openvpn-gui

Commit Graph

Author	SHA1	Message	Date
Selva Nair	1a5ce44a99	Handle dynamic challenge/response - Add a base64 decode function using Windows CyptoAPI - Move multibyte to widechar conversions to a function - Add config name to caption of password dialogs to help user identify the request - Add new dialog template for generic password/PIN requests and use it to handle dynamic challenge Note 1: if dynamic challenge response verification fails, an auth-failed message is returned by the server causing the GUI to clear any saved password even if the user-auth dialog itself succeeeded. Note 2: Dialog template ID_DLG_CHALLENGE_RESPONSE added to language files may require translation. Signed-off-by: Selva Nair <selva.nair@gmail.com>	8 years ago
Selva Nair	1c748e382d	Simplify some parameters and registry keys - Replace allow_password by a runtime check that enables password change menu only when the user has write-access to the key file. - Read exe_path and priority from HKLM and do not duplicate in HKCU. - Always allow the user to view the config: edit will succeed if user has write access. - Always include the proxy settings tab which is the default. - Remove the unused power event handling and disconnect_on_suspend key. - Remove password_attempts -- user can stop the password dilaog by clicking cancel. - Remove allow_service: implicitly enabled if service_only is used. - Deprecate removed options in cmd-line parser - Update README.rst - Close config file before exit in GetKeyFileName - Close thread and dialog handles in passphrase.c Signed-off-by: Selva Nair <selva.nair@gmail.com>	8 years ago
Selva Nair	5880fdcd02	Save username and optionally passwords - Username and, optionally, password as well as the private key passphrase are saved in config-specific registry keys - All saved data are kept encrypted using DPAPI - The passphrase dialog is skipped if a valid saved private key password is available. However, the user-auth dialog is always presented, prefilled with the saved username and password. Note: A text string "Save password" is added to three dialogs in all language resource files. Additional text with ids IDS_MENU_CLEARPASS and IDS_NFO_DELETE_PASS are added to the STRINGTABLE only in the English language resource file. All these need translations. Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago
Samuli Seppänen	72818bbf8e	Merge pull request #33 from selvanair/bugfix Some small bug fixes	9 years ago
Selva Nair	bd2d80c1cc	Check the return value of CheckTokenMembership() Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago
Selva Nair	875d9f9457	Handle empty strings in Base64Encode - Encode empty string to empty string - If Base64Encode returns null do not pass it to snprintf - Use the actual length of encoded string Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago
Selva Nair	43d0ef3a5a	Handle interactive service policy restrictions When a connection is attempted using a config in a location that would fail, offer an option to add the user to the "OpenVPN Administrators" group. This is done using shell-execute which will show a UAC prompt for elevation. If it fails (due to user chooses NO or the UAC dialog fails) the connection is not started. v2 Changes - Rebase to master - Automaticlaly add the admin group if it doesn't exist - Allow unicode strings in debug output - Use domain\username to identify user - Fix the PrintDebug macro Minor changes based on user feedback - Bring the window back to foreground after UAC prompt completion - Show a message if another connection is tried during authorization - Do not add user to ovpn_admin_group if it is same as the built-in admin group Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago
Soar Qin	fe5a1c9b71	Adding static-challenge support	9 years ago
Selva Nair	791aea49e6	Do not use interactive service if running as admin Connecting to a named pipe server while running with admin rights is not secure in some windows versions. As the interactive service is not required to set routes while running as admin, this looks like a safe compromise. Fix based on feedback from Heiko Hund - Move IsUserAdmin() check before opening the service pipe Signed-off-by: Selva Nair <selva.nair@gmail.com>	9 years ago
Ilya Shipitsin	08538280d0	cppcheck cleanup: [openvpn_config.c:194]: (style) The function 'ConfigFileOptionExist' is never used. [localization.c:299]: (style) The function 'LocalizedDialogBox' is never used. [main.c:549]: (style) The function 'PrintErrorDebug' is never used. [main.c:583]: (style) The function 'init_security_attributes_allow_all' is never used. [misc.c:180]: (style) The function 'wcseq' is never used.	9 years ago
Heiko Hund	bc015578d5	always send keyboard events	12 years ago
Heiko Hund	47cff87477	make auth popups show when returning from suspend	12 years ago
Heiko Hund	976b08312b	escape \ and " in user input to management itf	12 years ago
Heiko Hund	22ff456888	check if "log_dir" exists or create it	13 years ago
Heiko Hund	577d22dbc3	fix ManagementCommandFromInput()	13 years ago
Heiko Hund	e84834a08a	supply system proxy settings to management itf Proxy settings are fetched from the users Internet Options for the active connection. If WPAD or a PAC script is configured they are preferred and used for automatic proxy detection. Proxy bypass configuration is completely ignored.	13 years ago
Heiko Hund	d8737bfba2	remove limit for user/pass length, closes #3498438 Generation of the "username" and "password" management commands now happens centrally in the helper function ManagementCommandFromInput() in misc.c	13 years ago

17 Commits (cd8f1c8ee6de4101d2acbfc0a987864d34df7822)