Skip to contentSkip to conversation

build revolution

PATCH In review Alon Bar-Lev 7 participants 187 messages Feb 29, 2012 – Apr 26, 2012 1 message not in the archive Kbuild Page 1 of 4

lore
Share & tools
lore
#0 lore raw

cover build revolution

1. Many cleanups.
2. New directory layout.
3. Remove easy-rsa, install-win32, windows build, tap-win32.
4. Standard autotools build system.
5. msbuild build system.
6. Split out most of platform specific code.

After review I suggest you pull my repository[1], much safer than doing the MIME magic.

Alon Bar-Lev (52):
build: version should not contain '-'
package: rpm: strip should be handled by package management
cleanup: options.c: remove redundant include
cleanup: remove C++ warnings
cleanup: win32.c: wrong printf format
cleanup: remove redundant ';'
cleanup: crypto_openssl.c: remove support for pre-openssl-0.9.6
cleanup: tun.c: fix incorrect option in message (ip-win32)
cleanup: memcmp.c: remove unused source
fixup: init.c: add missing conditional for ENABLE_CLIENT_CR
build: correct place to alter WINVER is at build system Update .gitignore
build: handle printf style format in mingw
build: rename plugin directory to plugins
build: plugins: properly use CC, CFLAGS and LDFLAGS
build: we need the sample.ovpn in future
Remove install-win32
Remove easy-rsa
Remove tap-win32
cleanup: rename tap-windows function from win32 to win
build: remove windows specific build system
build: split acinclude.m4 into m4/*
build: m4/ax_varargs.m4: cleanup
build: m4/ax_emptyarray.m4: cleanup
build: m4/ax_socklen_t.m4: cleanup
build: autotools: first pass of trivial autotools changes
build: autoconf: remove OPENVPN_ADD_LIBS useless macro
build: remove awk and non-standard autoconf output processing
build: standard directory layout
build: add libtool + windows resources for executables
build: autoconf: commands as environment
build: libdl usage
build: properly detect and use socket libs
build: autoconf: minor cleanups
build: proper selinux detection and usage
build: distribute pkg.m4
build: proper pkcs11-helper detection and usage
build: properly process lzo-stub
build: proper lzo detection and usage
build: proper crypto detection and usage
build: autoconf: update defaults for options
build: win-msvc: msbuild format
build: move out config.h include from syshead
build: split out compat
build: move gettimeofday() emulation to compat
build: move daemon() emulation into compat
build: move inet_ntop(), inet_pton() emulation into compat
cleanup: move console related function into its own module
build: move wrappers into platform module
build: windows: install version.sh to allow installer read version
build: distribute samples in windows
build: use tap-windows.h as external dependency

 .gitignore                                      |   43 +-
 .svnignore                                      |   20 -
 Makefile.am                                     |  156 +-
 acinclude.m4                                    |  131 -
 base64.c                                        |  163 -
 base64.h                                        |   44 -
 basic.h                                         |   49 -
 buffer.c                                        | 1095 ----
 buffer.h                                        |  906 ---
 build/Makefile.am                               |   17 +
 build/ltrc.inc                                  |   23 +
 build/msvc/Makefile.am                          |   15 +
 build/msvc/msvc-generate/Makefile.am            |   18 +
 build/msvc/msvc-generate/Makefile.mak           |   13 +
 build/msvc/msvc-generate/msvc-generate.js       |  118 +
 build/msvc/msvc-generate/msvc-generate.vcproj   |   74 +
 circ_list.h                                     |   78 -
 clinat.c                                        |  263 -
 clinat.h                                        |   65 -
 common.h                                        |  107 -
 compat.c                                        |  129 -
 compat.h                                        |   42 -
 compat.m4                                       |   70 +
 config-msvc-version.h.in                        |   10 +
 config-msvc.h                                   |  121 +
 configure.ac                                    | 1620 +++---
 configure_h.awk                                 |   39 -
 configure_log.awk                               |   33 -
 crypto.c                                        | 1455 -----
 crypto.h                                        |  398 --
 crypto_backend.h                                |  490 --
 crypto_openssl.c                                |  793 ---
 crypto_openssl.h                                |   73 -
 crypto_polarssl.c                               |  560 --
 crypto_polarssl.h                               |   74 -
 cryptoapi.c                                     |  459 --
 cryptoapi.h                                     |    7 -
 debug/doval                                     |    4 +
 debug/dovalns                                   |    2 +
 dhcp.c                                          |  206 -
 dhcp.h                                          |   87 -
 distro/Makefile.am                              |   15 +
 distro/rpm/Makefile.am                          |   18 +
 distro/rpm/openvpn.init.d.rhel                  |  244 +
 distro/rpm/openvpn.init.d.suse                  |  264 +
 distro/rpm/openvpn.spec.in                      |  284 +
 doc/Makefile.am                                 |   28 +
 doc/doxygen/doc_compression.h                   |   92 +
 doc/doxygen/doc_control_processor.h             |  189 +
 doc/doxygen/doc_control_tls.h                   |  105 +
 doc/doxygen/doc_data_control.h                  |  103 +
 doc/doxygen/doc_data_crypto.h                   |   75 +
 doc/doxygen/doc_eventloop.h                     |   67 +
 doc/doxygen/doc_external_multiplexer.h          |   46 +
 doc/doxygen/doc_fragmentation.h                 |   96 +
 doc/doxygen/doc_internal_multiplexer.h          |   44 +
 doc/doxygen/doc_key_generation.h                |  153 +
 doc/doxygen/doc_mainpage.h                      |  162 +
 doc/doxygen/doc_memory_management.h             |   99 +
 doc/doxygen/doc_protocol_overview.h             |  199 +
 doc/doxygen/doc_reliable.h                      |   49 +
 doc/doxygen/doc_tunnel_state.h                  |  155 +
 doc/doxygen/openvpn.doxyfile                    |  279 +
 doc/management-notes.txt                        |  980 ++++
 doc/openvpn.8                                   | 6251 +++++++++++++++++++++
 doclean                                         |   73 -
 domake-win                                      |  138 -
 doval                                           |    4 -
 dovalns                                         |    2 -
 doxygen/doc_compression.h                       |   92 -
 doxygen/doc_control_processor.h                 |  189 -
 doxygen/doc_control_tls.h                       |  105 -
 doxygen/doc_data_control.h                      |  103 -
 doxygen/doc_data_crypto.h                       |   75 -
 doxygen/doc_eventloop.h                         |   67 -
 doxygen/doc_external_multiplexer.h              |   46 -
 doxygen/doc_fragmentation.h                     |   96 -
 doxygen/doc_internal_multiplexer.h              |   44 -
 doxygen/doc_key_generation.h                    |  153 -
 doxygen/doc_mainpage.h                          |  162 -
 doxygen/doc_memory_management.h                 |   99 -
 doxygen/doc_protocol_overview.h                 |  199 -
 doxygen/doc_reliable.h                          |   49 -
 doxygen/doc_tunnel_state.h                      |  155 -
 doxygen/openvpn.doxyfile                        |  279 -
 easy-rsa/1.0/README                             |  161 -
 easy-rsa/1.0/build-ca                           |   13 -
 easy-rsa/1.0/build-dh                           |   12 -
 easy-rsa/1.0/build-inter                        |   19 -
 easy-rsa/1.0/build-key                          |   20 -
 easy-rsa/1.0/build-key-pass                     |   20 -
 easy-rsa/1.0/build-key-pkcs12                   |   21 -
 easy-rsa/1.0/build-key-server                   |   22 -
 easy-rsa/1.0/build-req                          |   18 -
 easy-rsa/1.0/build-req-pass                     |   18 -
 easy-rsa/1.0/clean-all                          |   19 -
 easy-rsa/1.0/list-crl                           |   18 -
 easy-rsa/1.0/make-crl                           |   18 -
 easy-rsa/1.0/openssl.cnf                        |  255 -
 easy-rsa/1.0/revoke-crt                         |   18 -
 easy-rsa/1.0/revoke-full                        |   29 -
 easy-rsa/1.0/sign-req                           |   18 -
 easy-rsa/1.0/vars                               |   49 -
 easy-rsa/2.0/Makefile                           |   13 -
 easy-rsa/2.0/README                             |  229 -
 easy-rsa/2.0/build-ca                           |    8 -
 easy-rsa/2.0/build-dh                           |   11 -
 easy-rsa/2.0/build-inter                        |    7 -
 easy-rsa/2.0/build-key                          |    7 -
 easy-rsa/2.0/build-key-pass                     |    7 -
 easy-rsa/2.0/build-key-pkcs12                   |    8 -
 easy-rsa/2.0/build-key-server                   |   10 -
 easy-rsa/2.0/build-req                          |    7 -
 easy-rsa/2.0/build-req-pass                     |    7 -
 easy-rsa/2.0/clean-all                          |   16 -
 easy-rsa/2.0/inherit-inter                      |   39 -
 easy-rsa/2.0/list-crl                           |   13 -
 easy-rsa/2.0/openssl-0.9.6.cnf                  |  265 -
 easy-rsa/2.0/openssl-0.9.8.cnf                  |  290 -
 easy-rsa/2.0/openssl-1.0.0.cnf                  |  285 -
 easy-rsa/2.0/pkitool                            |  379 --
 easy-rsa/2.0/revoke-full                        |   40 -
 easy-rsa/2.0/sign-req                           |    7 -
 easy-rsa/2.0/vars                               |   74 -
 easy-rsa/2.0/whichopensslcnf                    |   26 -
 easy-rsa/Windows/README.txt                     |   44 -
 easy-rsa/Windows/build-ca-pass.bat              |    8 -
 easy-rsa/Windows/build-ca.bat                   |    4 -
 easy-rsa/Windows/build-dh.bat                   |    4 -
 easy-rsa/Windows/build-key-pass.bat             |    8 -
 easy-rsa/Windows/build-key-pkcs12.bat           |   10 -
 easy-rsa/Windows/build-key-server-pass.bat      |    8 -
 easy-rsa/Windows/build-key-server.bat           |    8 -
 easy-rsa/Windows/build-key.bat                  |    8 -
 easy-rsa/Windows/clean-all.bat                  |   13 -
 easy-rsa/Windows/init-config.bat                |    1 -
 easy-rsa/Windows/revoke-full.bat                |   13 -
 easy-rsa/Windows/serial.start                   |    1 -
 easy-rsa/Windows/vars.bat.sample                |   40 -
 errlevel.h                                      |  179 -
 error.c                                         |  878 ---
 error.h                                         |  355 --
 event.c                                         | 1055 ----
 event.h                                         |  158 -
 fdmisc.c                                        |   72 -
 fdmisc.h                                        |   31 -
 forward-inline.h                                |  294 -
 forward.c                                       | 1545 -----
 forward.h                                       |  242 -
 fragment.c                                      |  408 --
 fragment.h                                      |  479 --
 gremlin.c                                       |  215 -
 gremlin.h                                       |   72 -
 helper.c                                        |  531 --
 helper.h                                        |   38 -
 httpdigest.c                                    |  148 -
 httpdigest.h                                    |   60 -
 images/.svnignore                               |    2 -
 images/Makefile.am                              |   41 -
 images/icon.ico                                 |  Bin 22486 -> 0 bytes
 images/install-whirl.bmp                        |  Bin 25820 -> 0 bytes
 include/Makefile.am                             |   15 +
 include/openvpn-plugin.h                        |  727 +++
 init.c                                          | 3786 -------------
 init.h                                          |  128 -
 install-win32/.svnignore                        |    4 -
 install-win32/GetWindowsVersion.nsi             |  109 -
 install-win32/Makefile.am                       |   97 -
 install-win32/build-pkcs11-helper.sh            |   24 -
 install-win32/buildinstaller                    |   14 -
 install-win32/ddk-common                        |    2 -
 install-win32/doclean                           |    6 -
 install-win32/dosname.pl                        |    9 -
 install-win32/getgui                            |   19 -
 install-win32/getopenssl                        |   19 -
 install-win32/getpkcs11helper                   |   17 -
 install-win32/getprebuilt                       |   10 -
 install-win32/getxgui                           |   28 -
 install-win32/ifdef.pl                          |   53 -
 install-win32/m4todef.pl                        |   15 -
 install-win32/macro.pl                          |   61 -
 install-win32/makeopenvpn                       |   67 -
 install-win32/maketap                           |   17 -
 install-win32/maketapinstall                    |   15 -
 install-win32/maketext                          |   59 -
 install-win32/openssl/README.txt                |   21 -
 install-win32/openssl/openssl097.patch          |   68 -
 install-win32/openssl/openssl098.patch          |   56 -
 install-win32/openvpn.nsi                       |  886 ---
 install-win32/sample.ovpn                       |  103 -
 install-win32/setpath.nsi                       |  231 -
 install-win32/settings.in                       |   71 -
 install-win32/trans.pl                          |   97 -
 install-win32/u2d.c                             |   20 -
 install-win32/winconfig                         |   18 -
 integer.h                                       |  114 -
 interval.c                                      |   77 -
 interval.h                                      |  247 -
 list.c                                          |  643 ---
 list.h                                          |  196 -
 lladdr.c                                        |   61 -
 lladdr.h                                        |    8 -
 lzo.c                                           |  304 -
 lzo.h                                           |  344 --
 m4/ax_emptyarray.m4                             |   40 +
 m4/ax_socklen_t.m4                              |   65 +
 m4/ax_varargs.m4                                |   75 +
 m4/pkg.m4                                       |  159 +
 manage.c                                        | 3365 -----------
 manage.h                                        |  570 --
 management/management-notes.txt                 |  980 ----
 mbuf.c                                          |  169 -
 mbuf.h                                          |  109 -
 memcmp.c                                        |   43 -
 memdbg.h                                        |  114 -
 misc.c                                          | 2577 ---------
 misc.h                                          |  472 --
 mroute.c                                        |  552 --
 mroute.h                                        |  214 -
 mss.c                                           |  114 -
 mss.h                                           |   34 -
 mstats.c                                        |  116 -
 mstats.h                                        |   51 -
 msvc-build.bat                                  |   34 +
 msvc-dev.bat                                    |    9 +
 msvc-env.bat                                    |   31 +
 msvc/autodefs.h.in                              |   20 -
 msvc/config.py                                  |   93 -
 msvc/msvc.mak                                   |   52 -
 mtcp.c                                          |  721 ---
 mtcp.h                                          |   77 -
 mtu.c                                           |  290 -
 mtu.h                                           |  308 -
 mudp.c                                          |  285 -
 mudp.h                                          |   71 -
 multi.c                                         | 2861 ----------
 multi.h                                         |  582 --
 ntlm.c                                          |  346 --
 ntlm.h                                          |   11 -
 occ-inline.h                                    |   85 -
 occ.c                                           |  393 --
 occ.h                                           |   95 -
 openvpn-plugin.h                                |  718 ---
 openvpn.8                                       | 6251 ---------------------
 openvpn.c                                       |  285 -
 openvpn.h                                       |  594 --
 openvpn.sln                                     |   52 +
 openvpn.spec.in                                 |  281 -
 options.c                                       | 6809 ----------------------
 options.h                                       |  840 ---
 otime.c                                         |  273 -
 otime.h                                         |  271 -
 packet_id.c                                     |  596 --
 packet_id.h                                     |  338 --
 perf.c                                          |  293 -
 perf.h                                          |   82 -
 pf-inline.h                                     |   59 -
 pf.c                                            |  711 ---
 pf.h                                            |  102 -
 ping-inline.h                                   |   59 -
 ping.c                                          |   92 -
 ping.h                                          |   47 -
 pkcs11.c                                        |  938 ----
 pkcs11.h                                        |   80 -
 pkcs11_backend.h                                |   77 -
 pkcs11_openssl.c                                |  188 -
 pkcs11_polarssl.c                               |  120 -
 plugin.c                                        |  799 ---
 plugin.h                                        |  211 -
 plugin/README                                   |   47 -
 plugin/auth-pam/.svnignore                      |    1 -
 plugin/auth-pam/Makefile                        |   30 -
 plugin/auth-pam/README                          |   74 -
 plugin/auth-pam/auth-pam.c                      |  804 ---
 plugin/auth-pam/pamdl.c                         |  180 -
 plugin/auth-pam/pamdl.h                         |    7 -
 plugin/defer/README                             |   16 -
 plugin/defer/build                              |   14 -
 plugin/defer/simple.c                           |  305 -
 plugin/defer/simple.def                         |    6 -
 plugin/defer/winbuild                           |   18 -
 plugin/down-root/Makefile                       |   17 -
 plugin/down-root/README                         |   29 -
 plugin/down-root/down-root.c                    |  553 --
 plugin/examples/README                          |   16 -
 plugin/examples/build                           |   14 -
 plugin/examples/log.c                           |  184 -
 plugin/examples/log_v3.c                        |  249 -
 plugin/examples/simple.c                        |  120 -
 plugin/examples/simple.def                      |    6 -
 plugin/examples/winbuild                        |   18 -
 pool.c                                          |  583 --
 pool.h                                          |   91 -
 proto.c                                         |  122 -
 proto.h                                         |  236 -
 proxy.c                                         | 1124 ----
 proxy.h                                         |  114 -
 ps.c                                            |  968 ----
 ps.h                                            |   59 -
 push.c                                          |  537 --
 push.h                                          |   74 -
 pushlist.h                                      |   42 -
 reliable.c                                      |  751 ---
 reliable.h                                      |  480 --
 route.c                                         | 3237 -----------
 route.h                                         |  339 --
 sample-config-files/README                      |    6 -
 sample-config-files/client.conf                 |  123 -
 sample-config-files/firewall.sh                 |  108 -
 sample-config-files/home.up                     |    2 -
 sample-config-files/loopback-client             |   25 -
 sample-config-files/loopback-server             |   26 -
 sample-config-files/office.up                   |    2 -
 sample-config-files/openvpn-shutdown.sh         |    5 -
 sample-config-files/openvpn-startup.sh          |   34 -
 sample-config-files/server.conf                 |  299 -
 sample-config-files/static-home.conf            |   72 -
 sample-config-files/static-office.conf          |   69 -
 sample-config-files/tls-home.conf               |   83 -
 sample-config-files/tls-office.conf             |   83 -
 sample-config-files/xinetd-client-config        |   11 -
 sample-config-files/xinetd-server-config        |   25 -
 sample-keys/README                              |   14 -
 sample-keys/ca.crt                              |   19 -
 sample-keys/ca.key                              |   15 -
 sample-keys/client.crt                          |   65 -
 sample-keys/client.key                          |   15 -
 sample-keys/dh1024.pem                          |    5 -
 sample-keys/pass.crt                            |   65 -
 sample-keys/pass.key                            |   18 -
 sample-keys/pkcs12.p12                          |  Bin 2685 -> 0 bytes
 sample-keys/server.crt                          |   67 -
 sample-keys/server.key                          |   15 -
 sample-scripts/auth-pam.pl                      |   97 -
 sample-scripts/bridge-start                     |   39 -
 sample-scripts/bridge-stop                      |   18 -
 sample-scripts/openvpn.init                     |  244 -
 sample-scripts/ucn.pl                           |   11 -
 sample-scripts/verify-cn                        |   64 -
 sample/Makefile.am                              |   33 +
 sample/sample-config-files/README               |    6 +
 sample/sample-config-files/client.conf          |  123 +
 sample/sample-config-files/firewall.sh          |  108 +
 sample/sample-config-files/home.up              |    2 +
 sample/sample-config-files/loopback-client      |   25 +
 sample/sample-config-files/loopback-server      |   26 +
 sample/sample-config-files/office.up            |    2 +
 sample/sample-config-files/openvpn-shutdown.sh  |    5 +
 sample/sample-config-files/openvpn-startup.sh   |   34 +
 sample/sample-config-files/server.conf          |  299 +
 sample/sample-config-files/static-home.conf     |   72 +
 sample/sample-config-files/static-office.conf   |   69 +
 sample/sample-config-files/tls-home.conf        |   83 +
 sample/sample-config-files/tls-office.conf      |   83 +
 sample/sample-config-files/xinetd-client-config |   11 +
 sample/sample-config-files/xinetd-server-config |   25 +
 sample/sample-keys/README                       |   14 +
 sample/sample-keys/ca.crt                       |   19 +
 sample/sample-keys/ca.key                       |   15 +
 sample/sample-keys/client.crt                   |   65 +
 sample/sample-keys/client.key                   |   15 +
 sample/sample-keys/dh1024.pem                   |    5 +
 sample/sample-keys/pass.crt                     |   65 +
 sample/sample-keys/pass.key                     |   18 +
 sample/sample-keys/pkcs12.p12                   |  Bin 0 -> 2685 bytes
 sample/sample-keys/server.crt                   |   67 +
 sample/sample-keys/server.key                   |   15 +
 sample/sample-scripts/auth-pam.pl               |   97 +
 sample/sample-scripts/bridge-start              |   39 +
 sample/sample-scripts/bridge-stop               |   18 +
 sample/sample-scripts/ucn.pl                    |   11 +
 sample/sample-scripts/verify-cn                 |   64 +
 sample/sample-windows/sample.ovpn               |  103 +
 schedule.c                                      |  653 ---
 schedule.h                                      |  132 -
 service-win32/.svnignore                        |    4 -
 service-win32/Makefile.am                       |   41 -
 service-win32/msvc.mak                          |   30 -
 service-win32/openvpnserv.c                     |  530 --
 service-win32/service.c                         |  695 ---
 service-win32/service.h                         |  141 -
 session_id.c                                    |   61 -
 session_id.h                                    |   86 -
 shaper.c                                        |   95 -
 shaper.h                                        |  178 -
 sig.c                                           |  376 --
 sig.h                                           |  104 -
 socket.c                                        | 3641 ------------
 socket.h                                        | 1088 ----
 socks.c                                         |  551 --
 socks.h                                         |   78 -
 sources                                         |    2 -
 src/Makefile.am                                 |   18 +
 src/compat/Makefile.am                          |   27 +
 src/compat/compat-basename.c                    |   50 +
 src/compat/compat-daemon.c                      |  100 +
 src/compat/compat-dirname.c                     |  119 +
 src/compat/compat-gettimeofday.c                |  131 +
 src/compat/compat-inet_ntop.c                   |   76 +
 src/compat/compat-inet_pton.c                   |   79 +
 src/compat/compat.h                             |   68 +
 src/compat/compat.vcproj                        |  197 +
 src/openvpn/Makefile.am                         |  121 +
 src/openvpn/base64.c                            |  169 +
 src/openvpn/base64.h                            |   44 +
 src/openvpn/basic.h                             |   49 +
 src/openvpn/buffer.c                            | 1101 ++++
 src/openvpn/buffer.h                            |  914 +++
 src/openvpn/circ_list.h                         |   78 +
 src/openvpn/clinat.c                            |  269 +
 src/openvpn/clinat.h                            |   65 +
 src/openvpn/common.h                            |  107 +
 src/openvpn/console.c                           |  238 +
 src/openvpn/console.h                           |   33 +
 src/openvpn/crypto.c                            | 1461 +++++
 src/openvpn/crypto.h                            |  398 ++
 src/openvpn/crypto_backend.h                    |  488 ++
 src/openvpn/crypto_openssl.c                    |  738 +++
 src/openvpn/crypto_openssl.h                    |   73 +
 src/openvpn/crypto_polarssl.c                   |  566 ++
 src/openvpn/crypto_polarssl.h                   |   74 +
 src/openvpn/cryptoapi.c                         |  465 ++
 src/openvpn/cryptoapi.h                         |    7 +
 src/openvpn/dhcp.c                              |  212 +
 src/openvpn/dhcp.h                              |   87 +
 src/openvpn/errlevel.h                          |  179 +
 src/openvpn/error.c                             |  884 +++
 src/openvpn/error.h                             |  359 ++
 src/openvpn/event.c                             | 1061 ++++
 src/openvpn/event.h                             |  158 +
 src/openvpn/fdmisc.c                            |   78 +
 src/openvpn/fdmisc.h                            |   31 +
 src/openvpn/forward-inline.h                    |  294 +
 src/openvpn/forward.c                           | 1551 ++++++
 src/openvpn/forward.h                           |  242 +
 src/openvpn/fragment.c                          |  414 ++
 src/openvpn/fragment.h                          |  479 ++
 src/openvpn/gremlin.c                           |  221 +
 src/openvpn/gremlin.h                           |   72 +
 src/openvpn/helper.c                            |  537 ++
 src/openvpn/helper.h                            |   38 +
 src/openvpn/httpdigest.c                        |  154 +
 src/openvpn/httpdigest.h                        |   60 +
 src/openvpn/init.c                              | 3794 +++++++++++++
 src/openvpn/init.h                              |  128 +
 src/openvpn/integer.h                           |  114 +
 src/openvpn/interval.c                          |   83 +
 src/openvpn/interval.h                          |  247 +
 src/openvpn/list.c                              |  649 +++
 src/openvpn/list.h                              |  196 +
 src/openvpn/lladdr.c                            |   67 +
 src/openvpn/lladdr.h                            |    8 +
 src/openvpn/lzo.c                               |  310 +
 src/openvpn/lzo.h                               |  347 ++
 src/openvpn/manage.c                            | 3371 +++++++++++
 src/openvpn/manage.h                            |  570 ++
 src/openvpn/mbuf.c                              |  175 +
 src/openvpn/mbuf.h                              |  109 +
 src/openvpn/memdbg.h                            |  114 +
 src/openvpn/misc.c                              | 2128 +++++++
 src/openvpn/misc.h                              |  371 ++
 src/openvpn/mroute.c                            |  558 ++
 src/openvpn/mroute.h                            |  214 +
 src/openvpn/mss.c                               |  120 +
 src/openvpn/mss.h                               |   34 +
 src/openvpn/mstats.c                            |  122 +
 src/openvpn/mstats.h                            |   51 +
 src/openvpn/mtcp.c                              |  727 +++
 src/openvpn/mtcp.h                              |   77 +
 src/openvpn/mtu.c                               |  296 +
 src/openvpn/mtu.h                               |  308 +
 src/openvpn/mudp.c                              |  291 +
 src/openvpn/mudp.h                              |   71 +
 src/openvpn/multi.c                             | 2867 ++++++++++
 src/openvpn/multi.h                             |  582 ++
 src/openvpn/ntlm.c                              |  352 ++
 src/openvpn/ntlm.h                              |   11 +
 src/openvpn/occ-inline.h                        |   85 +
 src/openvpn/occ.c                               |  399 ++
 src/openvpn/occ.h                               |   95 +
 src/openvpn/openvpn.c                           |  291 +
 src/openvpn/openvpn.h                           |  594 ++
 src/openvpn/openvpn.vcproj                      |  777 +++
 src/openvpn/openvpn_win32_resources.rc          |   41 +
 src/openvpn/options.c                           | 6814 +++++++++++++++++++++++
 src/openvpn/options.h                           |  840 +++
 src/openvpn/otime.c                             |  201 +
 src/openvpn/otime.h                             |  264 +
 src/openvpn/packet_id.c                         |  602 ++
 src/openvpn/packet_id.h                         |  338 ++
 src/openvpn/perf.c                              |  299 +
 src/openvpn/perf.h                              |   82 +
 src/openvpn/pf-inline.h                         |   59 +
 src/openvpn/pf.c                                |  717 +++
 src/openvpn/pf.h                                |  102 +
 src/openvpn/ping-inline.h                       |   59 +
 src/openvpn/ping.c                              |   98 +
 src/openvpn/ping.h                              |   47 +
 src/openvpn/pkcs11.c                            |  945 ++++
 src/openvpn/pkcs11.h                            |   80 +
 src/openvpn/pkcs11_backend.h                    |   77 +
 src/openvpn/pkcs11_openssl.c                    |  194 +
 src/openvpn/pkcs11_polarssl.c                   |  126 +
 src/openvpn/platform.c                          |  369 ++
 src/openvpn/platform.h                          |  142 +
 src/openvpn/plugin.c                            |  809 +++
 src/openvpn/plugin.h                            |  211 +
 src/openvpn/pool.c                              |  589 ++
 src/openvpn/pool.h                              |   91 +
 src/openvpn/proto.c                             |  128 +
 src/openvpn/proto.h                             |  236 +
 src/openvpn/proxy.c                             | 1130 ++++
 src/openvpn/proxy.h                             |  114 +
 src/openvpn/ps.c                                |  974 ++++
 src/openvpn/ps.h                                |   59 +
 src/openvpn/push.c                              |  543 ++
 src/openvpn/push.h                              |   74 +
 src/openvpn/pushlist.h                          |   42 +
 src/openvpn/reliable.c                          |  757 +++
 src/openvpn/reliable.h                          |  480 ++
 src/openvpn/route.c                             | 3243 +++++++++++
 src/openvpn/route.h                             |  339 ++
 src/openvpn/schedule.c                          |  659 +++
 src/openvpn/schedule.h                          |  132 +
 src/openvpn/session_id.c                        |   67 +
 src/openvpn/session_id.h                        |   86 +
 src/openvpn/shaper.c                            |  101 +
 src/openvpn/shaper.h                            |  178 +
 src/openvpn/sig.c                               |  386 ++
 src/openvpn/sig.h                               |  104 +
 src/openvpn/socket.c                            | 3592 ++++++++++++
 src/openvpn/socket.h                            | 1088 ++++
 src/openvpn/socks.c                             |  557 ++
 src/openvpn/socks.h                             |   78 +
 src/openvpn/ssl.c                               | 3379 +++++++++++
 src/openvpn/ssl.h                               |  507 ++
 src/openvpn/ssl_backend.h                       |  441 ++
 src/openvpn/ssl_common.h                        |  499 ++
 src/openvpn/ssl_openssl.c                       | 1196 ++++
 src/openvpn/ssl_openssl.h                       |   58 +
 src/openvpn/ssl_polarssl.c                      |  874 +++
 src/openvpn/ssl_polarssl.h                      |   85 +
 src/openvpn/ssl_verify.c                        | 1224 ++++
 src/openvpn/ssl_verify.h                        |  252 +
 src/openvpn/ssl_verify_backend.h                |  272 +
 src/openvpn/ssl_verify_openssl.c                |  632 +++
 src/openvpn/ssl_verify_openssl.h                |   78 +
 src/openvpn/ssl_verify_polarssl.c               |  431 ++
 src/openvpn/ssl_verify_polarssl.h               |   82 +
 src/openvpn/status.c                            |  290 +
 src/openvpn/status.h                            |   99 +
 src/openvpn/syshead.h                           |  730 +++
 src/openvpn/tun.c                               | 5119 +++++++++++++++++
 src/openvpn/tun.h                               |  467 ++
 src/openvpn/win32.c                             | 1068 ++++
 src/openvpn/win32.h                             |  275 +
 src/openvpnserv/Makefile.am                     |   26 +
 src/openvpnserv/openvpnserv.c                   |  534 ++
 src/openvpnserv/openvpnserv.vcproj              |  209 +
 src/openvpnserv/openvpnserv_resources.rc        |   41 +
 src/openvpnserv/service.c                       |  700 +++
 src/openvpnserv/service.h                       |  139 +
 src/plugins/README                              |   47 +
 src/plugins/auth-pam/Makefile                   |   32 +
 src/plugins/auth-pam/README                     |   74 +
 src/plugins/auth-pam/auth-pam.c                 |  804 +++
 src/plugins/auth-pam/pamdl.c                    |  180 +
 src/plugins/auth-pam/pamdl.h                    |    7 +
 src/plugins/defer/README                        |   16 +
 src/plugins/defer/build                         |   15 +
 src/plugins/defer/simple.c                      |  305 +
 src/plugins/defer/simple.def                    |    6 +
 src/plugins/defer/winbuild                      |   18 +
 src/plugins/down-root/Makefile                  |   18 +
 src/plugins/down-root/README                    |   29 +
 src/plugins/down-root/down-root.c               |  553 ++
 src/plugins/examples/README                     |   16 +
 src/plugins/examples/build                      |   15 +
 src/plugins/examples/log.c                      |  184 +
 src/plugins/examples/log_v3.c                   |  247 +
 src/plugins/examples/simple.c                   |  120 +
 src/plugins/examples/simple.def                 |    6 +
 src/plugins/examples/winbuild                   |   18 +
 ssl.c                                           | 3373 -----------
 ssl.h                                           |  507 --
 ssl_backend.h                                   |  441 --
 ssl_common.h                                    |  499 --
 ssl_openssl.c                                   | 1190 ----
 ssl_openssl.h                                   |   58 -
 ssl_polarssl.c                                  |  866 ---
 ssl_polarssl.h                                  |   85 -
 ssl_verify.c                                    | 1218 ----
 ssl_verify.h                                    |  252 -
 ssl_verify_backend.h                            |  272 -
 ssl_verify_openssl.c                            |  626 ---
 ssl_verify_openssl.h                            |   74 -
 ssl_verify_polarssl.c                           |  425 --
 ssl_verify_polarssl.h                           |   79 -
 status.c                                        |  284 -
 status.h                                        |   95 -
 suse/openvpn.init                               |  264 -
 syshead.h                                       |  752 ---
 t_client.rc-sample                              |   92 -
 t_client.sh.in                                  |  303 -
 t_cltsrv-down.sh                                |    2 -
 t_cltsrv.sh                                     |   87 -
 t_lpback.sh                                     |   31 -
 tap-win32/MAKEFILE                              |    6 -
 tap-win32/SOURCES.in                            |   64 -
 tap-win32/common.h                              |   82 -
 tap-win32/constants.h                           |   52 -
 tap-win32/dhcp.c                                |  599 --
 tap-win32/dhcp.h                                |  164 -
 tap-win32/endian.h                              |   35 -
 tap-win32/error.c                               |  378 --
 tap-win32/error.h                               |   88 -
 tap-win32/hexdump.c                             |   69 -
 tap-win32/hexdump.h                             |   63 -
 tap-win32/i386/OemWin2k.inf.in                  |  195 -
 tap-win32/instance.c                            |  241 -
 tap-win32/lock.h                                |   75 -
 tap-win32/macinfo.c                             |  154 -
 tap-win32/macinfo.h                             |   38 -
 tap-win32/mem.c                                 |  186 -
 tap-win32/proto.h                               |  224 -
 tap-win32/prototypes.h                          |  260 -
 tap-win32/resource.rc                           |   58 -
 tap-win32/tapdrvr.c                             | 3146 -----------
 tap-win32/types.h                               |  178 -
 tests/Makefile.am                               |   24 +
 tests/t_client.rc-sample                        |   93 +
 tests/t_client.sh.in                            |  302 +
 tests/t_cltsrv-down.sh                          |    2 +
 tests/t_cltsrv.sh                               |   91 +
 tests/t_lpback.sh                               |   32 +
 tun.c                                           | 5113 -----------------
 tun.h                                           |  467 --
 version.m4                                      |   12 +-
 version.sh.in                                   |    4 +
 win/autodefs.h.in                               |   31 -
 win/build.py                                    |   23 -
 win/build_all.py                                |   69 -
 win/build_ddk.py                                |   55 -
 win/build_exe.py                                |   15 -
 win/config.h.in                                 |  363 --
 win/config.py                                   |   21 -
 win/config_all.py                               |   13 -
 win/config_tap.py                               |   35 -
 win/config_ti.py                                |   18 -
 win/js.py                                       |   10 -
 win/make_dist.py                                |  107 -
 win/msvc.mak.in                                 |   69 -
 win/openvpn.nsi                                 |  822 ---
 win/setpath.nsi                                 |  231 -
 win/settings.in                                 |  100 -
 win/show.py                                     |    9 -
 win/sign.py                                     |   23 -
 win/tap_span.py                                 |  129 -
 win/wb.py                                       |  322 --
 win32.c                                         | 1173 ----
 win32.h                                         |  293 -
 661 files changed, 103613 insertions(+), 114797 deletions(-)
 delete mode 100644 .svnignore
 delete mode 100644 acinclude.m4
 delete mode 100644 base64.c
 delete mode 100644 base64.h
 delete mode 100644 basic.h
 delete mode 100644 buffer.c
 delete mode 100644 buffer.h
 create mode 100644 build/Makefile.am
 create mode 100644 build/ltrc.inc
 create mode 100644 build/msvc/Makefile.am
 create mode 100644 build/msvc/msvc-generate/Makefile.am
 create mode 100755 build/msvc/msvc-generate/Makefile.mak
 create mode 100644 build/msvc/msvc-generate/msvc-generate.js
 create mode 100644 build/msvc/msvc-generate/msvc-generate.vcproj
 delete mode 100644 circ_list.h
 delete mode 100644 clinat.c
 delete mode 100644 clinat.h
 delete mode 100644 common.h
 delete mode 100644 compat.c
 delete mode 100644 compat.h
 create mode 100644 compat.m4
 create mode 100644 config-msvc-version.h.in
 create mode 100644 config-msvc.h
 delete mode 100644 configure_h.awk
 delete mode 100644 configure_log.awk
 delete mode 100644 crypto.c
 delete mode 100644 crypto.h
 delete mode 100644 crypto_backend.h
 delete mode 100644 crypto_openssl.c
 delete mode 100644 crypto_openssl.h
 delete mode 100644 crypto_polarssl.c
 delete mode 100644 crypto_polarssl.h
 delete mode 100644 cryptoapi.c
 delete mode 100644 cryptoapi.h
 create mode 100755 debug/doval
 create mode 100755 debug/dovalns
 delete mode 100644 dhcp.c
 delete mode 100644 dhcp.h
 create mode 100644 distro/Makefile.am
 create mode 100644 distro/rpm/Makefile.am
 create mode 100755 distro/rpm/openvpn.init.d.rhel
 create mode 100644 distro/rpm/openvpn.init.d.suse
 create mode 100644 distro/rpm/openvpn.spec.in
 create mode 100644 doc/Makefile.am
 create mode 100644 doc/doxygen/doc_compression.h
 create mode 100644 doc/doxygen/doc_control_processor.h
 create mode 100644 doc/doxygen/doc_control_tls.h
 create mode 100644 doc/doxygen/doc_data_control.h
 create mode 100644 doc/doxygen/doc_data_crypto.h
 create mode 100644 doc/doxygen/doc_eventloop.h
 create mode 100644 doc/doxygen/doc_external_multiplexer.h
 create mode 100644 doc/doxygen/doc_fragmentation.h
 create mode 100644 doc/doxygen/doc_internal_multiplexer.h
 create mode 100644 doc/doxygen/doc_key_generation.h
 create mode 100644 doc/doxygen/doc_mainpage.h
 create mode 100644 doc/doxygen/doc_memory_management.h
 create mode 100644 doc/doxygen/doc_protocol_overview.h
 create mode 100644 doc/doxygen/doc_reliable.h
 create mode 100644 doc/doxygen/doc_tunnel_state.h
 create mode 100644 doc/doxygen/openvpn.doxyfile
 create mode 100644 doc/management-notes.txt
 create mode 100644 doc/openvpn.8
 delete mode 100755 doclean
 delete mode 100644 domake-win
 delete mode 100755 doval
 delete mode 100755 dovalns
 delete mode 100644 doxygen/doc_compression.h
 delete mode 100644 doxygen/doc_control_processor.h
 delete mode 100644 doxygen/doc_control_tls.h
 delete mode 100644 doxygen/doc_data_control.h
 delete mode 100644 doxygen/doc_data_crypto.h
 delete mode 100644 doxygen/doc_eventloop.h
 delete mode 100644 doxygen/doc_external_multiplexer.h
 delete mode 100644 doxygen/doc_fragmentation.h
 delete mode 100644 doxygen/doc_internal_multiplexer.h
 delete mode 100644 doxygen/doc_key_generation.h
 delete mode 100644 doxygen/doc_mainpage.h
 delete mode 100644 doxygen/doc_memory_management.h
 delete mode 100644 doxygen/doc_protocol_overview.h
 delete mode 100644 doxygen/doc_reliable.h
 delete mode 100644 doxygen/doc_tunnel_state.h
 delete mode 100644 doxygen/openvpn.doxyfile
 delete mode 100644 easy-rsa/1.0/README
 delete mode 100755 easy-rsa/1.0/build-ca
 delete mode 100755 easy-rsa/1.0/build-dh
 delete mode 100755 easy-rsa/1.0/build-inter
 delete mode 100755 easy-rsa/1.0/build-key
 delete mode 100755 easy-rsa/1.0/build-key-pass
 delete mode 100755 easy-rsa/1.0/build-key-pkcs12
 delete mode 100755 easy-rsa/1.0/build-key-server
 delete mode 100755 easy-rsa/1.0/build-req
 delete mode 100755 easy-rsa/1.0/build-req-pass
 delete mode 100755 easy-rsa/1.0/clean-all
 delete mode 100644 easy-rsa/1.0/list-crl
 delete mode 100644 easy-rsa/1.0/make-crl
 delete mode 100644 easy-rsa/1.0/openssl.cnf
 delete mode 100644 easy-rsa/1.0/revoke-crt
 delete mode 100755 easy-rsa/1.0/revoke-full
 delete mode 100755 easy-rsa/1.0/sign-req
 delete mode 100644 easy-rsa/1.0/vars
 delete mode 100644 easy-rsa/2.0/Makefile
 delete mode 100644 easy-rsa/2.0/README
 delete mode 100755 easy-rsa/2.0/build-ca
 delete mode 100755 easy-rsa/2.0/build-dh
 delete mode 100755 easy-rsa/2.0/build-inter
 delete mode 100755 easy-rsa/2.0/build-key
 delete mode 100755 easy-rsa/2.0/build-key-pass
 delete mode 100755 easy-rsa/2.0/build-key-pkcs12
 delete mode 100755 easy-rsa/2.0/build-key-server
 delete mode 100755 easy-rsa/2.0/build-req
 delete mode 100755 easy-rsa/2.0/build-req-pass
 delete mode 100755 easy-rsa/2.0/clean-all
 delete mode 100755 easy-rsa/2.0/inherit-inter
 delete mode 100755 easy-rsa/2.0/list-crl
 delete mode 100755 easy-rsa/2.0/openssl-0.9.6.cnf
 delete mode 100755 easy-rsa/2.0/openssl-0.9.8.cnf
 delete mode 100755 easy-rsa/2.0/openssl-1.0.0.cnf
 delete mode 100755 easy-rsa/2.0/pkitool
 delete mode 100755 easy-rsa/2.0/revoke-full
 delete mode 100755 easy-rsa/2.0/sign-req
 delete mode 100755 easy-rsa/2.0/vars
 delete mode 100755 easy-rsa/2.0/whichopensslcnf
 delete mode 100644 easy-rsa/Windows/README.txt
 delete mode 100644 easy-rsa/Windows/build-ca-pass.bat
 delete mode 100644 easy-rsa/Windows/build-ca.bat
 delete mode 100644 easy-rsa/Windows/build-dh.bat
 delete mode 100644 easy-rsa/Windows/build-key-pass.bat
 delete mode 100644 easy-rsa/Windows/build-key-pkcs12.bat
 delete mode 100644 easy-rsa/Windows/build-key-server-pass.bat
 delete mode 100644 easy-rsa/Windows/build-key-server.bat
 delete mode 100644 easy-rsa/Windows/build-key.bat
 delete mode 100644 easy-rsa/Windows/clean-all.bat
 delete mode 100644 easy-rsa/Windows/index.txt.start
 delete mode 100755 easy-rsa/Windows/init-config.bat
 delete mode 100644 easy-rsa/Windows/revoke-full.bat
 delete mode 100644 easy-rsa/Windows/serial.start
 delete mode 100644 easy-rsa/Windows/vars.bat.sample
 delete mode 100644 errlevel.h
 delete mode 100644 error.c
 delete mode 100644 error.h
 delete mode 100644 event.c
 delete mode 100644 event.h
 delete mode 100644 fdmisc.c
 delete mode 100644 fdmisc.h
 delete mode 100644 forward-inline.h
 delete mode 100644 forward.c
 delete mode 100644 forward.h
 delete mode 100644 fragment.c
 delete mode 100644 fragment.h
 delete mode 100644 gremlin.c
 delete mode 100644 gremlin.h
 delete mode 100644 helper.c
 delete mode 100644 helper.h
 delete mode 100644 httpdigest.c
 delete mode 100644 httpdigest.h
 delete mode 100644 images/.svnignore
 delete mode 100644 images/Makefile.am
 delete mode 100755 images/icon.ico
 delete mode 100755 images/install-whirl.bmp
 create mode 100644 include/Makefile.am
 create mode 100644 include/openvpn-plugin.h
 delete mode 100644 init.c
 delete mode 100644 init.h
 delete mode 100644 install-win32/.svnignore
 delete mode 100644 install-win32/GetWindowsVersion.nsi
 delete mode 100644 install-win32/Makefile.am
 delete mode 100644 install-win32/build-pkcs11-helper.sh
 delete mode 100644 install-win32/buildinstaller
 delete mode 100644 install-win32/ddk-common
 delete mode 100644 install-win32/doclean
 delete mode 100644 install-win32/dosname.pl
 delete mode 100644 install-win32/getgui
 delete mode 100644 install-win32/getopenssl
 delete mode 100644 install-win32/getpkcs11helper
 delete mode 100644 install-win32/getprebuilt
 delete mode 100644 install-win32/getxgui
 delete mode 100644 install-win32/ifdef.pl
 delete mode 100644 install-win32/m4todef.pl
 delete mode 100644 install-win32/macro.pl
 delete mode 100755 install-win32/makeopenvpn
 delete mode 100644 install-win32/maketap
 delete mode 100644 install-win32/maketapinstall
 delete mode 100644 install-win32/maketext
 delete mode 100644 install-win32/openssl/README.txt
 delete mode 100644 install-win32/openssl/openssl097.patch
 delete mode 100644 install-win32/openssl/openssl098.patch
 delete mode 100755 install-win32/openvpn.nsi
 delete mode 100755 install-win32/sample.ovpn
 delete mode 100755 install-win32/setpath.nsi
 delete mode 100644 install-win32/settings.in
 delete mode 100644 install-win32/trans.pl
 delete mode 100755 install-win32/u2d.c
 delete mode 100644 install-win32/winconfig
 delete mode 100644 integer.h
 delete mode 100644 interval.c
 delete mode 100644 interval.h
 delete mode 100644 list.c
 delete mode 100644 list.h
 delete mode 100644 lladdr.c
 delete mode 100644 lladdr.h
 delete mode 100644 lzo.c
 delete mode 100644 lzo.h
 create mode 100644 m4/.keep
 create mode 100644 m4/ax_emptyarray.m4
 create mode 100644 m4/ax_socklen_t.m4
 create mode 100644 m4/ax_varargs.m4
 create mode 100644 m4/pkg.m4
 delete mode 100644 manage.c
 delete mode 100644 manage.h
 delete mode 100644 management/management-notes.txt
 delete mode 100644 mbuf.c
 delete mode 100644 mbuf.h
 delete mode 100644 memcmp.c
 delete mode 100644 memdbg.h
 delete mode 100644 misc.c
 delete mode 100644 misc.h
 delete mode 100644 mroute.c
 delete mode 100644 mroute.h
 delete mode 100644 mss.c
 delete mode 100644 mss.h
 delete mode 100644 mstats.c
 delete mode 100644 mstats.h
 create mode 100644 msvc-build.bat
 create mode 100644 msvc-dev.bat
 create mode 100644 msvc-env.bat
 delete mode 100644 msvc/autodefs.h.in
 delete mode 100644 msvc/config.py
 delete mode 100644 msvc/msvc.mak
 delete mode 100644 mtcp.c
 delete mode 100644 mtcp.h
 delete mode 100644 mtu.c
 delete mode 100644 mtu.h
 delete mode 100644 mudp.c
 delete mode 100644 mudp.h
 delete mode 100644 multi.c
 delete mode 100644 multi.h
 delete mode 100644 ntlm.c
 delete mode 100644 ntlm.h
 delete mode 100644 occ-inline.h
 delete mode 100644 occ.c
 delete mode 100644 occ.h
 delete mode 100644 openvpn-plugin.h
 delete mode 100644 openvpn.8
 delete mode 100644 openvpn.c
 delete mode 100644 openvpn.h
 create mode 100644 openvpn.sln
 delete mode 100644 openvpn.spec.in
 delete mode 100644 options.c
 delete mode 100644 options.h
 delete mode 100644 otime.c
 delete mode 100644 otime.h
 delete mode 100644 packet_id.c
 delete mode 100644 packet_id.h
 delete mode 100644 perf.c
 delete mode 100644 perf.h
 delete mode 100644 pf-inline.h
 delete mode 100644 pf.c
 delete mode 100644 pf.h
 delete mode 100644 ping-inline.h
 delete mode 100644 ping.c
 delete mode 100644 ping.h
 delete mode 100644 pkcs11.c
 delete mode 100644 pkcs11.h
 delete mode 100644 pkcs11_backend.h
 delete mode 100644 pkcs11_openssl.c
 delete mode 100644 pkcs11_polarssl.c
 delete mode 100644 plugin.c
 delete mode 100644 plugin.h
 delete mode 100644 plugin/README
 delete mode 100644 plugin/auth-pam/.svnignore
 delete mode 100755 plugin/auth-pam/Makefile
 delete mode 100644 plugin/auth-pam/README
 delete mode 100644 plugin/auth-pam/auth-pam.c
 delete mode 100644 plugin/auth-pam/pamdl.c
 delete mode 100644 plugin/auth-pam/pamdl.h
 delete mode 100644 plugin/defer/README
 delete mode 100755 plugin/defer/build
 delete mode 100644 plugin/defer/simple.c
 delete mode 100755 plugin/defer/simple.def
 delete mode 100755 plugin/defer/winbuild
 delete mode 100755 plugin/down-root/Makefile
 delete mode 100644 plugin/down-root/README
 delete mode 100644 plugin/down-root/down-root.c
 delete mode 100644 plugin/examples/README
 delete mode 100755 plugin/examples/build
 delete mode 100644 plugin/examples/log.c
 delete mode 100644 plugin/examples/log_v3.c
 delete mode 100644 plugin/examples/simple.c
 delete mode 100755 plugin/examples/simple.def
 delete mode 100755 plugin/examples/winbuild
 delete mode 100644 pool.c
 delete mode 100644 pool.h
 delete mode 100644 proto.c
 delete mode 100644 proto.h
 delete mode 100644 proxy.c
 delete mode 100644 proxy.h
 delete mode 100644 ps.c
 delete mode 100644 ps.h
 delete mode 100644 push.c
 delete mode 100644 push.h
 delete mode 100644 pushlist.h
 delete mode 100644 reliable.c
 delete mode 100644 reliable.h
 delete mode 100644 route.c
 delete mode 100644 route.h
 delete mode 100644 sample-config-files/README
 delete mode 100644 sample-config-files/client.conf
 delete mode 100755 sample-config-files/firewall.sh
 delete mode 100755 sample-config-files/home.up
 delete mode 100644 sample-config-files/loopback-client
 delete mode 100644 sample-config-files/loopback-server
 delete mode 100755 sample-config-files/office.up
 delete mode 100755 sample-config-files/openvpn-shutdown.sh
 delete mode 100755 sample-config-files/openvpn-startup.sh
 delete mode 100644 sample-config-files/server.conf
 delete mode 100644 sample-config-files/static-home.conf
 delete mode 100644 sample-config-files/static-office.conf
 delete mode 100644 sample-config-files/tls-home.conf
 delete mode 100644 sample-config-files/tls-office.conf
 delete mode 100644 sample-config-files/xinetd-client-config
 delete mode 100644 sample-config-files/xinetd-server-config
 delete mode 100644 sample-keys/README
 delete mode 100644 sample-keys/ca.crt
 delete mode 100644 sample-keys/ca.key
 delete mode 100644 sample-keys/client.crt
 delete mode 100644 sample-keys/client.key
 delete mode 100644 sample-keys/dh1024.pem
 delete mode 100644 sample-keys/pass.crt
 delete mode 100644 sample-keys/pass.key
 delete mode 100644 sample-keys/pkcs12.p12
 delete mode 100644 sample-keys/server.crt
 delete mode 100644 sample-keys/server.key
 delete mode 100755 sample-scripts/auth-pam.pl
 delete mode 100755 sample-scripts/bridge-start
 delete mode 100755 sample-scripts/bridge-stop
 delete mode 100755 sample-scripts/openvpn.init
 delete mode 100755 sample-scripts/ucn.pl
 delete mode 100755 sample-scripts/verify-cn
 create mode 100644 sample/Makefile.am
 create mode 100644 sample/sample-config-files/README
 create mode 100644 sample/sample-config-files/client.conf
 create mode 100755 sample/sample-config-files/firewall.sh
 create mode 100755 sample/sample-config-files/home.up
 create mode 100644 sample/sample-config-files/loopback-client
 create mode 100644 sample/sample-config-files/loopback-server
 create mode 100755 sample/sample-config-files/office.up
 create mode 100755 sample/sample-config-files/openvpn-shutdown.sh
 create mode 100755 sample/sample-config-files/openvpn-startup.sh
 create mode 100644 sample/sample-config-files/server.conf
 create mode 100644 sample/sample-config-files/static-home.conf
 create mode 100644 sample/sample-config-files/static-office.conf
 create mode 100644 sample/sample-config-files/tls-home.conf
 create mode 100644 sample/sample-config-files/tls-office.conf
 create mode 100644 sample/sample-config-files/xinetd-client-config
 create mode 100644 sample/sample-config-files/xinetd-server-config
 create mode 100644 sample/sample-keys/README
 create mode 100644 sample/sample-keys/ca.crt
 create mode 100644 sample/sample-keys/ca.key
 create mode 100644 sample/sample-keys/client.crt
 create mode 100644 sample/sample-keys/client.key
 create mode 100644 sample/sample-keys/dh1024.pem
 create mode 100644 sample/sample-keys/pass.crt
 create mode 100644 sample/sample-keys/pass.key
 create mode 100644 sample/sample-keys/pkcs12.p12
 create mode 100644 sample/sample-keys/server.crt
 create mode 100644 sample/sample-keys/server.key
 create mode 100755 sample/sample-scripts/auth-pam.pl
 create mode 100755 sample/sample-scripts/bridge-start
 create mode 100755 sample/sample-scripts/bridge-stop
 create mode 100755 sample/sample-scripts/ucn.pl
 create mode 100755 sample/sample-scripts/verify-cn
 create mode 100755 sample/sample-windows/sample.ovpn
 delete mode 100644 schedule.c
 delete mode 100644 schedule.h
 delete mode 100644 service-win32/.svnignore
 delete mode 100644 service-win32/Makefile.am
 delete mode 100644 service-win32/msvc.mak
 delete mode 100755 service-win32/openvpnserv.c
 delete mode 100644 service-win32/service.c
 delete mode 100644 service-win32/service.h
 delete mode 100644 session_id.c
 delete mode 100644 session_id.h
 delete mode 100644 shaper.c
 delete mode 100644 shaper.h
 delete mode 100644 sig.c
 delete mode 100644 sig.h
 delete mode 100644 socket.c
 delete mode 100644 socket.h
 delete mode 100644 socks.c
 delete mode 100644 socks.h
 delete mode 100755 sources
 create mode 100644 src/Makefile.am
 create mode 100644 src/compat/Makefile.am
 create mode 100644 src/compat/compat-basename.c
 create mode 100644 src/compat/compat-daemon.c
 create mode 100644 src/compat/compat-dirname.c
 create mode 100644 src/compat/compat-gettimeofday.c
 create mode 100644 src/compat/compat-inet_ntop.c
 create mode 100644 src/compat/compat-inet_pton.c
 create mode 100644 src/compat/compat.h
 create mode 100644 src/compat/compat.vcproj
 create mode 100644 src/openvpn/Makefile.am
 create mode 100644 src/openvpn/base64.c
 create mode 100644 src/openvpn/base64.h
 create mode 100644 src/openvpn/basic.h
 create mode 100644 src/openvpn/buffer.c
 create mode 100644 src/openvpn/buffer.h
 create mode 100644 src/openvpn/circ_list.h
 create mode 100644 src/openvpn/clinat.c
 create mode 100644 src/openvpn/clinat.h
 create mode 100644 src/openvpn/common.h
 create mode 100644 src/openvpn/console.c
 create mode 100644 src/openvpn/console.h
 create mode 100644 src/openvpn/crypto.c
 create mode 100644 src/openvpn/crypto.h
 create mode 100644 src/openvpn/crypto_backend.h
 create mode 100644 src/openvpn/crypto_openssl.c
 create mode 100644 src/openvpn/crypto_openssl.h
 create mode 100644 src/openvpn/crypto_polarssl.c
 create mode 100644 src/openvpn/crypto_polarssl.h
 create mode 100644 src/openvpn/cryptoapi.c
 create mode 100644 src/openvpn/cryptoapi.h
 create mode 100644 src/openvpn/dhcp.c
 create mode 100644 src/openvpn/dhcp.h
 create mode 100644 src/openvpn/errlevel.h
 create mode 100644 src/openvpn/error.c
 create mode 100644 src/openvpn/error.h
 create mode 100644 src/openvpn/event.c
 create mode 100644 src/openvpn/event.h
 create mode 100644 src/openvpn/fdmisc.c
 create mode 100644 src/openvpn/fdmisc.h
 create mode 100644 src/openvpn/forward-inline.h
 create mode 100644 src/openvpn/forward.c
 create mode 100644 src/openvpn/forward.h
 create mode 100644 src/openvpn/fragment.c
 create mode 100644 src/openvpn/fragment.h
 create mode 100644 src/openvpn/gremlin.c
 create mode 100644 src/openvpn/gremlin.h
 create mode 100644 src/openvpn/helper.c
 create mode 100644 src/openvpn/helper.h
 create mode 100644 src/openvpn/httpdigest.c
 create mode 100644 src/openvpn/httpdigest.h
 create mode 100644 src/openvpn/init.c
 create mode 100644 src/openvpn/init.h
 create mode 100644 src/openvpn/integer.h
 create mode 100644 src/openvpn/interval.c
 create mode 100644 src/openvpn/interval.h
 create mode 100644 src/openvpn/list.c
 create mode 100644 src/openvpn/list.h
 create mode 100644 src/openvpn/lladdr.c
 create mode 100644 src/openvpn/lladdr.h
 create mode 100644 src/openvpn/lzo.c
 create mode 100644 src/openvpn/lzo.h
 create mode 100644 src/openvpn/manage.c
 create mode 100644 src/openvpn/manage.h
 create mode 100644 src/openvpn/mbuf.c
 create mode 100644 src/openvpn/mbuf.h
 create mode 100644 src/openvpn/memdbg.h
 create mode 100644 src/openvpn/misc.c
 create mode 100644 src/openvpn/misc.h
 create mode 100644 src/openvpn/mroute.c
 create mode 100644 src/openvpn/mroute.h
 create mode 100644 src/openvpn/mss.c
 create mode 100644 src/openvpn/mss.h
 create mode 100644 src/openvpn/mstats.c
 create mode 100644 src/openvpn/mstats.h
 create mode 100644 src/openvpn/mtcp.c
 create mode 100644 src/openvpn/mtcp.h
 create mode 100644 src/openvpn/mtu.c
 create mode 100644 src/openvpn/mtu.h
 create mode 100644 src/openvpn/mudp.c
 create mode 100644 src/openvpn/mudp.h
 create mode 100644 src/openvpn/multi.c
 create mode 100644 src/openvpn/multi.h
 create mode 100644 src/openvpn/ntlm.c
 create mode 100644 src/openvpn/ntlm.h
 create mode 100644 src/openvpn/occ-inline.h
 create mode 100644 src/openvpn/occ.c
 create mode 100644 src/openvpn/occ.h
 create mode 100644 src/openvpn/openvpn.c
 create mode 100644 src/openvpn/openvpn.h
 create mode 100644 src/openvpn/openvpn.vcproj
 create mode 100644 src/openvpn/openvpn_win32_resources.rc
 create mode 100644 src/openvpn/options.c
 create mode 100644 src/openvpn/options.h
 create mode 100644 src/openvpn/otime.c
 create mode 100644 src/openvpn/otime.h
 create mode 100644 src/openvpn/packet_id.c
 create mode 100644 src/openvpn/packet_id.h
 create mode 100644 src/openvpn/perf.c
 create mode 100644 src/openvpn/perf.h
 create mode 100644 src/openvpn/pf-inline.h
 create mode 100644 src/openvpn/pf.c
 create mode 100644 src/openvpn/pf.h
 create mode 100644 src/openvpn/ping-inline.h
 create mode 100644 src/openvpn/ping.c
 create mode 100644 src/openvpn/ping.h
 create mode 100644 src/openvpn/pkcs11.c
 create mode 100644 src/openvpn/pkcs11.h
 create mode 100644 src/openvpn/pkcs11_backend.h
 create mode 100644 src/openvpn/pkcs11_openssl.c
 create mode 100644 src/openvpn/pkcs11_polarssl.c
 create mode 100644 src/openvpn/platform.c
 create mode 100644 src/openvpn/platform.h
 create mode 100644 src/openvpn/plugin.c
 create mode 100644 src/openvpn/plugin.h
 create mode 100644 src/openvpn/pool.c
 create mode 100644 src/openvpn/pool.h
 create mode 100644 src/openvpn/proto.c
 create mode 100644 src/openvpn/proto.h
 create mode 100644 src/openvpn/proxy.c
 create mode 100644 src/openvpn/proxy.h
 create mode 100644 src/openvpn/ps.c
 create mode 100644 src/openvpn/ps.h
 create mode 100644 src/openvpn/push.c
 create mode 100644 src/openvpn/push.h
 create mode 100644 src/openvpn/pushlist.h
 create mode 100644 src/openvpn/reliable.c
 create mode 100644 src/openvpn/reliable.h
 create mode 100644 src/openvpn/route.c
 create mode 100644 src/openvpn/route.h
 create mode 100644 src/openvpn/schedule.c
 create mode 100644 src/openvpn/schedule.h
 create mode 100644 src/openvpn/session_id.c
 create mode 100644 src/openvpn/session_id.h
 create mode 100644 src/openvpn/shaper.c
 create mode 100644 src/openvpn/shaper.h
 create mode 100644 src/openvpn/sig.c
 create mode 100644 src/openvpn/sig.h
 create mode 100644 src/openvpn/socket.c
 create mode 100644 src/openvpn/socket.h
 create mode 100644 src/openvpn/socks.c
 create mode 100644 src/openvpn/socks.h
 create mode 100644 src/openvpn/ssl.c
 create mode 100644 src/openvpn/ssl.h
 create mode 100644 src/openvpn/ssl_backend.h
 create mode 100644 src/openvpn/ssl_common.h
 create mode 100644 src/openvpn/ssl_openssl.c
 create mode 100644 src/openvpn/ssl_openssl.h
 create mode 100644 src/openvpn/ssl_polarssl.c
 create mode 100644 src/openvpn/ssl_polarssl.h
 create mode 100644 src/openvpn/ssl_verify.c
 create mode 100644 src/openvpn/ssl_verify.h
 create mode 100644 src/openvpn/ssl_verify_backend.h
 create mode 100644 src/openvpn/ssl_verify_openssl.c
 create mode 100644 src/openvpn/ssl_verify_openssl.h
 create mode 100644 src/openvpn/ssl_verify_polarssl.c
 create mode 100644 src/openvpn/ssl_verify_polarssl.h
 create mode 100644 src/openvpn/status.c
 create mode 100644 src/openvpn/status.h
 create mode 100644 src/openvpn/syshead.h
 create mode 100644 src/openvpn/tun.c
 create mode 100644 src/openvpn/tun.h
 create mode 100644 src/openvpn/win32.c
 create mode 100644 src/openvpn/win32.h
 create mode 100644 src/openvpnserv/Makefile.am
 create mode 100755 src/openvpnserv/openvpnserv.c
 create mode 100644 src/openvpnserv/openvpnserv.vcproj
 create mode 100644 src/openvpnserv/openvpnserv_resources.rc
 create mode 100644 src/openvpnserv/service.c
 create mode 100644 src/openvpnserv/service.h
 create mode 100644 src/plugins/README
 create mode 100755 src/plugins/auth-pam/Makefile
 create mode 100644 src/plugins/auth-pam/README
 create mode 100644 src/plugins/auth-pam/auth-pam.c
 create mode 100644 src/plugins/auth-pam/pamdl.c
 create mode 100644 src/plugins/auth-pam/pamdl.h
 create mode 100644 src/plugins/defer/README
 create mode 100755 src/plugins/defer/build
 create mode 100644 src/plugins/defer/simple.c
 create mode 100755 src/plugins/defer/simple.def
 create mode 100755 src/plugins/defer/winbuild
 create mode 100755 src/plugins/down-root/Makefile
 create mode 100644 src/plugins/down-root/README
 create mode 100644 src/plugins/down-root/down-root.c
 create mode 100644 src/plugins/examples/README
 create mode 100755 src/plugins/examples/build
 create mode 100644 src/plugins/examples/log.c
 create mode 100644 src/plugins/examples/log_v3.c
 create mode 100644 src/plugins/examples/simple.c
 create mode 100755 src/plugins/examples/simple.def
 create mode 100755 src/plugins/examples/winbuild
 delete mode 100644 ssl.c
 delete mode 100644 ssl.h
 delete mode 100644 ssl_backend.h
 delete mode 100644 ssl_common.h
 delete mode 100644 ssl_openssl.c
 delete mode 100644 ssl_openssl.h
 delete mode 100644 ssl_polarssl.c
 delete mode 100644 ssl_polarssl.h
 delete mode 100644 ssl_verify.c
 delete mode 100644 ssl_verify.h
 delete mode 100644 ssl_verify_backend.h
 delete mode 100644 ssl_verify_openssl.c
 delete mode 100644 ssl_verify_openssl.h
 delete mode 100644 ssl_verify_polarssl.c
 delete mode 100644 ssl_verify_polarssl.h
 delete mode 100644 status.c
 delete mode 100644 status.h
 delete mode 100644 suse/openvpn.init
 delete mode 100644 syshead.h
 delete mode 100644 t_client.rc-sample
 delete mode 100755 t_client.sh.in
 delete mode 100755 t_cltsrv-down.sh
 delete mode 100755 t_cltsrv.sh
 delete mode 100755 t_lpback.sh
 delete mode 100755 tap-win32/MAKEFILE
 delete mode 100755 tap-win32/SOURCES.in
 delete mode 100755 tap-win32/common.h
 delete mode 100755 tap-win32/constants.h
 delete mode 100755 tap-win32/dhcp.c
 delete mode 100755 tap-win32/dhcp.h
 delete mode 100755 tap-win32/endian.h
 delete mode 100755 tap-win32/error.c
 delete mode 100755 tap-win32/error.h
 delete mode 100755 tap-win32/hexdump.c
 delete mode 100755 tap-win32/hexdump.h
 delete mode 100755 tap-win32/i386/OemWin2k.inf.in
 delete mode 100755 tap-win32/instance.c
 delete mode 100755 tap-win32/lock.h
 delete mode 100755 tap-win32/macinfo.c
 delete mode 100755 tap-win32/macinfo.h
 delete mode 100755 tap-win32/mem.c
 delete mode 100755 tap-win32/proto.h
 delete mode 100755 tap-win32/prototypes.h
 delete mode 100755 tap-win32/resource.rc
 delete mode 100755 tap-win32/tapdrvr.c
 delete mode 100755 tap-win32/types.h
 create mode 100644 tests/Makefile.am
 create mode 100644 tests/t_client.rc-sample
 create mode 100755 tests/t_client.sh.in
 create mode 100755 tests/t_cltsrv-down.sh
 create mode 100755 tests/t_cltsrv.sh
 create mode 100755 tests/t_lpback.sh
 delete mode 100644 tun.c
 delete mode 100644 tun.h
 create mode 100644 version.sh.in
 delete mode 100644 win/__init__.py
 delete mode 100644 win/autodefs.h.in
 delete mode 100644 win/build.py
 delete mode 100644 win/build_all.py
 delete mode 100644 win/build_ddk.py
 delete mode 100644 win/build_exe.py
 delete mode 100644 win/config.h.in
 delete mode 100644 win/config.py
 delete mode 100644 win/config_all.py
 delete mode 100644 win/config_tap.py
 delete mode 100644 win/config_ti.py
 delete mode 100644 win/js.py
 delete mode 100644 win/make_dist.py
 delete mode 100644 win/msvc.mak.in
 delete mode 100755 win/openvpn.nsi
 delete mode 100755 win/setpath.nsi
 delete mode 100644 win/settings.in
 delete mode 100644 win/show.py
 delete mode 100644 win/sign.py
 delete mode 100644 win/tap_span.py
 delete mode 100644 win/wb.py
 delete mode 100644 win32.c
 delete mode 100644 win32.h
Signature · 1 line
1.7.3.4
#1 lore raw

