to menu entry for this group */
|
|
|
|
} config_group_t;
|
|
|
|
|
|
|
|
/* short hand for pointer to the group a config belongs to */
|
|
|
|
#define CONFIG_GROUP(c) (&o.groups[(c)->group])
|
|
|
|
#define PARENT_GROUP(cg) ((cg)->parent < 0 ? NULL : &o.groups[(cg)->parent])
|
|
|
|
#define PERSISTENT_ROOT_GROUP (&o.groups[1])
|
|
|
|
|
|
|
|
/* Connections parameters */
|
|
|
|
struct connection {
|
|
|
|
TCHAR config_file[MAX_PATH]; /* Name of the config file */
|
|
|
|
TCHAR config_name[MAX_PATH]; /* Name of the connection */
|
|
|
|
TCHAR config_dir[MAX_PATH]; /* Path to this configs dir */
|
|
|
|
TCHAR log_path[MAX_PATH]; /* Path to Logfile */
|
|
|
|
TCHAR ip[16]; /* Assigned IP address for this connection */
|
|
|
|
TCHAR ipv6[46]; /* Assigned IPv6 address */
|
|
|
|
BOOL auto_connect; /* AutoConnect at startup id TRUE */
|
|
|
|
conn_state_t state; /* State the connection currently is in */
|
|
|
|
int failed_psw_attempts; /* # of failed attempts entering password(s) */
|
|
|
|
int failed_auth_attempts; /* # of failed user-auth attempts */
|
|
|
|
time_t connected_since; /* Time when the connection was established */
|
|
|
|
proxy_t proxy_type; /* Set during querying proxy credentials */
|
|
|
|
int group; /* ID of the group this config belongs to */
|
|
|
|
int pos; /* Index of the config within its group */
|
|
|
|
|
|
|
|
struct {
|
|
|
|
SOCKET sk;
|
|
|
|
SOCKADDR_IN skaddr;
|
|
|
|
time_t timeout;
|
|
|
|
char password[4096]; /* match with largest possible passwd in openvpn.exe */
|
|
|
|
char *saved_data;
|
|
|
|
size_t saved_size;
|
|
|
|
mgmt_cmd_t *cmd_queue;
|
|
|
|
DWORD connected; /* 1: management interface connected, 2: connected and ready */
|
|
|
|
} manage;
|
|
|
|
|
|
|
|
HANDLE hProcess; /* Handle of openvpn process if directly started */
|
|
|
|
service_io_t iserv;
|
|
|
|
|
|
|
|
HANDLE exit_event;
|
|
|
|
DWORD threadId;
|
|
|
|
HWND hwndStatus;
|
|
|
|
int flags;
|
|
|
|
char *dynamic_cr; /* Pointer to buffer for dynamic challenge string received */
|
|
|
|
unsigned long long int bytes_in;
|
|
|
|
unsigned long long int bytes_out;
|
|
|
|
struct env_item *es; /* Pointer to the head of config-specific env variables list */
|
Parse and display messages received by echo msg commands
Process four new echo commands to construct messages to be
displayed to the user:
echo msg message-text
echo msg-n message-text
echo msg-window message-title
echo msg-notify message-title
Note: All rules of push and echo processing apply and determine
what is received as echo commands by the GUI. In addition,
'url-encoded' characters (% followed by two hex digits) are
decoded and displayed.
The message is constructed in the GUI by concatenating the text
specified in one or more "echo msg text" or "echo msg-n text"
commands. In case of "echo msg text" text is appended with a new
line. An empty text in this case will
just add a new line.
The message ends and gets displayed when one of the following
are receieved:
echo msg-window title
echo msg-notify title
where "title" becomes the title of the message window. In case of
msg-window, a modeless window shows the message, in the latter case
a notification balloon is shown.
Example: when pushed from the server:
push "echo msg I say let the world go to hell%2C"
push "echo msg I must have my cup of tea."
push "echo msg-window Notes from the underground"
will display a modeless window with title
"Notes from the underground" and a two line body
--
I say let the world go to hell,
I must have my cup of tea.
