Go to file
Steffan Karger 3fbc9d2b1b Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)
This is the equivalent of the 2.3 patch (04c84548c2) by Guido Vranken,
adjusted to code in the master and release/2.4 branches.

Trac: #890

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <143540d4-e8ea-b533-ad1a-8ae33bfd1133@karger.me>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14653.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
2017-05-18 17:34:27 +02:00
.github github: Add PR template with contributor related information 2017-02-06 11:26:05 +01:00
.travis v4, travis-ci: add 2 mingw "build only" configurations 2017-05-08 18:26:10 +02:00
build Update copyrights 2016-12-21 21:57:58 +01:00
contrib The Great Reformatting - first phase 2016-12-14 22:33:49 +01:00
debug build: standard directory layout 2012-03-22 22:07:08 +01:00
dev-tools dev-tools: lz4-rebaser tool carried a typo 2017-02-21 22:12:53 +01:00
distro systemd: Add more security feature for systemd units 2017-01-25 19:40:39 +01:00
doc crypto: Enable SHA256 fingerprint checking in --verify-hash 2017-05-18 13:21:50 +02:00
include Make openvpn-plugin.h self-contained again. 2017-05-18 12:53:25 +02:00
m4 Fix compilation on MinGW with -std=c99 2016-11-13 20:42:34 +01:00
sample Require minimum OpenSSL 1.0.1 2017-04-11 23:42:02 +02:00
src Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c) 2017-05-18 17:34:27 +02:00
tests Drop packets instead of assert out if packet id rolls over (CVE-2017-7479) 2017-05-11 01:17:02 +02:00
vendor git: Merge .gitignore files into a single file 2017-01-23 00:51:34 +01:00
.gitattributes cleanup: add .gitattributes to control eol style explicitly 2012-04-26 20:54:26 +02:00
.gitignore systemd: Use automake tools to install unit files 2017-01-25 19:39:42 +01:00
.gitmodules Change cmocka remote to use https in stead of git protocol 2016-11-22 22:24:25 +01:00
.mailmap Update .mailmap to unify and clean up odd names and e-mail addresses 2016-10-18 13:46:04 +02:00
.svncommitters Added mapping files from SVN commit ID to more descriptive commit IDs. 2010-10-21 11:31:26 +02:00
.travis.yml v4, travis-ci: add 2 mingw "build only" configurations 2017-05-08 18:26:10 +02:00
AUTHORS This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
ChangeLog Update copyrights 2016-12-21 21:57:58 +01:00
Changes.rst crypto: Enable SHA256 fingerprint checking in --verify-hash 2017-05-18 13:21:50 +02:00
compat.m4 build: add git revision to --version output if build from git repository 2012-06-01 15:34:49 +02:00
config-msvc-version.h.in Fix Building Using MSVC 2017-03-16 08:55:33 +01:00
config-msvc.h Fix Building Using MSVC 2017-03-16 08:55:33 +01:00
configure.ac Fix broken ./configure on systems without openssl.pc 2017-04-24 22:41:45 +02:00
CONTRIBUTING.rst Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes 2016-05-19 11:22:50 +02:00
COPYING Update copyrights 2016-12-21 21:57:58 +01:00
COPYRIGHT.GPL This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
INSTALL Mention that OpenVPN 2.4 requires Windows Vista or higher 2016-12-01 16:31:01 +01:00
Makefile.am build: Ensure Changes.rst is shipped and installed as a doc file 2016-12-27 12:10:22 +01:00
msvc-build.bat build: msvc: chdir with change drive to script location 2012-06-29 10:26:15 +02:00
msvc-dev.bat build: msvc: chdir with change drive to script location 2012-06-29 10:26:15 +02:00
msvc-env.bat Continuation of MSVS fixes 2015-10-06 13:17:34 +02:00
NEWS This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
openvpn.sln build: msvc: upgrade to Visual Studio 2010 + fixups 2012-03-29 12:31:10 +02:00
PORTS Update copyrights 2016-12-21 21:57:58 +01:00
README Remove last rest of INSTALL-win32.txt references 2016-10-27 18:57:24 +02:00
README.ec Add support for elliptic curve diffie-hellmann key exchange (ECDH) 2014-04-25 19:36:52 +02:00
README.IPv6 Update IPv6 related readme files 2014-01-03 16:01:12 +01:00
README.polarssl Update README.polarssl 2014-06-24 22:51:27 +02:00
TODO.IPv6 Update IPv6 related readme files 2014-01-03 16:01:12 +01:00
version.m4 Bump master to version 2.5_git 2016-12-21 21:59:35 +01:00
version.sh.in build: windows: install version.sh to allow installer read version 2012-03-24 00:14:23 +01:00

OpenVPN -- A Secure tunneling daemon

Copyright (C) 2002-2010 OpenVPN Technologies, Inc. This program is free software;
you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2
as published by the Free Software Foundation.

*************************************************************************

To get the latest release of OpenVPN, go to:

	https://openvpn.net/index.php/download/community-downloads.html

To Build and Install,

	tar -zxf openvpn-<version>.tar.gz
	cd openvpn-<version>
	./configure
	make
	make install

or see the file INSTALL for more info.

*************************************************************************

For detailed information on OpenVPN, including examples, see the man page
  http://openvpn.net/man.html

For a sample VPN configuration, see
  http://openvpn.net/howto.html

To report an issue, see
  https://community.openvpn.net/openvpn/report

For a description of OpenVPN's underlying protocol,
  see the file ssl.h included in the source distribution.

*************************************************************************

Other Files & Directories:

* configure.ac -- script to rebuild our configure
  script and makefile.

* sample/sample-scripts/verify-cn

  A sample perl script which can be used with OpenVPN's
  --tls-verify option to provide a customized authentication
  test on embedded X509 certificate fields.

* sample/sample-keys/

  Sample RSA keys and certificates.  DON'T USE THESE FILES
  FOR ANYTHING OTHER THAN TESTING BECAUSE THEY ARE TOTALLY INSECURE.

* sample/sample-config-files/

  A collection of OpenVPN config files and scripts from
  the HOWTO at http://openvpn.net/howto.html

*************************************************************************

Note that easy-rsa and tap-windows are now maintained in their own subprojects.
Their source code is available here:

  https://github.com/OpenVPN/easy-rsa
  https://github.com/OpenVPN/tap-windows

The old cross-compilation environment (domake-win) and the Python-based
buildsystem have been replaced with openvpn-build:

  https://github.com/OpenVPN/openvpn-build

See the INSTALL file for usage information.