openvpn-gui

Commit Graph

Author	SHA1	Message	Date
Selva Nair	fc05de0c7b	Add a parser for ovpn config files - This will be used for reading the management i/f parameters for externally started (persistent) openpvn.exe TODO: replace the parsing of config file in passphrase.c using this. Signed-off-by: Selva Nair <selva.nair@gmail.com>	2 years ago
Ilya Shipitsin	55580d33b7	adjust build options to harden binaries enable hardware-enforced stack protection on compatible hardware/software (/CETCOMPAT linker option) enable QSpectre protection enable Control Flow Guard issues were found by Microsoft BinSkim	2 years ago
Selva Nair	6d67f81814	Show certificate details on double-clicking pkcs11 list entries - For mingw builds, currently this works only for x64 target due to missing library for i686 target. Signed-off-by: Selva Nair <selva.nair@gmail.com>	2 years ago
Selva Nair	84be448777	Handle pkcs11-id query from daemon Add support for selecting pkcs11-id from the GUI. Requires --management-pkcs11-id in the config file. This option is not added by the GUI. A list of all available pkcs11 certificates are presented to the user with buttons OK, Cancel, Retry. OK submits the selected entry, Cancel closes the connection, Retry reconstructs the list of certificates by querying the daemon again. The latter can be used to retry after inserting a token. If no certificates are found, a message suggesting to insert a token and press 'Retry' is displayed. The list shows the "Issued-to", "Issued-by" names (usually the subject & issuer common names) and valid-until date in current locale for each certificate. Signed-off-by: Selva Nair <selva.nair@gmail.com>	2 years ago
Lev Stipakov	d60325acde	Support for OpenVPN 3 This adds optional support for using OpenVPN3 client as an alternative to openvpn2. Just replacing one client with another will not work: - OpenVPN3 doesn't use interactive service, it uses "agent" service with completely different protocol. OpenVPN GUI needs to talk to agent using HTTP and JSON. - OpenVPN3 management interface realtime notifications must be explicitly turned on in order for GUI to work. To enable using openvpn3: - use any of *-ovpn3 presets (cmake build system) - ./configure --enable-ovpn3 (mingw) To switch betweet openvpn2 and openvpn3, see "OpenVPN Engine" radiobutton group in Settings -> Advanced dialog. OnReady() implementation was slighly changed - "log all on" replaced with "log on all" - according to management interface documentation this is the right way to do it, and also OpenVPN3 only supports "on all" order. Management interface - enabled OpenVPN3 client (omiclient.exe) and agent (ovpnagent.exe) are now part of openvpn3 repo. Co-authored-by: Christopher Ng <facboy@gmail.com> Signed-off-by: Christopher Ng <facboy@gmail.com> Signed-off-by: Lev Stipakov <lev@openvpn.net>	2 years ago
Lev Stipakov	b6f26818a9	Use vcpkg manifest and cmake presets Manifest is a convenient way to automatically install dependencies. Since we have to support both OpenSSL 1.1.1 (for OpenVPN 2.5) and OpenSSL 3 (for coming OpenVPN 2.6) and manifest file name is hardcoded, we create two manifests and put them into different directories. To simplify build process, define configuration presets for arch (x86/x64/arm64), debug/release and oss1.1.1/ossl3. This way building is greatly simplified: cmake -S . --preset x64-debug-ossl3 cmake --build --preset x64-debug-ossl3 Update GitHub Actions script accordingly. Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Lev Stipakov	d27fd21222	Add openssl3 support for msvc build - remove vcpkg manifest and use whatever openssl version is installed. To build with openssl3, one could use openssl3 port from openvpn/contrib/vcpkg-ports. - build with openssl1.1.1 and openssl3 in GitHub Actions Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Lev Stipakov	cd4748fb25	wcstok: use security-enhanced version Replace old wcstok signature with security-enhanced version, which stores position information between calls in "context" parameter instead of internal per-thread context. This allows to get rid of _CRT_NON_CONFORMING_WCSTOK define in CMakeLists.txt Reported-by: Kai Schtrom Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Lev Stipakov	82d932a503	URL profile import: disable profile download in case of certificate errors Allow users to bypass HTTPS is not good, but may nevertheless be useful during development. DEBUG macro is widely used in openvpn-gui code but was missing from CMakeLists.txt, so add it there. Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Lev Stipakov	c7beb04ff5	URL profile import: download and import profile Use WinInet to download profile into memory buffer. If there are certain certificate errors (invalid CN, wrong date, unknown CA, revocation check failed), ask if user wants to continue. Extract profile name from content, sanitize name and save profile in temp directory. Then import profile using existing facilities. Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Lev Stipakov	9ded7996ab	URL profile import: add profile import dialog This is the first patch from series which implemets importing profile from URL, currently implemented by OpenVPN Access Server. Move "Import from file" menu item under new "Import" item. Add "Import from AS..." item under "Import", which opens new profile import dialog. Signed-off-by: Lev Stipakov <lev@openvpn.net>	3 years ago
Lev Stipakov	8d878e8f7b	CMake: read version from configure.ac Instead of using hardcoded major/minor version in config-msvc.h, use the values from configure.ac. Signed-off-by: Lev Stipakov <lev@openvpn.net>	4 years ago
Lev Stipakov	4a483b029b	replace msvc project with cmake Signed-off-by: Lev Stipakov <lev@openvpn.net>	4 years ago

13 Commits (7f794eec3d245b614ba4477417243d1f85d83dda)