--
Note that the message itself is not quoted in the above examples
and so it relies on the server's option-parser combining
individual words into a space separated string. Number of words
on a line is limited by the maximum number of parameters allowed
in openvpn commands (16). This limitation may be avoided by quoting
the text that follows so that the option parser sees it as one
parameter.
The comma character is not allowed in pushed strings, so
it has to be sent encoded as %2C as shown above.
Such encoding of arbitrary bytes is suppored. For example,
newlines may be embedded as %0A, though discouraged. Instead
use multiple "echo msg" commands to separate lines by new line.
An example with embedded spaces and multiple lines concatenated
without a new line in between (note use of single quotes):
push "echo msg-n I swear to you gentlemen%2C that to be"
push "echo msg-n ' overly conscious is a sickness%2C ' "
push "echo msg-n a real%2C thorough sickness."
push "echo msg-notify Quote of the Day"
will show up as a notification that displays for an
OS-dependent interval as:
--
Quote of the Day
I swear to you gentlemen, that to be overly conscious
is a sickness, a real, thorough sickness.
--
where the location of the line break is automatically determined
by the notification API and is OS version-dependent.
Commands like "echo msg ..." in the config file are also
processed the same way. It gets displayed when the GUI connects
to the management interface and receives all pending echo.
Pushed message(s) get displayed when the client daemon
processes push-reply and passes on echo directives to the
GUI.
TODO: The actual window that displays the messages is
implemented in the next commit.
Signed-off-by: Selva Nair <selva.nair@gmail.com>
7 years ago
|
|
|
struct echo_msg echo_msg; /* Message echo-ed from server or client config and related data */
|
|
|
|
struct pkcs11_list pkcs11_list;
|
|
|
|
char daemon_state[20]; /* state of openvpn.ex: WAIT, AUTH, GET_CONFIG etc.. */
|
|
|
|
int id; /* index of config -- treat as immutable once assigned */
|
|
|
|
connection_t *next;
|
|
|
|
};
|
|
|
|
|
|
|
|
/* All options used within OpenVPN GUI */
|
|
|
|
typedef struct {
|
|
|
|
/* Array of configs to autostart */
|
|
|
|
const TCHAR **auto_connect;
|
|
|
|
|
|
|
|
/* Connection parameters */
|
|
|
|
connection_t *chead; /* Head of connection list */
|
|
|
|
connection_t *ctail; /* Tail of connection list */
|
|
|
|
config_group_t *groups; /* Array of nodes defining the config groups tree */
|
|
|
|
int num_configs; /* Number of configs */
|
|
|
|
int num_auto_connect; /* Number of auto-connect configs */
|
|
|
|
int num_groups; /* Number of config groups */
|
|
|
|
int max_configs; /* Current capacity of conn array */
|
|
|
|
int max_auto_connect; /* Current capacity of auto_connect array */
|
|
|
|
int max_groups; /* Current capacity of groups array */
|
|
|
|
|
|
|
|
service_state_t service_state; /* State of the OpenVPN Service */
|
|
|
|
|
|
|
|
/* Proxy Settings */
|
|
|
|
proxy_source_t proxy_source; /* Where to get proxy information from */
|
|
|
|
proxy_t proxy_type; /* The type of proxy to use */
|
|
|
|
TCHAR proxy_http_address[100]; /* HTTP Proxy Address */
|
|
|
|
TCHAR proxy_http_port[6]; /* HTTP Proxy Port */