PATCH 1/52 build: version should not contain '-'

---
 version.m4 |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
version.m4 +1 -1
index 9f15247..ff9b35f 100644
@@ -1,5 +1,5 @@
 dnl define the OpenVPN version
-define(PRODUCT_VERSION,[2.3-alpha1])
+define(PRODUCT_VERSION,[2.3_alpha1])
 dnl define the TAP version
 define(PRODUCT_TAP_ID,[tap0901])
 define(PRODUCT_TAP_WIN32_MIN_MAJOR,[9])
Signature · 1 line
1.7.3.4
#2 lore raw

PATCH 2/52 package: rpm: strip should be handled by package management

In reply to Alon Bar-Lev
---
 openvpn.spec.in |    1 -
 1 files changed, 0 insertions(+), 1 deletions(-)
openvpn.spec.in +0 -1
index c5178e9..c42e7c6 100644
@@ -101,7 +101,6 @@ and portability to most major OS platforms.
 %build
 %configure --disable-dependency-tracking %{?with_password_save:--enable-password-save} %{?without_lzo:--disable-lzo} %{?with_kerberos:--with-ssl-headers=/usr/kerberos/include}
 %__make
-%__strip %{name}
 
 # Build down-root plugin
 pushd plugin/down-root
Signature · 1 line
1.7.3.4
#3 lore raw

Re: [Openvpn-devel] [PATCH 02/52] package: rpm: strip should be handled by package management

Quoted 11 lines
---
 openvpn.spec.in |    1 -
 1 files changed, 0 insertions(+), 1 deletions(-)
openvpn.spec.in +0 -0
index c5178e9..c42e7c6 100644

openvpn.spec.in and portability to most major OS platforms. · line 106

Quoted 7 lines
openvpn.spec.in +0 -1
@@ -101,7 +101,6 @@ and portability to most major OS platforms.
 %build
 %configure --disable-dependency-tracking %{?with_password_save:--enable-password-save} %{?without_lzo:--disable-lzo} %{?with_kerberos:--with-ssl-headers=/usr/kerberos/include}
 %__make
-%__strip %{name}
 
 # Build down-root plugin
 pushd plugin/down-root

Let's see if I understood this correctly... the binary is stripped anyways when the package is installed? On a CentOS 6 box I have this in "rpm --showrc" output[1]:

-14: __os_install_post
%{_rpmconfigdir}/brp-compress
%{_rpmconfigdir}/brp-strip
%{_rpmconfigdir}/brp-strip-static-archive
%{_rpmconfigdir}/brp-strip-comment-note

If so, I give this one an ACK.

Signature · 9 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock


[1] See
<http://groups.google.com/group/linux.redhat.rpm/browse_thread/thread/4cacfa2591cad1c9>
#4 lore raw

Re: [Openvpn-devel] [PATCH 02/52] package: rpm: strip should be handled by package management

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoted 20 lines · Samuli Seppänen
Quoted 14 lines

openvpn.spec.in | 1 - 1 files changed, 0 insertions(+), 1
deletions(-)

openvpn.spec.in index renamed from openvpn.spec.in +0 -0

c5178e9..c42e7c6 100644 --- a/openvpn.spec.in +++ b/openvpn.spec.in

openvpn.spec.in index renamed from openvpn.spec.in +0 -0
@@ -101,7 +101,6 @@ and portability to most major OS platforms. 

%build %configure --disable-dependency-tracking %{?with_password_save:--enable-password-save} %{?without_lzo:--disable-lzo} %{?with_kerberos:--with-ssl-headers=/usr/kerberos/include} %__make -%__strip %{name}

Quoted 1 line

# Build down-root plugin pushd plugin/down-root

Let's see if I understood this correctly... the binary is stripped anyways when the package is installed? On a CentOS 6 box I have this in "rpm --showrc" output[1]:

Quoted 5 lines

-14: __os_install_post %{_rpmconfigdir}/brp-compress %{_rpmconfigdir}/brp-strip %{_rpmconfigdir}/brp-strip-static-archive %{_rpmconfigdir}/brp-strip-comment-note

If so, I give this one an ACK.

That's correct, according to what I remember from the Fedora packaging guidelines. The .spec file should not strip packages explicit. The rpmbuild process will take care of that, which will also create the debuginfo files during that process. If explicit stripping the binaries in the .spec file, there won't be any debuginfo files either.

The Fedora packaging rules also applies to EPEL, which then (kind of) hits RHEL, CentOS and ScientificLinux as well.

kind regards,

David Sommerseth
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9V4FUACgkQDC186MBRfrogGwCdFnC9pPmXYjEFfFF0Yyon78kG 6aEAn207GtSWS437XpN9mDoCGtXNm3iI
=gJ2V
-----END PGP SIGNATURE-----

#5 lore raw

PATCH 3/52 cleanup: options.c: remove redundant include

In reply to Alon Bar-Lev
---
 options.c |    1 -
 1 files changed, 0 insertions(+), 1 deletions(-)
options.c +0 -1
index a596ffe..3d8085c 100644
@@ -50,7 +50,6 @@
 #include "manage.h"
 #include "forward.h"
 #include "configure.h"
-#include "forward.h"
 #include <ctype.h>
 
 #include "memdbg.h"
Signature · 1 line
1.7.3.4
#6 lore raw

PATCH 4/52 cleanup: remove C++ warnings

In reply to Alon Bar-Lev
---
 httpdigest.c   |    4 ++--
 init.c         |    2 +-
 misc.c         |    6 +++---
 options.c      |    4 ++--
 socket.c       |    4 ++--
 ssl_polarssl.c |    6 ++++--
 6 files changed, 14 insertions(+), 12 deletions(-)
httpdigest.c +2 -2
index 5907637..1aa19ae 100644
@@ -111,7 +111,7 @@ DigestCalcResponse(
   md_ctx_t md5_ctx;
   const md_kt_t *md5_kt = md_kt_get("MD5");
 
-  // calculate H(A2)
+  /* calculate H(A2) */
   md_ctx_init(&md5_ctx, md5_kt);
   md_ctx_update(&md5_ctx, pszMethod, strlen(pszMethod));
   md_ctx_update(&md5_ctx, ":", 1);
@@ -124,7 +124,7 @@ DigestCalcResponse(
   md_ctx_final(&md5_ctx, HA2);
   CvtHex(HA2, HA2Hex);
 
-  // calculate response
+  /* calculate response */
   md_ctx_init(&md5_ctx, md5_kt);
   md_ctx_update(&md5_ctx, HA1, HASHHEXLEN);
   md_ctx_update(&md5_ctx, ":", 1);
init.c +1 -1
index fb8fe00..d2ad318 100644
@@ -745,7 +745,7 @@ init_static (void)
     uint8_t rndbuf[8];
     int i;
     prng_init ("sha1", 16);
-    //prng_init (NULL, 0);
+    /*prng_init (NULL, 0);*/
     const int factor = 1;
     for (i = 0; i < factor * 8; ++i)
       {
misc.c +3 -3
index a07780f..2a1c1c9 100644
@@ -2457,17 +2457,17 @@ argv_test (void)
   argv_printf (&a, "%sc foo bar %s", "c:\\\\src\\\\test\\\\jyargs.exe", "foo bar");
   argv_msg_prefix (M_INFO, &a, "ARGV");
   msg (M_INFO, "ARGV-S: %s", argv_system_str(&a));
-  //openvpn_execve_check (&a, NULL, 0, "command failed");
+  /*openvpn_execve_check (&a, NULL, 0, "command failed");*/
 
   argv_printf (&a, "%sc %s %s", "c:\\\\src\\\\test files\\\\batargs.bat", "foo", "bar");  
   argv_msg_prefix (M_INFO, &a, "ARGV");
   msg (M_INFO, "ARGV-S: %s", argv_system_str(&a));
-  //openvpn_execve_check (&a, NULL, 0, "command failed");
+  /*openvpn_execve_check (&a, NULL, 0, "command failed");*/
 
   argv_printf (&a, "%s%sc foo bar %s %s/%d %d %u", "/foo", "/bar.exe", "one two", "1.2.3.4", 24, -69, 96);
   argv_msg_prefix (M_INFO, &a, "ARGV");
   msg (M_INFO, "ARGV-S: %s", argv_system_str(&a));
-  //openvpn_execve_check (&a, NULL, 0, "command failed");
+  /*openvpn_execve_check (&a, NULL, 0, "command failed");*/
 
   argv_printf (&a, "this is a %s test of int %d unsigned %u", "FOO", -69, 42);
   s = argv_str (&a, &gc, PA_BRACKET);
options.c +2 -2
index 3d8085c..f11849d 100644
@@ -4764,7 +4764,7 @@ add_option (struct options *options,
     }
   else if (streq (p[0], "fragment") && p[1])
     {
-//      VERIFY_PERMISSION (OPT_P_MTU);
+/*      VERIFY_PERMISSION (OPT_P_MTU); */
       VERIFY_PERMISSION (OPT_P_MTU|OPT_P_CONNECTION);
       options->ce.fragment = positive_atoi (p[1]);
     }
@@ -5118,7 +5118,7 @@ add_option (struct options *options,
   else if (streq (p[0], "explicit-exit-notify"))
     {
       VERIFY_PERMISSION (OPT_P_GENERAL|OPT_P_CONNECTION);
-//      VERIFY_PERMISSION (OPT_P_EXPLICIT_NOTIFY);
+/*      VERIFY_PERMISSION (OPT_P_EXPLICIT_NOTIFY); */
       if (p[1])
 	{
 	  options->ce.explicit_exit_notification = positive_atoi (p[1]);
socket.c +2 -2
index 1a772af..61265e4 100644
@@ -3106,7 +3106,7 @@ openvpn_inet_ntop(int af, const void *src, char *dst, socklen_t size)
     default:
       ASSERT (0);
   }
-  // cannot direclty use &size because of strict aliasing rules
+  /* cannot direclty use &size because of strict aliasing rules */
   return (WSAAddressToString((struct sockaddr *)&ss, sizeof(ss), NULL, dst, &s) == 0)?
           dst : NULL;
 }
@@ -3119,7 +3119,7 @@ openvpn_inet_pton(int af, const char *src, void *dst)
   char src_copy[INET6_ADDRSTRLEN+1];
 
   CLEAR(ss);
-  // stupid non-const API
+  /* stupid non-const API */
   strncpynt(src_copy, src, INET6_ADDRSTRLEN+1);
 
   if (WSAStringToAddress(src_copy, af, NULL, (struct sockaddr *)&ss, &size) == 0) {
ssl_polarssl.c +4 -2
index c50cf0a..02dc233 100644
@@ -324,8 +324,10 @@ tls_ctx_load_priv_file (struct tls_root_ctx *ctx, const char *priv_key_file
   warn_if_group_others_accessible (priv_key_file);
 
   /* TODO: Check Private Key */
-//  if (!SSL_CTX_check_private_key (ctx))
-//    msg (M_SSLERR, "Private key does not match the certificate");
+#if 0
+  if (!SSL_CTX_check_private_key (ctx))
+    msg (M_SSLERR, "Private key does not match the certificate");
+#endif
   return 0;
 }
 
