summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-11-12Add Debian packaging.HEADmasterDaniil Baturin
2020-10-02Merge pull request #35 from mbish/masterAaron
Move away from deprecated TLS socket wrapping
2020-10-02Disallow SSLv2 and SSLv3Mark Bishop
2020-10-02Move away from deprecated TLS socket wrappingMark Bishop
2020-09-28Merge pull request #34 from vbscott/versionAaron
Update Python version in TravisCI
2020-09-22Update Python version in TravisCIBriar Scott
2020-04-27add badges (#33)Yizhen Shi
2020-03-31Version bump for 2.4 (#32)Yizhen Shi
2020-03-31Let shebang decide which python it should use (#31)Yizhen Shi
Summary: Added python3 python python2 to shebang Co-authored-by: Yizhen Shi <yshi@yshi-30932.local>
2019-12-18Version bump for 2.3 (#30)Xander Desai
2019-12-18Python3 compatibility updates (#28)Pete
* WIP: fix imports and exception calls for python3 * fix remaining utf-8 encoding issues * fix init trying to return a value * change expected control checks to bytes * make comparison of request params non-ordered python3's url request handler likes to reorder the parameters its given this breaks the params out and checks each separately * refactor to simplify params comparisons * FIX: decode auth bytes back to a utf-8 string * FIX: also decode response data bytes to utf-8 * FIX: do not decode response data if already a str * enhance existing test to ensure auth is str no bytes * change test req and import from mox to mox3 * add additional python versions to CI config * fix failing 3.7 travis ci build * Apply changes to duo_openvpn.py similar to what we do in duo_client_python * Apply changes to https_wrapper similar to what we do in duo_client_python * Fixup the import bugs * Use six for StringIO import * Include six for py2->py3 compat layer * use explicit decoding on control file data * Consistent encoding and updated variable names for clarity * Revert variable names back again.
2018-12-05Don't hard code the script interpreter in duo_openvpn.c (#18)Johnny Stenback
The scripts themselves specify the interpreter, just execute them. This simplifies dealing with python2 vs python3, only the script needs to be modified, and not the C source.
2018-12-03Pass ipaddr to preauth so duo_openvpn can make use of Authorized Netw… (#25)spencermaxfield
* Pass ipaddr to preauth so duo_openvpn can make use of Authorized Networks
2017-08-21Forgot requirements-dev fileMatt Schwager
2017-08-21Added TravisCI build statusMatt Schwager
2017-08-21Added TravisCI configuration fileMatt Schwager
2017-08-18Add missing '!' to the shebang in duo_openvpn.plJohnny Stenback
Add missing '!' after initial '#' to make this script run as a perl script instead of be executed by the default interpreter (bash, most often).
2017-08-17Fix duo_openvpn testsMatt Schwager
``` $ python test_duo_openvpn.py ....................... ---------------------------------------------------------------------- Ran 23 tests in 0.018s OK ```
2017-08-16Add version tags to duo_openvpnKristina Birk
Summary: added 2.1 and 2.2 version tags bumped to 2.2
2017-07-31Merge pull request #23 from jescholl/masterben-duo
Fix certificate validation when using a proxy
2017-07-26Fix certificate validation when using a proxyJason Scholl
2016-08-23Merge pull request #13 from ben-kuhn/masterBradleyHiggins
Added sys/wait.h to prevent the plugin from crashing OpenVPN on FreeBSD
2016-04-22Added sys/wait.h to prevent the plugin from crashing OpenVPN on FreeBSD with ↵ben-kuhn
Undefined symbol WIFEXITED
2016-03-10Removed Entrust SHA1 cert from trusted CA's.Marc Neuberger
2016-03-07Merge pull request #11 from petiepooo/fix-SIG_IGNryadav-duo
Fix SIG_CHLD issue causing all external scripts to fail
2016-02-15replace returns with esits for first childPete Nelson
2016-02-11add second fork for proper daemonizePete Nelson
2016-02-11whitespace only: remove trailing tabsPete Nelson
2016-02-11fix issue with SIG_CHLD being ignoredPete Nelson
By just ignoring SIG_CHLD, loading this plugin breaks any external script usage in openvpn. A better solution to preventing zombies is to daemonize the spawned child and let init/systemd clean it up.
2014-05-21`make PREFIX=/a/b install` (un)installs somewhere other than /opt/duoBen Murray
Running "make all" and "make install" with different PREFIXES will produce a non-working installation. However, "make all" can be skipped. DESTDIR is also controllable for making packages.
2014-05-20Updated README.md for openvpnalichator
2014-04-01Update version number to 2.1Ben Murray
2014-03-10Merge pull request #5 from apeiron/topic/apeiron/fix-compiler-invocationben-duo
Compilation is more portable by not calling gcc
2014-03-10Compilation is more portable by not calling gccChris Nehren
The POSIX standard does not mandate that the compiler will be available as `gcc`. It does, however, guarantee that `cc` is available. This fixes compilation on FreeBSD 10, which does not ship gcc.
2014-02-28If a password is not provided (or blank), use the user's default out-of-band ↵Adam Goodman
factor. This makes it possible to use the 'auth-user-pass-optional' server directive.
2013-11-26Update CA cert bundleBen Murray
2013-11-22Fixes #3 Add HTTPS proxy support (if using the Python helper script)Ben Murray
2013-05-03Add .gitignoreBen Murray
2012-10-09log importerrors in duo_openvpn.py to syslog (to better detect old python ↵Adam Goodman
versions)
2012-09-28add signal.h includeJon Oberheide
2012-09-24add useragentJon Oberheide
2012-09-24ignore sigchld to avoid leaving behind zombies. fix from jschauma. setting ↵Jon Oberheide
global signal handlers in the plugin isnt ideal, but doesnt appear to interfere with normal openvpn operation.
2012-06-19add SSL certificate validationAdam Goodman
2012-01-26snip out unnecessary clausesJon Oberheide
2012-01-26add gplv2 licenseJon Oberheide
2012-01-25better error checkingJon Oberheide
2012-01-25better error checkingJon Oberheide
2012-01-25fixes for perl script; add compile options to select between perl and pythonAdam Goodman
2012-01-25add perl version of duo_openvpn.pyAdam Goodman
2012-01-25spacing fixupsJon Oberheide