OpenVPN
Find a file
David Sommerseth 2193d7c084 crypto: Enable SHA256 fingerprint checking in --verify-hash
This enhances --verify-hash with an optional algorithm flag.  If not
provided, it defaults to SHA1 to preserve backwards compatbilitity with
existing configurations.  The only valid flags are SHA1 and SHA256.

In addition enhance the layout of the --verify-hash section in the man
page.

Signed-off-by: David Sommerseth <davids@openvpn.net>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <20170504204201.1257-1-davids@openvpn.net>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14538.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
2017-05-18 13:21:50 +02:00
.github github: Add PR template with contributor related information 2017-02-06 11:26:05 +01:00
.travis v4, travis-ci: add 2 mingw "build only" configurations 2017-05-08 18:26:10 +02:00
build Update copyrights 2016-12-21 21:57:58 +01:00
contrib The Great Reformatting - first phase 2016-12-14 22:33:49 +01:00
debug build: standard directory layout 2012-03-22 22:07:08 +01:00
dev-tools dev-tools: lz4-rebaser tool carried a typo 2017-02-21 22:12:53 +01:00
distro systemd: Add more security feature for systemd units 2017-01-25 19:40:39 +01:00
doc crypto: Enable SHA256 fingerprint checking in --verify-hash 2017-05-18 13:21:50 +02:00
include Make openvpn-plugin.h self-contained again. 2017-05-18 12:53:25 +02:00
m4 Fix compilation on MinGW with -std=c99 2016-11-13 20:42:34 +01:00
sample Require minimum OpenSSL 1.0.1 2017-04-11 23:42:02 +02:00
src crypto: Enable SHA256 fingerprint checking in --verify-hash 2017-05-18 13:21:50 +02:00
tests Drop packets instead of assert out if packet id rolls over (CVE-2017-7479) 2017-05-11 01:17:02 +02:00
vendor git: Merge .gitignore files into a single file 2017-01-23 00:51:34 +01:00
.gitattributes cleanup: add .gitattributes to control eol style explicitly 2012-04-26 20:54:26 +02:00
.gitignore systemd: Use automake tools to install unit files 2017-01-25 19:39:42 +01:00
.gitmodules Change cmocka remote to use https in stead of git protocol 2016-11-22 22:24:25 +01:00
.mailmap Update .mailmap to unify and clean up odd names and e-mail addresses 2016-10-18 13:46:04 +02:00
.svncommitters Added mapping files from SVN commit ID to more descriptive commit IDs. 2010-10-21 11:31:26 +02:00
.travis.yml v4, travis-ci: add 2 mingw "build only" configurations 2017-05-08 18:26:10 +02:00
AUTHORS This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
ChangeLog Update copyrights 2016-12-21 21:57:58 +01:00
Changes.rst crypto: Enable SHA256 fingerprint checking in --verify-hash 2017-05-18 13:21:50 +02:00
compat.m4 build: add git revision to --version output if build from git repository 2012-06-01 15:34:49 +02:00
config-msvc-version.h.in Fix Building Using MSVC 2017-03-16 08:55:33 +01:00
config-msvc.h Fix Building Using MSVC 2017-03-16 08:55:33 +01:00
configure.ac Fix broken ./configure on systems without openssl.pc 2017-04-24 22:41:45 +02:00
CONTRIBUTING.rst Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes 2016-05-19 11:22:50 +02:00
COPYING Update copyrights 2016-12-21 21:57:58 +01:00
COPYRIGHT.GPL This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
INSTALL Mention that OpenVPN 2.4 requires Windows Vista or higher 2016-12-01 16:31:01 +01:00
Makefile.am build: Ensure Changes.rst is shipped and installed as a doc file 2016-12-27 12:10:22 +01:00
msvc-build.bat build: msvc: chdir with change drive to script location 2012-06-29 10:26:15 +02:00
msvc-dev.bat build: msvc: chdir with change drive to script location 2012-06-29 10:26:15 +02:00
msvc-env.bat Continuation of MSVS fixes 2015-10-06 13:17:34 +02:00
NEWS This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
openvpn.sln build: msvc: upgrade to Visual Studio 2010 + fixups 2012-03-29 12:31:10 +02:00
PORTS Update copyrights 2016-12-21 21:57:58 +01:00
README Remove last rest of INSTALL-win32.txt references 2016-10-27 18:57:24 +02:00
README.ec Add support for elliptic curve diffie-hellmann key exchange (ECDH) 2014-04-25 19:36:52 +02:00
README.IPv6 Update IPv6 related readme files 2014-01-03 16:01:12 +01:00
README.polarssl Update README.polarssl 2014-06-24 22:51:27 +02:00
TODO.IPv6 Update IPv6 related readme files 2014-01-03 16:01:12 +01:00
version.m4 Bump master to version 2.5_git 2016-12-21 21:59:35 +01:00
version.sh.in build: windows: install version.sh to allow installer read version 2012-03-24 00:14:23 +01:00

OpenVPN -- A Secure tunneling daemon

Copyright (C) 2002-2010 OpenVPN Technologies, Inc. This program is free software;
you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2
as published by the Free Software Foundation.

*************************************************************************

To get the latest release of OpenVPN, go to:

	https://openvpn.net/index.php/download/community-downloads.html

To Build and Install,

	tar -zxf openvpn-<version>.tar.gz
	cd openvpn-<version>
	./configure
	make
	make install

or see the file INSTALL for more info.

*************************************************************************

For detailed information on OpenVPN, including examples, see the man page
  http://openvpn.net/man.html

For a sample VPN configuration, see
  http://openvpn.net/howto.html

To report an issue, see
  https://community.openvpn.net/openvpn/report

For a description of OpenVPN's underlying protocol,
  see the file ssl.h included in the source distribution.

*************************************************************************

Other Files & Directories:

* configure.ac -- script to rebuild our configure
  script and makefile.

* sample/sample-scripts/verify-cn

  A sample perl script which can be used with OpenVPN's
  --tls-verify option to provide a customized authentication
  test on embedded X509 certificate fields.

* sample/sample-keys/

  Sample RSA keys and certificates.  DON'T USE THESE FILES
  FOR ANYTHING OTHER THAN TESTING BECAUSE THEY ARE TOTALLY INSECURE.

* sample/sample-config-files/

  A collection of OpenVPN config files and scripts from
  the HOWTO at http://openvpn.net/howto.html

*************************************************************************

Note that easy-rsa and tap-windows are now maintained in their own subprojects.
Their source code is available here:

  https://github.com/OpenVPN/easy-rsa
  https://github.com/OpenVPN/tap-windows

The old cross-compilation environment (domake-win) and the Python-based
buildsystem have been replaced with openvpn-build:

  https://github.com/OpenVPN/openvpn-build

See the INSTALL file for usage information.