Signature · 1 line
1.7.3.4
#7 lore raw

Re: [Openvpn-devel] [PATCH 04/52] cleanup: remove C++ warnings

Quoted 122 lines
---
 httpdigest.c   |    4 ++--
 init.c         |    2 +-
 misc.c         |    6 +++---
 options.c      |    4 ++--
 socket.c       |    4 ++--
 ssl_polarssl.c |    6 ++++--
 6 files changed, 14 insertions(+), 12 deletions(-)
httpdigest.c +2 -2
index 5907637..1aa19ae 100644
@@ -111,7 +111,7 @@ DigestCalcResponse(
   md_ctx_t md5_ctx;
   const md_kt_t *md5_kt = md_kt_get("MD5");
 
-  // calculate H(A2)
+  /* calculate H(A2) */
   md_ctx_init(&md5_ctx, md5_kt);
   md_ctx_update(&md5_ctx, pszMethod, strlen(pszMethod));
   md_ctx_update(&md5_ctx, ":", 1);
@@ -124,7 +124,7 @@ DigestCalcResponse(
   md_ctx_final(&md5_ctx, HA2);
   CvtHex(HA2, HA2Hex);
 
-  // calculate response
+  /* calculate response */
   md_ctx_init(&md5_ctx, md5_kt);
   md_ctx_update(&md5_ctx, HA1, HASHHEXLEN);
   md_ctx_update(&md5_ctx, ":", 1);
init.c +1 -1
index fb8fe00..d2ad318 100644
@@ -745,7 +745,7 @@ init_static (void)
     uint8_t rndbuf[8];
     int i;
     prng_init ("sha1", 16);
-    //prng_init (NULL, 0);
+    /*prng_init (NULL, 0);*/
     const int factor = 1;
     for (i = 0; i < factor * 8; ++i)
       {
misc.c +3 -3
index a07780f..2a1c1c9 100644
@@ -2457,17 +2457,17 @@ argv_test (void)
   argv_printf (&a, "%sc foo bar %s", "c:\\\\src\\\\test\\\\jyargs.exe", "foo bar");
   argv_msg_prefix (M_INFO, &a, "ARGV");
   msg (M_INFO, "ARGV-S: %s", argv_system_str(&a));
-  //openvpn_execve_check (&a, NULL, 0, "command failed");
+  /*openvpn_execve_check (&a, NULL, 0, "command failed");*/
 
   argv_printf (&a, "%sc %s %s", "c:\\\\src\\\\test files\\\\batargs.bat", "foo", "bar");  
   argv_msg_prefix (M_INFO, &a, "ARGV");
   msg (M_INFO, "ARGV-S: %s", argv_system_str(&a));
-  //openvpn_execve_check (&a, NULL, 0, "command failed");
+  /*openvpn_execve_check (&a, NULL, 0, "command failed");*/
 
   argv_printf (&a, "%s%sc foo bar %s %s/%d %d %u", "/foo", "/bar.exe", "one two", "1.2.3.4", 24, -69, 96);
   argv_msg_prefix (M_INFO, &a, "ARGV");
   msg (M_INFO, "ARGV-S: %s", argv_system_str(&a));
-  //openvpn_execve_check (&a, NULL, 0, "command failed");
+  /*openvpn_execve_check (&a, NULL, 0, "command failed");*/
 
   argv_printf (&a, "this is a %s test of int %d unsigned %u", "FOO", -69, 42);
   s = argv_str (&a, &gc, PA_BRACKET);
options.c +2 -2
index 3d8085c..f11849d 100644
@@ -4764,7 +4764,7 @@ add_option (struct options *options,
     }
   else if (streq (p[0], "fragment") && p[1])
     {
-//      VERIFY_PERMISSION (OPT_P_MTU);
+/*      VERIFY_PERMISSION (OPT_P_MTU); */
       VERIFY_PERMISSION (OPT_P_MTU|OPT_P_CONNECTION);
       options->ce.fragment = positive_atoi (p[1]);
     }
@@ -5118,7 +5118,7 @@ add_option (struct options *options,
   else if (streq (p[0], "explicit-exit-notify"))
     {
       VERIFY_PERMISSION (OPT_P_GENERAL|OPT_P_CONNECTION);
-//      VERIFY_PERMISSION (OPT_P_EXPLICIT_NOTIFY);
+/*      VERIFY_PERMISSION (OPT_P_EXPLICIT_NOTIFY); */
       if (p[1])
 	{
 	  options->ce.explicit_exit_notification = positive_atoi (p[1]);
socket.c +2 -2
index 1a772af..61265e4 100644
@@ -3106,7 +3106,7 @@ openvpn_inet_ntop(int af, const void *src, char *dst, socklen_t size)
     default:
       ASSERT (0);
   }
-  // cannot direclty use &size because of strict aliasing rules
+  /* cannot direclty use &size because of strict aliasing rules */
   return (WSAAddressToString((struct sockaddr *)&ss, sizeof(ss), NULL, dst, &s) == 0)?
           dst : NULL;
 }
@@ -3119,7 +3119,7 @@ openvpn_inet_pton(int af, const char *src, void *dst)
   char src_copy[INET6_ADDRSTRLEN+1];
 
   CLEAR(ss);
-  // stupid non-const API
+  /* stupid non-const API */
   strncpynt(src_copy, src, INET6_ADDRSTRLEN+1);
 
   if (WSAStringToAddress(src_copy, af, NULL, (struct sockaddr *)&ss, &size) == 0) {
ssl_polarssl.c +0 -0
index c50cf0a..02dc233 100644
@@ -324,8 +324,10 @@ tls_ctx_load_priv_file (struct tls_root_ctx *ctx, const char *priv_key_file
   warn_if_group_others_accessible (priv_key_file);
 

ssl_polarssl.c tls_ctx_load_priv_file (struct tls_root_ctx *ctx, const char *priv_key_file · line 333

Quoted 10 lines
ssl_polarssl.c +4 -2
   /* TODO: Check Private Key */
-//  if (!SSL_CTX_check_private_key (ctx))
-//    msg (M_SSLERR, "Private key does not match the certificate");
+#if 0
+  if (!SSL_CTX_check_private_key (ctx))
+    msg (M_SSLERR, "Private key does not match the certificate");
+#endif
   return 0;
 }
 

The C++ style commenting[1] has not spread widely in OpenVPN:

$ grep "//" *.c|less

Although this commenting style has been valid in C since C99 (year 2000), the actual C99 implementations seem to be incomplete[2]. So, just to be on the safe side, I'll give this one an ACK.

Signature · 9 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock


[1] <http://en.wikipedia.org/wiki/C_syntax#Comments>
[2] <http://en.wikipedia.org/wiki/C99#Implementations>
#8 lore raw

Re: [Openvpn-devel] [PATCH 04/52] cleanup: remove C++ warnings

2012/3/6 Samuli Seppänen <[email protected]...>:

Quoted 3 lines

Although this commenting style has been valid in C since C99 (year 2000), the actual C99 implementations seem to be incomplete[2]. So, just to be on the safe side, I'll give this one an ACK.

As long as we need to support old machines, we need to support C89. There is much work to be done to cleanup warnings gcc produces using -pendatic -Wall -Wextra.
But cleaning these will improve the ability to find issues.

Alon.

#9 lore raw

PATCH 5/52 cleanup: win32.c: wrong printf format

In reply to Alon Bar-Lev
---
 win32.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
win32.c +2 -2
index 2ba97fc..acf5ebc 100644
@@ -1012,12 +1012,12 @@ openvpn_execve (const struct argv *a, const struct env_set *es, const unsigned i
 		  if (GetExitCodeProcess (proc_info.hProcess, &exit_status))
 		    ret = (int)exit_status;
 		  else
-		    msg (M_WARN|M_ERRNO, "openvpn_execve: GetExitCodeProcess %s failed", cmd);
+		    msg (M_WARN|M_ERRNO, "openvpn_execve: GetExitCodeProcess %S failed", cmd);
 		  CloseHandle (proc_info.hProcess);
 		}
 	      else
 		{
-		  msg (M_WARN|M_ERRNO, "openvpn_execve: CreateProcess %s failed", cmd);
+		  msg (M_WARN|M_ERRNO, "openvpn_execve: CreateProcess %S failed", cmd);
 		}
 	      free (env);
 	      gc_free (&gc);
Signature · 1 line
1.7.3.4
#10 lore raw

PATCH 6/52 cleanup: remove redundant ';'

In reply to Alon Bar-Lev
---
 misc.h |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
misc.h +1 -1
index bdada42..dd6bd5a 100644
@@ -145,7 +145,7 @@ openvpn_run_script (const struct argv *a, const struct env_set *es, const unsign
 
   openvpn_snprintf(msg, sizeof(msg), "WARNING: Failed running command (%s)", hook);
   return openvpn_execve_check(a, es, flags | S_SCRIPT, msg);
-};
+}
 
 #ifdef WIN32
 FILE * openvpn_fopen (const char *path, const char *mode);
Signature · 1 line
1.7.3.4
#11 lore raw

Re: [Openvpn-devel] [PATCH 06/52] cleanup: remove redundant ';'

Quoted 11 lines
---
 misc.h |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
misc.h +0 -0
index bdada42..dd6bd5a 100644

misc.h openvpn_run_script (const struct argv *a, const struct env_set *es, const unsign · line 151

Quoted 8 lines
misc.h +1 -1
@@ -145,7 +145,7 @@ openvpn_run_script (const struct argv *a, const struct env_set *es, const unsign
 
   openvpn_snprintf(msg, sizeof(msg), "WARNING: Failed running command (%s)", hook);
   return openvpn_execve_check(a, es, flags | S_SCRIPT, msg);
-};
+}
 
 #ifdef WIN32
 FILE * openvpn_fopen (const char *path, const char *mode);

Seems like an anomaly. ACK.

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
#12 lore raw

PATCH 7/52 cleanup: crypto_openssl.c: remove support for pre-openssl-0.9.6

In reply to Alon Bar-Lev

autoconf rejecting this anyway:
---
AC_MSG_CHECKING([that OpenSSL Library is at least version 0.9.6]) <snip>
AC_MSG_ERROR([OpenSSL crypto Library is too old.])
---

---
 crypto_openssl.c |   49 -------------------------------------------------
 1 files changed, 0 insertions(+), 49 deletions(-)
crypto_openssl.c +0 -49
index 0a41b39..e5e1122 100644
@@ -78,47 +78,6 @@
 
 #endif
 
-#if SSLEAY_VERSION_NUMBER < 0x00906000
-
-#undef EVP_CIPHER_mode
-#define EVP_CIPHER_mode(x) 1
-#define EVP_CIPHER_CTX_mode(x) 1
-#define EVP_CIPHER_flags(x) 0
-
-#define EVP_CIPH_CBC_MODE 1
-#define EVP_CIPH_CFB_MODE 0
-#define EVP_CIPH_OFB_MODE 0
-#define EVP_CIPH_VARIABLE_LENGTH 0
-
-#define OPENSSL_malloc(x) malloc(x)
-#define OPENSSL_free(x) free(x)
-
-static inline int
-EVP_CipherInit_ov (EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type, uint8_t *key, uint8_t *iv, int enc)
-{
-  EVP_CipherInit (ctx, type, key, iv, enc);
-  return 1;
-}
-
-static inline int
-EVP_CipherUpdate_ov (EVP_CIPHER_CTX *ctx, uint8_t *out, int *outl, uint8_t *in, int inl)
-{
-  EVP_CipherUpdate (ctx, out, outl, in, inl);
-  return 1;
-}
-
-static inline bool
-cipher_ok (const char* name)
-{
-  const int i = strlen (name) - 4;
-  if (i >= 0)
-    return !strcmp (name + i, "-CBC");
-  else
-    return false;
-}
-
-#else
-
 static inline int
 EVP_CipherInit_ov (EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type, uint8_t *key, uint8_t *iv, int enc)
 {
@@ -137,14 +96,6 @@ cipher_ok (const char* name)
   return true;
 }
 
-#endif
-
-#if SSLEAY_VERSION_NUMBER < 0x0090581f
-
-#undef DES_check_key_parity
-#define DES_check_key_parity(x) 1
-#endif /* SSLEAY_VERSION_NUMBER < 0x0090581f */
-
 #ifndef EVP_CIPHER_name
 #define EVP_CIPHER_name(e)		OBJ_nid2sn(EVP_CIPHER_nid(e))
 #endif
Signature · 1 line
1.7.3.4
#13 lore raw

Re: [Openvpn-devel] [PATCH 07/52] cleanup: crypto_openssl.c: remove support for pre-openssl-0.9.6

Quoted 70 lines

autoconf rejecting this anyway:
---
AC_MSG_CHECKING([that OpenSSL Library is at least version 0.9.6]) <snip>
AC_MSG_ERROR([OpenSSL crypto Library is too old.])
---

---
 crypto_openssl.c |   49 -------------------------------------------------
 1 files changed, 0 insertions(+), 49 deletions(-)
crypto_openssl.c +0 -42
index 0a41b39..e5e1122 100644
@@ -78,47 +78,6 @@
 
 #endif
 
-#if SSLEAY_VERSION_NUMBER < 0x00906000
-
-#undef EVP_CIPHER_mode
-#define EVP_CIPHER_mode(x) 1
-#define EVP_CIPHER_CTX_mode(x) 1
-#define EVP_CIPHER_flags(x) 0
-
-#define EVP_CIPH_CBC_MODE 1
-#define EVP_CIPH_CFB_MODE 0
-#define EVP_CIPH_OFB_MODE 0
-#define EVP_CIPH_VARIABLE_LENGTH 0
-
-#define OPENSSL_malloc(x) malloc(x)
-#define OPENSSL_free(x) free(x)
-
-static inline int
-EVP_CipherInit_ov (EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type, uint8_t *key, uint8_t *iv, int enc)
-{
-  EVP_CipherInit (ctx, type, key, iv, enc);
-  return 1;
-}
-
-static inline int
-EVP_CipherUpdate_ov (EVP_CIPHER_CTX *ctx, uint8_t *out, int *outl, uint8_t *in, int inl)
-{
-  EVP_CipherUpdate (ctx, out, outl, in, inl);
-  return 1;
-}
-
-static inline bool
-cipher_ok (const char* name)
-{
-  const int i = strlen (name) - 4;
-  if (i >= 0)
-    return !strcmp (name + i, "-CBC");
-  else
-    return false;
-}
-
-#else
-
 static inline int
 EVP_CipherInit_ov (EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type, uint8_t *key, uint8_t *iv, int enc)
 {
@@ -137,14 +96,6 @@ cipher_ok (const char* name)
   return true;
 }
 
-#endif

crypto_openssl.c cipher_ok (const char* name) · line 101

Quoted 10 lines
crypto_openssl.c +0 -7
-
-#if SSLEAY_VERSION_NUMBER < 0x0090581f
-
-#undef DES_check_key_parity
-#define DES_check_key_parity(x) 1
-#endif /* SSLEAY_VERSION_NUMBER < 0x0090581f */
-
 #ifndef EVP_CIPHER_name
 #define EVP_CIPHER_name(e)		OBJ_nid2sn(EVP_CIPHER_nid(e))
 #endif

It has been agreed earlier that OpenSSL 0.9.6 will not be supported anymore. ACK.

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
#14 lore raw

PATCH 8/52 cleanup: tun.c: fix incorrect option in message (ip-win32)

In reply to Alon Bar-Lev
---
 tun.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
tun.c +1 -1
index c92c0d7..81b66fb 100644
@@ -4492,7 +4492,7 @@ dhcp_masq_addr (const in_addr_t local, const in_addr_t netmask, const int offset
     msg (M_FATAL, "ERROR: There is a clash between the --ifconfig local address and the internal DHCP server address -- both are set to %s -- please use the --ip-win32 dynamic option to choose a different free address from the --ifconfig subnet for the internal DHCP server", print_in_addr_t (dsa, 0, &gc));
 
   if ((local & netmask) != (dsa & netmask))
-    msg (M_FATAL, "ERROR: --tap-win32 dynamic [offset] : offset is outside of --ifconfig subnet");
+    msg (M_FATAL, "ERROR: --ip-win32 dynamic [offset] : offset is outside of --ifconfig subnet");
 
   gc_free (&gc);
   return htonl(dsa);
Signature · 1 line
1.7.3.4
#15 lore raw

Re: [Openvpn-devel] [PATCH 08/52] cleanup: tun.c: fix incorrect option in message (ip-win32)

Quoted 11 lines
---
 tun.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
tun.c +0 -0
index c92c0d7..81b66fb 100644

tun.c dhcp_masq_addr (const in_addr_t local, const in_addr_t netmask, const int offset · line 4498

Quoted 8 lines
tun.c +1 -1
@@ -4492,7 +4492,7 @@ dhcp_masq_addr (const in_addr_t local, const in_addr_t netmask, const int offset
     msg (M_FATAL, "ERROR: There is a clash between the --ifconfig local address and the internal DHCP server address -- both are set to %s -- please use the --ip-win32 dynamic option to choose a different free address from the --ifconfig subnet for the internal DHCP server", print_in_addr_t (dsa, 0, &gc));
 
   if ((local & netmask) != (dsa & netmask))
-    msg (M_FATAL, "ERROR: --tap-win32 dynamic [offset] : offset is outside of --ifconfig subnet");
+    msg (M_FATAL, "ERROR: --ip-win32 dynamic [offset] : offset is outside of --ifconfig subnet");
 
   gc_free (&gc);
   return htonl(dsa);

ACK. There is indeed no --tap-win32 option.

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
#16 lore raw

PATCH 9/52 cleanup: memcmp.c: remove unused source

In reply to Alon Bar-Lev
---
 configure.ac |    3 ---
 memcmp.c     |   43 -------------------------------------------
 2 files changed, 0 insertions(+), 46 deletions(-)
 delete mode 100644 memcmp.c
configure.ac +0 -3
index 25dcc37..1c4d66c 100644
@@ -564,9 +564,6 @@ else
 
 fi
 
-dnl Required library functions
-AC_FUNC_MEMCMP
-
 dnl
 dnl Check for res_init
 dnl
memcmp.c deleted +0 -43

43 lines not on this page · raw message

Signature · 1 line
1.7.3.4
#17 lore raw

Re: [Openvpn-devel] [PATCH 09/52] cleanup: memcmp.c: remove unused source

Quoted 61 lines
---
 configure.ac |    3 ---
 memcmp.c     |   43 -------------------------------------------
 2 files changed, 0 insertions(+), 46 deletions(-)
 delete mode 100644 memcmp.c
configure.ac +0 -3
index 25dcc37..1c4d66c 100644
@@ -564,9 +564,6 @@ else
 
 fi
 
-dnl Required library functions
-AC_FUNC_MEMCMP
-
 dnl
 dnl Check for res_init
 dnl
memcmp.c deleted +0 -33
deleted file mode 100644
index d921aac..0000000
@@ -1,43 +0,0 @@
-/*
- *  OpenVPN -- An application to securely tunnel IP networks
- *             over a single TCP/UDP port, with support for SSL/TLS-based
- *             session authentication and key exchange,
- *             packet encryption, packet authentication, and
- *             packet compression.
- *
- *  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <[email protected]...>
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License version 2
- *  as published by the Free Software Foundation.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program (see the file COPYING included with this
- *  distribution); if not, write to the Free Software Foundation, Inc.,
- *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
- */
-
-#include "syshead.h"
-
-#include "memdbg.h"
-
-int
-memcmp (const void *s1, const void *s2, size_t n)
-{
-  unsigned const char *p1 = s1, *p2 = s2;
-  int d;

memcmp.c line 43

Quoted 10 lines
memcmp.c deleted +0 -10
-
-  if (n)
-    while (n-- > 0)
-      {
-	d = *p1++ - *p2++;
-	if (d != 0)
-	  return d;
-      }
-  return 0;
-}

My C-fu is fairly low, but this still seems to make sense as there's no memcmp.h. The memcmp function calls in other source files seem to use memcmp function stored elsewhere (gcc[1], libc[2], etc.).

ACK.

Signature · 10 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock


[1] <http://justin.harmonize.fm/index.php/2009/05/exploring-memcmp>
[2]
<http://www.slac.stanford.edu/comp/unix/package/rtems/doc/html/libc/libc.info.memcmp.html>
#18 lore raw

Re: [Openvpn-devel] [PATCH 09/52] cleanup: memcmp.c: remove unused source

Not exactly.
This file is needed for VERY old libc implementations. I don't think these exists anymore in supported configurations. If we find memcmp() is missing, we add it properly to compat.

2012/3/6 Samuli Seppänen <[email protected]...>:

Quoted 89 lines
Quoted 61 lines

---
 configure.ac |    3 ---
 memcmp.c     |   43 -------------------------------------------

 2 files changed, 0 insertions(+), 46 deletions(-)

 delete mode 100644 memcmp.c

configure.ac +0 -0
index 25dcc37..1c4d66c 100644
@@ -564,9 +564,6 @@ else
 

 fi

configure.ac +0 -3
-dnl Required library functions
-AC_FUNC_MEMCMP
-

 dnl
 dnl Check for res_init
 dnl

memcmp.c deleted +0 -33
deleted file mode 100644
index d921aac..0000000
@@ -1,43 +0,0 @@
-/*
- *  OpenVPN -- An application to securely tunnel IP networks
- *             over a single TCP/UDP port, with support for SSL/TLS-based
- *             session authentication and key exchange,
- *             packet encryption, packet authentication, and
- *             packet compression.
- *
- *  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <[email protected]...>
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License version 2
- *  as published by the Free Software Foundation.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program (see the file COPYING included with this
- *  distribution); if not, write to the Free Software Foundation, Inc.,
- *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
- */
-
-#include "syshead.h"
-
-#include "memdbg.h"
-
-int
-memcmp (const void *s1, const void *s2, size_t n)
-{
-  unsigned const char *p1 = s1, *p2 = s2;
-  int d;

memcmp.c line 43

Quoted 10 lines
memcmp.c deleted +0 -10
-
-  if (n)
-    while (n-- > 0)
-      {
-     d = *p1++ - *p2++;
-     if (d != 0)
-       return d;
-      }
-  return 0;
-}

My C-fu is fairly low, but this still seems to make sense as there's no memcmp.h. The memcmp function calls in other source files seem to use memcmp function stored elsewhere (gcc[1], libc[2], etc.).

ACK.

--
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

[1] <http://justin.harmonize.fm/index.php/2009/05/exploring-memcmp>
[2]
<http://www.slac.stanford.edu/comp/unix/package/rtems/doc/html/libc/libc.info.memcmp.html>

#19 lore raw

Re: [Openvpn-devel] [PATCH 09/52] cleanup: memcmp.c: remove unused source

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoted 3 lines · Alon Bar-Lev

Not exactly. This file is needed for VERY old libc implementations. I don't think these exists anymore in supported configurations. If we find memcmp() is missing, we add it properly to compat.

Agreed, and I also ACKed this one in the first round. This is basically dead code in the vast majority of platforms. Bear in mind that OpenVPN was released about a decade ago, "a few" things have changed since then ;-)

This patch goes in.

kind regards,

David Sommerseth

Quoted 6 lines

2012/3/6 Samuli Seppänen <[email protected]...>:

Quoted 5 lines
Quoted 5 lines

configure.ac | 3 --- memcmp.c | 43
------------------------------------------- 2 files changed, 0 insertions(+), 46 deletions(-) delete mode 100644 memcmp.c

[..snip..]

Quoted 12 lines
Quoted 12 lines

My C-fu is fairly low, but this still seems to make sense as there's no memcmp.h. The memcmp function calls in other source files seem to use memcmp function stored elsewhere (gcc[1], libc[2], etc.).

ACK.

-- Samuli Seppänen Community Manager OpenVPN Technologies, Inc

irc freenode net: mattock

Quoted 8 lines
Quoted 5 lines

[1] <http://justin.harmonize.fm/index.php/2009/05/exploring-memcmp>
[2]
<http://www.slac.stanford.edu/comp/unix/package/rtems/doc/html/libc/libc.info.memcmp.html>

------------------------------------------------------------------------------

Keep Your Developer Skills Current with LearnDevNow!

Quoted 8 lines

The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________ Openvpn-devel mailing list [email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9WC1sACgkQDC186MBRfrpwggCfahRiNIZZrCssyxWqOgCJPi+c r0gAoJeO5E5MqyggxsCPNSDXPy9SC6eU
=Em9/
-----END PGP SIGNATURE-----

#20 lore raw

PATCH 10/52 fixup: init.c: add missing conditional for ENABLE_CLIENT_CR

In reply to Alon Bar-Lev
---
 init.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
init.c +2 -0
index d2ad318..b8f57b2 100644
@@ -2282,9 +2282,11 @@ do_init_crypto_tls (struct context *c, const unsigned int flags)
   to.x509_track = options->x509_track;
 #endif
 
+#if P2MP
 #ifdef ENABLE_CLIENT_CR
   to.sci = &options->sc_info;
 #endif
+#endif
 
   /* TLS handshake authentication (--tls-auth) */
   if (options->tls_auth_file)
Signature · 1 line
1.7.3.4
#21 lore raw

PATCH 11/52 build: correct place to alter WINVER is at build system

In reply to Alon Bar-Lev
---
 configure.ac    |    2 +-
 syshead.h       |    4 ----
 win/msvc.mak.in |    2 +-
 3 files changed, 2 insertions(+), 6 deletions(-)
configure.ac +1 -1
index 1c4d66c..aa1d509 100644
@@ -342,7 +342,7 @@ case "$host" in
 	;;
 *-mingw*)
 	AC_DEFINE(TARGET_WIN32, 1, [Are we running WIN32?])
-	CPPFLAGS="${CPPFLAGS} -DWIN32_LEAN_AND_MEAN"
+	CPPFLAGS="${CPPFLAGS} -DWIN32_LEAN_AND_MEAN -DWINVER=0x0501"
 	OPENVPN_ADD_LIBS(-lgdi32)
 	OPENVPN_ADD_LIBS(-lws2_32)
 	OPENVPN_ADD_LIBS(-lwininet)
syshead.h +0 -4
index 0235abd..e8e70d2 100644
@@ -28,10 +28,6 @@
 /*
  * Only include if not during configure
  */
-#ifdef WIN32
-/* PF_INET6: win32 ipv6 exists only after 0x0501 (XP) */
-#define WINVER 0x0501
-#endif
 #ifndef PACKAGE_NAME
 #include "config.h"
 #include "compat.h"
win/msvc.mak.in +1 -1
index 191f370..43c3335 100644
@@ -38,7 +38,7 @@ LIB_DIRS = -LIBPATH:$(OPENSSL)\lib -LIBPATH:$(POLARSSL)\build\library -LIBPATH:$
 EXE = openvpn.exe
 
 CPP=cl.exe
-CPP_ARG_COMMON=/nologo /W3 -DWIN32 -DWIN32_LEAN_AND_MEAN -D_CONSOLE -D_MBCS -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_WARNINGS -D_CRT_SECURE_NO_WARNINGS $(INCLUDE_DIRS) /FD /c
+CPP_ARG_COMMON=/nologo /W3 -DWIN32 -DWIN32_LEAN_AND_MEAN -DWINVER=0x0501 -D_CONSOLE -D_MBCS -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_WARNINGS -D_CRT_SECURE_NO_WARNINGS $(INCLUDE_DIRS) /FD /c
 
 LINK32=link.exe
 
Signature · 1 line
1.7.3.4
#22 lore raw

Re: [Openvpn-devel] [PATCH 11/52] build: correct place to alter WINVER is at build system

Il 29.02.2012 22:11, Alon Bar-Lev ha scritto:

Quoted 40 lines
---
 configure.ac    |    2 +-
 syshead.h       |    4 ----
 win/msvc.mak.in |    2 +-
 3 files changed, 2 insertions(+), 6 deletions(-)
configure.ac +1 -1
index 1c4d66c..aa1d509 100644
@@ -342,7 +342,7 @@ case "$host" in
 	;;
 *-mingw*)
 	AC_DEFINE(TARGET_WIN32, 1, [Are we running WIN32?])
-	CPPFLAGS="${CPPFLAGS} -DWIN32_LEAN_AND_MEAN"
+	CPPFLAGS="${CPPFLAGS} -DWIN32_LEAN_AND_MEAN -DWINVER=0x0501"
 	OPENVPN_ADD_LIBS(-lgdi32)
 	OPENVPN_ADD_LIBS(-lws2_32)
 	OPENVPN_ADD_LIBS(-lwininet)
syshead.h +0 -4
index 0235abd..e8e70d2 100644
@@ -28,10 +28,6 @@
 /*
  * Only include if not during configure
  */
-#ifdef WIN32
-/* PF_INET6: win32 ipv6 exists only after 0x0501 (XP) */
-#define WINVER 0x0501
-#endif
 #ifndef PACKAGE_NAME
 #include "config.h"
 #include "compat.h"
win/msvc.mak.in +0 -0
index 191f370..43c3335 100644

win/msvc.mak.in LIB_DIRS = -LIBPATH:$(OPENSSL)\lib -LIBPATH:$(POLARSSL)\build\library -LIBPATH:$ · line 44

Quoted 8 lines
win/msvc.mak.in +1 -1
@@ -38,7 +38,7 @@ LIB_DIRS = -LIBPATH:$(OPENSSL)\lib -LIBPATH:$(POLARSSL)\build\library -LIBPATH:$
 EXE = openvpn.exe
 
 CPP=cl.exe
-CPP_ARG_COMMON=/nologo /W3 -DWIN32 -DWIN32_LEAN_AND_MEAN -D_CONSOLE -D_MBCS -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_WARNINGS -D_CRT_SECURE_NO_WARNINGS $(INCLUDE_DIRS) /FD /c
+CPP_ARG_COMMON=/nologo /W3 -DWIN32 -DWIN32_LEAN_AND_MEAN -DWINVER=0x0501 -D_CONSOLE -D_MBCS -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_WARNINGS -D_CRT_SECURE_NO_WARNINGS $(INCLUDE_DIRS) /FD /c
 
 LINK32=link.exe
 

Makes sense. WINVER defines the minimum supported Windows version[1]. In this case (0x501) we support WIndows XP and later. Making this a buildsystem option makes perfect sense to me - editing the header files to determine which Windows version will be supported seems silly.

ACK.

Signature · 9 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock


[1]
<http://blogs.msdn.com/b/dsvc/archive/2009/06/19/troubleshooting-not-a-valid-win32-application-error-at-the-startup.aspx>
#24 lore raw

Re: [Openvpn-devel] [PATCH 12/52] Update .gitignore

Quoted 11 lines
---
 .gitignore |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
.gitignore +0 -0
index 3d12f5d..8cc07de 100644

.gitignore line 11

Quoted 7 lines
.gitignore +1 -0
@@ -5,6 +5,7 @@
 *.obj
 *.pyc
 *.so
+*~
 .deps
 Makefile
 Makefile.in

Editor backup files in "git status" are annoying. ACK.

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
#25 lore raw

PATCH 13/52 build: handle printf style format in mingw

In reply to Alon Bar-Lev
---
 buffer.h |   12 ++++++++++--
 error.h  |    6 +++++-
 misc.h   |   12 ++++++++++--
 status.h |    6 +++++-
 4 files changed, 30 insertions(+), 6 deletions(-)
buffer.h +10 -2
index 6c79007..9bc33db 100644
@@ -312,7 +312,11 @@ has_digit (const unsigned char* src)
  */
 bool buf_printf (struct buffer *buf, const char *format, ...)
 #ifdef __GNUC__
-    __attribute__ ((format (printf, 2, 3)))
+#if __USE_MINGW_ANSI_STDIO
+	__attribute__ ((format (gnu_printf, 2, 3)))
+#else
+	__attribute__ ((format (__printf__, 2, 3)))
+#endif
 #endif
     ;
 
@@ -326,7 +330,11 @@ bool buf_puts (struct buffer *buf, const char *str);
  */
 bool openvpn_snprintf(char *str, size_t size, const char *format, ...)
 #ifdef __GNUC__
-    __attribute__ ((format (printf, 3, 4)))
+#if __USE_MINGW_ANSI_STDIO
+	__attribute__ ((format (gnu_printf, 3, 4)))
+#else
+	__attribute__ ((format (__printf__, 3, 4)))
+#endif
 #endif
     ;
 
error.h +5 -1
index aafd055..d2c04b0 100644
@@ -178,7 +178,11 @@ bool dont_mute (unsigned int flags); /* check muting filter */
 
 void x_msg (const unsigned int flags, const char *format, ...)
 #ifdef __GNUC__
-    __attribute__ ((format (printf, 2, 3)))
+#if __USE_MINGW_ANSI_STDIO
+	__attribute__ ((format (gnu_printf, 2, 3)))
+#else
+	__attribute__ ((format (__printf__, 2, 3)))
+#endif
 #endif
     ; /* should be called via msg above */
 
misc.h +10 -2
index dd6bd5a..a9548c5 100644
@@ -435,13 +435,21 @@ void argv_printf_arglist (struct argv *a, const char *format, const unsigned int
 
 void argv_printf (struct argv *a, const char *format, ...)
 #ifdef __GNUC__
-  __attribute__ ((format (printf, 2, 3)))
+#if __USE_MINGW_ANSI_STDIO
+	__attribute__ ((format (gnu_printf, 2, 3)))
+#else
+	__attribute__ ((format (__printf__, 2, 3)))
+#endif
 #endif
   ;
 
 void argv_printf_cat (struct argv *a, const char *format, ...)
 #ifdef __GNUC__
-  __attribute__ ((format (printf, 2, 3)))
+#if __USE_MINGW_ANSI_STDIO
+	__attribute__ ((format (gnu_printf, 2, 3)))
+#else
+	__attribute__ ((format (__printf__, 2, 3)))
+#endif
 #endif
   ;
 
status.h +5 -1
index 0bdad4e..af16fd2 100644
@@ -77,7 +77,11 @@ void status_flush (struct status_output *so);
 bool status_close (struct status_output *so);
 void status_printf (struct status_output *so, const char *format, ...)
 #ifdef __GNUC__
-    __attribute__ ((format (printf, 2, 3)))
+#if __USE_MINGW_ANSI_STDIO
+	__attribute__ ((format (gnu_printf, 2, 3)))
+#else
+	__attribute__ ((format (__printf__, 2, 3)))
+#endif
 #endif
     ;
 
Signature · 1 line
1.7.3.4
#26 lore raw

PATCH 14/52 build: rename plugin directory to plugins

In reply to Alon Bar-Lev

This to avoid conflit with plugin.c rules

---
 Makefile.am                   |    3 +-
 openvpn.spec.in               |   16 +-
 plugin/README                 |   47 ---
 plugin/auth-pam/.svnignore    |    1 -
 plugin/auth-pam/Makefile      |   30 --
 plugin/auth-pam/README        |   74 ----
 plugin/auth-pam/auth-pam.c    |  804 -----------------------------------------
 plugin/auth-pam/pamdl.c       |  180 ---------
 plugin/auth-pam/pamdl.h       |    7 -
 plugin/defer/README           |   16 -
 plugin/defer/build            |   14 -
 plugin/defer/simple.c         |  305 ----------------
 plugin/defer/simple.def       |    6 -
 plugin/defer/winbuild         |   18 -
 plugin/down-root/Makefile     |   17 -
 plugin/down-root/README       |   29 --
 plugin/down-root/down-root.c  |  553 ----------------------------
 plugin/examples/README        |   16 -
 plugin/examples/build         |   14 -
 plugin/examples/log.c         |  184 ----------
 plugin/examples/log_v3.c      |  249 -------------
 plugin/examples/simple.c      |  120 ------
 plugin/examples/simple.def    |    6 -
 plugin/examples/winbuild      |   18 -
 plugins/README                |   47 +++
 plugins/auth-pam/.svnignore   |    1 +
 plugins/auth-pam/Makefile     |   30 ++
 plugins/auth-pam/README       |   74 ++++
 plugins/auth-pam/auth-pam.c   |  804 +++++++++++++++++++++++++++++++++++++++++
 plugins/auth-pam/pamdl.c      |  180 +++++++++
 plugins/auth-pam/pamdl.h      |    7 +
 plugins/defer/README          |   16 +
 plugins/defer/build           |   14 +
 plugins/defer/simple.c        |  305 ++++++++++++++++
 plugins/defer/simple.def      |    6 +
 plugins/defer/winbuild        |   18 +
 plugins/down-root/Makefile    |   17 +
 plugins/down-root/README      |   29 ++
 plugins/down-root/down-root.c |  553 ++++++++++++++++++++++++++++
 plugins/examples/README       |   16 +
 plugins/examples/build        |   14 +
 plugins/examples/log.c        |  184 ++++++++++
 plugins/examples/log_v3.c     |  249 +++++++++++++
 plugins/examples/simple.c     |  120 ++++++
 plugins/examples/simple.def   |    6 +
 plugins/examples/winbuild     |   18 +
 46 files changed, 2717 insertions(+), 2718 deletions(-)
 delete mode 100644 plugin/README
 delete mode 100644 plugin/auth-pam/.svnignore
 delete mode 100755 plugin/auth-pam/Makefile
 delete mode 100644 plugin/auth-pam/README
 delete mode 100644 plugin/auth-pam/auth-pam.c
 delete mode 100644 plugin/auth-pam/pamdl.c
 delete mode 100644 plugin/auth-pam/pamdl.h
 delete mode 100644 plugin/defer/README
 delete mode 100755 plugin/defer/build
 delete mode 100644 plugin/defer/simple.c
 delete mode 100755 plugin/defer/simple.def
 delete mode 100755 plugin/defer/winbuild
 delete mode 100755 plugin/down-root/Makefile
 delete mode 100644 plugin/down-root/README
 delete mode 100644 plugin/down-root/down-root.c
 delete mode 100644 plugin/examples/README
 delete mode 100755 plugin/examples/build
 delete mode 100644 plugin/examples/log.c
 delete mode 100644 plugin/examples/log_v3.c
 delete mode 100644 plugin/examples/simple.c
 delete mode 100755 plugin/examples/simple.def
 delete mode 100755 plugin/examples/winbuild
 create mode 100644 plugins/README
 create mode 100644 plugins/auth-pam/.svnignore
 create mode 100755 plugins/auth-pam/Makefile
 create mode 100644 plugins/auth-pam/README
 create mode 100644 plugins/auth-pam/auth-pam.c
 create mode 100644 plugins/auth-pam/pamdl.c
 create mode 100644 plugins/auth-pam/pamdl.h
 create mode 100644 plugins/defer/README
 create mode 100755 plugins/defer/build
 create mode 100644 plugins/defer/simple.c
 create mode 100755 plugins/defer/simple.def
 create mode 100755 plugins/defer/winbuild
 create mode 100755 plugins/down-root/Makefile
 create mode 100644 plugins/down-root/README
 create mode 100644 plugins/down-root/down-root.c
 create mode 100644 plugins/examples/README
 create mode 100755 plugins/examples/build
 create mode 100644 plugins/examples/log.c
 create mode 100644 plugins/examples/log_v3.c
 create mode 100644 plugins/examples/simple.c
 create mode 100755 plugins/examples/simple.def
 create mode 100755 plugins/examples/winbuild
Makefile.am +1 -2
index 26b80f3..a1c210e 100644
@@ -24,7 +24,6 @@
 #
 
 LDADD = @LIBOBJS@
-.PHONY: plugin
 
 # This option prevents autoreconf from overriding our COPYING and
 # INSTALL targets:
@@ -49,7 +48,7 @@ EXTRA_DIST = \
 	tap-win32 \
 	contrib \
 	debug \
-	plugin \
+	plugins \
 	win
 
 SUBDIRS = \
openvpn.spec.in +8 -8
index c42e7c6..9a45c79 100644
@@ -103,13 +103,13 @@ and portability to most major OS platforms.
 %__make
 
 # Build down-root plugin
-pushd plugin/down-root
+pushd plugins/down-root
 %__make
 popd
 
 # Build auth-pam plugin
 %if %{build_auth_pam}
-pushd plugin/auth-pam
+pushd plugins/auth-pam
 %__make
 popd
 %endif
@@ -153,16 +153,16 @@ popd
 # Install the plugins
 #
 
