[Openvpn-devel] openvpn support for challenge-response otp (user+pass+otp)

2011-07-13 Thread Pasi Kärkkäinen
Hello, Has anyone implemented challenge-response support to openvpn and openvpn gui? I'd like to be able to authenticate openvpn users so that all these are required: 1) x509 certificate 2) username + password 3) one time password (otp) So after the user gets user+pass p

Re: [Openvpn-devel] openvpn support for challenge-response otp (user+pass+otp)

2011-07-13 Thread Samuli Seppänen
Hi Pasi, There's some support for challenge-response authentication in OpenVPN: This code is in the "master" branch. Look here for instructions on how to fetch th

[Openvpn-devel] Topics for tomorrow's meeting

2011-07-13 Thread Samuli Seppänen
Hi, NOTE: meeting time is one hour earlier than usual (17:00 UTC). Also, this time the meeting will be a "sprint" where we try to get ACKs for as many of Adriaan's PolarSSL patches as possible. If necessary, the patches will be fixed on the fly. Nothing will be added to the Git repository, though,

Re: [Openvpn-devel] openvpn support for challenge-response otp (user+pass+otp)

2011-07-13 Thread Pasi Kärkkäinen
On Wed, Jul 13, 2011 at 12:56:13PM -0700, Samuli Seppänen wrote: > Hi Pasi, > > There's some support for challenge-response authentication in OpenVPN: > > > Cool

[Openvpn-devel] OpenVPN with PKCS11 support

2011-07-13 Thread Thomas
Hi list, I'm looking for a newer version of OpenVPN (like 2.2.1) with PKCS11 support precompiled for Windows. As far as I see all available packages on the download page don't have PKCS11 compiled in. Unfortunately I have no compile environment to build this version myself. Any help? Thanks i

Re: [Openvpn-devel] openvpn support for challenge-response otp (user+pass+otp)

2011-07-13 Thread Jean-Michel Pouré - GOOZE
Le mercredi 13 juillet 2011 à 19:38 +0300, Pasi Kärkkäinen a écrit : > Openvpn gui would need to be able to present additional prompt after > the usual user+pass prompt.. > For example openssh supports challenge-response, so user+pass+otp is > possible with it. > > Thoughts/plans? These are grea

Re: [Openvpn-devel] OpenVPN with PKCS11 support

2011-07-13 Thread Alon Bar-Lev
Just today we discussed this. Look at [1][2] [1] https://www.opensc-project.org/build [2] http://www.opensc-project.org/downloads/users/alonbl/build/ On Thu, Jul 14, 2011 at 12:27 AM, Thomas wrote: > Hi list, > > I'm looking for a newer version of OpenVPN (like 2.2.1) with PKCS11 > support prec