openvpn

mirror of https://github.com/OpenVPN/openvpn.git synced 2026-04-29 18:11:17 -04:00

History

Steffan Karger 2dc3322664 Deprecate --ns-cert-type The nsCertType x509 extension is very old, and barely used. We already have had an alternative for a long time: --remote-cert-tls uses the far more common keyUsage and extendedKeyUsage extensions instead. OpenSSL 1.1 longer exposes an API to (separately) check the nsCertType x509 extension. Since we want be able to migrate to OpenSSL 1.1, we should deprecate this option immediately. Signed-off-by: Steffan Karger <steffan@karger.me> Acked-by: Gert Doering <gert@greenie.muc.de> Message-Id: <1488653397-2309-1-git-send-email-steffan@karger.me> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14222.html Signed-off-by: Gert Doering <gert@greenie.muc.de>		2017-03-19 16:49:11 +01:00
..
doxygen	Update copyrights	2016-12-21 21:57:58 +01:00
android.txt	Handle DNS6 option on Android	2016-11-22 17:31:30 +01:00
keying-material-exporter.txt	Added document for TLS Keying Material Exporters [RFC-5705]	2015-10-10 00:03:07 +02:00
Makefile.am	Update copyrights	2016-12-21 21:57:58 +01:00
management-notes.txt	Document that RSA_SIGN can also request TLS 1.2 signatures	2016-12-26 12:54:49 +01:00
openvpn.8	Deprecate --ns-cert-type	2017-03-19 16:49:11 +01:00
README.plugins	build: integrate plugins build into core build	2012-06-26 11:29:02 +02:00

README.plugins

OpenVPN Plugins
---------------

Starting with OpenVPN 2.0-beta17, compiled plugin modules are
supported on any *nix OS which includes libdl or on Windows.
One or more modules may be loaded into OpenVPN using
the --plugin directive, and each plugin module is capable of
intercepting any of the script callbacks which OpenVPN supports:

(1) up
(2) down
(3) route-up
(4) ipchange
(5) tls-verify
(6) auth-user-pass-verify
(7) client-connect
(8) client-disconnect
(9) learn-address

See the openvpn-plugin.h file in the top-level directory of the
OpenVPN source distribution for more detailed information
on the plugin interface.

Included Plugins
----------------

auth-pam -- Authenticate using PAM and a split privilege
            execution model which functions even if
            root privileges or the execution environment
            have been altered with --user/--group/--chroot.
            Tested on Linux only.

down-root -- Enable the running of down scripts with root privileges
             even if --user/--group/--chroot have been used
             to drop root privileges or change the execution
             environment.  Not applicable on Windows.

examples -- A simple example that demonstrates a portable
            plugin, i.e. one which can be built for *nix
            or Windows from the same source.

Building Plugins
----------------

cd to the top-level directory of a plugin, and use the
"make" command to build it.  The examples plugin is
built using a build script, not a makefile.