-%__mkdir_p %{buildroot}%{_datadir}/%{name}/plugin/lib
+%__mkdir_p %{buildroot}%{_datadir}/%{name}/plugins/lib
 
 for pi in auth-pam down-root; do
-  %__mv -f plugin/$pi/README plugin/README.$pi
-  if [ -e plugin/$pi/openvpn-$pi.so ]; then
-    %__install -c -m 755 plugin/$pi/openvpn-$pi.so %{buildroot}%{_datadir}/openvpn/plugin/lib/openvpn-$pi.so
+  %__mv -f plugins/$pi/README plugins/README.$pi
+  if [ -e plugins/$pi/openvpn-$pi.so ]; then
+    %__install -c -m 755 plugins/$pi/openvpn-$pi.so %{buildroot}%{_datadir}/openvpn/plugins/lib/openvpn-$pi.so
   fi
 done
 
-%__mv -f plugin/README plugin/README.plugins
+%__mv -f plugins/README plugins/README.plugins
 
 #
 # Clean section
@@ -222,7 +222,7 @@ fi
 %endif
 
 # Install extra %doc stuff
-%doc contrib/ easy-rsa/ sample-*/ plugin/README.*
+%doc contrib/ easy-rsa/ sample-*/ plugins/README.*
 
 %changelog
 * Thu Jul 30 2009 David Sommerseth <[email protected]...>
plugin/README deleted +0 -47

47 lines not on this page · raw message

plugin/auth-pam/.svnignore deleted +0 -1
deleted file mode 100644
index 140f8cf..0000000
@@ -1 +0,0 @@
-*.so
plugin/auth-pam/Makefile deleted +0 -30
deleted file mode 100755
index e69fe3f..0000000
@@ -1,30 +0,0 @@
-#
-# Build the OpenVPN auth-pam plugin module.
-#
-
-# If PAM modules are not linked against libpam.so, set DLOPEN_PAM to 1. This
-# must be done on SUSE 9.1, at least.
-DLOPEN_PAM=0
-
-ifeq ($(DLOPEN_PAM),1)
-	LIBPAM=-ldl
-else
-	LIBPAM=-lpam
-endif
-
-# This directory is where we will look for openvpn-plugin.h
-INCLUDE=-I../..
-
-CC_FLAGS=-O2 -Wall -DDLOPEN_PAM=$(DLOPEN_PAM)
-
-openvpn-auth-pam.so : auth-pam.o pamdl.o
-	gcc ${CC_FLAGS} -fPIC -shared -Wl,-soname,openvpn-auth-pam.so -o openvpn-auth-pam.so auth-pam.o pamdl.o -lc $(LIBPAM)
-
-auth-pam.o : auth-pam.c pamdl.h
-	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} auth-pam.c
-
-pamdl.o : pamdl.c pamdl.h
-	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} pamdl.c
-
-clean :
-	rm -f *.o *.so
plugin/auth-pam/README deleted +0 -74

74 lines not on this page · raw message

plugin/auth-pam/auth-pam.c deleted +0 -804

804 lines not on this page · raw message

plugin/auth-pam/pamdl.c deleted +0 -180

180 lines not on this page · raw message

plugin/auth-pam/pamdl.h deleted +0 -7
deleted file mode 100644
index b10b035..0000000
@@ -1,7 +0,0 @@
-#if DLOPEN_PAM
-#include <security/pam_appl.h>
-
-/* Dynamically load and unload the PAM library */
-int dlopen_pam (const char *so);
-void dlclose_pam (void);
-#endif
plugin/defer/README deleted +0 -16
deleted file mode 100644
index d8990f8..0000000
@@ -1,16 +0,0 @@
-OpenVPN plugin examples.
-
-Examples provided:
-
-simple.c -- using the --auth-user-pass-verify callback,
-            test deferred authentication.
-
-To build:
-
-  ./build simple (Linux/BSD/etc.)
-  ./winbuild simple (MinGW on Windows)
-
-To use in OpenVPN, add to config file:
-
-  plugin simple.so (Linux/BSD/etc.)
-  plugin simple.dll (MinGW on Windows)
plugin/defer/build deleted +0 -14
deleted file mode 100755
index 5907afa..0000000
@@ -1,14 +0,0 @@
-#!/bin/sh
-
-#
-# Build an OpenVPN plugin module on *nix.  The argument should
-# be the base name of the C source file (without the .c).
-#
-
-# This directory is where we will look for openvpn-plugin.h
-INCLUDE="-I../.."
-
-CC_FLAGS="-O2 -Wall -g"
-
-gcc $CC_FLAGS -fPIC -c $INCLUDE $1.c && \
-gcc $CC_FLAGS -fPIC -shared -Wl,-soname,$1.so -o $1.so $1.o -lc
plugin/defer/simple.c deleted +0 -305

305 lines not on this page · raw message

plugin/defer/simple.def deleted +0 -6
deleted file mode 100755
index a87507d..0000000
@@ -1,6 +0,0 @@
-LIBRARY   OpenVPN_PLUGIN_SAMPLE
-DESCRIPTION "Sample OpenVPN plug-in module."
-EXPORTS
-   openvpn_plugin_open_v1   @1
-   openvpn_plugin_func_v1   @2
-   openvpn_plugin_close_v1  @3
plugin/defer/winbuild deleted +0 -18
deleted file mode 100755
index 97e724a..0000000
@@ -1,18 +0,0 @@
-#
-# Build an OpenVPN plugin module on Windows/MinGW.
-# The argument should be the base name of the C source file
-# (without the .c).
-#
-
-# This directory is where we will look for openvpn-plugin.h
-INCLUDE="-I.."
-
-CC_FLAGS="-O2 -Wall"
-
-gcc -DBUILD_DLL $CC_FLAGS $INCLUDE -c $1.c
-gcc --disable-stdcall-fixup -mdll -DBUILD_DLL -o junk.tmp -Wl,--base-file,base.tmp $1.o
-rm junk.tmp
-dlltool --dllname $1.dll --base-file base.tmp --output-exp temp.exp --input-def $1.def
-rm base.tmp
-gcc --enable-stdcall-fixup -mdll -DBUILD_DLL -o $1.dll $1.o -Wl,temp.exp
-rm temp.exp
plugin/down-root/Makefile deleted +0 -17
deleted file mode 100755
index 5ce4ffb..0000000
@@ -1,17 +0,0 @@
-#
-# Build the OpenVPN down-root plugin module.
-#
-
-# This directory is where we will look for openvpn-plugin.h
-INCLUDE=-I../..
-
-CC_FLAGS=-O2 -Wall
-
-down-root.so : down-root.o
-	gcc ${CC_FLAGS} -fPIC -shared -Wl,-soname,openvpn-down-root.so -o openvpn-down-root.so down-root.o -lc
-
-down-root.o : down-root.c
-	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} down-root.c
-
-clean :
-	rm -f *.o *.so
plugin/down-root/README deleted +0 -29
deleted file mode 100644
index d337ffe..0000000
@@ -1,29 +0,0 @@
-down-root -- an OpenVPN Plugin Module
-
-SYNOPSIS
-
-The down-root module allows an OpenVPN configuration to
-call a down script with root privileges, even when privileges
-have been dropped using --user/--group/--chroot.
-
-This module uses a split privilege execution model which will
-fork() before OpenVPN drops root privileges, at the point where
-the --up script is usually called.  The module will then remain
-in a wait state until it receives a message from OpenVPN via
-pipe to execute the down script.  Thus, the down script will be
-run in the same execution environment as the up script.
-
-BUILD
-
-Build this module with the "make" command.  The plugin
-module will be named openvpn-down-root.so
-
-USAGE
-
-To use this module, add to your OpenVPN config file:
-
-  plugin openvpn-down-root.so "command ..."
-
-CAVEATS
-
-This module will only work on *nix systems, not Windows.
plugin/down-root/down-root.c deleted +0 -553

553 lines not on this page · raw message

plugin/examples/README deleted +0 -16
deleted file mode 100644
index 4400cd3..0000000
@@ -1,16 +0,0 @@
-OpenVPN plugin examples.
-
-Examples provided:
-
-simple.c -- using the --auth-user-pass-verify callback, verify
-            that the username/password is "foo"/"bar".
-
-To build:
-
-  ./build simple (Linux/BSD/etc.)
-  ./winbuild simple (MinGW on Windows)
-
-To use in OpenVPN, add to config file:
-
-  plugin simple.so (Linux/BSD/etc.)
-  plugin simple.dll (MinGW on Windows)
plugin/examples/build deleted +0 -14
deleted file mode 100755
index 5907afa..0000000
@@ -1,14 +0,0 @@
-#!/bin/sh
-
-#
-# Build an OpenVPN plugin module on *nix.  The argument should
-# be the base name of the C source file (without the .c).
-#
-
-# This directory is where we will look for openvpn-plugin.h
-INCLUDE="-I../.."
-
-CC_FLAGS="-O2 -Wall -g"
-
-gcc $CC_FLAGS -fPIC -c $INCLUDE $1.c && \
-gcc $CC_FLAGS -fPIC -shared -Wl,-soname,$1.so -o $1.so $1.o -lc
plugin/examples/log.c deleted +0 -184

184 lines not on this page · raw message

plugin/examples/log_v3.c deleted +0 -249

249 lines not on this page · raw message

plugin/examples/simple.c deleted +0 -120

120 lines not on this page · raw message

plugin/examples/simple.def deleted +0 -6
deleted file mode 100755
index a87507d..0000000
@@ -1,6 +0,0 @@
-LIBRARY   OpenVPN_PLUGIN_SAMPLE
-DESCRIPTION "Sample OpenVPN plug-in module."
-EXPORTS
-   openvpn_plugin_open_v1   @1
-   openvpn_plugin_func_v1   @2
-   openvpn_plugin_close_v1  @3
plugin/examples/winbuild deleted +0 -18
deleted file mode 100755
index 97e724a..0000000
@@ -1,18 +0,0 @@
-#
-# Build an OpenVPN plugin module on Windows/MinGW.
-# The argument should be the base name of the C source file
-# (without the .c).
-#
-
-# This directory is where we will look for openvpn-plugin.h
-INCLUDE="-I.."
-
-CC_FLAGS="-O2 -Wall"
-
-gcc -DBUILD_DLL $CC_FLAGS $INCLUDE -c $1.c
-gcc --disable-stdcall-fixup -mdll -DBUILD_DLL -o junk.tmp -Wl,--base-file,base.tmp $1.o
-rm junk.tmp
-dlltool --dllname $1.dll --base-file base.tmp --output-exp temp.exp --input-def $1.def
-rm base.tmp
-gcc --enable-stdcall-fixup -mdll -DBUILD_DLL -o $1.dll $1.o -Wl,temp.exp
-rm temp.exp
plugins/README new file +47 -0

47 lines not on this page · raw message

plugins/auth-pam/.svnignore new file +1 -0
new file mode 100644
index 0000000..140f8cf
@@ -0,0 +1 @@
+*.so
plugins/auth-pam/Makefile new file +30 -0
new file mode 100755
index 0000000..e69fe3f
@@ -0,0 +1,30 @@
+#
+# Build the OpenVPN auth-pam plugin module.
+#
+
+# If PAM modules are not linked against libpam.so, set DLOPEN_PAM to 1. This
+# must be done on SUSE 9.1, at least.
+DLOPEN_PAM=0
+
+ifeq ($(DLOPEN_PAM),1)
+	LIBPAM=-ldl
+else
+	LIBPAM=-lpam
+endif
+
+# This directory is where we will look for openvpn-plugin.h
+INCLUDE=-I../..
+
+CC_FLAGS=-O2 -Wall -DDLOPEN_PAM=$(DLOPEN_PAM)
+
+openvpn-auth-pam.so : auth-pam.o pamdl.o
+	gcc ${CC_FLAGS} -fPIC -shared -Wl,-soname,openvpn-auth-pam.so -o openvpn-auth-pam.so auth-pam.o pamdl.o -lc $(LIBPAM)
+
+auth-pam.o : auth-pam.c pamdl.h
+	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} auth-pam.c
+
+pamdl.o : pamdl.c pamdl.h
+	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} pamdl.c
+
+clean :
+	rm -f *.o *.so
plugins/auth-pam/README new file +74 -0

74 lines not on this page · raw message

plugins/auth-pam/auth-pam.c new file +804 -0

81 lines not on this page · raw message

plugins/auth-pam/pamdl.c new file +180 -0

180 lines not on this page · raw message

plugins/auth-pam/pamdl.h new file +7 -0
new file mode 100644
index 0000000..b10b035

Lines of this file are not shown. View the raw message.

plugins/defer/README new file +16 -0
new file mode 100644
index 0000000..d8990f8

Lines of this file are not shown. View the raw message.

plugins/defer/build new file +14 -0
new file mode 100755
index 0000000..5907afa

Lines of this file are not shown. View the raw message.

plugins/defer/simple.c new file +305 -0

305 lines not on this page · raw message

plugins/defer/simple.def new file +6 -0
new file mode 100755
index 0000000..a87507d

Lines of this file are not shown. View the raw message.

plugins/defer/winbuild new file +18 -0
new file mode 100755
index 0000000..97e724a

Lines of this file are not shown. View the raw message.

plugins/down-root/Makefile new file +17 -0
new file mode 100755
index 0000000..5ce4ffb

Lines of this file are not shown. View the raw message.

plugins/down-root/README new file +29 -0
new file mode 100644
index 0000000..d337ffe

Lines of this file are not shown. View the raw message.

plugins/down-root/down-root.c new file +553 -0

553 lines not on this page · raw message

plugins/examples/README new file +16 -0
new file mode 100644
index 0000000..4400cd3

Lines of this file are not shown. View the raw message.

plugins/examples/build new file +14 -0
new file mode 100755
index 0000000..5907afa

Lines of this file are not shown. View the raw message.

plugins/examples/log.c new file +184 -0

184 lines not on this page · raw message

plugins/examples/log_v3.c new file +249 -0

249 lines not on this page · raw message

plugins/examples/simple.c new file +120 -0

120 lines not on this page · raw message

plugins/examples/simple.def new file +6 -0
new file mode 100755
index 0000000..a87507d

Lines of this file are not shown. View the raw message.

plugins/examples/winbuild new file +18 -0
new file mode 100755
index 0000000..97e724a

Lines of this file are not shown. View the raw message.

The rest of this diff is not shown. View the raw message.

Signature · 1 line
1.7.3.4

Part of the diff is not shown here. View the raw message.

#27 lore raw

PATCH 15/52 build: plugins: properly use CC, CFLAGS and LDFLAGS

In reply to Alon Bar-Lev
---
 plugins/auth-pam/Makefile  |   14 ++++++++------
 plugins/defer/build        |    9 +++++----
 plugins/down-root/Makefile |   11 ++++++-----
 plugins/examples/build     |    9 +++++----
 4 files changed, 24 insertions(+), 19 deletions(-)
plugins/auth-pam/Makefile +8 -6
index e69fe3f..d45a203 100755
@@ -13,18 +13,20 @@ else
 endif
 
 # This directory is where we will look for openvpn-plugin.h
-INCLUDE=-I../..
+CPPFLAGS=-I../..
 
-CC_FLAGS=-O2 -Wall -DDLOPEN_PAM=$(DLOPEN_PAM)
+CC=gcc
+CFLAGS=-O2 -Wall
+DEFS = -DDLOPEN_PAM=$(DLOPEN_PAM)
 
 openvpn-auth-pam.so : auth-pam.o pamdl.o
-	gcc ${CC_FLAGS} -fPIC -shared -Wl,-soname,openvpn-auth-pam.so -o openvpn-auth-pam.so auth-pam.o pamdl.o -lc $(LIBPAM)
+	$(CC) $(CFLAGS) -fPIC -shared $(LDFLAGS) -Wl,-soname,openvpn-auth-pam.so -o openvpn-auth-pam.so auth-pam.o pamdl.o -lc $(LIBPAM)
 
 auth-pam.o : auth-pam.c pamdl.h
-	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} auth-pam.c
+	$(CC) $(CPPFLAGS) $(CFLAGS) $(DEFS) -fPIC -c auth-pam.c
 
 pamdl.o : pamdl.c pamdl.h
-	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} pamdl.c
+	$(CC) $(CPPFLAGS) $(CFLAGS) $(DEFS) -fPIC -c pamdl.c
 
 clean :
-	rm -f *.o *.so
+	-rm -f *.o *.so
plugins/defer/build +5 -4
index 5907afa..9629c11 100755
@@ -6,9 +6,10 @@
 #
 
 # This directory is where we will look for openvpn-plugin.h
-INCLUDE="-I../.."
+CPPFLAGS="${CPPFLAGS:--I../..}"
 
-CC_FLAGS="-O2 -Wall -g"
+CC="${CC:-gcc}"
+CFLAGS="${CFLAGS:--O2 -Wall -g}"
 
-gcc $CC_FLAGS -fPIC -c $INCLUDE $1.c && \
-gcc $CC_FLAGS -fPIC -shared -Wl,-soname,$1.so -o $1.so $1.o -lc
+$CC $CPPFLAGS $CFLAGS -fPIC -c $1.c && \
+$CC $CFLAGS -fPIC -shared $LDFLAGS -Wl,-soname,$1.so -o $1.so $1.o -lc
plugins/down-root/Makefile +6 -5
index 5ce4ffb..9659b7f 100755
@@ -3,15 +3,16 @@
 #
 
 # This directory is where we will look for openvpn-plugin.h
-INCLUDE=-I../..
+CPPFLAGS=-I../..
 
-CC_FLAGS=-O2 -Wall
+CC=gcc
+CFLAGS=-O2 -Wall
 
 down-root.so : down-root.o
-	gcc ${CC_FLAGS} -fPIC -shared -Wl,-soname,openvpn-down-root.so -o openvpn-down-root.so down-root.o -lc
+	$(CC) $(CFLAGS) -fPIC -shared $(LDFLAGS) -Wl,-soname,openvpn-down-root.so -o openvpn-down-root.so down-root.o -lc
 
 down-root.o : down-root.c
-	gcc ${CC_FLAGS} -fPIC -c ${INCLUDE} down-root.c
+	$(CC) $(CPPFLAGS) $(CFLAGS) -fPIC -c down-root.c
 
 clean :
-	rm -f *.o *.so
+	-rm -f *.o *.so
plugins/examples/build +5 -4
index 5907afa..7605595 100755
@@ -6,9 +6,10 @@
 #
 
 # This directory is where we will look for openvpn-plugin.h
-INCLUDE="-I../.."
+CPPFLAGS="${CPPFLAGS:--I../..}"
 
-CC_FLAGS="-O2 -Wall -g"
+CC="${CC:-gcc}"
+CFLAGS="${CFLAGS:--O2 -Wall -g}"
 
-gcc $CC_FLAGS -fPIC -c $INCLUDE $1.c && \
-gcc $CC_FLAGS -fPIC -shared -Wl,-soname,$1.so -o $1.so $1.o -lc
+$CC $CPPFLAGS $CFLAGS -fPIC -c $1.c && \
+$CC $CFLAGS -fPIC -shared ${LDFLAS} -Wl,-soname,$1.so -o $1.so $1.o -lc
Signature · 1 line
1.7.3.4
#28 lore raw

PATCH 16/52 build: we need the sample.ovpn in future

In reply to Alon Bar-Lev
---
 install-win32/sample.ovpn  |  103 --------------------------------------------
 sample-windows/sample.ovpn |  103 ++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 103 insertions(+), 103 deletions(-)
 delete mode 100755 install-win32/sample.ovpn
 create mode 100755 sample-windows/sample.ovpn
install-win32/sample.ovpn deleted +0 -103
deleted file mode 100755
index 5accd57..0000000
@@ -1,103 +0,0 @@
-# Edit this file, and save to a .ovpn extension
-# so that OpenVPN will activate it when run
-# as a service.
-
-# Change 'myremote' to be your remote host,
-# or comment out to enter a listening
-# server mode.
-remote myremote
-
-# Uncomment this line to use a different
-# port number than the default of 1194.
-; port 1194
-
-# Choose one of three protocols supported by
-# OpenVPN.  If left commented out, defaults
-# to udp.
-; proto [tcp-server | tcp-client | udp]
-
-# You must specify one of two possible network
-# protocols, 'dev tap' or 'dev tun' to be used
-# on both sides of the connection.  'tap' creates
-# a VPN using the ethernet protocol while 'tun'
-# uses the IP protocol.  You must use 'tap'
-# if you are ethernet bridging or want to route
-# broadcasts.  'tun' is somewhat more efficient
-# but requires configuration of client software
-# to not depend on broadcasts.  Some platforms
-# such as Solaris, OpenBSD, and Mac OS X only
-# support 'tun' interfaces, so if you are
-# connecting to such a platform, you must also
-# use a 'tun' interface on the Windows side.
-
-# Enable 'dev tap' or 'dev tun' but not both!
-dev tap
-
-# This is a 'dev tap' ifconfig that creates
-# a virtual ethernet subnet.
-# 10.3.0.1 is the local VPN IP address
-# and 255.255.255.0 is the VPN subnet.
-# Only define this option for 'dev tap'.
-ifconfig 10.3.0.1 255.255.255.0
-
-# This is a 'dev tun' ifconfig that creates
-# a point-to-point IP link.
-# 10.3.0.1 is the local VPN IP address and
-# 10.3.0.2 is the remote VPN IP address. 
-# Only define this option for 'dev tun'.
-# Make sure to include the "tun-mtu" option
-# on the remote machine, but swap the order
-# of the ifconfig addresses.
-;tun-mtu 1500
-;ifconfig 10.3.0.1 10.3.0.2
-
-# If you have fragmentation issues or misconfigured
-# routers in the path which block Path MTU discovery,
-# lower the TCP MSS and internally fragment non-TCP
-# protocols.
-;fragment 1300
-;mssfix
-
-# If you have set up more than one TAP-Win32 adapter
-# on your system, you must refer to it by name.
-;dev-node my-tap
-
-# You can generate a static OpenVPN key
-# by selecting the Generate Key option
-# in the start menu.
-#
-# You can also generate key.txt manually
-# with the following command:
-#   openvpn --genkey --secret key.txt
-#
-# key must match on both ends of the connection,
-# so you should generate it on one machine and
-# copy it to the other over a secure medium.
-# Place key.txt in the same directory as this
-# config file.
-secret key.txt
-
-# Uncomment this section for a more reliable
-# detection when a system loses its connection.
-# For example, dial-ups or laptops that travel
-# to other locations.
-#
-# If this section is enabled and "myremote"
-# above is a dynamic DNS name (i.e. dyndns.org),
-# OpenVPN will dynamically "follow" the IP
-# address of "myremote" if it changes.
-; ping-restart 60
-; ping-timer-rem
-; persist-tun
-; persist-key
-; resolv-retry 86400
-
-# keep-alive ping
-ping 10
-
-# enable LZO compression
-comp-lzo
-
-# moderate verbosity
-verb 4
-mute 10
sample-windows/sample.ovpn new file +103 -0

103 lines not on this page · raw message

Signature · 1 line
1.7.3.4
#29 lore raw

Re: [Openvpn-devel] [PATCH 16/52] build: we need the sample.ovpn in future

Il 29.02.2012 22:11, Alon Bar-Lev ha scritto:

Quoted 227 lines
---
 install-win32/sample.ovpn  |  103 --------------------------------------------
 sample-windows/sample.ovpn |  103 ++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 103 insertions(+), 103 deletions(-)
 delete mode 100755 install-win32/sample.ovpn
 create mode 100755 sample-windows/sample.ovpn
install-win32/sample.ovpn deleted +0 -103
deleted file mode 100755
index 5accd57..0000000
@@ -1,103 +0,0 @@
-# Edit this file, and save to a .ovpn extension
-# so that OpenVPN will activate it when run
-# as a service.
-
-# Change 'myremote' to be your remote host,
-# or comment out to enter a listening
-# server mode.
-remote myremote
-
-# Uncomment this line to use a different
-# port number than the default of 1194.
-; port 1194
-
-# Choose one of three protocols supported by
-# OpenVPN.  If left commented out, defaults
-# to udp.
-; proto [tcp-server | tcp-client | udp]
-
-# You must specify one of two possible network
-# protocols, 'dev tap' or 'dev tun' to be used
-# on both sides of the connection.  'tap' creates
-# a VPN using the ethernet protocol while 'tun'
-# uses the IP protocol.  You must use 'tap'
-# if you are ethernet bridging or want to route
-# broadcasts.  'tun' is somewhat more efficient
-# but requires configuration of client software
-# to not depend on broadcasts.  Some platforms
-# such as Solaris, OpenBSD, and Mac OS X only
-# support 'tun' interfaces, so if you are
-# connecting to such a platform, you must also
-# use a 'tun' interface on the Windows side.
-
-# Enable 'dev tap' or 'dev tun' but not both!
-dev tap
-
-# This is a 'dev tap' ifconfig that creates
-# a virtual ethernet subnet.
-# 10.3.0.1 is the local VPN IP address
-# and 255.255.255.0 is the VPN subnet.
-# Only define this option for 'dev tap'.
-ifconfig 10.3.0.1 255.255.255.0
-
-# This is a 'dev tun' ifconfig that creates
-# a point-to-point IP link.
-# 10.3.0.1 is the local VPN IP address and
-# 10.3.0.2 is the remote VPN IP address.
-# Only define this option for 'dev tun'.
-# Make sure to include the "tun-mtu" option
-# on the remote machine, but swap the order
-# of the ifconfig addresses.
-;tun-mtu 1500
-;ifconfig 10.3.0.1 10.3.0.2
-
-# If you have fragmentation issues or misconfigured
-# routers in the path which block Path MTU discovery,
-# lower the TCP MSS and internally fragment non-TCP
-# protocols.
-;fragment 1300
-;mssfix
-
-# If you have set up more than one TAP-Win32 adapter
-# on your system, you must refer to it by name.
-;dev-node my-tap
-
-# You can generate a static OpenVPN key
-# by selecting the Generate Key option
-# in the start menu.
-#
-# You can also generate key.txt manually
-# with the following command:
-#   openvpn --genkey --secret key.txt
-#
-# key must match on both ends of the connection,
-# so you should generate it on one machine and
-# copy it to the other over a secure medium.
-# Place key.txt in the same directory as this
-# config file.
-secret key.txt
-
-# Uncomment this section for a more reliable
-# detection when a system loses its connection.
-# For example, dial-ups or laptops that travel
-# to other locations.
-#
-# If this section is enabled and "myremote"
-# above is a dynamic DNS name (i.e. dyndns.org),
-# OpenVPN will dynamically "follow" the IP
-# address of "myremote" if it changes.
-; ping-restart 60
-; ping-timer-rem
-; persist-tun
-; persist-key
-; resolv-retry 86400
-
-# keep-alive ping
-ping 10
-
-# enable LZO compression
-comp-lzo
-
-# moderate verbosity
-verb 4
-mute 10
sample-windows/sample.ovpn new file +103 -1
new file mode 100755
index 0000000..5accd57
@@ -0,0 +1,103 @@
+# Edit this file, and save to a .ovpn extension
+# so that OpenVPN will activate it when run
+# as a service.
+
+# Change 'myremote' to be your remote host,
+# or comment out to enter a listening
+# server mode.
+remote myremote
+
+# Uncomment this line to use a different
+# port number than the default of 1194.
+; port 1194
+
+# Choose one of three protocols supported by
+# OpenVPN.  If left commented out, defaults
+# to udp.
+; proto [tcp-server | tcp-client | udp]
+
+# You must specify one of two possible network
+# protocols, 'dev tap' or 'dev tun' to be used
+# on both sides of the connection.  'tap' creates
+# a VPN using the ethernet protocol while 'tun'
+# uses the IP protocol.  You must use 'tap'
+# if you are ethernet bridging or want to route
+# broadcasts.  'tun' is somewhat more efficient
+# but requires configuration of client software
+# to not depend on broadcasts.  Some platforms
+# such as Solaris, OpenBSD, and Mac OS X only
+# support 'tun' interfaces, so if you are
+# connecting to such a platform, you must also
+# use a 'tun' interface on the Windows side.
+
+# Enable 'dev tap' or 'dev tun' but not both!
+dev tap
+
+# This is a 'dev tap' ifconfig that creates
+# a virtual ethernet subnet.
+# 10.3.0.1 is the local VPN IP address
+# and 255.255.255.0 is the VPN subnet.
+# Only define this option for 'dev tap'.
+ifconfig 10.3.0.1 255.255.255.0
+
+# This is a 'dev tun' ifconfig that creates
+# a point-to-point IP link.
+# 10.3.0.1 is the local VPN IP address and
+# 10.3.0.2 is the remote VPN IP address.
+# Only define this option for 'dev tun'.
+# Make sure to include the "tun-mtu" option
+# on the remote machine, but swap the order
+# of the ifconfig addresses.
+;tun-mtu 1500
+;ifconfig 10.3.0.1 10.3.0.2
+
+# If you have fragmentation issues or misconfigured
+# routers in the path which block Path MTU discovery,
+# lower the TCP MSS and internally fragment non-TCP
+# protocols.
+;fragment 1300
+;mssfix
+
+# If you have set up more than one TAP-Win32 adapter
+# on your system, you must refer to it by name.
+;dev-node my-tap
+
+# You can generate a static OpenVPN key
+# by selecting the Generate Key option
+# in the start menu.
+#
+# You can also generate key.txt manually
+# with the following command:
+#   openvpn --genkey --secret key.txt
+#
+# key must match on both ends of the connection,
+# so you should generate it on one machine and
+# copy it to the other over a secure medium.
+# Place key.txt in the same directory as this
+# config file.
+secret key.txt
+
+# Uncomment this section for a more reliable
+# detection when a system loses its connection.
+# For example, dial-ups or laptops that travel
+# to other locations.
+#
+# If this section is enabled and "myremote"
+# above is a dynamic DNS name (i.e. dyndns.org),
+# OpenVPN will dynamically "follow" the IP
+# address of "myremote" if it changes.
+; ping-restart 60
+; ping-timer-rem
+; persist-tun
+; persist-key
+; resolv-retry 86400
+
+# keep-alive ping
+ping 10
+
+# enable LZO compression
+comp-lzo
+
+# moderate verbosity
+verb 4
+mute 10
--
Quoted 3 lines

1.7.3.4

Just wondering... why not move sample.ovpn to "sample-config-files" directory?

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
#30 lore raw

Re: [Openvpn-devel] [PATCH 16/52] build: we need the sample.ovpn in future

2012/3/6 Samuli Seppänen <[email protected]...>:

Quoted 2 lines

Just wondering... why not move sample.ovpn to "sample-config-files" directory?

Because I did not want to change the sample-config-files... This was windows specific so I left it windows specific.

If you want reorder of example, I will be happy to do any other way.

Alon.

#31 lore raw

PATCH 17/52 Remove install-win32

In reply to Alon Bar-Lev
---
 Makefile.am                            |    5 +-
 configure.ac                           |    3 -
 images/.svnignore                      |    2 -
 images/Makefile.am                     |   41 --
 images/icon.ico                        |  Bin 22486 -> 0 bytes
 images/install-whirl.bmp               |  Bin 25820 -> 0 bytes
 install-win32/.svnignore               |    4 -
 install-win32/GetWindowsVersion.nsi    |  109 ----
 install-win32/Makefile.am              |   97 ----
 install-win32/build-pkcs11-helper.sh   |   24 -
 install-win32/buildinstaller           |   14 -
 install-win32/ddk-common               |    2 -
 install-win32/doclean                  |    6 -
 install-win32/dosname.pl               |    9 -
 install-win32/getgui                   |   19 -
 install-win32/getopenssl               |   19 -
 install-win32/getpkcs11helper          |   17 -
 install-win32/getprebuilt              |   10 -
 install-win32/getxgui                  |   28 -
 install-win32/ifdef.pl                 |   53 --
 install-win32/m4todef.pl               |   15 -
 install-win32/macro.pl                 |   61 ---
 install-win32/makeopenvpn              |   67 ---
 install-win32/maketap                  |   17 -
 install-win32/maketapinstall           |   15 -
 install-win32/maketext                 |   59 ---
 install-win32/openssl/README.txt       |   21 -
 install-win32/openssl/openssl097.patch |   68 ---
 install-win32/openssl/openssl098.patch |   56 --
 install-win32/openvpn.nsi              |  886 --------------------------------
 install-win32/setpath.nsi              |  231 ---------
 install-win32/settings.in              |   71 ---
 install-win32/trans.pl                 |   97 ----
 install-win32/u2d.c                    |   20 -
 install-win32/winconfig                |   18 -
 35 files changed, 1 insertions(+), 2163 deletions(-)
 delete mode 100644 images/.svnignore
 delete mode 100644 images/Makefile.am
 delete mode 100755 images/icon.ico
 delete mode 100755 images/install-whirl.bmp
 delete mode 100644 install-win32/.svnignore
 delete mode 100644 install-win32/GetWindowsVersion.nsi
 delete mode 100644 install-win32/Makefile.am
 delete mode 100644 install-win32/build-pkcs11-helper.sh
 delete mode 100644 install-win32/buildinstaller
 delete mode 100644 install-win32/ddk-common
 delete mode 100644 install-win32/doclean
 delete mode 100644 install-win32/dosname.pl
 delete mode 100644 install-win32/getgui
 delete mode 100644 install-win32/getopenssl
 delete mode 100644 install-win32/getpkcs11helper
 delete mode 100644 install-win32/getprebuilt
 delete mode 100644 install-win32/getxgui
 delete mode 100644 install-win32/ifdef.pl
 delete mode 100644 install-win32/m4todef.pl
 delete mode 100644 install-win32/macro.pl
 delete mode 100755 install-win32/makeopenvpn
 delete mode 100644 install-win32/maketap
 delete mode 100644 install-win32/maketapinstall
 delete mode 100644 install-win32/maketext
 delete mode 100644 install-win32/openssl/README.txt
 delete mode 100644 install-win32/openssl/openssl097.patch
 delete mode 100644 install-win32/openssl/openssl098.patch
 delete mode 100755 install-win32/openvpn.nsi
 delete mode 100755 install-win32/setpath.nsi
 delete mode 100644 install-win32/settings.in
 delete mode 100644 install-win32/trans.pl
 delete mode 100755 install-win32/u2d.c
 delete mode 100644 install-win32/winconfig
Makefile.am +1 -4
index a1c210e..33c4545 100644
@@ -51,10 +51,7 @@ EXTRA_DIST = \
 	plugins \
 	win
 
-SUBDIRS = \
-	images \
-	service-win32 \
-	install-win32
+SUBDIRS = service-win32
 
 TESTS = t_client.sh t_lpback.sh t_cltsrv.sh
 sbin_PROGRAMS = openvpn
configure.ac +0 -3
index aa1d509..747c7b4 100644
@@ -988,8 +988,5 @@ AC_CONFIG_FILES([t_client.sh], [chmod +x t_client.sh])
 AC_OUTPUT([
 	Makefile
 	openvpn.spec
-	images/Makefile
 	service-win32/Makefile
-	install-win32/Makefile
-	install-win32/settings
 ])
images/.svnignore deleted +0 -2
deleted file mode 100644
index 282522d..0000000
@@ -1,2 +0,0 @@
-Makefile
-Makefile.in
images/Makefile.am deleted +0 -41

