Re: [Openvpn-devel] [PATCH v3 5/5] Implement forwarding client CR_RESPONSE messages to management

2020-05-27 Thread David Sommerseth
On 20/05/2020 00:00, Arne Schwabe wrote: > When signalling the client that it should do Challenge response > without reconnecting (IV_SSO=crtext/INFOPRE=CR_TEXT), the server > needs forward the response via the management console. > > Signed-off-by: Arne Schwabe > --- > doc/management-notes.txt

Re: [Openvpn-devel] [PATCH v3 4/5] Implement sending AUTH_PENDING challenges to clients

2020-05-27 Thread David Sommerseth
On 20/05/2020 00:00, Arne Schwabe wrote: > This implements sending AUTH_PENDING and INFO_PRE messages to clients > that indicate that the clients should be continue authentication with > a second factor. This can currently be out of band (openurl) or a normal > challenge/response two like TOTP

Re: [Openvpn-devel] [PATCH v3 3/5] Implement sending response to challenge via CR_RESPONSE

2020-05-27 Thread David Sommerseth
On 20/05/2020 00:00, Arne Schwabe wrote: > When a client announces its support to support text based > challenge/response via IV_SSO=crtext,the client needs to also > be able to reply to that response. > > This adds the "cr-response" management function to be able to > do this. The answer should

Re: [Openvpn-devel] [PATCH v3 2/5] Implement support for signalling IV_SSO to server

2020-05-27 Thread David Sommerseth
On 20/05/2020 00:00, Arne Schwabe wrote: > Signed-off-by: Arne Schwabe > --- > src/openvpn/ssl.c | 4 +++- > 1 file changed, 3 insertions(+), 1 deletion(-) > > diff --git a/src/openvpn/ssl.c b/src/openvpn/ssl.c > index c2e9a4f3..f85ef3eb 100644 > --- a/src/openvpn/ssl.c > +++

Re: [Openvpn-devel] [PATCH v3 1/5] Implement parsing and sending INFO and INFO_PRE control messages

2020-05-27 Thread David Sommerseth
On 20/05/2020 00:00, Arne Schwabe wrote: > OpenVPN 3 implements these messages to send information during the > authentication to the UI, implement these message also in OpenVPN 2.x > > Signed-off-by: Arne Schwabe > --- > src/openvpn/forward.c | 8 > src/openvpn/push.c| 32

Re: [Openvpn-devel] [PATCH] Switch assertion failure to returning false

2020-05-27 Thread Jeremy Evans
On 05/27 03:08, Steffan Karger wrote: > Hi, > > Thanks for the clear report, patch and follow-up. > > On 20-05-2020 23:31, Jeremy Evans wrote: > > On 05/20 09:33, Gert Doering wrote: > >> On Wed, May 20, 2020 at 11:34:04AM -0700, Jeremy Evans wrote: > >>> To give some background, we hit this

Re: [Openvpn-devel] [PATCH] Switch assertion failure to returning false

2020-05-27 Thread Steffan Karger
Hi, Thanks for the clear report, patch and follow-up. On 20-05-2020 23:31, Jeremy Evans wrote: > On 05/20 09:33, Gert Doering wrote: >> On Wed, May 20, 2020 at 11:34:04AM -0700, Jeremy Evans wrote: >>> To give some background, we hit this assertion failure, with the >>> following log output: >>

[Openvpn-devel] Summary of the community meeting (27th May 2020)

2020-05-27 Thread Samuli Seppänen
Hi, Here's the summary of the IRC meeting. --- COMMUNITY MEETING Place: #openvpn-meeting on irc.freenode.net Date: Wed 27th May 2020 Time: 11:30 CEST (9:30 UTC) Planned meeting topics for this meeting were here: Your local