[Openvpn-devel] Re: PAM plugin doesn't daemonize correctly [PATCH]

2005-05-18 Thread Simon Perreault
On Wednesday 18 May 2005 09:40, Simon Perreault wrote: > 1) reopen stdin, stdout and stderr to /dev/null when --daemon option is > specified (need a way to access options structure in the plugin) Here's a patch using the first solution. Please consider applying. Index: options.c ==

Re: [Openvpn-devel] Patch for a --capath option

2005-05-18 Thread Thomas NOEL
Hello, Le 18.05.2005 13:42, James Yonan a écrit : I'm not very happy with this patch : all CA and CRL are checked, but if I update a CRL, openssl doesn't see any changes and continue to accept my revoked certificate. I don't know if there is a "cache" system integrated in openssl... I don't kn

[Openvpn-devel] PAM plugin doesn't daemonize correctly

2005-05-18 Thread Simon Perreault
Hi, The close_fds_except() function in the auth-pam plugin contains a bug, but it seems to be by design. It doesn't close standard fds (stdin, stdout, stderr). This means that a program that starts openvpn and reads its stdout from a pipe will never receive EOF and will idle forever. To reprod

Re: [Openvpn-devel] Patch for a --capath option (was: Security bug with crl-verify)

2005-05-18 Thread James Yonan
On Wed, 11 May 2005, Thomas NOEL wrote: > Hello, > > >>> (...) > >>> #if OPENSSL_VERSION_NUMBER >= 0x00907000L > >>>X509_STORE_CTX_set_flags (csc, X509_V_FLAG_CRL_CHECK); > >>>X509_STORE_CTX_set_flags (csc, X509_V_FLAG_CRL_CHECK_ALL); > >>> #endif > >>> (...)>> > >>>With this