41 lines not on this page · raw message

images/icon.ico deleted binary +0 -0
deleted file mode 100755
index 03ea0b1dccf355d4f5ac877c0918b374c7b7c4ee..0000000000000000000000000000000000000000
GIT binary patch

zcmeHP2Xs$*PoC;=v7f_5_*>[email protected]...&#s6adn3Cc*gzDOq9}-B14RTxYJh<B [email protected]...?Io$vRX_vY=(vRO8Wp6E-?|3uq&[email protected]...?z?67p%7uBm?&Rf;3+Of z6cu7PYSGa~dscBFwxh3kbF*Dmh-U!?ezX7Aw<[email protected]...(OsOg=p4Nhz6KW z7SVt(@KH~gQP}?;I-4gqtY0hJy3&&5<K#Q^;z=UpR(nKb!+7-i!)_rW|r*xUWRP+ zx<__+H(mChnjxoc%$6T-&X!+o&z1+0_sQAYvgI}7(xunym2nF)WnNyMd}no*+_-+7 zOixdjhYuZ;[email protected]...)s6^o$I-c6E~6x_OhFkd!6YtXe4>zUGl_C#1_)[email protected]... zhY!h|JSo4}k}aS6E>k*ZdF4y<y)y0mdAakapXAfuc)=@E=Hz6{O&iwBT4Ox&NNS#Z zVV)N}*UGk7OM_QEaysO^?+dSt{n9HB>#_W$EM4PYqI1mA7;[email protected]...+H*WtF4~nX z&!0OdQ%>i}XCeQtojc_7pjGbk91)VP8>fjm+a1wlYhvPA8g2yxsdJ9!4$b*N47ln zSDswGYK0u~Q3lqUA#-zc<=vlq<>7+|WmZ<U{Qb9I<zsWbvc>pxITd?*{9K;A{[email protected]...| z<Gqv{dHM#%GxaX3D%jkB2h+T|MBSKVdX#gZx8-a9dPowwMVgHO|DT@{JFQYvu12; z*p=eOdhF%sP7yS8+*62uVZLr!&IgXzJ_}8(Y^I>2Oqbwk+vzbaD<F7~9o(i^I{Y z+Z_%^cv0uoHKH3kyR>jPqHc3IN;{if6&rhPb!SzF<E~l#}&?Mv3SZmYdajRi#QyO zoHw!Eo&<}ubvQ~mi#[email protected]...;Uy~A-1<F+voMVLZ zJ|H+s^lVj{<vr-{&5H3fAfBAFr!s5LN%Sv0c{$VD%Gyv4Q%R{?NUqH*=Rs#fMsW4 zqy3*<JARfw|F~Ty|CuX~9yuaw!)8sv@il$jvT!-Q+^9u^4p$0^3Kn^GTq}*w(<5) zGUVfPGiCQF8Ok1>_vXoAGre-}$y|97Hfa%T(t=$%@*db5+UL)<X3H6yU=v|?X%Bxp zkt_Sd*6oLl{vm0VvSou{r)cYGqnGT-ky$xX=HyD54cKusSFT>ULivG{=kw%1*z6y- zZI$C!X31BUWy$SZx5!zr[email protected]...+0!ZN&9kST4tVnc#c;# ze<NL{oXJx*@%6+kWh?1#{ycR-uOX=?D>9%^kz$C<41m*DIfUCE4LobmD$<Z^33Ve z@?O~PHt-9yrSu68e(jaJVXse~JR#5h^_NUJuwVHNhYLsgI4U#QGTn{o9S}?&K%~ [email protected]...n>NYcuxI=B?v=^=ewW>_pSRA)P(FgbXziNSa@MW<a$8Y$r-TQhRt7-oFo5C z%agzE{zdLPlEJ1nj^peB}bk;b4HH(K2ttDKNGlFa^B8t$eblTSyFD_vRNKGdPL6r z&!+#Qb_?&<{}g?<@2L}BBCJJ=u*V0q^Yz(lb*jawr_saqUZY;QA<7cQcr#SH6u0Bt z{j{qn+AkU7v8dK{m91c5TwlVYJ=9T#qPemUg+CK4v1+yUOKqUDv?vZucM&8kIsn zyP95aAjF{ViYS6cGmf|J<aSrMgMDSyczae|t}D^FkK?USX=wCO$a+1DdL-(DIDQ){ zql~VknuUA>gs^*QjIX)50&O-XH~bmj8VP4E4tl-<Km)kMA^h)^!8|QLxfSQ%;85y zU_6|)VrF;4%EoYacE*[email protected]...(u_b(}nw+?O-HhS5I8tb7j6c)IDBGedOpo7F$L+q? zU{JE68t3kG8m7mGKMM)3Rs*#RJ{+&pT8}^Qyfy9|XwWYPmOZ%i)h@^SPfj&*%&X4 zuBY_)AT-P!>{ZtoFIOLZHya31sJd$z{X?qXZ&uj(l&Ds%RX5hmX^m^BlLku1k?eNY z!P4+_scp=vS>[email protected]...#2<&P0f18D)kJE^2Kj5yB_L^p1$T$xLiH1 zd9>2VVs~{nM_sO=Y65i8_ZZ7I+A#(_cUj-Cz1H94=Wfv3-mUAzF<yAQQDG0kGdkc zW7gBwR5LwXv%NKBR_b1BoG38vFLIa$tFhiy4SQRS+YatCvULL^^XVs?Ka~Srj+*r ztT?3v8h%e>#[email protected]...*!fCy~^j)r!(H5Zyk;NY#!?>4-6yb1|[email protected]... z$aBsim&!yg$b9iA@+12E7vV1%TWs6BS$=}tkvZS-qetZ)<Ut3LlT}VdU(ML02l6uJ zP0almTWn0pRWZdm#6KCxCx1SYE1#T~DZfMPlMVmtNlTNASAIEEAK<D$Jm4M&Y5(? z8t~t(-%3~U5c4j^MvR*n|Im-$JS{+MBK9taR+0UImmr~*|9^#J&c_g6V!Rxqv8t2 z3XDr8ArE9OS|2%PC&WLDZ5VIt+cv9>lj-wwqpFln1C_PG30%x|NK+MXk8|!%Qp~H [email protected]...?!u*mk*pWXDs~B*@+8<Pwt3?QnSp$nxiRzJ-Me<m)U#(*[email protected]...)xe z&B#[email protected]...^?EQ6*Jagu>?2WvA+zRBc$Uzy;F{geTIr?Pepa12a|68#HUfF*v z_OY2PquSot;nWgcj;2S*29AvTwo0^KzFxyX!jHs*Rtt_;}`Ul^5Kt+xM0-QaSffb z+g-zl&j<znk}=T*Pt86z8ixNFAO4*Rt5c82au=Z2d(q{hzlBHcWliX<I^bf9GuE;{ zS9XK_uN0-auGaW1pHS^E3=O@;j_tl;C>_cGV*yWV{HqmCR3(m;w@)ZnoLw$gV}(#w z<5ySBGDaZP&nA-goV67~1&x1?YCdStauv50UBc{f#ndE5M0az75h*s(qbh*H_!Wb6 zPgRDDZg*D$|EVTy)O<{j_UOpA+iekWxfsq^@ra7t+}[email protected]...&[email protected]...|-Fm^wudhRml z*HVpJEOeKv9ee87Iv!OhO|McDs;[email protected]...{L{H*h)mJs#;l6PfR`8^+ zSxI|$rJ~(U<*eDkhcV3UhTiDMI4-yIftHH?aFf9e12lrGTg_X|I1F9J?z=0fXqhv5 z4K^eyV&UI-T~Xie^iiWvDB+22y<a-a!n97l?J8+#)V&6(@z;1^nhA?R2}>7T_bdId zX+Nf1WxT+?6-P!|Q;pN>Z6_ZWXQTpV)[email protected]...?lS}5@?Wj5v+!KCj9O8cfV)OEYf zTu5d0N*#2nT^|x$lv}LI^omEJE~anmsh82DZiR^l~WOU)<Oy|W>sBAI9J0?-gqNz zDqY2VJ2|Vrq7A8hq$<&6;;;|AI-YP+pjt*F(Y!jD_RrUnhIoE10acJcJ;[email protected]... [email protected]...<)8Luzi_z~5rU9a9=PI_9PaLRNE9-4{xdvJ$!{DU;w(z0% zpg}V;E7jXvhvF7~P2YjKT+P{C#%[email protected]...=bberpVP*BfcX>XZaE~7Ezs*?bHGp z8s>gHT6d_jQg~gaqVD<)Us4&YH7GRic2<{JDPO#F={BwXdy%b~kMAY$$Fa2y{WWIL zC0yjV4S{zU%$;[email protected]...|_U*#SZEiP3w~C-^sACt#oYL5)C;1taHx<#MZB$zI zx0znwi~*JNi*B1$G74C&!~w;0lmAP)T;4A{S1Ey^Z}JhcP@~&p5cxv([email protected]...%9Z<9 zDONOqdi$kA|26;R9mxN?WwgOPz<oM?D-#yDJfiQr$HcN_iN#i}SpF6AnL{QlOkBRK z%;5J9i|DvCAHIDq>!Ur-N5^}b&G>Fp*ox&#*E1g?puT7J;QOR#-zmn=LPT!w|M$! zOh=!L9+ftH^z2_m;?l)q_58$TOQwyV^D}u5R5%HqFHjb-(RkYI=lmJ>eQ-cv&aJlj zBOdv9pTO973opUrGUwMsdEV-GdA4;[email protected]...*0ci$OMhNm5Ixm_kQ~r[email protected]...<Fhi z>j0jy_2q%boxW^7t5C|jmF$F054=|{FuRi5O8yC[email protected]... zwfvAHdGWH9Q60yh6wxlv8Vf(cvl{h3toEq1$q&ug&%GO|=jsxDFDV&bN*ib4CwLB{ ze#mN%N_%g_M{53~dY&#Z|M^ER+(XX&-kR_B{CM5iKPmr}IP;(NT%JGVuiE~NQ<Q(b zg`eQzem-GqOYHG|L#[email protected]...^[email protected]...<y49+|&*<rQ~NJ;?nZ0^B?s{wUO|0#a>#>A;I^ zJ@&L1J}p^1Fg;mtPtkWLaD3;S;PIdx1E4-X3{bxtTP4<lv-|)[email protected]...<*Pi zU6>dECqGT!+z<WcYC4ai|5Ok<XD~)x*Z6_T>KGphm=8E$!gna20z?7w&GAMFkrFP% zT73KPG9Utf>0bEJ=lSL;YmWo<J*TM;HN|iky_69J_1AL?{=)=;Rh3bk3ZiF+N09M zgt<RacLnq&0^kHp11tfo1JIr<1<U|E1}Fo)5}z*INV{Wz-XzV5o{cum8lOV(HT5 z<R1=51}OU#pv*=ebzBUeet^1_Z%+%w*N};N-3q!UCeQnkwu>@M4Zv5+vxdB9Em|*P zMuYcg56}FLOW+%cIa2C)90dJN)u0gx>uh;Y!LoqDdX6$chIJC?b<GXj([email protected]...<c zcuN8L9r=>IB4=8f@=fs)<O6Wrk*I94w*q?w2jUN)GGsm$xsaAi*0i#!(RBVqRn4F zBNi=NC17*QfdBCTGVtsh!aj>W?;NK+BOjj)HYTLxW0m92xKdAaE|q<%QK<V<{qpL zz&{1NBj+z&BO1Jt%Cj#AJ|_TrA9YC|8Hj)H0JwV2AfD%Ib9QMRcq;(^MU?Hs1zYsm zuMI-aUnjZmJA>fAL;j8rmH(y=3<|(Mj%WYE=f7&*dngD!X{?S4hw?IJ($h&?E2OT zo<I551!Vcj(1W^v$NPsge|t=!_t9R7V{j!07(G*n7vLv9uxgyn$m0222h6IZ2Zro zUY=v_S-S;sG3RQ)o*;C&-$enn0a-!t2J*v^5zM#V2RRy@*V;>VdL*XeK_}K(b7b5 z6YQn={&xjkdt75*7wfG6v~m9Zy1kuxUq2yLeE$6gZU0[email protected]...)ums6pGVc#tNK{R{i ztiXHAeMk&KpMEviIlaJjJo0g}SZ?^An}YDxGB}9)>}S8}J#Yl!KLcZP3mhNq=}5i% zVEz{U-Y15@|[email protected]...)dilJ{SW3v%sx5 zcgYW;&X~W*pL%$%03PemU(orGfBk6ipS4KwFAClVLg0TI{3}og>Wn$3JXR<|625a zUBDQ1uq*ff{rTIp?kx;~|3>QI#|t+bZwBh4d~coQ?1)9>1$pG*!%4D(bT{D5lfi* z*Cho0w-R^cOqJJA|1XSTef*|j{FWg6cjF8q>[email protected]...<@4=HnWO$i2Xx8HOqTv|4 zf7HK(d~v;fZLB{4V4jr$@E_Cd;XH%3<Ng%iEMBc;=mr_S1^f=!2lyV)pS+P{h#nK* ze~s8n#~+%Oz2uoR1yDwRpKr%Ijq!%0*M96N@!@>z1NN7^pl1<)qO5bzXMVRqbcc^H zc{BE69%ZLxuW!LvIDq_b4uZ!ydjU<j54CU>&T0F_q;I#0FTY=>-iO>Z50oFlq~A; zeKXe0{AJrkXgV=Y-UQ0Q*u*ZMf1Ud<0%uxG*>=bhJ%)4PYgmV#Vyp;o?gAXS2(4c+ zUL2tLvuqD2$WGa1*#*[email protected]...}8>_wc7PqXpn5;x*[email protected]...?Kt-O zqyl([email protected]...%Uzl8EfhF1}Yg7eD)8>@EvHDx(IK(Jn_KIxlD3Q0G)[email protected]... z#GEyMLk7O%[email protected]...$=~xPJxtF}seW18*5%DBx1o98AV2(4;JU|Goq;eju;e0Q#}p z0JQ<ZXyhA{DUp(pH?pkTJF;w4>d3O?Qks{IOley>GO2C#@c6dX!w8~7bs?UwiOU6C zFz}LrmlM2jP?rwo#luKkJOC&DhEXCu${Q9RnG%+S>xmR0A_=KNl*<t!Do+Tvj2DV; z{_l38g?j23h5c_~)}(L|dp3FPtnx=@&cL|22%rX_JAii;Zvtil<^a9{d<J+MKp)!& z5Ch<y2j{97aNy)4+Q#SG$3n|@u``12uH<5*kNuxs-u1;BJ79buU(?0k<K5zEaFv zvRbrw?X<wX**10UK{*UXZYjA$VqHxz<Z;M$*sqk<CLcS^zppE<z2{S-)k+euWSw; zjT9gF)i=NS*?tCN3L*ar%Fex?jTpLCf{KSJe<eUMc>Esa;%H~|3v`fIob#n7jWOW zf0PBl*iG;6#md(?hjVRrN|ci}H4E?-pd{dO$X*6?<^!}XU7+YfhkCw!T<xJLe?^pM zLR>=+B|l=rhi4?~e2}[email protected]...^(u<jrLQ9z^XY4}>?{ueBAEj>dNoxnSi0K2hD{;J ze-1cTQ-11CpLg&(2je_L#&7+2{f2f6b4=reTGqfk&bQ0XI(>gb#CD4BlzCPTMjd)D z1o^iCCycVsMJ}jfV<R7l1l|1s_?<)[email protected]...!dCLVQ<Ijq0zx;<FY<NfJO>;9DTJ3^5E zW8f&8KV{x_``*_B&Flhr{*Hd;+o7z1v1Y+{55}6ND_XEYw)<Dg-x82_ku^L>`I##{ z^C|8^e0FmfXzKk5R5A|<<(+=)B6LXm7eEpEn^ySU2fsCGKTrm;1-iqv+oLv=pLd#E zyO~#UUuTBE_f6mgI|J(cnGopkx2PI?2Y8>)J21*axd5vHc6sgf(-^BrpT{+G?WWJA zecllQU)t7|fP&WWNeDFb+4fa*[email protected]...>KYi!rs<&v1_wGy1%~OQ;E2jBhpV zVC72SQOEt)a2@(L!?3auPPdl|3Tw7RK5R0gUCOL^3!j<t?q-Dm6^OlJSFL5g?& zHOwjjd([email protected]...HN1fSdx>aF3E7?=FA$vAw&&[email protected]...=A) zaE%-WciOz$rahr-fJndrfL-rd=bD-U)c*7CPTfrydqRMZU*[email protected]...*@|<SfM8 z1Hdh(=HgC<zkkog{T2NYWiuhreeN-gac#<0En1Rj_+IFrDF^RrHUk358>sIUa~|j0 z<C{RZ_CCXR!FDztb4Gl&(7J!8>{O([email protected]...#zj0qxbCMXN<y+@0CthxU*q z)ZBg>aA~)AcW?w?m$9Ha?}&=1*a3S#9[email protected]...{V<@Rr<0;dl^>D))S|BQ*Z z>=5^IX^65g7N*^50tnUaya-&Sw*w{}vD<vcV~0YJU9W{PTqC^($FvmtyD$_y3fe#a z{$9Wh)pl>&6UqWylA^S=iUeV?OMz1Uou})dqDrk%iVQMw}DMeF)dgbDuZ3e^4s zxFzW?jo*B&[email protected]...?_%v-%xTCqtV~Q4o!(O4>gacQ6L<xZ!M~69SIl+%vbKT zfv4h?0h5l}?M=^1kX^6se#%dOc9-w>O|D^Dh%zx|nh_!{?~;_Bl9w%Sbp8$bUsm$N zcknwXn?D#AqD*suH$6n$ueJPlPR%F(eSbs#1T8<m!?MZ$Mj>Ph6?cu2A9l0fyZQ8| z)8CN)E+s$oX9&L)^!c(-<4EexBO$K!B=E{I?``[email protected]...{77fTHo!Z7qUk)mR1e zg=lAdt47^tEb()QGEvX?n?s=YHBetW?Yky?V}1KX#I(k&frtM_xuen+HLu;D9A(K z6o|in-^0MG4=5<_^vCC2u([email protected]...|X+<;([email protected]...|w)#>Z1YWaue*PRg|%1+t3 [email protected]...(SL7puktbxBv8gVG>&P05_rQ#ps4ubl#F+^GD<8)5{ zMTm2_X1*VSMvAU4;E~-ub~uVqfI#&U>(ehCju%1RP6Kl!gZqQ%[email protected]...) z9Ba)voLiWf<23NAtGS3H8sqom_wgMB<2c)0F7x;f0NR&(09^qU0en}[email protected]... zw#A;MK$G_*{yJMw+la-umkFLL0F<jBT>t(bfLjuv12e_eF0rswp__(TZfXDGP939 zk8$(3uYVFvUOr>Ld!WssfAr^[email protected]...#tL&e{apKExp5c5fQA)qwChV6B%E|{#?Sdl z%wLkE;tR^FWnPGHgeK12CT^[email protected]...%6tf3MU!r^~wN3-t~_(^-u<(H1S< zW5U1DKlHDCcoLb<NbryCwDeggI{E8{[email protected]...=@lZ}R!pJk}N*v{t^<~<H5 zW6|XIO_YXlz=sv-#lqv#ejPcAO&Ej6-xapi_e8;Pyu6yEcWb?g!8xb_DQu2ra8F znKSc_#tmQ|[email protected]...)pwC%ijChGybN2Pu+b~*;I<6KJpY0wBHvwz<^ zmx0%%$QNu5_kniGU)F-!-~K;Z1M{&Gg^-<VqQ26;1lyB;V{A8Mr~xQwpM&*t4TZID [email protected]...!DI|&>}}AvoN|Ri>r3!7V#U8NKi9~6x8#3e9Vfu!AwVemT3DQlp!+%? z4G_v676vB=G^YYCRo4r%7RF8!0o<#?$QTGW6*N8pv<4JLhRcC_C3sS=J_RuLWn36Y zMtdLkIR)@F;9h_ci~sww>&rd4P(GQfDr)RZ!@NSA3&XB-g6V65uhZ%fBq%4rHl{b z|2ouHCK>HxN#V!X|5{SL6(t8;VCHd!c)Ri+(P7_OzI?rH#{XWDGHx2vBYOesbNN$ z5|$bn&(E2{Qp?5jb0&L<e^V9DHp_5txg?g6DUm4x5BT7FCVbHZjC>_{u?=29OUjUM zo=L}~8&5t4-zdcwtBprH2|FMtr*P-7Oc7CDLHYTwz)%AP2S*[email protected]...!+9s>D9v+bev1 hg?)-gDe+$tKG0&Bf+ewp&~VaM_MRlQaJbh{{ZxLA(a3C

images/install-whirl.bmp deleted binary +0 -0
deleted file mode 100755
index 03f33fce96789420beb692679093506ca0685469..0000000000000000000000000000000000000000
GIT binary patch

z=gc{0#_F|S=)U<p@53#68>%G-&Op3%[email protected]...{F{T8^3N8Kgq7ba=RgI+RSqD- [email protected][email protected]...!Ep6+VD-<SB8L?WS3d_<{|qW}Si$gr;6Nq_ z=H}-73fW91m&@j|S-<einKP$P&-f*p&t|iUPeUgLdyaQgt~6xmWqN8dm&<8kKA(ps zlgTX1&ugJ((&@8j&z{j&GPAR}nVD([email protected]...#~xb?Ch+*[email protected]...%=ENRL*ew) z6kYganrA$;[email protected]...~vy?M>=0*GY!XEkbCdy%RQ^V<*0&tGCxApb*0D?{eZZ<X4 [email protected]...+4=4<5~!1{gK1XjrDL{3%k2IJC7ZO<ytaw>[email protected]... z42>K*cz~|8q_g8#ecfSdY02coc-`Sz3V~Y-k9T+ZgQ1)mH8([email protected]...$nDnoN8%m93LCi z5<fFGHoABBPC)Yu+gn>E#>e~;@*T(8>8r7!jw*>yZz6{DpTMxKwYj^i1D5NcCMPE# z>*?;Ao6BpVWLWX7%}vL<ItK^(_0vFqA1%P7bULkttu0OPa(pai189IM-31<*($glZ zgC(vdbky6^4MbXETIe|1*3yiU(88{cV?D<iYOGuu>+7bbCVjoo-CsH+~|*4tCQ*K z?AX6|_vpwezmQ&72*X1se0ioXrm%Zws(3lPSr~!<ixOf!7@@NJv=m|g_%qM+JXf z@3-Fs!Ai!RO-G=m97Z)^1#iGpowX_}sng<)!Pf)ap2scLJQVG$vvevgCweT;2# zA|5Sy&;VFpTu%)2qXHPSHf0cNYCL-;*38Hxn4BCQRvOJPn5Kq$v;YKJNQPI&gKF?K z{L%K-+5[email protected]...>Lv%3X8fOWNoMJ_?#CctmAO2YUJZt*Mp<3qW&ltFhH;RRY z1;1h<zw}onE|W~@=ZdiPAyu++GQ}1B_2sv~mfLacD7yflOG}t-PzjQi01b<TjUU> zGc-8h>lbOQJPcWXdv;dus;=6V+Og9<2sOIJAJNiz<{>|y%pap){(q8RSa9YMnFR7a zr03*DX$;#&!n4s1fo}EzH2LZ(<XxK2&xalH-gC|_D+F&a2TEXgXVu)[email protected]...~cyu zKobc>6nCWzhH5*Foei(pl=<C%^7Bh+!8dr|mFAQKMHnJw{4$&+uHQYlBzXovDs z)a=1#LuEf28%cdoGG}sH#~nK$Tm!&z?>CHKr#7wQn-)nFxDHC&Qrv2SbNakeLb$ zef-$!=GC^4C?AeY#fh{fuw*A=yP}}w6VtZYNi&%2A{I^oF>{os*iQE8a9Q-{Z}>h< zB9Hruk!%|RhQnt4TT{#|MC4^X|o7J06gCSm<E%zug7!5fJ6>uKLo?WwFh)i5AL5A zdeU2-pDmWgku%|yn=%(~2;{kGYk^Cy?f98LADLJBb7VFK-+0<7{[email protected]...(%;>- z$Z}$Xc;D}Xi#M8)Ty|H$>k_}Q(NWf|JXorwD6xkQ9jw7#5K27QQj~r<MxHi~c=+b7 zPevX?)KS_lik;^|[email protected]...}?^VPpZ8)[email protected]...#ae0t^{_eLb@>(BQG?k&V-lV z9U$03^M%LGjo}lA=7rcSsCCpe%gSa<Bk;Kbi)?c;2(C*xle1;-+Cq<ybksIFWMDq zYhAcLXpWtDC5bcmbxhf;-0G_OBZuM-g*j}sgEjk<67#$8{HkShE^ubuC%+lsuYHp zeYg}({n?QeyP6(`btl4$)*Egq^AMitD1vZuc!=KINK-p>HRR^PPdu2_DpZFz2VyVW z%;[email protected]...&b7Q#Wu#s&UjGqdCHg&*~ziF$3YtwF7gQg-HA;CQ+c;PyoUGVlh zg4U#~71tnkf_Nx0NJ1j|rliQBVRM8w;T-+6M5ep5LzzkAzANb0B4Q+DB0A)8N__(I z9)@3kDkp4Ho{_1IqF#iqP#3Z&X=x_%ppTA(7p{*4!{[email protected]...@pasL%YYS z^g3x=hcw#mY<hu}[email protected]...+hm2qrGTJ3^B!(Z6Yv)a}vyxSLD!%ij|YP z(h}=eH+n5)g*>$bM{Q9I2~+S%Z4enxu~v^T+}{_%E&G_2Dw%g}jI|983|e3IL+l&f [email protected]...~cU~Lu08<Ss-qRBssa6g%+IYDbMsi4l*vSpUVZ)GpB%|qY*ck;-kwaO4R7vcI zHT?@Bgb>Jbxaf{_Yw7)vIEDdkxR_<6JDId(8{[email protected]...?!oU7e<ig&m-Zbtx_)O$p9! zBvucW(52|ZpTC+nlQWO#D3d;2AIIn!uS|>f2s8Uj>bVB=o}q_xuyY{@vi9WQV7b# z5K7yuX?g3Bf|2;W}[email protected]...#zYW5W9y$|G8*=x|A+OD$sAJ8}o>?*gP>izdOl0 zTCs4!La1c>DP7kg=yc)p%<PLGQxHW9T}6iX$cHjj-PlCIWY^=a?U_;<CF2OMLd|W zq><~WPoidiWEbVB?2#6(xi1q$8<Of$5rFHTh+Foj<>$9}HVq9vURxH1n+%3-3Tw8- z81Cy0FAxnJ=^93|gf1QE>vaIy3f&d33&N~l)Tt9LPM=<<Rbj%[email protected]... zBZ<[email protected]...&cE|cU85q0>1P|[email protected]...*[email protected]...#{)cUI0UwEf0BC`LQT?qZkUj zpMNw<SYR>;PiI3^[email protected]...<gk1Lu=E>7;b$b#*htDx|TsoiY{#_Vbh>!n5ItIak0AU z!2Z3(@j>4%rOFZ(tUps@([email protected]...;@)K#B{[email protected]...*tDUxXE zLC-<(mvPA~pQ62SU6AT>t3WYy%v+zvNqhf2nJYI1AA2Bk<C8fwc~wL#6GaYHDNyUF zx^[email protected]...%o+Z~2GIu{hccitH=HS=oZaB&Pd7ZHskQ|3IASD7zq;+%-lIt([email protected]...+Je zZhl^D8i6H&A*TwmPf99-5eP_2*rn`UOj;N$Jow-}!9;YTLR{3$AR42Or<!U=)Q9iQ zD66EYzqQ5~;#)|e_Cm(X8@^&U5@?a%lh(J8!I0uo{@}$~ygT!3=gBeV(fBmh)l%Pr zD&O1gR5{+G_QhiP$h~gYC}q=ddg&OJ+956l;zx-Tati4>i~b{asQ^xj4#dspAu56w zjo2jgq|~z*8qX8Pf|4FBvqRCHWw<+Dz>{Pc(mwPh<nZ>t#jzP?&y4X5CnI(eQ4p!u zdB|)?X<kM|gzhSfp>mzfOD#[email protected]...+KP<~jJnbVUIoIR_*uKu zEf&z>&tBmvI&!Z=#QE1i4gghM$CR#WS3e%YILR&bO8#PGK}QNR&8?WUF6VkJ#rDX zx(Eea(tVp1%_G$r%mlrPNTFh2#&V5as5ODh*zEx7_NOisY@@}5D?*%->H+sQd_n z8K9&%{z5|t6c593%d#9kp~PGZv5#*Uj7)y}nH+JH>z~M7ez%ccd4#pwn~d5ty3|?7 z244AOVKl(<ynAENA0P5cKcUJY^gnvZV94Gpbx9xCH^%}IPnE_O_3@BCz-679eO9V zgCjc{866pMv$lmgYw1<x(C4&iMB1?eOm%D>?!>r(YTV0oB>tgMD)bJeaGR7M1NV)H zEl7!sVQ?TB^|Sur*[email protected]...&<rXXj$|m*wFO)-$vw6O?7*hz>{|Cj z>EcVCT{<&{6&aYs?tFW&?a%4#g1{3Izw7VHKE#[email protected]...{786&=hB?wTP)!lAXR78am zM;}ic45j*_z6F-2G7J?bcLtcI3HcjXj7H^RkoHIhN3OPJzt%F0vb>5p7MVvJl}U) zO=BqyVnz<[email protected]...%XZG;O6w9n-Sp_ET0<nYj7_|ZQ(4HNOn975<wnTm1nqb0&r zh)nob%zpUSf)EIeT(K$8IGy;1hI1C)FFp}ljAo2M_}<?;>4FAbm&=F5ylKP^#=!OE zt+*kmjBr+vmnFsvsd!JF9>b5<m41sfZljumz9DV9qOx0^$=h;bjqq#d2tmXX35T z_Yyd2cbKFK&TMGY$YG6%wV5YXMeGzo<-v|Pf|G8sVmjFA|+!M45b_lkvC+X>W0h` zb4^1ixu6qszT|$0Me;of274=>Democ%8<rbi*&+Nc*yw9VNHK1#-7LZ;1<utMh?-L zvieDjef&>9Y|[email protected]...!4Ne7Mtf%YcBvpnT_bNUDi>URU*?SUNezbRd^^ozyL5DP zL^y33S;d_@;UX!R2)_j=kr4Ts*blijq_vPbE~!bIf(+Ms<SXW&!pnxqEf*wRX!}A [email protected]...|v?mXJeQW$#[email protected]...{TX!K(m!^>k3ZlHKX{{!s6j(@(WO=-j8GM0c&&|^ zOLZ_r={XD|hyAhI5JXi;3U?j9mx4Nb2hjOowcwGRR^dAAZY<C*570@)ZrYQ%wlm zN(ek|td9?vk{A}oOF8!g5C>y5m08c3XNUrMAulqHjZh9&?-BEG&(ccB#j!kQd%0r zbT0hlW~WY-2h8=8o3n=oV<ceCBsR;ryh!p65);1%EX~IgQ1>[email protected]...)?WZ-;[email protected]... zHCmmo=u&}H(x>Z7j=^s#!jP3>8Wapa{ZK|D2?J9uy35yuZ-Hj1*}Dg33%9uDqY}r zTX^?)~%9Hf}vA#&#))wSgG>j%[email protected]...$#iOWQ3~l=uiDVQ!!Xjxr7?u| z)uVB&1<ol8Veqg2m9HNP!C8I;(Fi}YBXN={WQu_7c)k!)MKH8&n%(Jhk7hZJ?;Z~c zV?Wz4f9-?uDuCw4e>dpkTS%J*inRf!OTYSO{+F-iCDqKYY>8eB5Dc}VWL|2C;{%vM z$RQ2#By1YdmS(wIZgCCF%{KZE_PKmAX{xF(x=tkVQUQT95vL(ci94bd@%`k!lbk(K zt{9pYkpG=2|B5l46Qq^u(#4V(LLS}1Z~$8VnLIPb&SY01rh?0S&HY&p3B9k*_z<40 zc_B82Wd5Q{<tr(!9h>dj??6uCj^r!N9=2k?lwBHalCpeATcV>};-$2s<>ZlhZi46! z4Buteof&+>roo0Vtg_w%8UK2!RCgzemH>[email protected]...#KnV&T36yh*qRE!G~18YOGBKSb)MC z*U?JG?S~QCrO%#(9An~hkFdEh%[email protected]...(HsBpy3N^Qb5YNp4828wjIA3r z5;-(nrjU^kr->T3l#aj+Ou7~VU~h}Uo;Kzkj|zg<BOg_oJw6fQbtIiLj|8*OJX6y zZ)|*_Po$jO2+IW%ITdyoTIr=aw^T6WPtQzarf|VtD4m{6?NErEZxPiJ0MWYsb#v(* zyHu9|[email protected][email protected]...~ZihRj>09%W!>gg^wybq{5!Ui?E2*?cU$U&~dO1~F?m!_vBs [email protected]...zN>mpl)[email protected]...;9F>[email protected]...!dDMf2G0G=U^8W<HZvkE zVPbhNVJa}RXTWwt6Xzg8CTP~uuRn2^y4(La3JQdI{fY=uNWGf%fgU)h|M>jac4<B z|AcuVp30{c;y;^?n{Y*-~qDB;c%Mg1^aBDC7yZv-)[email protected]...&=QuFd%~tBBx<d{g z46#;uVRj8A?o~2|fOa%sgLUm{*@uNNlS<uaJaHE27+<@Q7o#VE;^{NypmTVhZxg z{WWJ~TGI#U*xYa+%zc{37&0PfkpvTcM9lmUib<~K!#iIi*{;sX=LuuP8o8j%^(T* z=@zkg>r?1h$M%z1&>y%b*j!VV?XQimsEpj66*iLs2%=SLgal~}Wh8Gf7|KEnU3458 zOX>VN{#e9sQ!#F0BIrdH+)KrO#^{x%2INZiB*I0SCNkHVrUINbMka}-=^;KAbU{ z(C$cr8z~PLs6O*>_TD{nrNqx~Y9;3}L4y3gqVf=xx*[email protected]...!586ryHE zBPp75-|k(=D)-}x|42f73scK>iqTuDQ;E}P%M1YYNF|m_ttBy(R_7MNrjy~eriBev zd19MCeI?I%BYRilaLE(gQo~u9<-{tnLEJMltwG>[email protected]...{gEeFF zGc%MSE#gTOH-(jJ8nKTR52MPoI1N6XZTGcuGFPvwSLOLaM6Y<g)4^x6%1Dn7Rwz; z1;gcXZspXgV7PLySnfzF7%rD{E2mxs!<B=@az|3ZaJigYIrS<St{g0uJCX{9%jMk4 hsaL^p<zTVgkyJ2TF6UNGy$Xga2aDy7#QdL1{tGA-a#jEU

install-win32/.svnignore deleted +0 -4
deleted file mode 100644
index 9bf9495..0000000
@@ -1,4 +0,0 @@
-*.o
-Makefile.in
-settings
-Makefile
install-win32/GetWindowsVersion.nsi deleted +0 -109

109 lines not on this page · raw message

install-win32/Makefile.am deleted +0 -97

97 lines not on this page · raw message

install-win32/build-pkcs11-helper.sh deleted +0 -24
deleted file mode 100644
index fd336df..0000000
@@ -1,24 +0,0 @@
-F=pkcs11-helper-1.06-beta1
-OPENSSL_DIR=`pwd`/openssl-0.9.8h
-
-PKCS11_HELPER_DIR=`pwd`/pkcs11-helper
-rm -rf $PKCS11_HELPER_DIR
-mkdir $PKCS11_HELPER_DIR
-tbz=$F.tar.bz2
-
-rm -rf $F
-tar xfj $tbz
-
-cd $F
-./configure \
-	MAN2HTML=true \
-	--disable-crypto-engine-gnutls \
-        --disable-crypto-engine-nss \
-        PKG_CONFIG=true \
-        OPENSSL_CFLAGS="-I${OPENSSL_DIR}/include" \
-        OPENSSL_LIBS="-L${OPENSSL_DIR}/out -leay32"
-
-make
-make install DESTDIR="${PKCS11_HELPER_DIR}"
-
-# ./configure doesn't need this any more: ac_cv_type_size_t=no
install-win32/buildinstaller deleted +0 -14
deleted file mode 100644
index a17a027..0000000
@@ -1,14 +0,0 @@
-#!/bin/sh
-
-# load version.nsi definitions
-. autodefs/defs.sh
-
-# build the installer
-rm -f $GENOUT/*.exe
-'/c/Program Files/NSIS/makensis' $GENOUT/nsi/openvpn.nsi &>makensis.log
-tail -20 makensis.log
-
-# sign the installer
-if [ -d "$SIGNTOOL" ]; then
-    python $SIGNTOOL/signapp.py "$(echo $(pwd)/$GENOUT/*.exe)"
-fi
install-win32/ddk-common deleted +0 -2
deleted file mode 100644
index b45c9e5..0000000
@@ -1,2 +0,0 @@
-# DDKs <= 5600 use "AMD64", later use "x64"
-x64_tag=x64
install-win32/doclean deleted +0 -6
deleted file mode 100644
index 3f39543..0000000
@@ -1,6 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-[ "$CLEAN" = "yes" ] && rm -rf $GENOUT && KEEPAUTODEFS="yes" ./doclean
install-win32/dosname.pl deleted +0 -9
deleted file mode 100644
index a678e66..0000000
@@ -1,9 +0,0 @@
-#!/usr/bin/perl
-
-# convert a unix filename to a DOS filename
-
-while ($unixname = shift(@ARGV)) {
-  $unixname =~ s#^/([a-zA-Z])(/|$)#$1:\\#g;
-  $unixname =~ s#/#\\#g;
-  print "$unixname\n";
-}
install-win32/getgui deleted +0 -19
deleted file mode 100644
index aa83e85..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-# Get and sign the OpenVPN GUI
-
-# load version.nsi definitions
-. autodefs/defs.sh
-
-GUI="$OPENVPN_GUI_DIR/$OPENVPN_GUI"
-
-if [ -f "$GUI" ]; then
-    mkdir -p $GENOUT/bin &>/dev/null    
-    cp $GUI $GENOUT/bin
-fi
-
-if [ -f "$GENOUT/bin/$OPENVPN_GUI" ]; then
-    echo '!define OPENVPN_GUI_DEFINED' >autodefs/guidefs.nsi
-else
-    cat /dev/null >autodefs/guidefs.nsi
-fi
install-win32/getopenssl deleted +0 -19
deleted file mode 100644
index b772741..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-# Get OpenSSL binaries
-if [ -d "$OPENSSL_DIR" ] ; then
-    mkdir -p $GENOUT/lib &>/dev/null    
-    mkdir -p $GENOUT/bin &>/dev/null    
-    for f in libeay32.dll libssl32.dll out/openssl.exe ; do
-	cp $OPENSSL_DIR/$f $GENOUT/lib
-        if [ -z "$NO_STRIP" ]; then
-	    strip $GENOUT/lib/`basename $f`
-	fi
-    done
-    mv $GENOUT/lib/openssl.exe $GENOUT/bin
-else
-    echo OpenSSL DIR $OPENSSL_DIR NOT FOUND
-fi
install-win32/getpkcs11helper deleted +0 -17
deleted file mode 100644
index 8fcfdd4..0000000
@@ -1,17 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-# Get PKCS11-helper libraries
-if [ -d "$PKCS11_HELPER_DIR" ] ; then
-    mkdir -p $GENOUT/lib &>/dev/null    
-    for f in libpkcs11-helper-1.dll ; do
-	cp $PKCS11_HELPER_DIR/usr/local/bin/$f $GENOUT/lib
-        if [ -z "$NO_STRIP" ]; then
-	    strip $GENOUT/lib/$f
-	fi
-    done
-else
-    echo PKCS11-helper DIR $PKCS11_HELPER_DIR NOT FOUND
-fi
install-win32/getprebuilt deleted +0 -10
deleted file mode 100644
index 36c4827..0000000
@@ -1,10 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-# Get PKCS11-helper libraries
-if [ -d "$GENOUT_PREBUILT" ] && ! [ -d "$GENOUT" ]; then
-    echo LOADING prebuilt binaries from $GENOUT_PREBUILT
-    cp -a $GENOUT_PREBUILT $GENOUT
-fi
install-win32/getxgui deleted +0 -28
deleted file mode 100644
index 3a1e626..0000000
@@ -1,28 +0,0 @@
-#!/bin/sh
-
-# Get and sign the OpenVPN XML-based GUI
-
-# load version.nsi definitions
-. autodefs/defs.sh
-
-if [ -d "$OPENVPN_XGUI_DIR" ]; then
-    SIGNED_EXES="gui/ovpn-xgui-en.exe sta/ovpn-tray.exe"
-    UNSIGNED_EXES="xmlserv/ovpn-xmlserv.exe"
-    EXES="$SIGNED_EXES $UNSIGNED_EXES"
-
-    mkdir -p $GENOUT/bin &>/dev/null
-
-    if [ -z "$NO_STRIP" ]; then
-	for f in $EXES; do
-	    cp $OPENVPN_XGUI_DIR/$f $GENOUT/bin
-	    strip $GENOUT/bin/`basename $f`
-	done
-    fi
-
-    rm -rf $GENOUT/htdocs
-    cp -a $OPENVPN_XGUI_DIR/ajax/htdocs $GENOUT/htdocs
-
-    echo '!define OPENVPN_XGUI_DEFINED' >autodefs/xguidefs.nsi
-else
-    cat /dev/null >autodefs/xguidefs.nsi
-fi
install-win32/ifdef.pl deleted +0 -53

53 lines not on this page · raw message

install-win32/m4todef.pl deleted +0 -15
deleted file mode 100644
index d2705b0..0000000
@@ -1,15 +0,0 @@
-#!/usr/bin/perl
-
-# used to convert version.m4 to simple
-# definition format
-
-while (<STDIN>) {
-  chomp;
-  if (/^\s*$/) {
-    print "\n";
-  } elsif (/^define\((\w+),\[(.*?)\]\)/) {
-    print "!define $1 \"$2\"\n";
-  } elsif (/^dnl(.*)$/) {
-    print "#$1\n";
-  }
-}
install-win32/macro.pl deleted +0 -61

61 lines not on this page · raw message

install-win32/makeopenvpn deleted +0 -67

67 lines not on this page · raw message

install-win32/maketap deleted +0 -17
deleted file mode 100644
index b9c4070..0000000
@@ -1,17 +0,0 @@
-#!/bin/sh
-
-# Get the x86 and x64 versions of the TAP driver
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-if [ -d "$TAPBINSRC" ]; then
-    mkdir -p $GENOUT/driver/i386 &>/dev/null
-    mkdir -p $GENOUT/driver/amd64 &>/dev/null
-    for arch in i386 amd64; do
-	s=$TAPBINSRC/$arch
-	cp $s/*.sys $s/*.cat $s/*.inf $GENOUT/driver/$arch
-    done
-else
-    echo Cannot find pre-built tap drivers
-fi
install-win32/maketapinstall deleted +0 -15
deleted file mode 100644
index 9fe0470..0000000
@@ -1,15 +0,0 @@
-#!/bin/sh
-
-# Get the x86 and x64 versions of the tapinstall tool
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-if [ -d "$TAPBINSRC" ]; then
-    mkdir -p $GENOUT/tapinstall/i386 &>/dev/null
-    mkdir -p $GENOUT/tapinstall/amd64 &>/dev/null
-    cp $TAPBINSRC/i386/tapinstall.exe $GENOUT/tapinstall/i386
-    cp $TAPBINSRC/amd64/tapinstall.exe $GENOUT/tapinstall/amd64
-else
-    echo Cannot find pre-built tapinstall
-fi
install-win32/maketext deleted +0 -59

59 lines not on this page · raw message

install-win32/openssl/README.txt deleted +0 -21
deleted file mode 100644
index 6a042f4..0000000
@@ -1,21 +0,0 @@
-Rebuild OpenSSL tarball without symbolic links, so
-it can be extracted on Windows (run on Unix):
-
-  [download tarball and .asc sig]
-  gpg --verify openssl-0.9.8k.tar.gz.asc
-  tar xfz openssl-0.9.8k.tar.gz
-  tar cfzh openssl-0.9.8k-nolinks.tar.gz openssl-0.9.8k
-
-To apply patch (in MSYS shell):
-
-  cd /c/src/openssl-0.9.8k
-  patch -p1 <../21/install-win32/openssl/openssl098.patch
-
-To build OpenSSL, open a command prompt window, then:
-
-  cd \src\openssl-0.9.8k
-  ms\mw
-
-To build a new patch (optional):
-
-  diff -urw openssl-0.9.8k.orig openssl-0.9.8k | grep -v '^Only in' >openssl098.patch
install-win32/openssl/openssl097.patch deleted +0 -68

68 lines not on this page · raw message

install-win32/openssl/openssl098.patch deleted +0 -56

56 lines not on this page · raw message

install-win32/openvpn.nsi deleted +0 -886

886 lines not on this page · raw message

install-win32/setpath.nsi deleted +0 -231

231 lines not on this page · raw message

install-win32/settings.in deleted +0 -71

71 lines not on this page · raw message

install-win32/trans.pl deleted +0 -97

97 lines not on this page · raw message

install-win32/u2d.c deleted +0 -20
deleted file mode 100755
index bf1f5e8..0000000
@@ -1,20 +0,0 @@
-#include <stdio.h>
-
-int
-main (int argc, char *argv[])
-{
-  int c;
-  int enable = 1;
-
-  while ((c = getchar()) != EOF)
-    {
-#if 0
-      if (c == '\r')
-	enable = 0;
-      if (enable && c == '\n')
-	putchar ('\r');
-#endif
-      putchar (c);
-    }
-  return 0;
-}
install-win32/winconfig deleted +0 -18
deleted file mode 100644
index 9d686c9..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-# prepare files for building on Windows
-# run from top directory: install-win32/winconfig
-
-rm -rf autodefs
-mkdir autodefs
-
-# build multi-grammar definition files
-perl install-win32/m4todef.pl <version.m4 >autodefs/version.in
-for g in "h" "sh" "nsi" "in" ; do
-    perl install-win32/trans.pl $g install-win32/settings.in >autodefs/defs.$g
-done
-
-cat /dev/null >autodefs/guidefs.nsi
-
-echo '#include "autodefs/defs.h"' >autodefs.h
-echo '#include "config.h"' >>autodefs.h
Signature · 1 line
1.7.3.4
#32 lore raw

Re: [Openvpn-devel] [PATCH 17/52] Remove install-win32

The "install-win32" directory is obsolete, and will be even more so with this new buildsystem.