|
|
|
|
TCHAR proxy_socks_address[100]; /* SOCKS Proxy Address */
|
|
|
|
TCHAR proxy_socks_port[6]; /* SOCKS Proxy Address */
|
|
|
|
|
|
|
|
/* HKLM Registry values */
|
|
|
|
TCHAR exe_path[MAX_PATH];
|
|
|
|
TCHAR install_path[MAX_PATH];
|
|
|
|
TCHAR global_config_dir[MAX_PATH];
|
|
|
|
TCHAR config_auto_dir[MAX_PATH];
|
|
|
|
TCHAR global_log_dir[MAX_PATH];
|
|
|
|
TCHAR priority_string[64];
|
|
|
|
TCHAR ovpn_admin_group[MAX_NAME];
|
|
|
|
DWORD disable_save_passwords;
|
|
|
|
/* HKCU registry values */
|
|
|
|
TCHAR config_dir[MAX_PATH];
|
|
|
|
TCHAR ext_string[16];
|
|
|
|
TCHAR log_dir[MAX_PATH];
|
|
|
|
DWORD log_append;
|
|
|
|
TCHAR log_viewer[MAX_PATH];
|
|
|
|
TCHAR editor[MAX_PATH];
|
|
|
|
DWORD silent_connection;
|
|
|
|
DWORD iservice_admin;
|
|
|
|
DWORD show_balloon;
|
|
|
|
DWORD show_script_window;
|
|
|
|
DWORD connectscript_timeout; /* Connect Script execution timeout (sec) */
|
|
|
|
DWORD disconnectscript_timeout; /* Disconnect Script execution timeout (sec) */
|
|
|
|
DWORD preconnectscript_timeout; /* Preconnect Script execution timeout (sec) */
|
|
|
|
DWORD config_menu_view; /* 0 for auto, 1 for original flat menu, 2 for hierarchical */
|
|
|
|
DWORD disable_popup_messages; /* set nonzero to suppress all echo msg messages */
|
|
|
|
DWORD popup_mute_interval; /* Interval in hours to suppress repeated echo messages */
|
|
|
|
DWORD mgmt_port_offset; /* management interface port = this offset + index of connection profile */
|
|
|
|
|
|
|
|
DWORD ovpn_engine; /* 0 - openvpn2, 1 - openvpn3 */
|
|
|
|
DWORD enable_persistent; /* 0 - disabled, 1 - enabled, 2 - enabled & auto attach */
|
|
|
|
DWORD enable_auto_restart; /* 0 - disabled, >0 enabled */
|
|
|
|
DWORD disable_password_reveal; /* read from group policy */
|
|
|
|
#ifdef DEBUG
|
|
|
|
FILE *debug_fp;
|
|
|
|
#endif
|
|
|
|
|
|
|
|
HWND hWnd;
|
|
|
|
HINSTANCE hInstance;
|
|
|
|
BOOL session_locked;
|
|
|
|
HANDLE netcmd_semaphore;
|
|
|
|
version_t version;
|
|
|
|
char ovpn_version[16]; /* OpenVPN version string: 2.3.12, 2.4_alpha2 etc.. */
|
|
|
|
unsigned int dpi_scale;
|
|
|
|
COLORREF clr_warning;
|
|
|
|
COLORREF clr_error;
|
|
|
|
int action; /* action to send to a running instance */
|
|
|
|
TCHAR *action_arg;
|
|
|
|
HANDLE session_semaphore;
|
|
|
|
HANDLE event_log;
|
|
|
|
} options_t;
|
|
|
|
|
|
|
|
void InitOptions(options_t *);
|
|
|
|
|
|
|
|
void ProcessCommandLine(options_t *, TCHAR *);
|
|
|
|
|
|
|
|
int CountConnState(conn_state_t);
|
|
|
|
|
|
|
|
connection_t *GetConnByManagement(SOCKET);
|
|
|
|
|
|
|
|
connection_t *GetConnByName(const WCHAR *config_name);
|
|
|
|
|
|
|
|
INT_PTR CALLBACK ScriptSettingsDlgProc(HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM lParam);
|
|
|
|
|
|
|
|
INT_PTR CALLBACK ConnectionSettingsDlgProc(HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM lParam);
|
|
|
|
|
|
|
|
INT_PTR CALLBACK AdvancedSettingsDlgProc(HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM lParam);
|
|
|
|
|
|
|
|
void DisableSavePasswords(connection_t *);
|
|
|
|
|
|
|
|
void DisablePopupMessages(connection_t *);
|
|
|
|
|
|
|
|
void ExpandOptions(void);
|
|
|
|
|
|
|
|
int CompareStringExpanded(const WCHAR *str1, const WCHAR *str2);
|
|
|
|
|
|
|
|
#endif /* ifndef OPTIONS_H */
|