openvpn

mirror of https://github.com/OpenVPN/openvpn.git synced 2024-11-27 19:53:51 +08:00

History

David Sommerseth 2193d7c084 crypto: Enable SHA256 fingerprint checking in --verify-hash This enhances --verify-hash with an optional algorithm flag. If not provided, it defaults to SHA1 to preserve backwards compatbilitity with existing configurations. The only valid flags are SHA1 and SHA256. In addition enhance the layout of the --verify-hash section in the man page. Signed-off-by: David Sommerseth <davids@openvpn.net> Acked-by: Steffan Karger <steffan.karger@fox-it.com> Message-Id: <20170504204201.1257-1-davids@openvpn.net> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14538.html Signed-off-by: Gert Doering <gert@greenie.muc.de>		2017-05-18 13:21:50 +02:00
..
doxygen	Update copyrights	2016-12-21 21:57:58 +01:00
android.txt	Handle DNS6 option on Android	2016-11-22 17:31:30 +01:00
keying-material-exporter.txt	Added document for TLS Keying Material Exporters [RFC-5705]	2015-10-10 00:03:07 +02:00
Makefile.am	Update copyrights	2016-12-21 21:57:58 +01:00
management-notes.txt	Document that RSA_SIGN can also request TLS 1.2 signatures	2016-12-26 12:54:49 +01:00
openvpn.8	crypto: Enable SHA256 fingerprint checking in --verify-hash	2017-05-18 13:21:50 +02:00
README.plugins	build: integrate plugins build into core build	2012-06-26 11:29:02 +02:00

README.plugins

OpenVPN Plugins
---------------

Starting with OpenVPN 2.0-beta17, compiled plugin modules are
supported on any *nix OS which includes libdl or on Windows.
One or more modules may be loaded into OpenVPN using
the --plugin directive, and each plugin module is capable of
intercepting any of the script callbacks which OpenVPN supports:

(1) up
(2) down
(3) route-up
(4) ipchange
(5) tls-verify
(6) auth-user-pass-verify
(7) client-connect
(8) client-disconnect
(9) learn-address

See the openvpn-plugin.h file in the top-level directory of the
OpenVPN source distribution for more detailed information
on the plugin interface.

Included Plugins
----------------

auth-pam -- Authenticate using PAM and a split privilege
            execution model which functions even if
            root privileges or the execution environment
            have been altered with --user/--group/--chroot.
            Tested on Linux only.

down-root -- Enable the running of down scripts with root privileges
             even if --user/--group/--chroot have been used
             to drop root privileges or change the execution
             environment.  Not applicable on Windows.

examples -- A simple example that demonstrates a portable
            plugin, i.e. one which can be built for *nix
            or Windows from the same source.

Building Plugins
----------------

cd to the top-level directory of a plugin, and use the
"make" command to build it.  The examples plugin is
built using a build script, not a makefile.