ACK.

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
Quoted 2,703 lines
---
 Makefile.am                            |    5 +-
 configure.ac                           |    3 -
 images/.svnignore                      |    2 -
 images/Makefile.am                     |   41 --
 images/icon.ico                        |  Bin 22486 -> 0 bytes
 images/install-whirl.bmp               |  Bin 25820 -> 0 bytes
 install-win32/.svnignore               |    4 -
 install-win32/GetWindowsVersion.nsi    |  109 ----
 install-win32/Makefile.am              |   97 ----
 install-win32/build-pkcs11-helper.sh   |   24 -
 install-win32/buildinstaller           |   14 -
 install-win32/ddk-common               |    2 -
 install-win32/doclean                  |    6 -
 install-win32/dosname.pl               |    9 -
 install-win32/getgui                   |   19 -
 install-win32/getopenssl               |   19 -
 install-win32/getpkcs11helper          |   17 -
 install-win32/getprebuilt              |   10 -
 install-win32/getxgui                  |   28 -
 install-win32/ifdef.pl                 |   53 --
 install-win32/m4todef.pl               |   15 -
 install-win32/macro.pl                 |   61 ---
 install-win32/makeopenvpn              |   67 ---
 install-win32/maketap                  |   17 -
 install-win32/maketapinstall           |   15 -
 install-win32/maketext                 |   59 ---
 install-win32/openssl/README.txt       |   21 -
 install-win32/openssl/openssl097.patch |   68 ---
 install-win32/openssl/openssl098.patch |   56 --
 install-win32/openvpn.nsi              |  886 --------------------------------
 install-win32/setpath.nsi              |  231 ---------
 install-win32/settings.in              |   71 ---
 install-win32/trans.pl                 |   97 ----
 install-win32/u2d.c                    |   20 -
 install-win32/winconfig                |   18 -
 35 files changed, 1 insertions(+), 2163 deletions(-)
 delete mode 100644 images/.svnignore
 delete mode 100644 images/Makefile.am
 delete mode 100755 images/icon.ico
 delete mode 100755 images/install-whirl.bmp
 delete mode 100644 install-win32/.svnignore
 delete mode 100644 install-win32/GetWindowsVersion.nsi
 delete mode 100644 install-win32/Makefile.am
 delete mode 100644 install-win32/build-pkcs11-helper.sh
 delete mode 100644 install-win32/buildinstaller
 delete mode 100644 install-win32/ddk-common
 delete mode 100644 install-win32/doclean
 delete mode 100644 install-win32/dosname.pl
 delete mode 100644 install-win32/getgui
 delete mode 100644 install-win32/getopenssl
 delete mode 100644 install-win32/getpkcs11helper
 delete mode 100644 install-win32/getprebuilt
 delete mode 100644 install-win32/getxgui
 delete mode 100644 install-win32/ifdef.pl
 delete mode 100644 install-win32/m4todef.pl
 delete mode 100644 install-win32/macro.pl
 delete mode 100755 install-win32/makeopenvpn
 delete mode 100644 install-win32/maketap
 delete mode 100644 install-win32/maketapinstall
 delete mode 100644 install-win32/maketext
 delete mode 100644 install-win32/openssl/README.txt
 delete mode 100644 install-win32/openssl/openssl097.patch
 delete mode 100644 install-win32/openssl/openssl098.patch
 delete mode 100755 install-win32/openvpn.nsi
 delete mode 100755 install-win32/setpath.nsi
 delete mode 100644 install-win32/settings.in
 delete mode 100644 install-win32/trans.pl
 delete mode 100755 install-win32/u2d.c
 delete mode 100644 install-win32/winconfig
Makefile.am +1 -4
index a1c210e..33c4545 100644
@@ -51,10 +51,7 @@ EXTRA_DIST = \
        plugins \
        win
 
-SUBDIRS = \
-       images \
-       service-win32 \
-       install-win32
+SUBDIRS = service-win32
 
 TESTS = t_client.sh t_lpback.sh t_cltsrv.sh
 sbin_PROGRAMS = openvpn
configure.ac +0 -3
index aa1d509..747c7b4 100644
@@ -988,8 +988,5 @@ AC_CONFIG_FILES([t_client.sh], [chmod +x t_client.sh])
 AC_OUTPUT([
        Makefile
        openvpn.spec
-       images/Makefile
        service-win32/Makefile
-       install-win32/Makefile
-       install-win32/settings
 ])
images/.svnignore deleted +0 -2
deleted file mode 100644
index 282522d..0000000
@@ -1,2 +0,0 @@
-Makefile
-Makefile.in
images/Makefile.am deleted +0 -41
deleted file mode 100644
index 334554f..0000000
@@ -1,41 +0,0 @@
-#
-#  OpenVPN -- An application to securely tunnel IP networks
-#             over a single UDP port, with support for SSL/TLS-based
-#             session authentication and key exchange,
-#             packet encryption, packet authentication, and
-#             packet compression.
-#
-#  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <[email protected]...>
-#
-#  This program is free software; you can redistribute it and/or modify
-#  it under the terms of the GNU General Public License version 2
-#  as published by the Free Software Foundation.
-#
-#  This program is distributed in the hope that it will be useful,
-#  but WITHOUT ANY WARRANTY; without even the implied warranty of
-#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-#  GNU General Public License for more details.
-#
-#  You should have received a copy of the GNU General Public License
-#  along with this program (see the file COPYING included with this
-#  distribution); if not, write to the Free Software Foundation, Inc.,
-#  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
-#
-
-MAINTAINERCLEANFILES = $(srcdir)/Makefile.in
-
-images = \
-       install-whirl.bmp \
-       icon.ico
-
-if WIN32
-
-imagedir = $(win32datadir)/images
-dist_image_DATA = $(images)
-
-else
-
-dist_noinst_DATA = $(images)
-
-endif
-
images/icon.ico deleted binary +0 -0
deleted file mode 100755
index 03ea0b1dccf355d4f5ac877c0918b374c7b7c4ee..0000000000000000000000000000000000000000
GIT binary patch

zcmeHP2Xs$*PoC;=v7f_5_*>[email protected]...&#s6adn3Cc*gzDOq9}-B14RTxYJh<B [email protected]...?Io$vRX_vY=(vRO8Wp6E-?|3uq&[email protected]...?z?67p%7uBm?&Rf;3+Of z6cu7PYSGa~dscBFwxh3kbF*Dmh-U!?ezX7Aw<[email protected]...(OsOg=p4Nhz6KW z7SVt(@KH~gQP}?;I-4gqtY0hJy3&&5<K#Q^;z=UpR(nKb!+7-i!)_rW|r*xUWRP+ zx<__+H(mChnjxoc%$6T-&X!+o&z1+0_sQAYvgI}7(xunym2nF)WnNyMd}no*+_-+7 zOixdjhYuZ;[email protected]...)s6^o$I-c6E~6x_OhFkd!6YtXe4>zUGl_C#1_)[email protected]... zhY!h|JSo4}k}aS6E>k*ZdF4y<y)y0mdAakapXAfuc)[email protected]...=Hz6{O&iwBT4Ox&NNS#Z zVV)N}*UGk7OM_QEaysO^?+dSt{n9HB>#_W$EM4PYqI1mA7;[email protected]...+H*WtF4~nX z&!0OdQ%>i}XCeQtojc_7pjGbk91)VP8>fjm+a1wlYhvPA8g2yxsdJ9!4$b*N47ln zSDswGYK0u~Q3lqUA#-zc<=vlq<>7+|WmZ<U{Qb9I<zsWbvc>pxITd?*{9K;A{[email protected]......| z<Gqv{dHM#%GxaX3D%jkB2h+T|MBSKVdX#gZx8-a9dPowwMVgHO|DT@{JFQYvu12; z*p=eOdhF%sP7yS8+*62uVZLr!&IgXzJ_}8(Y^I>2Oqbwk+vzbaD<F7~9o(i^I{Y z+Z_%^cv0uoHKH3kyR>jPqHc3IN;{if6&rhPb!SzF<E~l#}&?Mv3SZmYdajRi#QyO zoHw!Eo&<}ubvQ~mi#[email protected]...;Uy~A-1<F+voMVLZ zJ|H+s^lVj{<vr-{&5H3fAfBAFr!s5LN%Sv0c{$VD%Gyv4Q%R{?NUqH*=Rs#fMsW4 zqy3*<JARfw|F~Ty|CuX~9yuaw!)8sv@il$jvT!-Q+^9u^4p$0^3Kn^GTq}*w(<5) zGUVfPGiCQF8Ok1>_vXoAGre-}$y|97Hfa%T(t=$%@*db5+UL)<X3H6yU=v|?X%Bxp zkt_Sd*6oLl{vm0VvSou{r)cYGqnGT-ky$xX=HyD54cKusSFT>ULivG{=kw%1*z6y- zZI$C!X31BUWy$SZx5!zr[email protected]...+0!ZN&9kST4tVnc#c;# ze<NL{oXJx*@%6+kWh?1#{ycR-uOX=?D>9%^kz$C<41m*DIfUCE4LobmD$<Z^33Ve z@?O~PHt-9yrSu68e(jaJVXse~JR#5h^_NUJuwVHNhYLsgI4U#QGTn{o9S}?&K%~ [email protected]...n>NYcuxI=B?v=^=ewW>_pSRA)P(FgbXziNSa@MW<a$8Y$r-TQhRt7-oFo5C z%agzE{zdLPlEJ1nj^peB}bk;b4HH(K2ttDKNGlFa^B8t$eblTSyFD_vRNKGdPL6r z&!+#Qb_?&<{}g?<@2L}BBCJJ=u*V0q^Yz(lb*jawr_saqUZY;QA<7cQcr#SH6u0Bt z{j{qn+AkU7v8dK{m91c5TwlVYJ=9T#qPemUg+CK4v1+yUOKqUDv?vZucM&8kIsn zyP95aAjF{ViYS6cGmf|J<aSrMgMDSyczae|t}D^FkK?USX=wCO$a+1DdL-(DIDQ){ zql~VknuUA>gs^*QjIX)50&O-XH~bmj8VP4E4tl-<Km)kMA^h)^!8|QLxfSQ%;85y zU_6|)VrF;4%EoYacE*[email protected]...(u_b(}nw+?O-HhS5I8tb7j6c)IDBGedOpo7F$L+q? zU{JE68t3kG8m7mGKMM)3Rs*#RJ{+&pT8}^Qyfy9|XwWYPmOZ%i)h@^SPfj&*%&X4 zuBY_)AT-P!>{ZtoFIOLZHya31sJd$z{X?qXZ&uj(l&Ds%RX5hmX^m^BlLku1k?eNY z!P4+_scp=vS>[email protected]...#2<&P0f18D)kJE^2Kj5yB_L^p1$T$xLiH1 zd9>2VVs~{nM_sO=Y65i8_ZZ7I+A#(_cUj-Cz1H94=Wfv3-mUAzF<yAQQDG0kGdkc zW7gBwR5LwXv%NKBR_b1BoG38vFLIa$tFhiy4SQRS+YatCvULL^^XVs?Ka~Srj+*r ztT?3v8h%e>#[email protected]...*!fCy~^j)r!(H5Zyk;NY#!?>4-6yb1|[email protected]...... z$aBsim&!yg$b9iA@+12E7vV1%TWs6BS$=}tkvZS-qetZ)<Ut3LlT}VdU(ML02l6uJ zP0almTWn0pRWZdm#6KCxCx1SYE1#T~DZfMPlMVmtNlTNASAIEEAK<D$Jm4M&Y5(? z8t~t(-%3~U5c4j^MvR*n|Im-$JS{+MBK9taR+0UImmr~*|9^#J&c_g6V!Rxqv8t2 z3XDr8ArE9OS|2%PC&WLDZ5VIt+cv9>lj-wwqpFln1C_PG30%x|NK+MXk8|!%Qp~H [email protected]...?!u*mk*pWXDs~B*@+8<Pwt3?QnSp$nxiRzJ-Me<m)U#(*[email protected]...)xe z&B#[email protected]...^?EQ6*Jagu>?2WvA+zRBc$Uzy;F{geTIr?Pepa12a|68#HUfF*v z_OY2PquSot;nWgcj;2S*29AvTwo0^KzFxyX!jHs*Rtt_;}`Ul^5Kt+xM0-QaSffb z+g-zl&j<znk}=T*Pt86z8ixNFAO4*Rt5c82au=Z2d(q{hzlBHcWliX<I^bf9GuE;{ zS9XK_uN0-auGaW1pHS^E3=O@;j_tl;C>_cGV*yWV{HqmCR3(m;w@)ZnoLw$gV}(#w z<5ySBGDaZP&nA-goV67~1&x1?YCdStauv50UBc{f#ndE5M0az75h*s(qbh*H_!Wb6 zPgRDDZg*D$|EVTy)O<{j_UOpA+iekWxfsq^@ra7t+}[email protected]...&[email protected]...|-Fm^wudhRml z*HVpJEOeKv9ee87Iv!OhO|McDs;[email protected]...{L{H*h)mJs#;l6PfR`8^+ zSxI|$rJ~(U<*eDkhcV3UhTiDMI4-yIftHH?aFf9e12lrGTg_X|I1F9J?z=0fXqhv5 z4K^eyV&UI-T~Xie^iiWvDB+22y<a-a!n97l?J8+#)V&6(@z;1^nhA?R2}>7T_bdId zX+Nf1WxT+?6-P!|Q;pN>Z6_ZWXQTpV)[email protected]...?lS}5@?Wj5v+!KCj9O8cfV)OEYf zTu5d0N*#2nT^|x$lv}LI^omEJE~anmsh82DZiR^l~WOU)<Oy|W>sBAI9J0?-gqNz zDqY2VJ2|Vrq7A8hq$<&6;;;|AI-YP+pjt*F(Y!jD_RrUnhIoE10acJcJ;[email protected]... [email protected]...<)8Luzi_z~5rU9a9=PI_9PaLRNE9-4{xdvJ$!{DU;w(z0% zpg}V;E7jXvhvF7~P2YjKT+P{C#%[email protected]...=bberpVP*BfcX>XZaE~7Ezs*?bHGp z8s>gHT6d_jQg~gaqVD<)Us4&YH7GRic2<{JDPO#F={BwXdy%b~kMAY$$Fa2y{WWIL zC0yjV4S{zU%$;[email protected]...|_U*#SZEiP3w~C-^sACt#oYL5)C;1taHx<#MZB$zI zx0znwi~*JNi*B1$G74C&!~w;0lmAP)T;4A{S1Ey^Z}JhcP@~&p5cxv([email protected]...%9Z<9 zDONOqdi$kA|26;R9mxN?WwgOPz<oM?D-#yDJfiQr$HcN_iN#i}SpF6AnL{QlOkBRK z%;5J9i|DvCAHIDq>!Ur-N5^}b&G>Fp*ox&#*E1g?puT7J;QOR#-zmn=LPT!w|M$! zOh=!L9+ftH^z2_m;?l)q_58$TOQwyV^D}u5R5%HqFHjb-(RkYI=lmJ>eQ-cv&aJlj zBOdv9pTO973opUrGUwMsdEV-GdA4;[email protected]...*0ci$OMhNm5Ixm_kQ~r[email protected]...<Fhi z>j0jy_2q%boxW^7t5C|jmF$F054=|{FuRi5O8yC[email protected]... zwfvAHdGWH9Q60yh6wxlv8Vf(cvl{h3toEq1$q&ug&%GO|=jsxDFDV&bN*ib4CwLB{ ze#mN%N_%g_M{53~dY&#Z|M^ER+(XX&-kR_B{CM5iKPmr}IP;(NT%JGVuiE~NQ<Q(b zg`eQzem-GqOYHG|L#[email protected]...^[email protected]...<y49+|&*<rQ~NJ;?nZ0^B?s{wUO|0#a>#>A;I^ zJ@&L1J}p^1Fg;mtPtkWLaD3;S;PIdx1E4-X3{bxtTP4<lv-|)[email protected]...<*Pi zU6>dECqGT!+z<WcYC4ai|5Ok<XD~)x*Z6_T>KGphm=8E$!gna20z?7w&GAMFkrFP% zT73KPG9Utf>0bEJ=lSL;YmWo<J*TM;HN|iky_69J_1AL?{=)=;Rh3bk3ZiF+N09M zgt<RacLnq&0^kHp11tfo1JIr<1<U|E1}Fo)5}z*INV{Wz-XzV5o{cum8lOV(HT5 z<R1=51}OU#pv*=ebzBUeet^1_Z%+%w*N};N-3q!UCeQnkwu>@M4Zv5+vxdB9Em|*P zMuYcg56}FLOW+%cIa2C)90dJN)u0gx>uh;Y!LoqDdX6$chIJC?b<GXj([email protected]...<c zcuN8L9r=>IB4=8f@=fs)<O6Wrk*I94w*q?w2jUN)GGsm$xsaAi*0i#!(RBVqRn4F zBNi=NC17*QfdBCTGVtsh!aj>W?;NK+BOjj)HYTLxW0m92xKdAaE|q<%QK<V<{qpL zz&{1NBj+z&BO1Jt%Cj#AJ|_TrA9YC|8Hj)H0JwV2AfD%Ib9QMRcq;(^MU?Hs1zYsm zuMI-aUnjZmJA>fAL;j8rmH(y=3<|(Mj%WYE=f7&*dngD!X{?S4hw?IJ($h&?E2OT zo<I551!Vcj(1W^v$NPsge|t=!_t9R7V{j!07(G*n7vLv9uxgyn$m0222h6IZ2Zro zUY=v_S-S;sG3RQ)o*;C&-$enn0a-!t2J*v^5zM#V2RRy@*V;>VdL*XeK_}K(b7b5 z6YQn={&xjkdt75*7wfG6v~m9Zy1kuxUq2yLeE$6gZU0[email protected]...)ums6pGVc#tNK{R{i ztiXHAeMk&KpMEviIlaJjJo0g}SZ?^An}YDxGB}9)>}S8}J#Yl!KLcZP3mhNq=}5i% zVEz{U-Y15@|[email protected]...)dilJ{SW3v%sx5 zcgYW;&X~W*pL%$%03PemU(orGfBk6ipS4KwFAClVLg0TI{3}og>Wn$3JXR<|625a zUBDQ1uq*ff{rTIp?kx;~|3>QI#|t+bZwBh4d~coQ?1)9>1$pG*!%4D(bT{D5lfi* z*Cho0w-R^cOqJJA|1XSTef*|j{FWg6cjF8q>[email protected]...<@4=HnWO$i2Xx8HOqTv|4 zf7HK(d~v;fZLB{4V4jr$@E_Cd;XH%3<Ng%iEMBc;=mr_S1^f=!2lyV)pS+P{h#nK* ze~s8n#~+%Oz2uoR1yDwRpKr%Ijq!%0*M96N@!@>z1NN7^pl1<)qO5bzXMVRqbcc^H zc{BE69%ZLxuW!LvIDq_b4uZ!ydjU<j54CU>&T0F_q;I#0FTY=>-iO>Z50oFlq~A; zeKXe0{AJrkXgV=Y-UQ0Q*u*ZMf1Ud<0%uxG*>=bhJ%)4PYgmV#Vyp;o?gAXS2(4c+ zUL2tLvuqD2$WGa1*#*[email protected]...}8>_wc7PqXpn5;x*[email protected]...?Kt-O zqyl([email protected]...%Uzl8EfhF1}Yg7eD)8>@EvHDx(IK(Jn_KIxlD3Q0G)[email protected]... z#GEyMLk7O%[email protected]...$=~xPJxtF}seW18*5%DBx1o98AV2(4;JU|Goq;eju;e0Q#}p z0JQ<ZXyhA{DUp(pH?pkTJF;w4>d3O?Qks{IOley>GO2C#@c6dX!w8~7bs?UwiOU6C zFz}LrmlM2jP?rwo#luKkJOC&DhEXCu${Q9RnG%+S>xmR0A_=KNl*<t!Do+Tvj2DV; z{_l38g?j23h5c_~)}(L|dp3FPtnx=@&cL|22%rX_JAii;Zvtil<^a9{d<J+MKp)!& z5Ch<y2j{97aNy)4+Q#SG$3n|@u``12uH<5*kNuxs-u1;BJ79buU(?0k<K5zEaFv zvRbrw?X<wX**10UK{*UXZYjA$VqHxz<Z;M$*sqk<CLcS^zppE<z2{S-)k+euWSw; zjT9gF)i=NS*?tCN3L*ar%Fex?jTpLCf{KSJe<eUMc>Esa;%H~|3v`fIob#n7jWOW zf0PBl*iG;6#md(?hjVRrN|ci}H4E?-pd{dO$X*6?<^!}XU7+YfhkCw!T<xJLe?^pM zLR>=+B|l=rhi4?~e2}[email protected]...^(u<jrLQ9z^XY4}>?{ueBAEj>dNoxnSi0K2hD{;J ze-1cTQ-11CpLg&(2je_L#&7+2{f2f6b4=reTGqfk&bQ0XI(>gb#CD4BlzCPTMjd)D z1o^iCCycVsMJ}jfV<R7l1l|1s_?<)[email protected]...!dCLVQ<Ijq0zx;<FY<NfJO>;9DTJ3^5E zW8f&8KV{x_``*_B&Flhr{*Hd;+o7z1v1Y+{55}6ND_XEYw)<Dg-x82_ku^L>`I##{ z^C|8^e0FmfXzKk5R5A|<<(+=)B6LXm7eEpEn^ySU2fsCGKTrm;1-iqv+oLv=pLd#E zyO~#UUuTBE_f6mgI|J(cnGopkx2PI?2Y8>)J21*axd5vHc6sgf(-^BrpT{+G?WWJA zecllQU)t7|fP&WWNeDFb+4fa*[email protected]...>KYi!rs<&v1_wGy1%~OQ;E2jBhpV zVC72SQOEt)a2@(L!?3auPPdl|3Tw7RK5R0gUCOL^3!j<t?q-Dm6^OlJSFL5g?& zHOwjjd([email protected]...HN1fSdx>aF3E7?=FA$vAw&&[email protected].....=A) zaE%-WciOz$rahr-fJndrfL-rd=bD-U)c*7CPTfrydqRMZU*[email protected]...*@|<SfM8 z1Hdh(=HgC<zkkog{T2NYWiuhreeN-gac#<0En1Rj_+IFrDF^RrHUk358>sIUa~|j0 z<C{RZ_CCXR!FDztb4Gl&(7J!8>{O([email protected]...#zj0qxbCMXN<y+@0CthxU*q z)ZBg>aA~)AcW?w?m$9Ha?}&=1*a3S#9[email protected]...{V<@Rr<0;dl^>D))S|BQ*Z z>=5^IX^65g7N*^50tnUaya-&Sw*w{}vD<vcV~0YJU9W{PTqC^($FvmtyD$_y3fe#a z{$9Wh)pl>&6UqWylA^S=iUeV?OMz1Uou})dqDrk%iVQMw}DMeF)dgbDuZ3e^4s zxFzW?jo*B&[email protected]...?_%v-%xTCqtV~Q4o!(O4>gacQ6L<xZ!M~69SIl+%vbKT zfv4h?0h5l}?M=^1kX^6se#%dOc9-w>O|D^Dh%zx|nh_!{?~;_Bl9w%Sbp8$bUsm$N zcknwXn?D#AqD*suH$6n$ueJPlPR%F(eSbs#1T8<m!?MZ$Mj>Ph6?cu2A9l0fyZQ8| z)8CN)E+s$oX9&L)^!c(-<4EexBO$K!B=E{I?``[email protected]...{77fTHo!Z7qUk)mR1e zg=lAdt47^tEb()QGEvX?n?s=YHBetW?Yky?V}1KX#I(k&frtM_xuen+HLu;D9A(K z6o|in-^0MG4=5<_^vCC2u([email protected]...|X+<;([email protected]...|w)#>Z1YWaue*PRg|%1+t3 [email protected]...(SL7puktbxBv8gVG>&P05_rQ#ps4ubl#F+^GD<8)5{ zMTm2_X1*VSMvAU4;E~-ub~uVqfI#&U>(ehCju%1RP6Kl!gZqQ%[email protected]...) z9Ba)voLiWf<23NAtGS3H8sqom_wgMB<2c)0F7x;f0NR&(09^qU0en}[email protected]... zw#A;MK$G_*{yJMw+la-umkFLL0F<jBT>t(bfLjuv12e_eF0rswp__(TZfXDGP939 zk8$(3uYVFvUOr>Ld!WssfAr^[email protected]...#tL&e{apKExp5c5fQA)qwChV6B%E|{#?Sdl z%wLkE;tR^FWnPGHgeK12CT^[email protected]...%6tf3MU!r^~wN3-t~_(^-u<(H1S< zW5U1DKlHDCcoLb<NbryCwDeggI{E8{[email protected][email protected]...}R!pJk}N*v{t^<~<H5 zW6|XIO_YXlz=sv-#lqv#ejPcAO&Ej6-xapi_e8;Pyu6yEcWb?g!8xb_DQu2ra8F znKSc_#tmQ|[email protected]...)pwC%ijChGybN2Pu+b~*;I<6KJpY0wBHvwz<^ zmx0%%$QNu5_kniGU)F-!-~K;Z1M{&Gg^-<VqQ26;1lyB;V{A8Mr~xQwpM&*t4TZID [email protected]...!DI|&>}}AvoN|Ri>r3!7V#U8NKi9~6x8#3e9Vfu!AwVemT3DQlp!+%? z4G_v676vB=G^YYCRo4r%7RF8!0o<#?$QTGW6*N8pv<4JLhRcC_C3sS=J_RuLWn36Y zMtdLkIR)@F;9h_ci~sww>&rd4P(GQfDr)RZ!@NSA3&XB-g6V65uhZ%fBq%4rHl{b z|2ouHCK>HxN#V!X|5{SL6(t8;VCHd!c)Ri+(P7_OzI?rH#{XWDGHx2vBYOesbNN$ z5|$bn&(E2{Qp?5jb0&L<e^V9DHp_5txg?g6DUm4x5BT7FCVbHZjC>_{u?=29OUjUM zo=L}~8&5t4-zdcwtBprH2|FMtr*P-7Oc7CDLHYTwz)%AP2S*[email protected]...!+9s>D9v+bev1 hg?)-gDe+$tKG0&Bf+ewp&~VaM_MRlQaJbh{{ZxLA(a3C

images/install-whirl.bmp deleted binary +0 -0
deleted file mode 100755
index 03f33fce96789420beb692679093506ca0685469..0000000000000000000000000000000000000000
GIT binary patch

z=gc{0#_F|S=)U<p@53#68>%G-&Op3%[email protected]...{F{T8^3N8Kgq7ba=RgI+RSqD- [email protected][email protected]...!Ep6+VD-<SB8L?WS3d_<{|qW}Si$gr;6Nq_ z=H}-73fW91m&@j|S-<einKP$P&-f*p&t|iUPeUgLdyaQgt~6xmWqN8dm&<8kKA(ps zlgTX1&ugJ((&@8j&z{j&GPAR}nVD([email protected]...#~xb?Ch+*[email protected]...%=ENRL*ew) z6kYganrA$;[email protected]...~vy?M>=0*GY!XEkbCdy%RQ^V<*0&tGCxApb*0D?{eZZ<X4 [email protected]...+4=4<5~!1{gK1XjrDL{3%k2IJC7ZO<ytaw>[email protected]... z42>K*cz~|8q_g8#ecfSdY02coc-`Sz3V~Y-k9T+ZgQ1)mH8([email protected]...$nDnoN8%m93LCi z5<fFGHoABBPC)Yu+gn>E#>e~;@*T(8>8r7!jw*>yZz6{DpTMxKwYj^i1D5NcCMPE# z>*?;Ao6BpVWLWX7%}vL<ItK^(_0vFqA1%P7bULkttu0OPa(pai189IM-31<*($glZ zgC(vdbky6^4MbXETIe|1*3yiU(88{cV?D<iYOGuu>+7bbCVjoo-CsH+~|*4tCQ*K z?AX6|_vpwezmQ&72*X1se0ioXrm%Zws(3lPSr~!<ixOf!7@@NJv=m|g_%qM+JXf z@3-Fs!Ai!RO-G=m97Z)^1#iGpowX_}sng<)!Pf)ap2scLJQVG$vvevgCweT;2# zA|5Sy&;VFpTu%)2qXHPSHf0cNYCL-;*38Hxn4BCQRvOJPn5Kq$v;YKJNQPI&gKF?K z{L%K-+5[email protected]...>Lv%3X8fOWNoMJ_?#CctmAO2YUJZt*Mp<3qW&ltFhH;RRY z1;1h<zw}onE|W~@=ZdiPAyu++GQ}1B_2sv~mfLacD7yflOG}t-PzjQi01b<TjUU> zGc-8h>lbOQJPcWXdv;dus;=6V+Og9<2sOIJAJNiz<{>|y%pap){(q8RSa9YMnFR7a zr03*DX$;#&!n4s1fo}EzH2LZ(<XxK2&xalH-gC|_D+F&a2TEXgXVu)[email protected]...~cyu zKobc>6nCWzhH5*Foei(pl=<C%^7Bh+!8dr|mFAQKMHnJw{4$&+uHQYlBzXovDs z)a=1#LuEf28%cdoGG}sH#~nK$Tm!&z?>CHKr#7wQn-)nFxDHC&Qrv2SbNakeLb$ zef-$!=GC^4C?AeY#fh{fuw*A=yP}}w6VtZYNi&%2A{I^oF>{os*iQE8a9Q-{Z}>h< zB9Hruk!%|RhQnt4TT{#|MC4^X|o7J06gCSm<E%zug7!5fJ6>uKLo?WwFh)i5AL5A zdeU2-pDmWgku%|yn=%(~2;{kGYk^Cy?f98LADLJBb7VFK-+0<7{[email protected]...(%;>- z$Z}$Xc;D}Xi#M8)Ty|H$>k_}Q(NWf|JXorwD6xkQ9jw7#5K27QQj~r<MxHi~c=+b7 zPevX?)KS_lik;^|[email protected]...}?^VPpZ8)[email protected]...#ae0t^{_eLb@>(BQG?k&V-lV z9U$03^M%LGjo}lA=7rcSsCCpe%gSa<Bk;Kbi)?c;2(C*xle1;-+Cq<ybksIFWMDq zYhAcLXpWtDC5bcmbxhf;-0G_OBZuM-g*j}sgEjk<67#$8{HkShE^ubuC%+lsuYHp zeYg}({n?QeyP6(`btl4$)*Egq^AMitD1vZuc!=KINK-p>HRR^PPdu2_DpZFz2VyVW z%;[email protected]...&b7Q#Wu#s&UjGqdCHg&*~ziF$3YtwF7gQg-HA;CQ+c;PyoUGVlh zg4U#~71tnkf_Nx0NJ1j|rliQBVRM8w;T-+6M5ep5LzzkAzANb0B4Q+DB0A)8N__(I z9)@3kDkp4Ho{_1IqF#iqP#3Z&X=x_%ppTA(7p{*4!{[email protected]...@pasL%YYS z^g3x=hcw#mY<hu}[email protected]...+hm2qrGTJ3^B!(Z6Yv)a}vyxSLD!%ij|YP z(h}=eH+n5)g*>$bM{Q9I2~+S%Z4enxu~v^T+}{_%E&G_2Dw%g}jI|983|e3IL+l&f [email protected]...~cU~Lu08<Ss-qRBssa6g%+IYDbMsi4l*vSpUVZ)GpB%|qY*ck;-kwaO4R7vcI zHT?@Bgb>Jbxaf{_Yw7)vIEDdkxR_<6JDId(8{[email protected]...?!oU7e<ig&m-Zbtx_)O$p9! zBvucW(52|ZpTC+nlQWO#D3d;2AIIn!uS|>f2s8Uj>bVB=o}q_xuyY{@vi9WQV7b# z5K7yuX?g3Bf|2;W}[email protected]...#zYW5W9y$|G8*=x|A+OD$sAJ8}o>?*gP>izdOl0 zTCs4!La1c>DP7kg=yc)p%<PLGQxHW9T}6iX$cHjj-PlCIWY^=a?U_;<CF2OMLd|W zq><~WPoidiWEbVB?2#6(xi1q$8<Of$5rFHTh+Foj<>$9}HVq9vURxH1n+%3-3Tw8- z81Cy0FAxnJ=^93|gf1QE>vaIy3f&d33&N~l)Tt9LPM=<<Rbj%[email protected]... zBZ<[email protected]...&cE|cU85q0>1P|[email protected]...*[email protected]...#{)cUI0UwEf0BC`LQT?qZkUj zpMNw<SYR>;PiI3^[email protected]...<gk1Lu=E>7;b$b#*htDx|TsoiY{#_Vbh>!n5ItIak0AU z!2Z3(@j>4%rOFZ(tUps@([email protected]...;@)K#B{[email protected]...*tDUxXE zLC-<(mvPA~pQ62SU6AT>t3WYy%v+zvNqhf2nJYI1AA2Bk<C8fwc~wL#6GaYHDNyUF zx^[email protected]...%o+Z~2GIu{hccitH=HS=oZaB&Pd7ZHskQ|3IASD7zq;+%-lIt([email protected]...+Je zZhl^D8i6H&A*TwmPf99-5eP_2*rn`UOj;N$Jow-}!9;YTLR{3$AR42Or<!U=)Q9iQ zD66EYzqQ5~;#)|e_Cm(X8@^&U5@?a%lh(J8!I0uo{@}$~ygT!3=gBeV(fBmh)l%Pr zD&O1gR5{+G_QhiP$h~gYC}q=ddg&OJ+956l;zx-Tati4>i~b{asQ^xj4#dspAu56w zjo2jgq|~z*8qX8Pf|4FBvqRCHWw<+Dz>{Pc(mwPh<nZ>t#jzP?&y4X5CnI(eQ4p!u zdB|)?X<kM|gzhSfp>mzfOD#[email protected]...+KP<~jJnbVUIoIR_*uKu zEf&z>&tBmvI&!Z=#QE1i4gghM$CR#WS3e%YILR&bO8#PGK}QNR&8?WUF6VkJ#rDX zx(Eea(tVp1%_G$r%mlrPNTFh2#&V5as5ODh*zEx7_NOisY@@}5D?*%->H+sQd_n z8K9&%{z5|t6c593%d#9kp~PGZv5#*Uj7)y}nH+JH>z~M7ez%ccd4#pwn~d5ty3|?7 z244AOVKl(<ynAENA0P5cKcUJY^gnvZV94Gpbx9xCH^%}IPnE_O_3@BCz-679eO9V zgCjc{866pMv$lmgYw1<x(C4&iMB1?eOm%D>?!>r(YTV0oB>tgMD)bJeaGR7M1NV)H zEl7!sVQ?TB^|Sur*[email protected]...&<rXXj$|m*wFO)-$vw6O?7*hz>{|Cj z>EcVCT{<&{6&aYs?tFW&?a%4#g1{3Izw7VHKE#[email protected]...{786&=hB?wTP)!lAXR78am zM;}ic45j*_z6F-2G7J?bcLtcI3HcjXj7H^RkoHIhN3OPJzt%F0vb>5p7MVvJl}U) zO=BqyVnz<[email protected]...%XZG;O6w9n-Sp_ET0<nYj7_|ZQ(4HNOn975<wnTm1nqb0&r zh)nob%zpUSf)EIeT(K$8IGy;1hI1C)FFp}ljAo2M_}<?;>4FAbm&=F5ylKP^#=!OE zt+*kmjBr+vmnFsvsd!JF9>b5<m41sfZljumz9DV9qOx0^$=h;bjqq#d2tmXX35T z_Yyd2cbKFK&TMGY$YG6%wV5YXMeGzo<-v|Pf|G8sVmjFA|+!M45b_lkvC+X>W0h` zb4^1ixu6qszT|$0Me;of274=>Democ%8<rbi*&+Nc*yw9VNHK1#-7LZ;1<utMh?-L zvieDjef&>9Y|[email protected]...!4Ne7Mtf%YcBvpnT_bNUDi>URU*?SUNezbRd^^ozyL5DP zL^y33S;d_@;UX!R2)_j=kr4Ts*blijq_vPbE~!bIf(+Ms<SXW&!pnxqEf*wRX!}A [email protected]...|v?mXJeQW$#[email protected]...{TX!K(m!^>k3ZlHKX{{!s6j(@(WO=-j8GM0c&&|^ zOLZ_r={XD|hyAhI5JXi;3U?j9mx4Nb2hjOowcwGRR^dAAZY<C*570@)ZrYQ%wlm zN(ek|td9?vk{A}oOF8!g5C>y5m08c3XNUrMAulqHjZh9&?-BEG&(ccB#j!kQd%0r zbT0hlW~WY-2h8=8o3n=oV<ceCBsR;ryh!p65);1%EX~IgQ1>[email protected]...)?WZ-;[email protected]... zHCmmo=u&}H(x>Z7j=^s#!jP3>8Wapa{ZK|D2?J9uy35yuZ-Hj1*}Dg33%9uDqY}r zTX^?)~%9Hf}vA#&#))wSgG>j%[email protected]...$#iOWQ3~l=uiDVQ!!Xjxr7?u| z)uVB&1<ol8Veqg2m9HNP!C8I;(Fi}YBXN={WQu_7c)k!)MKH8&n%(Jhk7hZJ?;Z~c zV?Wz4f9-?uDuCw4e>dpkTS%J*inRf!OTYSO{+F-iCDqKYY>8eB5Dc}VWL|2C;{%vM z$RQ2#By1YdmS(wIZgCCF%{KZE_PKmAX{xF(x=tkVQUQT95vL(ci94bd@%`k!lbk(K zt{9pYkpG=2|B5l46Qq^u(#4V(LLS}1Z~$8VnLIPb&SY01rh?0S&HY&p3B9k*_z<40 zc_B82Wd5Q{<tr(!9h>dj??6uCj^r!N9=2k?lwBHalCpeATcV>};-$2s<>ZlhZi46! z4Buteof&+>roo0Vtg_w%8UK2!RCgzemH>[email protected]...#KnV&T36yh*qRE!G~18YOGBKSb)MC z*U?JG?S~QCrO%#(9An~hkFdEh%[email protected]...(HsBpy3N^Qb5YNp4828wjIA3r z5;-(nrjU^kr->T3l#aj+Ou7~VU~h}Uo;Kzkj|zg<BOg_oJw6fQbtIiLj|8*OJX6y zZ)|*_Po$jO2+IW%ITdyoTIr=aw^T6WPtQzarf|VtD4m{6?NErEZxPiJ0MWYsb#v(* zyHu9|[email protected][email protected]...~ZihRj>09%W!>gg^wybq{5!Ui?E2*?cU$U&~dO1~F?m!_vBs [email protected]...zN>mpl)[email protected]...;9F>[email protected]...!dDMf2G0G=U^8W<HZvkE zVPbhNVJa}RXTWwt6Xzg8CTP~uuRn2^y4(La3JQdI{fY=uNWGf%fgU)h|M>jac4<B z|AcuVp30{c;y;^?n{Y*-~qDB;c%Mg1^aBDC7yZv-)[email protected]...&=QuFd%~tBBx<d{g z46#;uVRj8A?o~2|fOa%sgLUm{*@uNNlS<uaJaHE27+<@Q7o#VE;^{NypmTVhZxg z{WWJ~TGI#U*xYa+%zc{37&0PfkpvTcM9lmUib<~K!#iIi*{;sX=LuuP8o8j%^(T* [email protected]...>r?1h$M%z1&>y%b*j!VV?XQimsEpj66*iLs2%=SLgal~}Wh8Gf7|KEnU3458 zOX>VN{#e9sQ!#F0BIrdH+)KrO#^{x%2INZiB*I0SCNkHVrUINbMka}-=^;KAbU{ z(C$cr8z~PLs6O*>_TD{nrNqx~Y9;3}L4y3gqVf=xx*[email protected]...!586ryHE zBPp75-|k(=D)-}x|42f73scK>iqTuDQ;E}P%M1YYNF|m_ttBy(R_7MNrjy~eriBev zd19MCeI?I%BYRilaLE(gQo~u9<-{tnLEJMltwG>[email protected]...{gEeFF zGc%MSE#gTOH-(jJ8nKTR52MPoI1N6XZTGcuGFPvwSLOLaM6Y<g)4^x6%1Dn7Rwz; z1;gcXZspXgV7PLySnfzF7%rD{E2mxs!<[email protected]...|3ZaJigYIrS<St{g0uJCX{9%jMk4 hsaL^p<zTVgkyJ2TF6UNGy$Xga2aDy7#QdL1{tGA-a#jEU

