diff options
| author | Arne Schwabe | 2022-08-24 13:09:30 +0200 |
|---|---|---|
| committer | Gert Doering | 2022-09-11 11:04:44 +0200 |
| commit | 23eec2d29435a51771dcd4f85d71f33465a174ff (patch) | |
| tree | 912bb86186c5e183d3005eee129d7f4a992d6303 /include | |
| parent | 25695c5537fa5464f49a809eae96d7de0d4ca33b (diff) | |
| download | openvpn-23eec2d29435a51771dcd4f85d71f33465a174ff.zip openvpn-23eec2d29435a51771dcd4f85d71f33465a174ff.tar.gz | |
Implement --client-crresponse script options and plugin interface
This allows scripts and plugins to parse/react to a CR_RESPONSE message
Patch V2: doc fixes, do not put script under ENABLE_PLUGIN
Patch V3: rebase
Patch V4: fix else branch of the verify_crresponse_script function
Patch V5: unify message when unable to create/write crresponse file
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Heiko Hund <heiko@ist.eigentlich.net>
Message-Id: <20220824110930.73009-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg25089.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'include')
| -rw-r--r-- | include/openvpn-plugin.h.in | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/include/openvpn-plugin.h.in b/include/openvpn-plugin.h.in index dc7c530..e498f94 100644 --- a/include/openvpn-plugin.h.in +++ b/include/openvpn-plugin.h.in @@ -83,6 +83,10 @@ extern "C" { * FUNC: openvpn_plugin_func_v1 OPENVPN_PLUGIN_CLIENT_CONNECT_V2 * FUNC: openvpn_plugin_func_v1 OPENVPN_PLUGIN_LEARN_ADDRESS * + * The OPENVPN_PLUGIN_CLIENT_CRRESPONSE function is called when the client sends + * the CR_RESPONSE message, this is *typically* after OPENVPN_PLUGIN_TLS_FINAL + * but may also occur much later. + * * [Client session ensues] * * For each "TLS soft reset", according to reneg-sec option (or similar): @@ -128,7 +132,8 @@ extern "C" { #define OPENVPN_PLUGIN_ROUTE_PREDOWN 12 #define OPENVPN_PLUGIN_CLIENT_CONNECT_DEFER 13 #define OPENVPN_PLUGIN_CLIENT_CONNECT_DEFER_V2 14 -#define OPENVPN_PLUGIN_N 15 +#define OPENVPN_PLUGIN_CLIENT_CRRESPONSE 15 +#define OPENVPN_PLUGIN_N 16 /* * Build a mask out of a set of plug-in types. |