Re: [Openvpn-devel] [PATCH] common_name passing in auth_pam plugin

2011-03-21 Thread Joe Patterson
[PATCH] -added the ability to have "COMMONNAME" replaced with certificate common name in pam conversation Signed-off-by: Joe Patterson --- plugin/auth-pam/README |2 +- plugin/auth-pam/auth-pam.c | 11 +-- 2 files changed, 10 insertions(+), 3 deletions(-) di

Re: [Openvpn-devel] [PATCH] Bind only to specified interface

2011-03-12 Thread Joe Patterson
I'm actually kind of curious what reasons there would be that listening to 0.0.0.0 would be undesireable. For other daemons, I can see a rationale because of two reasons, one being that you don't trust the security of the daemon and want to add interface specificity to your firewall rules for belt

Re: [Openvpn-devel] openvpn protocol breaks proxies intercepting SSL ...

2011-03-11 Thread Joe Patterson
Do you have a pointer to a specific SSL proxy that you're talking about? I have this sneaking suspicion that what you're actually referring to is a transparent https proxy, which would most definitely *not* work, as openvpn rides on top of ssl, but not on top of http on top of ssl. A good test of

[Openvpn-devel] [PATCH] common_name passing in auth_pam plugin

2011-03-07 Thread Joe Patterson
I had wanted to have the capability of forcing users to match their username with their cert common name. It's possible to do this using the environment variables passed to an auth script, but I figured it would be useful to add the capability to the auth_pam plugin. It would be nice to be able t