install-win32/.svnignore deleted +0 -4
deleted file mode 100644
index 9bf9495..0000000
@@ -1,4 +0,0 @@
-*.o
-Makefile.in
-settings
-Makefile
install-win32/GetWindowsVersion.nsi deleted +0 -109
deleted file mode 100644
index 103caff..0000000
@@ -1,109 +0,0 @@
-; Turn off old selected section
-; GetWindowsVersion
-;
-; Based on Yazno's function
-; Updated by Joost Verburg
-; Updated for Windows 98 SE by Matthew Win Tibbals 5-21-03
-; Updated for Vista by Joe Cincotta 12-2-07
-;
-; Returns on top of stack
-;
-; Windows Version (95, 98, ME, NT x.x, 2000, XP, 2003, VISTA)
-; or
-; '' (Unknown Windows Version)
-;
-; Usage:
-;   Call GetWindowsVersion
-;   Pop $R0
-;   ; at this point $R0 is "NT 4.0" or whatnot
-;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-Function GetWindowsVersion
-
-  Push $R0
-  Push $R1
-
-  ClearErrors
-
-  ReadRegStr $R0 HKLM \
-  "SOFTWARE\Microsoft\Windows NT\CurrentVersion" CurrentVersion
-
-  IfErrors 0 lbl_winnt
-
-  ; we are not NT
-  ReadRegStr $R0 HKLM \
-  "SOFTWARE\Microsoft\Windows\CurrentVersion" VersionNumber
-
-  StrCpy $R1 $R0 1
-  StrCmp $R1 '4' 0 lbl_error
-
-  StrCpy $R1 $R0 3
-
-  StrCmp $R1 '4.0' lbl_win32_95
-  StrCmp $R1 '4.9' lbl_win32_ME lbl_win32_98
-
-  lbl_win32_95:
-    StrCpy $R0 '95'
-  Goto lbl_done
-
-  lbl_win32_98:
-;;beginning of additions to support win 98 SE
-    push $R0
-    push "."
-    call strstr
-    pop $R0
-    StrCpy $R0 $R0 "" 1
-    StrCmp $R0 "10.2222" lbl_win32_98SE
-    StrCpy $R0 '98'  ;;this line was not added
-  Goto lbl_done      ;;this line was not added either
-
-  lbl_win32_98SE:
-    StrCpy $R0 '98 SE'
-  Goto lbl_done
-;;end of additions to support win 98 SE
-  lbl_win32_ME:
-    StrCpy $R0 'ME'
-  Goto lbl_done
-
-  lbl_winnt:
-
-  StrCpy $R1 $R0 1
-
-  StrCmp $R1 '3' lbl_winnt_x
-  StrCmp $R1 '4' lbl_winnt_x
-
-  StrCpy $R1 $R0 3
-
-  StrCmp $R1 '5.0' lbl_winnt_2000
-  StrCmp $R1 '5.1' lbl_winnt_XP
-  StrCmp $R1 '5.2' lbl_winnt_2003
-  StrCmp $R1 '6.0' lbl_winnt_VISTA lbl_error
-
-  lbl_winnt_x:
-    StrCpy $R0 "NT $R0" 6
-  Goto lbl_done
-
-  lbl_winnt_2000:
-    Strcpy $R0 '2000'
-  Goto lbl_done
-
-  lbl_winnt_XP:
-    Strcpy $R0 'XP'
-  Goto lbl_done
-
-  lbl_winnt_2003:
-    Strcpy $R0 '2003'
-  Goto lbl_done
-
-  lbl_winnt_VISTA:
-    Strcpy $R0 'VISTA'
-  Goto lbl_done
-
-  lbl_error:
-    Strcpy $R0 ''
-  lbl_done:
-
-  Pop $R1
-  Exch $R0
-
-FunctionEnd
-;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
install-win32/Makefile.am deleted +0 -97
deleted file mode 100644
index 75932fe..0000000
@@ -1,97 +0,0 @@
-#
-#  OpenVPN -- An application to securely tunnel IP networks
-#             over a single UDP port, with support for SSL/TLS-based
-#             session authentication and key exchange,
-#             packet encryption, packet authentication, and
-#             packet compression.
-#
-#  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <[email protected]...>
-#
-#  This program is free software; you can redistribute it and/or modify
-#  it under the terms of the GNU General Public License version 2
-#  as published by the Free Software Foundation.
-#
-#  This program is distributed in the hope that it will be useful,
-#  but WITHOUT ANY WARRANTY; without even the implied warranty of
-#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-#  GNU General Public License for more details.
-#
-#  You should have received a copy of the GNU General Public License
-#  along with this program (see the file COPYING included with this
-#  distribution); if not, write to the Free Software Foundation, Inc.,
-#  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
-#
-
-MAINTAINERCLEANFILES = $(srcdir)/Makefile.in
-
-dist_noinst_DATA = \
-       openssl \
-       GetWindowsVersion.nsi \
-       build-pkcs11-helper.sh \
-       buildinstaller \
-       ddk-common \
-       doclean \
-       dosname.pl \
-       getgui \
-       getopenssl \
-       getpkcs11helper \
-       getprebuilt \
-       getxgui \
-       ifdef.pl \
-       m4todef.pl \
-       macro.pl \
-       makeopenvpn \
-       maketap \
-       maketapinstall \
-       maketext \
-       openvpn.nsi \
-       setpath.nsi \
-       settings.in \
-       trans.pl \
-       u2d.c \
-       winconfig
-
-if WIN32
-
-nodist_doc_DATA = tmp/license.txt
-
-confdir = $(win32datadir)/config
-nodist_conf_DATA = \
-       tmp/openssl-1.0.0.cnf \
-       tmp/client.ovpn \
-       tmp/server.ovpn
-dist_conf_DATA = \
-       sample.ovpn
-
-easyrsadir = $(win32datadir)/easy-rsa/Windows
-nodist_easyrsa_DATA = \
-       $(top_srcdir)/easy-rsa/Windows/*
-
-keysdir = $(win32datadir)/sample-keys
-nodist_keys_DATA = \
-       $(top_srcdir)/sample-keys/*
-
-tmp:
-       mkdir tmp
-
-tmp/client.ovpn:       tmp $(top_srcdir)/sample-config-files/client.conf
-       cp $(top_srcdir)/sample-config-files/client.conf tmp/client.ovpn
-
-tmp/server.ovpn:       tmp $(top_srcdir)/sample-config-files/server.conf
-       cp $(top_srcdir)/sample-config-files/server.conf tmp/server.ovpn
-
-tmp/license.txt:       tmp $(top_srcdir)/COPYING $(top_srcdir)/COPYRIGHT.GPL
-       cat $(top_srcdir)/COPYING $(top_srcdir)/COPYRIGHT.GPL > tmp/license.txt
-
-tmp/openssl-1.0.0.cnf: tmp $(top_srcdir)/easy-rsa/2.0/openssl-1.0.0.cnf
-       cp $(top_srcdir)/easy-rsa/2.0/openssl-1.0.0.cnf tmp/openssl-1.0.0.cnf
-
-clean-local:
-       -rm -fr tmp
-
-else
-
-dist_noinst_DATA += sample.ovpn
-
-endif
-
install-win32/build-pkcs11-helper.sh deleted +0 -24
deleted file mode 100644
index fd336df..0000000
@@ -1,24 +0,0 @@
-F=pkcs11-helper-1.06-beta1
-OPENSSL_DIR=`pwd`/openssl-0.9.8h
-
-PKCS11_HELPER_DIR=`pwd`/pkcs11-helper
-rm -rf $PKCS11_HELPER_DIR
-mkdir $PKCS11_HELPER_DIR
-tbz=$F.tar.bz2
-
-rm -rf $F
-tar xfj $tbz
-
-cd $F
-./configure \
-       MAN2HTML=true \
-       --disable-crypto-engine-gnutls \
-        --disable-crypto-engine-nss \
-        PKG_CONFIG=true \
-        OPENSSL_CFLAGS="-I${OPENSSL_DIR}/include" \
-        OPENSSL_LIBS="-L${OPENSSL_DIR}/out -leay32"
-
-make
-make install DESTDIR="${PKCS11_HELPER_DIR}"
-
-# ./configure doesn't need this any more: ac_cv_type_size_t=no
install-win32/buildinstaller deleted +0 -14
deleted file mode 100644
index a17a027..0000000
@@ -1,14 +0,0 @@
-#!/bin/sh
-
-# load version.nsi definitions
-. autodefs/defs.sh
-
-# build the installer
-rm -f $GENOUT/*.exe
-'/c/Program Files/NSIS/makensis' $GENOUT/nsi/openvpn.nsi &>makensis.log
-tail -20 makensis.log
-
-# sign the installer
-if [ -d "$SIGNTOOL" ]; then
-    python $SIGNTOOL/signapp.py "$(echo $(pwd)/$GENOUT/*.exe)"
-fi
install-win32/ddk-common deleted +0 -2
deleted file mode 100644
index b45c9e5..0000000
@@ -1,2 +0,0 @@
-# DDKs <= 5600 use "AMD64", later use "x64"
-x64_tag=x64
install-win32/doclean deleted +0 -6
deleted file mode 100644
index 3f39543..0000000
@@ -1,6 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-[ "$CLEAN" = "yes" ] && rm -rf $GENOUT && KEEPAUTODEFS="yes" ./doclean
install-win32/dosname.pl deleted +0 -9
deleted file mode 100644
index a678e66..0000000
@@ -1,9 +0,0 @@
-#!/usr/bin/perl
-
-# convert a unix filename to a DOS filename
-
-while ($unixname = shift(@ARGV)) {
-  $unixname =~ s#^/([a-zA-Z])(/|$)#$1:\\#g;
-  $unixname =~ s#/#\\#g;
-  print "$unixname\n";
-}
install-win32/getgui deleted +0 -19
deleted file mode 100644
index aa83e85..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-# Get and sign the OpenVPN GUI
-
-# load version.nsi definitions
-. autodefs/defs.sh
-
-GUI="$OPENVPN_GUI_DIR/$OPENVPN_GUI"
-
-if [ -f "$GUI" ]; then
-    mkdir -p $GENOUT/bin &>/dev/null
-    cp $GUI $GENOUT/bin
-fi
-
-if [ -f "$GENOUT/bin/$OPENVPN_GUI" ]; then
-    echo '!define OPENVPN_GUI_DEFINED' >autodefs/guidefs.nsi
-else
-    cat /dev/null >autodefs/guidefs.nsi
-fi
install-win32/getopenssl deleted +0 -19
deleted file mode 100644
index b772741..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-# Get OpenSSL binaries
-if [ -d "$OPENSSL_DIR" ] ; then
-    mkdir -p $GENOUT/lib &>/dev/null
-    mkdir -p $GENOUT/bin &>/dev/null
-    for f in libeay32.dll libssl32.dll out/openssl.exe ; do
-       cp $OPENSSL_DIR/$f $GENOUT/lib
-        if [ -z "$NO_STRIP" ]; then
-           strip $GENOUT/lib/`basename $f`
-       fi
-    done
-    mv $GENOUT/lib/openssl.exe $GENOUT/bin
-else
-    echo OpenSSL DIR $OPENSSL_DIR NOT FOUND
-fi
install-win32/getpkcs11helper deleted +0 -17
deleted file mode 100644
index 8fcfdd4..0000000
@@ -1,17 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-# Get PKCS11-helper libraries
-if [ -d "$PKCS11_HELPER_DIR" ] ; then
-    mkdir -p $GENOUT/lib &>/dev/null
-    for f in libpkcs11-helper-1.dll ; do
-       cp $PKCS11_HELPER_DIR/usr/local/bin/$f $GENOUT/lib
-        if [ -z "$NO_STRIP" ]; then
-           strip $GENOUT/lib/$f
-       fi
-    done
-else
-    echo PKCS11-helper DIR $PKCS11_HELPER_DIR NOT FOUND
-fi
install-win32/getprebuilt deleted +0 -10
deleted file mode 100644
index 36c4827..0000000
@@ -1,10 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-# Get PKCS11-helper libraries
-if [ -d "$GENOUT_PREBUILT" ] && ! [ -d "$GENOUT" ]; then
-    echo LOADING prebuilt binaries from $GENOUT_PREBUILT
-    cp -a $GENOUT_PREBUILT $GENOUT
-fi
install-win32/getxgui deleted +0 -28
deleted file mode 100644
index 3a1e626..0000000
@@ -1,28 +0,0 @@
-#!/bin/sh
-
-# Get and sign the OpenVPN XML-based GUI
-
-# load version.nsi definitions
-. autodefs/defs.sh
-
-if [ -d "$OPENVPN_XGUI_DIR" ]; then
-    SIGNED_EXES="gui/ovpn-xgui-en.exe sta/ovpn-tray.exe"
-    UNSIGNED_EXES="xmlserv/ovpn-xmlserv.exe"
-    EXES="$SIGNED_EXES $UNSIGNED_EXES"
-
-    mkdir -p $GENOUT/bin &>/dev/null
-
-    if [ -z "$NO_STRIP" ]; then
-       for f in $EXES; do
-           cp $OPENVPN_XGUI_DIR/$f $GENOUT/bin
-           strip $GENOUT/bin/`basename $f`
-       done
-    fi
-
-    rm -rf $GENOUT/htdocs
-    cp -a $OPENVPN_XGUI_DIR/ajax/htdocs $GENOUT/htdocs
-
-    echo '!define OPENVPN_XGUI_DEFINED' >autodefs/xguidefs.nsi
-else
-    cat /dev/null >autodefs/xguidefs.nsi
-fi
install-win32/ifdef.pl deleted +0 -53
deleted file mode 100644
index d240ebb..0000000
@@ -1,53 +0,0 @@
-#!/usr/bin/perl
-
-# Simple ifdef/else/endif processor.
-
-die "usage: ifdef [-C<command-prefix>] [-Dname ...] [control-file ...] " if (@ARGV[0] =~ /^(-h|--help)$/);
-
-%Parms = ();
-
-$pre = "!";
-while ($arg=shift(@ARGV)) {
-    if ($arg =~ /^-/) {
-       if ($arg =~ /^-D(\w+)$/) {
-           $Parms{$1} = 1;
-       } elsif ($arg =~ /-C(.*)$/) {
-         $pre = $1;
-       } else {
-           die "unrecognized option: $arg";
-       }
-    } else {
-       open(CONTROL, "< $arg") or die "cannot open $arg";
-       while (<CONTROL>) {
-           if (/^!define\s+(\w+)/) {
-                $Parms{$1} = 1;
-            }
-        }
-    }
-}
-
-sub ifdef {
-  my ($var, $enabled) = @_;
-  my $def = 0;
-  $def = 1 if (defined $Parms{$var}) || ($var eq "true");
-  $def = 0 if $var eq "false";
-  while (<STDIN>) {
-    if (/^\s*\Q$pre\Eifdef\s+(\w+)\s*$/) {
-      return 1 if ifdef ($1, $def & $enabled);
-    } elsif (/^\s*\Q$pre\Eelseif\s+(\w+)\s*$/) {
-      $def = $def ^ 1;
-      return ifdef ($1, $def & $enabled);
-    } elsif (/^\s*\Q$pre\Eelse\s*$/) {
-      $def = $def ^ 1;
-    } elsif (/^\s*\Q$pre\Eendif\s*$/) {
-      return 0;
-    } elsif (/^\s*\Q$pre\E/) {
-      die "unrecognized command: $_";
-    } else {
-      print if $def && $enabled;
-    }
-  }
-  return 1;
-}
-
-ifdef("true", 1);
install-win32/m4todef.pl deleted +0 -15
deleted file mode 100644
index d2705b0..0000000
@@ -1,15 +0,0 @@
-#!/usr/bin/perl
-
-# used to convert version.m4 to simple
-# definition format
-
-while (<STDIN>) {
-  chomp;
-  if (/^\s*$/) {
-    print "\n";
-  } elsif (/^define\((\w+),\[(.*?)\]\)/) {
-    print "!define $1 \"$2\"\n";
-  } elsif (/^dnl(.*)$/) {
-    print "#$1\n";
-  }
-}
install-win32/macro.pl deleted +0 -61
deleted file mode 100644
index 08ba58a..0000000
@@ -1,61 +0,0 @@
-#!/usr/bin/perl
-
-# Simple macro processor.
-
-# Macros are defined in a control file that follows
-# a simple definition-based grammar as documented in the
-# trans script.  Stdin is then copied to stdout, and any
-# occurrence of @@MACRO@@ is substituted.  Macros can also
-# be specified on the command line.
-
-die "usage: macro [-O<openquote>] [-C<closequote>] [-Dname=var ...] [control-file ...] " if (@ARGV < 1);
-
-%Parms = ();
-$open_quote = "@@";
-$close_quote = "@@";
-
-while ($arg=shift(@ARGV)) {
-  if ($arg =~ /^-/) {
-    if ($arg =~ /^-D(\w+)(?:=(.*))?$/) {
-      $Parms{$1} = $2
-    } elsif ($arg =~ /-O(.*)$/) {
-      $open_quote = $1;
-    } elsif ($arg =~ /-C(.*)$/) {
-      $close_quote = $1;
-    } else {
-      die "unrecognized option: $arg";
-    }
-  } else {
-    open(CONTROL, "< $arg") or die "cannot open $arg";
-    while (<CONTROL>) {
-      if (/^!define\s+(\w+)(?:\s+['"]?(.*?)['"]?)?\s*$/) {
-       $Parms{$1} = $2;
-      }
-    }
-  }
-}
-
-sub print_symbol_table {
-  foreach my $k (sort (keys(%Parms))) {
-    my $v = $Parms{$k};
-    print "[$k] -> \"$v\"\n";
-  }
-}
-
-#print_symbol_table ();
-#exit 0;
-
-while (<STDIN>) {
-  s{
-    \Q$open_quote\E
-    \s*
-    (
-    \w+
-   )
-    \s*
-    \Q$close_quote\E
-  }{
-    $Parms{$1}
-  }xge;
-  print;
-}
install-win32/makeopenvpn deleted +0 -67
deleted file mode 100755
index ced2a54..0000000
@@ -1,67 +0,0 @@
-#!/bin/sh
-
-H=`pwd`
-
-case "`uname -o 2>/dev/null`" in
-  *inux)
-
-    # cross-compiling, make dude's life easier
-    XAUTOCONF="--host=i586-mingw32msvc --build=i386-linux $XAUTOCONF"
-    export CC=i586-mingw32msvc-gcc
-    export CXXCPP=i586-mingw32msvc-cpp
-    export CXX=i586-mingw32msvc-g++
-    # this requires the human to setup these environ vars:
-    # OPENSSL_DIR LZO_DIR PKCS11_HELPER_DIR
-    OPENSSL_INC_DIR=$OPENSSL_DIR/include
-    OPENSSL_LIB_DIR=$OPENSSL_DIR/out
-    LZO_INC_DIR=$LZO_DIR/include
-    LZO_LIB_DIR=$LZO_DIR/src/.libs
-    PKCS11_INC_DIR=$PKCS11_HELPER_DIR/include/pkcs11-helper-1.0/
-    PKCS11_LIB_DIR=$PKCS11_HELPER_DIR/lib/.libs/
-    ;;
-  *)
-    # get version.nsi definitions
-    . autodefs/defs.sh
-    XAUTOCONF=""
-    # default configuration creates relative-path environ vars:
-    OPENSSL_INC_DIR=$H/$OPENSSL_DIR/include
-    OPENSSL_LIB_DIR=$H/$OPENSSL_DIR/out
-    LZO_INC_DIR=$H/$LZO_DIR/include
-    LZO_LIB_DIR=$H/$LZO_DIR
-    PKCS11_INC_DIR=$H/$PKCS11_HELPER_DIR/usr/local/include
-    PKCS11_LIB_DIR=$H/$PKCS11_HELPER_DIR/usr/local/lib
-    ;;
-esac
-if $CC --version &>/dev/null && [ -d "$OPENSSL_DIR" ] && [ -d "$LZO_DIR" ] && [ -d "$PKCS11_HELPER_DIR" ]; then
-    # build OpenVPN binary
-
-    if ! [ -f Makefile ]; then
-       autoreconf -i -v \
-       && ./configure $XAUTOCONF \
-           --enable-strict \
-           --prefix=$H/windest \
-           MAN2HTML=true \
-           --with-ssl-headers=$OPENSSL_INC_DIR \
-           --with-ssl-lib=$OPENSSL_LIB_DIR \
-           --with-lzo-headers=$LZO_INC_DIR \
-           --with-lzo-lib=$LZO_LIB_DIR \
-           --with-pkcs11-helper-headers=$PKCS11_INC_DIR \
-           --with-pkcs11-helper-lib=$PKCS11_LIB_DIR \
-           || exit 1
-    fi
-
-    make -j $MAKE_JOBS && make install
-
-    if [ -n "$GENOOUT" ];then
-    # copy OpenVPN and service executables to GENOUT/bin
-      mkdir -p $GENOUT/bin &>/dev/null
-      cp windest/sbin/openvpn.exe $GENOUT/bin
-      cp windest/sbin/openvpnserv.exe $GENOUT/bin
-      if [ -z "$NO_STRIP" ]; then
-       strip $GENOUT/bin/openvpn.exe
-       strip $GENOUT/bin/openvpnserv.exe
-      fi
-    fi
-else
-    echo DID NOT BUILD openvpn.exe and openvpnserv.exe because one or more of gcc, OPENSSL_DIR, LZO_DIR, or PKCS11_HELPER_DIR directories were missing
-fi
install-win32/maketap deleted +0 -17
deleted file mode 100644
index b9c4070..0000000
@@ -1,17 +0,0 @@
-#!/bin/sh
-
-# Get the x86 and x64 versions of the TAP driver
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-if [ -d "$TAPBINSRC" ]; then
-    mkdir -p $GENOUT/driver/i386 &>/dev/null
-    mkdir -p $GENOUT/driver/amd64 &>/dev/null
-    for arch in i386 amd64; do
-       s=$TAPBINSRC/$arch
-       cp $s/*.sys $s/*.cat $s/*.inf $GENOUT/driver/$arch
-    done
-else
-    echo Cannot find pre-built tap drivers
-fi
install-win32/maketapinstall deleted +0 -15
deleted file mode 100644
index 9fe0470..0000000
@@ -1,15 +0,0 @@
-#!/bin/sh
-
-# Get the x86 and x64 versions of the tapinstall tool
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-if [ -d "$TAPBINSRC" ]; then
-    mkdir -p $GENOUT/tapinstall/i386 &>/dev/null
-    mkdir -p $GENOUT/tapinstall/amd64 &>/dev/null
-    cp $TAPBINSRC/i386/tapinstall.exe $GENOUT/tapinstall/i386
-    cp $TAPBINSRC/amd64/tapinstall.exe $GENOUT/tapinstall/amd64
-else
-    echo Cannot find pre-built tapinstall
-fi
install-win32/maketext deleted +0 -59
deleted file mode 100644
index 9a94a81..0000000
@@ -1,59 +0,0 @@
-#!/bin/sh
-
-# get version.nsi definitions
-. autodefs/defs.sh
-
-mkdir -p $GENOUT/text &>/dev/null
-
-# build license file
-cat COPYING COPYRIGHT.GPL >$GENOUT/text/license.txt
-
-# copy install file
-cp INSTALL-win32.txt $GENOUT/text/INSTALL-win32.txt
-
-# copy sample configuration files and docs
-s=$GENOUT/samples
-mkdir -p $s &>/dev/null
-cp sample-config-files/client.conf $s/client.$PRODUCT_FILE_EXT
-cp sample-config-files/server.conf $s/server.$PRODUCT_FILE_EXT
-cp install-win32/sample.ovpn $s/sample.$PRODUCT_FILE_EXT
-
-# get easy-rsa (Windows)
-e=$GENOUT/easy-rsa
-mkdir -p $e &>/dev/null
-cp easy-rsa/1.0/openssl.cnf $e/openssl.cnf.sample
-cp easy-rsa/Windows/* $e
-
-# get images
-i=$GENOUT/images
-mkdir -p $i &>/dev/null
-cp images/*.ico $i
-cp images/*.bmp $i
-
-# get NSI files
-n=$GENOUT/nsi
-mkdir -p $n &>/dev/null
-cp autodefs/defs.nsi $n
-cp autodefs/guidefs.nsi $n
-cp autodefs/xguidefs.nsi $n
-cp install-win32/openvpn.nsi $n
-cp install-win32/setpath.nsi $n
-cp install-win32/GetWindowsVersion.nsi $n
-
-if [ -n "$EXTRACT_FILES" ]; then
-    cp "$EXTRACT_FILES/MultiFileExtract.nsi" $n
-fi
-
-# get OpenVPN client config files
-if [ -n "$SAMPCONF_DIR" ]; then
-    c=$GENOUT/conf
-    mkdir -p $c &>/dev/null
-    test -n "$SAMPCONF_CONF" && cp "../$SAMPCONF_DIR/$SAMPCONF_CONF" $c
-    test -n "$SAMPCONF_CONF2" && cp "../$SAMPCONF_DIR/$SAMPCONF_CONF2" $c
-    test -n "$SAMPCONF_P12" && cp "../$SAMPCONF_DIR/$SAMPCONF_P12" $c
-    test -n "$SAMPCONF_TA" && cp "../$SAMPCONF_DIR/$SAMPCONF_TA" $c
-    test -n "$SAMPCONF_CA" && cp "../$SAMPCONF_DIR/$SAMPCONF_CA" $c
-    test -n "$SAMPCONF_CRT" && cp "../$SAMPCONF_DIR/$SAMPCONF_CRT" $c
-    test -n "$SAMPCONF_KEY" && cp "../$SAMPCONF_DIR/$SAMPCONF_KEY" $c
-    test -n "$SAMPCONF_DH" && cp "../$SAMPCONF_DIR/$SAMPCONF_DH" $c
-fi
install-win32/openssl/README.txt deleted +0 -21
deleted file mode 100644
index 6a042f4..0000000
@@ -1,21 +0,0 @@
-Rebuild OpenSSL tarball without symbolic links, so
-it can be extracted on Windows (run on Unix):
-
-  [download tarball and .asc sig]
-  gpg --verify openssl-0.9.8k.tar.gz.asc
-  tar xfz openssl-0.9.8k.tar.gz
-  tar cfzh openssl-0.9.8k-nolinks.tar.gz openssl-0.9.8k
-
-To apply patch (in MSYS shell):
-
-  cd /c/src/openssl-0.9.8k
-  patch -p1 <../21/install-win32/openssl/openssl098.patch
-
-To build OpenSSL, open a command prompt window, then:
-
-  cd \src\openssl-0.9.8k
-  ms\mw
-
-To build a new patch (optional):
-
-  diff -urw openssl-0.9.8k.orig openssl-0.9.8k | grep -v '^Only in' >openssl098.patch
install-win32/openssl/openssl097.patch deleted +0 -68
deleted file mode 100644
index ccef40a..0000000
@@ -1,68 +0,0 @@
-[in msys bash window]
-cd /c/src/openssl-0.9.7m
-patch -p1 <../21/install-win32/openssl.patch
-
-[open command prompt window]
-cd \src\openssl-0.9.7m
-ms\mw
-
-diff -wur openssl-0.9.7m.orig/ms/mw.bat openssl-0.9.7m/ms/mw.bat
---- openssl-0.9.7m.orig/ms/mw.bat      Sat Feb 22 11:02:46 2003
-+++ openssl-0.9.7m/ms/mw.bat   Mon Jan 21 23:12:34 2008
-@@ -1,17 +1,23 @@
- @rem OpenSSL with Mingw32
- @rem --------------------
-
-+@rem Include MinGW, MSYS, and ActiveState Perl in path
-+set PATH=c:\perl\bin;c:\MinGW\bin;c:\msys\1.0\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
-+
- @rem Makefile
- perl util\mkfiles.pl >MINFO
--perl util\mk1mf.pl Mingw32 >ms\mingw32.mak
-+perl util\mk1mf.pl no-idea no-mdc2 no-rc5 Mingw32 >ms\mingw32.mak
-+
- @rem DLL definition files
--perl util\mkdef.pl 32 libeay >ms\libeay32.def
-+perl util\mkdef.pl no-idea no-mdc2 no-rc5 32 libeay >ms\libeay32.def
- if errorlevel 1 goto end
--perl util\mkdef.pl 32 ssleay >ms\ssleay32.def
-+perl util\mkdef.pl no-idea no-mdc2 no-rc5 32 ssleay >ms\ssleay32.def
- if errorlevel 1 goto end
-
- @rem Build the libraries
--make -f ms/mingw32.mak
-+
-+@rem JY added --win32 flag
-+make --win32 -f ms/mingw32.mak
- if errorlevel 1 goto end
-
- @rem Generate the DLLs and input libraries
-@@ -20,7 +26,9 @@
- dllwrap --dllname libssl32.dll --output-lib out/libssl32.a --def ms/ssleay32.def out/libssl.a out/libeay32.a
- if errorlevel 1 goto end
-
-+@rem JY added openssl.exe linked to DLL
-+gcc -o openssl  tmp\verify.o tmp\asn1pars.o tmp\req.o tmp\dgst.o tmp\dh.o tmp\dhparam.o tmp\enc.o tmp\passwd.o tmp\gendh.o tmp\errstr.o tmp\ca.o tmp\pkcs7.o tmp\crl2p7.o tmp\crl.o tmp\rsa.o tmp\rsautl.o tmp\dsa.o tmp\dsaparam.o tmp\x509.o tmp\genrsa.o tmp\gendsa.o tmp\s_server.o tmp\s_client.o tmp\speed.o tmp\s_time.o tmp\apps.o tmp\s_cb.o tmp\s_socket.o tmp\app_rand.o tmp\version.o tmp\sess_id.o tmp\ciphers.o tmp\nseq.o tmp\pkcs12.o tmp\pkcs8.o tmp\spkac.o tmp\smime.o tmp\rand.o tmp\engine.o tmp\ocsp.o tmp\prime.o tmp\openssl.o -leay32 -lssl32 -L. -lwsock32 -lgdi32
-+
- echo Done compiling OpenSSL
-
- :end
--
-diff -wur openssl-0.9.7m.orig/util/pl/Mingw32.pl openssl-0.9.7m/util/pl/Mingw32.pl
---- openssl-0.9.7m.orig/util/pl/Mingw32.pl     Sun May 16 23:28:32 2004
-+++ openssl-0.9.7m/util/pl/Mingw32.pl  Mon Jan 21 17:52:36 2008
-@@ -99,10 +99,10 @@
-       $n=&bname($target);
-       $ret.="$target: $files $dep_libs\n";
-       $ret.="\t\$(LINK) ${efile}$target \$(LFLAGS) $files $libs\n";
--      if (defined $sha1file)
--              {
--              $ret.="\t$openssl sha1 -hmac etaonrishdlcupfm -binary $target > $sha1file";
--              }
-+#     if (defined $sha1file)
-+#             {
-+#             $ret.="\t$openssl sha1 -hmac etaonrishdlcupfm -binary $target > $sha1file";
-+#             }
-       $ret.="\n";
-       return($ret);
-       }
install-win32/openssl/openssl098.patch deleted +0 -56
deleted file mode 100644
index 653d2fe..0000000
@@ -1,56 +0,0 @@
-diff -urw tmp/openssl-0.9.8h/crypto/pqueue/pqueue.c openssl-0.9.8h/crypto/pqueue/pqueue.c
---- tmp/openssl-0.9.8h/crypto/pqueue/pqueue.c  Tue Jun 28 06:53:34 2005
-+++ openssl-0.9.8h/crypto/pqueue/pqueue.c      Wed Jun  4 02:52:42 2008
-@@ -199,10 +199,10 @@
-       return found;
-       }
-
--#if PQ_64BIT_IS_INTEGER
- void
- pqueue_print(pqueue_s *pq)
-       {
-+#if PQ_64BIT_IS_INTEGER
-       pitem *item = pq->items;
-
-       while(item != NULL)
-@@ -210,8 +210,8 @@
-               printf("item\t" PQ_64BIT_PRINT "\n", item->priority);
-               item = item->next;
-               }
--      }
- #endif
-+      }
-
- pitem *
- pqueue_iterator(pqueue_s *pq)
-diff -urw tmp/openssl-0.9.8h/ms/mw.bat openssl-0.9.8h/ms/mw.bat
---- tmp/openssl-0.9.8h/ms/mw.bat       Sat Feb 22 11:00:10 2003
-+++ openssl-0.9.8h/ms/mw.bat   Wed Jun  4 02:56:54 2008
-@@ -1,17 +1,23 @@
- @rem OpenSSL with Mingw32
- @rem --------------------
-
-+@rem Include MinGW, MSYS, and ActiveState Perl in path
-+set PATH=c:\bin;C:\Perl\bin\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\MinGW\bin;c:\msys\1.0\bin
-+
- @rem Makefile
- perl util\mkfiles.pl >MINFO
--perl util\mk1mf.pl Mingw32 >ms\mingw32.mak
-+perl util\mk1mf.pl no-idea no-mdc2 no-rc5 Mingw32 >ms\mingw32.mak
-+
- @rem DLL definition files
--perl util\mkdef.pl 32 libeay >ms\libeay32.def
-+perl util\mkdef.pl no-idea no-mdc2 no-rc5 32 libeay >ms\libeay32.def
- if errorlevel 1 goto end
--perl util\mkdef.pl 32 ssleay >ms\ssleay32.def
-+perl util\mkdef.pl no-idea no-mdc2 no-rc5 32 ssleay >ms\ssleay32.def
- if errorlevel 1 goto end
-
- @rem Build the libraries
--make -f ms/mingw32.mak
-+
-+@rem JY added --win32
-+make --win32 -f ms/mingw32.mak
- if errorlevel 1 goto end
-
- @rem Generate the DLLs and input libraries
install-win32/openvpn.nsi deleted +0 -886
deleted file mode 100755
index f06c5aa..0000000
@@ -1,886 +0,0 @@
-; ****************************************************************************
-; * Copyright (C) 2002-2010 OpenVPN Technologies, Inc.                            *
-; *  This program is free software; you can redistribute it and/or modify    *
-; *  it under the terms of the GNU General Public License version 2          *
-; *  as published by the Free Software Foundation.                           *
-; ****************************************************************************
-
-; OpenVPN install script for Windows, using NSIS
-
-SetCompressor lzma
-
-!include "MUI.nsh"
-
-!include "defs.nsi"
-!include "guidefs.nsi"
-!include "xguidefs.nsi"
-!include "setpath.nsi"
-!include "GetWindowsVersion.nsi"
-
-!ifdef EXTRACT_FILES
-!include "MultiFileExtract.nsi"
-!endif
-
-!define GEN ".."
-!define BIN "${GEN}\bin"
-!define LIB "${GEN}\lib"
-
-; Which GUI to use (XGUI has priority).
-; We will define either USE_XGUI (XML-based version) or
-; USE_GUI (Mathias Sundman version) but not both.
-!ifdef OPENVPN_XGUI_DEFINED
-!define USE_XGUI
-!else
-!ifdef OPENVPN_GUI_DEFINED
-!define USE_GUI
-!endif
-!endif
-
-!define PRODUCT_ICON "icon.ico"
-
-!ifdef USE_XGUI
-!define XGUI_POSTFIX "X"
-!else
-!define XGUI_POSTFIX ""
-!endif
-
-!ifdef PRODUCT_TAP_DEBUG
-!define DBG_POSTFIX "-DBG"
-!else
-!define DBG_POSTFIX ""
-!endif
-
-!define VERSION "${PRODUCT_VERSION}${XGUI_POSTFIX}${DBG_POSTFIX}"
-
-!define TAP "${PRODUCT_TAP_ID}"
-!define TAPDRV "${TAP}.sys"
-
-; Default service settings
-!define SERV_CONFIG_DIR   "$INSTDIR\config"
-!define SERV_CONFIG_EXT   "${PRODUCT_FILE_EXT}"
-!define SERV_EXE_PATH     "$INSTDIR\bin\${PRODUCT_UNIX_NAME}.exe"
-!define SERV_LOG_DIR      "$INSTDIR\log"
-!define SERV_PRIORITY     "NORMAL_PRIORITY_CLASS"
-!define SERV_LOG_APPEND   "0"
-
-; XGUI variables
-!define XGUI_EXE      ovpn-xgui-en.exe
-!define XGUI_TRAY     ovpn-tray.exe
-!define XGUI_XMLSERV  ovpn-xmlserv.exe
-!define XGUI_HTDOCS   htdocs
-
-!define XGUI_AJAX_GUI_NAME       "${PRODUCT_NAME} Ajax GUI"
-!define XGUI_TRANSITION_GUI_NAME "${PRODUCT_NAME} Transitional GUI"
-
-;--------------------------------
-;Configuration
-
-  ;General
-
-  OutFile "${GEN}\${PRODUCT_UNIX_NAME}-${VERSION}${OUTFILE_LABEL}-install.exe"
-
-  ShowInstDetails show
-  ShowUninstDetails show
-
-  ;Folder selection page
-  InstallDir "$PROGRAMFILES\${PRODUCT_NAME}"
-
-  ;Remember install folder
-  InstallDirRegKey HKCU "Software\${PRODUCT_NAME}" ""
-
-;--------------------------------
-;Modern UI Configuration
-
-  Name "${PRODUCT_NAME} ${VERSION} ${TITLE_LABEL}"
-
-  !define MUI_WELCOMEPAGE_TEXT "This wizard will guide you through the installation of ${PRODUCT_NAME}, an Open Source VPN package by James Yonan.\r\n\r\nNote that the Windows version of ${PRODUCT_NAME} will only run on Win 2000, XP, or higher.\r\n\r\n\r\n"
-
-  !define MUI_COMPONENTSPAGE_TEXT_TOP "Select the components to install/upgrade.  Stop any ${PRODUCT_NAME} processes or the ${PRODUCT_NAME} service if it is running.  All DLLs are installed locally."
-
-  !define MUI_COMPONENTSPAGE_SMALLDESC
-  !ifdef USE_XGUI
-    !define MUI_FINISHPAGE_SHOWREADME "http://openvpn.net/"
-    !define MUI_FINISHPAGE_SHOWREADME_NOTCHECKED
-  !else
-    !define MUI_FINISHPAGE_SHOWREADME "$INSTDIR\INSTALL-win32.txt"
-  !endif
-  !define MUI_FINISHPAGE_NOAUTOCLOSE
-  !define MUI_ABORTWARNING
-  !define MUI_ICON "${GEN}\images\${PRODUCT_ICON}"
-  !define MUI_UNICON "${GEN}\images\${PRODUCT_ICON}"
-  !define MUI_HEADERIMAGE
-  !define MUI_HEADERIMAGE_BITMAP "${GEN}\images\install-whirl.bmp"
-  !define MUI_UNFINISHPAGE_NOAUTOCLOSE
-
-  !insertmacro MUI_PAGE_WELCOME
-  !insertmacro MUI_PAGE_LICENSE "${GEN}\text\license.txt"
-  !insertmacro MUI_PAGE_COMPONENTS
-  !insertmacro MUI_PAGE_DIRECTORY
-  !insertmacro MUI_PAGE_INSTFILES
-  !insertmacro MUI_PAGE_FINISH
-
-  !insertmacro MUI_UNPAGE_CONFIRM
-  !insertmacro MUI_UNPAGE_INSTFILES
-  !insertmacro MUI_UNPAGE_FINISH
-
-
-;--------------------------------
-;Languages
-
-  !insertmacro MUI_LANGUAGE "English"
-
-;--------------------------------
-;Language Strings
-
-  LangString DESC_SecOpenVPNUserSpace ${LANG_ENGLISH} "Install ${PRODUCT_NAME} user-space components, including ${PRODUCT_UNIX_NAME}.exe."
-
-!ifdef USE_GUI
-  LangString DESC_SecOpenVPNGUI ${LANG_ENGLISH} "Install ${PRODUCT_NAME} GUI by Mathias Sundman"
-!endif
-
-!ifdef USE_XGUI
-  LangString DESC_SecOpenVPNXGUI ${LANG_ENGLISH} "Install ${PRODUCT_NAME} XML-based GUI"
-!endif
-
-  LangString DESC_SecOpenVPNEasyRSA ${LANG_ENGLISH} "Install ${PRODUCT_NAME} RSA scripts for X509 certificate management."
-
-  LangString DESC_SecOpenSSLDLLs ${LANG_ENGLISH} "Install OpenSSL DLLs locally (may be omitted if DLLs are already installed globally)."
-
-  LangString DESC_SecPKCS11DLLs ${LANG_ENGLISH} "Install PKCS#11 helper DLLs locally (may be omitted if DLLs are already installed globally)."
-
-  LangString DESC_SecTAP ${LANG_ENGLISH} "Install/Upgrade the TAP virtual device driver.  Will not interfere with CIPE."
-
-  LangString DESC_SecService ${LANG_ENGLISH} "Install the ${PRODUCT_NAME} service wrapper (${PRODUCT_UNIX_NAME}serv.exe)"
-
-  LangString DESC_SecOpenSSLUtilities ${LANG_ENGLISH} "Install the OpenSSL Utilities (used for generating public/private key pairs)."
-
-  LangString DESC_SecAddPath ${LANG_ENGLISH} "Add ${PRODUCT_NAME} executable directory to the current user's PATH."
-
-  LangString DESC_SecAddShortcuts ${LANG_ENGLISH} "Add ${PRODUCT_NAME} shortcuts to the current user's Start Menu."
-
-  LangString DESC_SecFileAssociation ${LANG_ENGLISH} "Register ${PRODUCT_NAME} config file association (*.${SERV_CONFIG_EXT})"
-
-;--------------------------------
-;Reserve Files
-
-  ;Things that need to be extracted on first (keep these lines before any File command!)
-  ;Only useful for BZIP2 compression
-
-  ReserveFile "${GEN}\images\install-whirl.bmp"
-
-;--------------------------------
-;Macros
-
-!macro WriteRegStringIfUndef ROOT SUBKEY KEY VALUE
-Push $R0
-ReadRegStr $R0 "${ROOT}" "${SUBKEY}" "${KEY}"
-StrCmp $R0 "" +1 +2
-WriteRegStr "${ROOT}" "${SUBKEY}" "${KEY}" '${VALUE}'
-Pop $R0
-!macroend
-
-!macro DelRegStringIfUnchanged ROOT SUBKEY KEY VALUE
-Push $R0
-ReadRegStr $R0 "${ROOT}" "${SUBKEY}" "${KEY}"
-StrCmp $R0 '${VALUE}' +1 +2
-DeleteRegValue "${ROOT}" "${SUBKEY}" "${KEY}"
-Pop $R0
-!macroend
-
-!macro DelRegKeyIfUnchanged ROOT SUBKEY VALUE
-Push $R0
-ReadRegStr $R0 "${ROOT}" "${SUBKEY}" ""
-StrCmp $R0 '${VALUE}' +1 +2
-DeleteRegKey "${ROOT}" "${SUBKEY}"
-Pop $R0
-!macroend
-
-!macro DelRegKeyIfEmpty ROOT SUBKEY
-Push $R0
-EnumRegValue $R0 "${ROOT}" "${SUBKEY}" 1
-StrCmp $R0 "" +1 +2
-DeleteRegKey /ifempty "${ROOT}" "${SUBKEY}"
-Pop $R0
-!macroend
-
-;------------------------------------------
-;Set reboot flag based on tapinstall return
-
-Function CheckReboot
-  IntCmp $R0 1 "" noreboot noreboot
-  IntOp $R0 0 & 0
-  SetRebootFlag true
-  DetailPrint "REBOOT flag set"
- noreboot:
-FunctionEnd
-
-;--------------------------------
-;Installer Sections
-
-Function .onInit
-  ClearErrors
-
-# Verify that user has admin privs
-  UserInfo::GetName
-  IfErrors ok
-  Pop $R0
-  UserInfo::GetAccountType
-  Pop $R1
-  StrCmp $R1 "Admin" ok
-    Messagebox MB_OK "Administrator privileges required to install ${PRODUCT_NAME} [$R0/$R1]"
-    Abort
-  ok:
-
-# Delete previous start menu
-  RMDir /r $SMPROGRAMS\${PRODUCT_NAME}
-
-!ifdef CHECK_WINDOWS_VERSION
-# Check windows version
-  Call GetWindowsVersion
-  Pop $1
-  StrCmp $1 "2000" goodwinver
-  StrCmp $1 "XP" goodwinver
-  StrCmp $1 "2003" goodwinver
-  StrCmp $1 "VISTA" goodwinver
-
-  Messagebox MB_OK "Sorry, ${PRODUCT_NAME} does not currently support Windows $1"
-  Abort
-
-goodwinver:
-  System::Call "kernel32::GetCurrentProcess() i .s"
-  System::Call "kernel32::IsWow64Process(i s, *i .r0)"
-  IntCmp $0 0 init32bits
-
-  ; we are running on 64-bit windows
-  StrCmp $1 "VISTA" vista64bummer
-
-#  Messagebox MB_OK "Sorry, ${PRODUCT_NAME} doesn't currently support 64-bit Windows."
-#  Abort
-
-vista64bummer:
-
-#  Messagebox MB_OK "Sorry, ${PRODUCT_NAME} doesn't currently support 64-bit Vista because Microsoft doesn't allow the installation of 64 bit unsigned drivers."
-#  Abort
-
-init32bits:
-
-!endif
-
-FunctionEnd
-
-!ifndef SF_SELECTED
-!define SF_SELECTED 1
-!endif
-
-;--------------------
-;Pre-install section
-
-Section -pre
-
-  ; Stop OpenVPN if currently running
-  DetailPrint "Previous Service REMOVE (if exists)"
-  nsExec::ExecToLog '"$INSTDIR\bin\${PRODUCT_UNIX_NAME}serv.exe" -remove'
-  Pop $R0 # return value/error/timeout
-
-!ifdef USE_XGUI
-  DetailPrint "Previous XML Service REMOVE (if exists)"
-  nsExec::ExecToLog '"$INSTDIR\bin\${XGUI_XMLSERV}" -remove'
-  Pop $R0 # return value/error/timeout
-!endif
-
-  Sleep 3000
-
-SectionEnd
-
-Section "${PRODUCT_NAME} User-Space Components" SecOpenVPNUserSpace
-
-  SetOverwrite on
-  SetOutPath "$INSTDIR\bin"
-
-  File "${BIN}\${PRODUCT_UNIX_NAME}.exe"
-
-SectionEnd
-
-!ifdef USE_GUI
-Section "${PRODUCT_NAME} GUI" SecOpenVPNGUI
-
-  SetOverwrite on
-  SetOutPath "$INSTDIR\bin"
-
-  File "${BIN}\${OPENVPN_GUI}"
-
-SectionEnd
-!endif
-
-!ifdef USE_XGUI
-Section "${PRODUCT_NAME} XML-based GUI" SecOpenVPNXGUI
-
-  SetOverwrite on
-
-  SetOutPath "$INSTDIR\bin"
-  File "${BIN}\${XGUI_EXE}"
-  File "${BIN}\${XGUI_TRAY}"
-  File "${BIN}\${XGUI_XMLSERV}"
-
-  SetOutPath "$INSTDIR\${XGUI_HTDOCS}"
-  File "${GEN}\${XGUI_HTDOCS}\*.*"
-
-SectionEnd
-!endif
-
-Section "${PRODUCT_NAME} RSA Certificate Management Scripts" SecOpenVPNEasyRSA
-
-  SetOverwrite on
-  SetOutPath "$INSTDIR\easy-rsa"
-
-  File "${GEN}\easy-rsa\openssl-1.0.0.cnf"
-  File "${GEN}\easy-rsa\vars.bat.sample"
-
-  File "${GEN}\easy-rsa\init-config.bat"
-
-  File "${GEN}\easy-rsa\README.txt"
-  File "${GEN}\easy-rsa\build-ca.bat"
-  File "${GEN}\easy-rsa\build-dh.bat"
-  File "${GEN}\easy-rsa\build-key-server.bat"
-  File "${GEN}\easy-rsa\build-key.bat"
-  File "${GEN}\easy-rsa\build-key-pkcs12.bat"
-  File "${GEN}\easy-rsa\clean-all.bat"
-  File "${GEN}\easy-rsa\index.txt.start"
-  File "${GEN}\easy-rsa\revoke-full.bat"
-  File "${GEN}\easy-rsa\serial.start"
-
-SectionEnd
-
-Section "${PRODUCT_NAME} Service" SecService
-
-  SetOverwrite on
-
-  SetOutPath "$INSTDIR\bin"
-  File "${BIN}\${PRODUCT_UNIX_NAME}serv.exe"
-
-  SetOutPath "$INSTDIR\config"
-
-  FileOpen $R0 "$INSTDIR\config\README.txt" w
-  FileWrite $R0 "This directory should contain ${PRODUCT_NAME} configuration files$\r$\n"
-  FileWrite $R0 "each having an extension of .${SERV_CONFIG_EXT}$\r$\n"
-  FileWrite $R0 "$\r$\n"
-  FileWrite $R0 "When ${PRODUCT_NAME} is started as a service, a separate ${PRODUCT_NAME}$\r$\n"
-  FileWrite $R0 "process will be instantiated for each configuration file.$\r$\n"
-  FileClose $R0
-
-  SetOutPath "$INSTDIR\sample-config"
-  File "${GEN}\samples\sample.${SERV_CONFIG_EXT}"
-  File "${GEN}\samples\client.${SERV_CONFIG_EXT}"
-  File "${GEN}\samples\server.${SERV_CONFIG_EXT}"
-
-  CreateDirectory "$INSTDIR\log"
-  FileOpen $R0 "$INSTDIR\log\README.txt" w
-  FileWrite $R0 "This directory will contain the log files for ${PRODUCT_NAME}$\r$\n"
-  FileWrite $R0 "sessions which are being run as a service.$\r$\n"
-  FileClose $R0
-
-SectionEnd
-
-Section "${PRODUCT_NAME} File Associations" SecFileAssociation
-SectionEnd
-
-Section "OpenSSL DLLs" SecOpenSSLDLLs
-
-  SetOverwrite on
-  SetOutPath "$INSTDIR\bin"
-  File "${LIB}\libeay32.dll"
-  File "${LIB}\libssl32.dll"
-
-SectionEnd
-
-Section "OpenSSL Utilities" SecOpenSSLUtilities
-
-  SetOverwrite on
-  SetOutPath "$INSTDIR\bin"
-  File "${BIN}\openssl.exe"
-
-SectionEnd
-
-Section "PKCS#11 DLLs" SecPKCS11DLLs
-
-  SetOverwrite on
-  SetOutPath "$INSTDIR\bin"
-  File "${LIB}\libpkcs11-helper-1.dll"
-
-SectionEnd
-
-Section "TAP Virtual Ethernet Adapter" SecTAP
-
-  SetOverwrite on
-
-  FileOpen $R0 "$INSTDIR\bin\addtap.bat" w
-  FileWrite $R0 "rem Add a new TAP virtual ethernet adapter$\r$\n"
-  FileWrite $R0 '"$INSTDIR\bin\tapinstall.exe" install "$INSTDIR\driver\OemWin2k.inf" ${TAP}$\r$\n'
-  FileWrite $R0 "pause$\r$\n"
-  FileClose $R0
-
-  FileOpen $R0 "$INSTDIR\bin\deltapall.bat" w
-  FileWrite $R0 "echo WARNING: this script will delete ALL TAP virtual adapters (use the device manager to delete adapters one at a time)$\r$\n"
-  FileWrite $R0 "pause$\r$\n"
-  FileWrite $R0 '"$INSTDIR\bin\tapinstall.exe" remove ${TAP}$\r$\n'
-  FileWrite $R0 "pause$\r$\n"
-  FileClose $R0
-
-  ; Check if we are running on a 64 bit system.
-  System::Call "kernel32::GetCurrentProcess() i .s"
-  System::Call "kernel32::IsWow64Process(i s, *i .r0)"
-  IntCmp $0 0 tap-32bit
-
-; tap-64bit:
-
-  DetailPrint "We are running on a 64-bit system."
-
-  SetOutPath "$INSTDIR\bin"
-
-  File "${GEN}\tapinstall\amd64\tapinstall.exe"
-
-  SetOutPath "$INSTDIR\driver"
-
-  File "${GEN}\driver\amd64\OemWin2k.inf"
-  File "${GEN}\driver\amd64\${PRODUCT_TAP_ID}.cat"
-  File "${GEN}\driver\amd64\${TAPDRV}"
-
-goto tapend
-
-tap-32bit:
-
-  DetailPrint "We are running on a 32-bit system."
-
-  SetOutPath "$INSTDIR\bin"
-  File "${GEN}\tapinstall\i386\tapinstall.exe"
-
-  SetOutPath "$INSTDIR\driver"
-  File "${GEN}\driver\i386\OemWin2k.inf"
-  File "${GEN}\driver\i386\${PRODUCT_TAP_ID}.cat"
-  File "${GEN}\driver\i386\${TAPDRV}"
-
-  tapend:
-
-SectionEnd
-
-Section "Add ${PRODUCT_NAME} to PATH" SecAddPath
-
-  ; remove previously set path (if any)
-  Push "$INSTDIR\bin"
-  Call RemoveFromPath
-
-  ; append our bin directory to end of current user path
-  Push "$INSTDIR\bin"
-  Call AddToPath
-
-SectionEnd
-
-Section "Add Shortcuts to Start Menu" SecAddShortcuts
-
-  SetOverwrite on
-  CreateDirectory "$SMPROGRAMS\${PRODUCT_NAME}"
-  CreateDirectory "$SMPROGRAMS\${PRODUCT_NAME}\Documentation"
-  WriteINIStr "$SMPROGRAMS\${PRODUCT_NAME}\Documentation\${PRODUCT_NAME} Windows Notes.url" "InternetShortcut" "URL" "http://openvpn.net/INSTALL-win32.html"
-  WriteINIStr "$SMPROGRAMS\${PRODUCT_NAME}\Documentation\${PRODUCT_NAME} Manual Page.url" "InternetShortcut" "URL" "http://openvpn.net/man.html"
-  WriteINIStr "$SMPROGRAMS\${PRODUCT_NAME}\Documentation\${PRODUCT_NAME} HOWTO.url" "InternetShortcut" "URL" "http://openvpn.net/howto.html"
-  WriteINIStr "$SMPROGRAMS\${PRODUCT_NAME}\Documentation\${PRODUCT_NAME} Web Site.url" "InternetShortcut" "URL" "http://openvpn.net/"
-  CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Uninstall ${PRODUCT_NAME}.lnk" "$INSTDIR\Uninstall.exe"
-
-SectionEnd
-
-;--------------------
-;Post-install section
-
-Section -post
-
-  SetOverwrite on
-
-  ; delete old devcon.exe
-  Delete "$INSTDIR\bin\devcon.exe"
-
-  ; Store README, license, icon
-  SetOverwrite on
-  SetOutPath $INSTDIR
-  !ifndef USE_XGUI
-    File "${GEN}\text\INSTALL-win32.txt"
-  !endif
-  File "${GEN}\text\license.txt"
-  File "${GEN}\images\${PRODUCT_ICON}"
-
-  ; store sample config files
-  !ifdef SAMPCONF_DIR
-    SetOverwrite on
-    SetOutPath "$INSTDIR\config"
-  !ifdef SAMPCONF_CONF
-    File "${GEN}\conf\${SAMPCONF_CONF}"
-  !endif
-  !ifdef SAMPCONF_CONF2
-    File "${GEN}\conf\${SAMPCONF_CONF2}"
-  !endif
-  !ifdef SAMPCONF_P12
-    File "${GEN}\conf\${SAMPCONF_P12}"
-  !endif
-  !ifdef SAMPCONF_TA
-    File "${GEN}\conf\${SAMPCONF_TA}"
-  !endif
-  !ifdef SAMPCONF_CA
-    File "${GEN}\conf\${SAMPCONF_CA}"
-  !endif
-  !ifdef SAMPCONF_CRT
-    File "${GEN}\conf\${SAMPCONF_CRT}"
-  !endif
-  !ifdef SAMPCONF_KEY
-    File "${GEN}\conf\${SAMPCONF_KEY}"
-  !endif
-  !ifdef SAMPCONF_DH
-    File "${GEN}\conf\${SAMPCONF_DH}"
-  !endif
-  !endif
-
-  ; Try to extract files if present
-  !ifdef EXTRACT_FILES
-    Push "$INSTDIR"
-    Call MultiFileExtract
-    Pop $R0
-    IntCmp $R0 0 +3 +1 +1
-    DetailPrint "MultiFileExtract Failed status=$R0"
-    goto +2
-    DetailPrint "MultiFileExtract Succeeded"
-  !endif
-
-  ;
-  ; install/upgrade TAP driver if selected, using tapinstall.exe
-  ;
-  SectionGetFlags ${SecTAP} $R0
-  IntOp $R0 $R0 & ${SF_SELECTED}
-  IntCmp $R0 ${SF_SELECTED} "" notap notap
-    ; TAP install/update was selected.
-    ; Should we install or update?
-    ; If tapinstall error occurred, $5 will
-    ; be nonzero.
-    IntOp $5 0 & 0
-    nsExec::ExecToStack '"$INSTDIR\bin\tapinstall.exe" hwids ${TAP}'
-    Pop $R0 # return value/error/timeout
-    IntOp $5 $5 | $R0
-    DetailPrint "tapinstall hwids returned: $R0"
-
-    ; If tapinstall output string contains "${TAP}" we assume
-    ; that TAP device has been previously installed,
-    ; therefore we will update, not install.
-    Push "${TAP}"
-    Call StrStr
-    Pop $R0
-
-    IntCmp $5 0 "" tapinstall_check_error tapinstall_check_error
-    IntCmp $R0 -1 tapinstall
-
- ;tapupdate:
-    DetailPrint "TAP UPDATE"
-    nsExec::ExecToLog '"$INSTDIR\bin\tapinstall.exe" update "$INSTDIR\driver\OemWin2k.inf" ${TAP}'
-    Pop $R0 # return value/error/timeout
-    Call CheckReboot
-    IntOp $5 $5 | $R0
-    DetailPrint "tapinstall update returned: $R0"
-    Goto tapinstall_check_error
-
- tapinstall:
-    DetailPrint "TAP REMOVE OLD TAP"
-
-    nsExec::ExecToLog '"$INSTDIR\bin\tapinstall.exe" remove TAP0801'
-    Pop $R0 # return value/error/timeout
-    DetailPrint "tapinstall remove TAP0801 returned: $R0"
-
-    DetailPrint "TAP INSTALL (${TAP})"
-    nsExec::ExecToLog '"$INSTDIR\bin\tapinstall.exe" install "$INSTDIR\driver\OemWin2k.inf" ${TAP}'
-    Pop $R0 # return value/error/timeout
-    Call CheckReboot
-    IntOp $5 $5 | $R0
-    DetailPrint "tapinstall install returned: $R0"
-
- tapinstall_check_error:
-    DetailPrint "tapinstall cumulative status: $5"
-    IntCmp $5 0 notap
-    MessageBox MB_OK "An error occurred installing the TAP device driver."
-
- notap:
-
-  ; Store install folder in registry
-  WriteRegStr HKLM SOFTWARE\${PRODUCT_NAME} "" $INSTDIR
-
-  ; install as a service if requested
-  SectionGetFlags ${SecService} $R0
-  IntOp $R0 $R0 & ${SF_SELECTED}
-  IntCmp $R0 ${SF_SELECTED} "" noserv noserv
-
-    ; set registry parameters for openvpnserv
-    !insertmacro WriteRegStringIfUndef HKLM "SOFTWARE\${PRODUCT_NAME}" "config_dir"  "${SERV_CONFIG_DIR}"
-    !insertmacro WriteRegStringIfUndef HKLM "SOFTWARE\${PRODUCT_NAME}" "config_ext"  "${SERV_CONFIG_EXT}"
-    !insertmacro WriteRegStringIfUndef HKLM "SOFTWARE\${PRODUCT_NAME}" "exe_path"    "${SERV_EXE_PATH}"
-    !insertmacro WriteRegStringIfUndef HKLM "SOFTWARE\${PRODUCT_NAME}" "log_dir"     "${SERV_LOG_DIR}"
-    !insertmacro WriteRegStringIfUndef HKLM "SOFTWARE\${PRODUCT_NAME}" "priority"    "${SERV_PRIORITY}"
-    !insertmacro WriteRegStringIfUndef HKLM "SOFTWARE\${PRODUCT_NAME}" "log_append"  "${SERV_LOG_APPEND}"
-
-    ; install openvpnserv as a service (to be started manually from service control manager)
-    DetailPrint "Service INSTALL"
-    nsExec::ExecToLog '"$INSTDIR\bin\${PRODUCT_UNIX_NAME}serv.exe" -install'
-    Pop $R0 # return value/error/timeout
-
- noserv:
-  !ifdef USE_XGUI
-    IfFileExists "$INSTDIR\bin\${XGUI_XMLSERV}" "" fileass
-      ; install and automatically start XML service
-      DetailPrint "XML Service INSTALL"
-      nsExec::ExecToLog '"$INSTDIR\bin\${XGUI_XMLSERV}" -install'
-      Pop $R0 # return value/error/timeout
-
-      Sleep 2000
-
-      DetailPrint "XML Service START"
-      nsExec::ExecToLog '"$INSTDIR\bin\${XGUI_XMLSERV}" -start'
-      Pop $R0 # return value/error/timeout
-
-  !endif
-
-  ; Create file association if requested
- fileass:
-  SectionGetFlags ${SecFileAssociation} $R0
-  IntOp $R0 $R0 & ${SF_SELECTED}
-  IntCmp $R0 ${SF_SELECTED} "" noass noass
-    WriteRegStr HKCR ".${SERV_CONFIG_EXT}" "" "${PRODUCT_NAME}File"
-    WriteRegStr HKCR "${PRODUCT_NAME}File" "" "${PRODUCT_NAME} Config File"
-    WriteRegStr HKCR "${PRODUCT_NAME}File\shell" "" "open"
-    WriteRegStr HKCR "${PRODUCT_NAME}File\DefaultIcon" "" "$INSTDIR\${PRODUCT_ICON},0"
-    WriteRegStr HKCR "${PRODUCT_NAME}File\shell\open\command" "" 'notepad.exe "%1"'
-    WriteRegStr HKCR "${PRODUCT_NAME}File\shell\run" "" "Start ${PRODUCT_NAME} on this config file"
-    WriteRegStr HKCR "${PRODUCT_NAME}File\shell\run\command" "" '"$INSTDIR\bin\${PRODUCT_UNIX_NAME}.exe" --pause-exit --config "%1"'
-
-  ; Create start menu folders
- noass:
-  CreateDirectory "$SMPROGRAMS\${PRODUCT_NAME}\Utilities"
-  CreateDirectory "$SMPROGRAMS\${PRODUCT_NAME}\Shortcuts"
-
-  ; Create start menu and desktop shortcuts to OpenVPN GUI
-  !ifdef USE_GUI
-    IfFileExists "$INSTDIR\bin\${OPENVPN_GUI}" "" tryaddxgui
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\${PRODUCT_NAME} GUI.lnk" "$INSTDIR\bin\${OPENVPN_GUI}" ""
-      CreateShortcut "$DESKTOP\${PRODUCT_NAME} GUI.lnk" "$INSTDIR\bin\${OPENVPN_GUI}"
-  !endif
-
-  ; Create start menu and desktop shortcuts to OpenVPN XGUI
- tryaddxgui:
-  !ifdef USE_XGUI
-    IfFileExists "$INSTDIR\bin\${XGUI_EXE}" "" tryaddtray
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\${XGUI_TRANSITION_GUI_NAME}.lnk" "$INSTDIR\bin\${XGUI_EXE}" ""
-#      CreateShortcut "$DESKTOP\${XGUI_TRANSITION_GUI_NAME}.lnk" "$INSTDIR\bin\${XGUI_EXE}"
- tryaddtray:
-    IfFileExists "$INSTDIR\bin\${XGUI_TRAY}" "" tryaddtap
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\${XGUI_AJAX_GUI_NAME}.lnk" "$INSTDIR\bin\${XGUI_EXE}" ""
-      CreateShortcut "$DESKTOP\${XGUI_AJAX_GUI_NAME}.lnk" "$INSTDIR\bin\${XGUI_TRAY}"
-  !endif
-
-    ; Create start menu shortcuts to addtap.bat and deltapall.bat
- tryaddtap:
-    IfFileExists "$INSTDIR\bin\addtap.bat" "" trydeltap
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Utilities\Add a new TAP virtual ethernet adapter.lnk" "$INSTDIR\bin\addtap.bat" ""
-
- trydeltap:
-    IfFileExists "$INSTDIR\bin\deltapall.bat" "" config_shortcut
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Utilities\Delete ALL TAP virtual ethernet adapters.lnk" "$INSTDIR\bin\deltapall.bat" ""
-
-    ; Create start menu shortcuts for config and log directories
- config_shortcut:
-    IfFileExists "$INSTDIR\config" "" log_shortcut
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Shortcuts\${PRODUCT_NAME} configuration file directory.lnk" "$INSTDIR\config" ""
-
- log_shortcut:
-    IfFileExists "$INSTDIR\log" "" samp_shortcut
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Shortcuts\${PRODUCT_NAME} log file directory.lnk" "$INSTDIR\log" ""
-
- samp_shortcut:
-    IfFileExists "$INSTDIR\sample-config" "" genkey_shortcut
-      CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Shortcuts\${PRODUCT_NAME} Sample Configuration Files.lnk" "$INSTDIR\sample-config" ""
-
- genkey_shortcut:
-    IfFileExists "$INSTDIR\bin\${PRODUCT_UNIX_NAME}.exe" "" noshortcuts
-      IfFileExists "$INSTDIR\config" "" noshortcuts
-        CreateShortCut "$SMPROGRAMS\${PRODUCT_NAME}\Utilities\Generate a static ${PRODUCT_NAME} key.lnk" "$INSTDIR\bin\${PRODUCT_UNIX_NAME}.exe" '--pause-exit --verb 3 --genkey --secret "$INSTDIR\config\key.txt"' "$INSTDIR\${PRODUCT_ICON}" 0
-
- noshortcuts:
-  ; Create uninstaller
-  WriteUninstaller "$INSTDIR\Uninstall.exe"
-
-  ; Show up in Add/Remove programs
-  WriteRegStr HKLM "Software\Microsoft\Windows\CurrentVersion\Uninstall\${PRODUCT_NAME}" "DisplayName" "${PRODUCT_NAME} ${VERSION}"
-  WriteRegExpandStr HKLM "Software\Microsoft\Windows\CurrentVersion\Uninstall\${PRODUCT_NAME}" "UninstallString" "$INSTDIR\Uninstall.exe"
-  WriteRegStr HKLM "Software\Microsoft\Windows\CurrentVersion\Uninstall\${PRODUCT_NAME}" "DisplayIcon" "$INSTDIR\${PRODUCT_ICON}"
-  WriteRegStr HKLM "Software\Microsoft\Windows\CurrentVersion\Uninstall\${PRODUCT_NAME}" "DisplayVersion" "${VERSION}"
-
-  ; Advise a reboot
-  ;Messagebox MB_OK "IMPORTANT: Rebooting the system is advised in order to finalize TAP driver installation/upgrade (this is an informational message only, pressing OK will not reboot)."
-
-SectionEnd
-
-;--------------------------------
-;Descriptions
-
-!insertmacro MUI_FUNCTION_DESCRIPTION_BEGIN
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecOpenVPNUserSpace} $(DESC_SecOpenVPNUserSpace)
-  !ifdef USE_GUI
-    !insertmacro MUI_DESCRIPTION_TEXT ${SecOpenVPNGUI} $(DESC_SecOpenVPNGUI)
-  !endif
-  !ifdef USE_XGUI
-    !insertmacro MUI_DESCRIPTION_TEXT ${SecOpenVPNXGUI} $(DESC_SecOpenVPNXGUI)
-  !endif
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecOpenVPNEasyRSA} $(DESC_SecOpenVPNEasyRSA)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecTAP} $(DESC_SecTAP)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecOpenSSLUtilities} $(DESC_SecOpenSSLUtilities)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecOpenSSLDLLs} $(DESC_SecOpenSSLDLLs)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecPKCS11DLLs} $(DESC_SecPKCS11DLLs)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecAddPath} $(DESC_SecAddPath)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecAddShortcuts} $(DESC_SecAddShortcuts)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecService} $(DESC_SecService)
-  !insertmacro MUI_DESCRIPTION_TEXT ${SecFileAssociation} $(DESC_SecFileAssociation)
-!insertmacro MUI_FUNCTION_DESCRIPTION_END
-
-;--------------------------------
-;Uninstaller Section
-
-Function un.onInit
-  ClearErrors
-  UserInfo::GetName
-  IfErrors ok
-  Pop $R0
-  UserInfo::GetAccountType
-  Pop $R1
-  StrCmp $R1 "Admin" ok
-    Messagebox MB_OK "Administrator privileges required to uninstall ${PRODUCT_NAME} [$R0/$R1]"
-    Abort
-  ok:
-FunctionEnd
-
-Section "Uninstall"
-
-!ifdef USE_XGUI
-  DetailPrint "XML Service REMOVE"
-  nsExec::ExecToLog '"$INSTDIR\bin\${XGUI_XMLSERV}" -remove'
-  Pop $R0 # return value/error/timeout
-!endif
-
-  ; Stop OpenVPN if currently running
-  DetailPrint "Service REMOVE"
-  nsExec::ExecToLog '"$INSTDIR\bin\${PRODUCT_UNIX_NAME}serv.exe" -remove'
-  Pop $R0 # return value/error/timeout
-
-  Sleep 3000
-
-  DetailPrint "TAP REMOVE"
-  nsExec::ExecToLog '"$INSTDIR\bin\tapinstall.exe" remove ${TAP}'
-  Pop $R0 # return value/error/timeout
-  DetailPrint "tapinstall remove returned: $R0"
-
-  Push "$INSTDIR\bin"
-  Call un.RemoveFromPath
-
-  RMDir /r $SMPROGRAMS\${PRODUCT_NAME}
-
-  ; delete sample config files
-  !ifdef SAMPCONF_DIR
-  !ifdef SAMPCONF_CONF
-    Delete "$INSTDIR\config\${SAMPCONF_CONF}"
-  !endif
-  !ifdef SAMPCONF_CONF2
-    Delete "$INSTDIR\config\${SAMPCONF_CONF2}"
-  !endif
-  !ifdef SAMPCONF_P12
-    Delete "$INSTDIR\config\${SAMPCONF_P12}"
-  !endif
-  !ifdef SAMPCONF_TA
-    Delete "$INSTDIR\config\${SAMPCONF_TA}"
-  !endif
-  !ifdef SAMPCONF_CA
-    Delete "$INSTDIR\config\${SAMPCONF_CA}"
-  !endif
-  !ifdef SAMPCONF_CRT
-    Delete "$INSTDIR\config\${SAMPCONF_CRT}"
-  !endif
-  !ifdef SAMPCONF_KEY
-    Delete "$INSTDIR\config\${SAMPCONF_KEY}"
-  !endif
-  !ifdef SAMPCONF_DH
-    Delete "$INSTDIR\config\${SAMPCONF_DH}"
-  !endif
-  !endif
-
-  !ifdef USE_GUI
-    Delete "$INSTDIR\bin\${OPENVPN_GUI}"
-    Delete "$DESKTOP\${PRODUCT_NAME} GUI.lnk"
-  !endif
-
-  !ifdef USE_XGUI
-    Delete "$INSTDIR\bin\${XGUI_EXE}"
-    Delete "$INSTDIR\bin\${XGUI_TRAY}"
-    Delete "$INSTDIR\bin\${XGUI_XMLSERV}"
-    RMDir /r "$INSTDIR\${XGUI_HTDOCS}"
-    Delete "$DESKTOP\${XGUI_AJAX_GUI_NAME}.lnk"
-    Delete "$DESKTOP\${XGUI_TRANSITION_GUI_NAME}.lnk"
-  !endif
-
-  Delete "$INSTDIR\bin\${PRODUCT_UNIX_NAME}.exe"
-  Delete "$INSTDIR\bin\${PRODUCT_UNIX_NAME}serv.exe"
-  Delete "$INSTDIR\bin\libeay32.dll"
-  Delete "$INSTDIR\bin\libssl32.dll"
-  Delete "$INSTDIR\bin\libpkcs11-helper-1.dll"
-  Delete "$INSTDIR\bin\tapinstall.exe"
-  Delete "$INSTDIR\bin\addtap.bat"
-  Delete "$INSTDIR\bin\deltapall.bat"
-
-  Delete "$INSTDIR\config\README.txt"
-  Delete "$INSTDIR\config\sample.${SERV_CONFIG_EXT}.txt"
-
-  Delete "$INSTDIR\log\README.txt"
-
-  Delete "$INSTDIR\driver\OemWin2k.inf"
-  Delete "$INSTDIR\driver\${PRODUCT_TAP_ID}.cat"
-  Delete "$INSTDIR\driver\${TAPDRV}"
-
-  Delete "$INSTDIR\bin\openssl.exe"
-
-  Delete "$INSTDIR\INSTALL-win32.txt"
-  Delete "$INSTDIR\${PRODUCT_ICON}"
-  Delete "$INSTDIR\license.txt"
-  Delete "$INSTDIR\Uninstall.exe"
-
-  Delete "$INSTDIR\easy-rsa\openssl-1.0.0.cnf"
-  Delete "$INSTDIR\easy-rsa\vars.bat.sample"
-  Delete "$INSTDIR\easy-rsa\init-config.bat"
-  Delete "$INSTDIR\easy-rsa\README.txt"
-  Delete "$INSTDIR\easy-rsa\build-ca.bat"
-  Delete "$INSTDIR\easy-rsa\build-dh.bat"
-  Delete "$INSTDIR\easy-rsa\build-key-server.bat"
-  Delete "$INSTDIR\easy-rsa\build-key.bat"
-  Delete "$INSTDIR\easy-rsa\build-key-pkcs12.bat"
-  Delete "$INSTDIR\easy-rsa\clean-all.bat"
-  Delete "$INSTDIR\easy-rsa\index.txt.start"
-  Delete "$INSTDIR\easy-rsa\revoke-key.bat"
-  Delete "$INSTDIR\easy-rsa\revoke-full.bat"
-  Delete "$INSTDIR\easy-rsa\serial.start"
-
-  Delete "$INSTDIR\sample-config\*.${PRODUCT_FILE_EXT}"
-
-  RMDir "$INSTDIR\bin"
-  RMDir "$INSTDIR\config"
-  RMDir "$INSTDIR\driver"
-  RMDir "$INSTDIR\easy-rsa"
-  RMDir "$INSTDIR\sample-config"
-  RMDir /r "$INSTDIR\log"
-  RMDir "$INSTDIR"
-
-  !insertmacro DelRegKeyIfUnchanged HKCR ".${SERV_CONFIG_EXT}" "${PRODUCT_NAME}File"
-  DeleteRegKey HKCR "${PRODUCT_NAME}File"
-  DeleteRegKey HKLM SOFTWARE\${PRODUCT_NAME}
-  DeleteRegKey HKCU "Software\${PRODUCT_NAME}"
-  DeleteRegKey HKLM "Software\Microsoft\Windows\CurrentVersion\Uninstall\${PRODUCT_NAME}"
-
-  ;Messagebox MB_OK "IMPORTANT: If you intend on reinstalling ${PRODUCT_NAME} after this uninstall, and you are running Win2K, you are strongly urged to reboot before reinstalling (this is an informational message only, pressing OK will not reboot)."
-
-SectionEnd
install-win32/setpath.nsi deleted +0 -231
deleted file mode 100755
index a9626c3..0000000
@@ -1,231 +0,0 @@
-; Modify the user's PATH variable.
-;
-; Modified by JY to have both a RemoveFromPath
-; and an un.RemoveFromPath which are basically
-; copies of each other.  Why does NSIS demand
-; this nonsense?
-;
-; Modified Feb 14, 2005 by Mathias Sundman:
-;   Added code to remove the semicolon at the end of the path
-;   when uninstalling.
-;
-;   Added code to make sure we don't insert an extra semicolon
-;   before our path if there already exist one at the end of
-;   the original path.
-;
-;   Removed duplicated "un. and install" functions and made
-;   macros to duplicate the code instead.
-
-; example usage
-;
-;Section "Add to path"
-;  Push $INSTDIR
-;  Call AddToPath
-;SectionEnd
-;
-;# ...
-;
-;Section "uninstall"
-;  # ...
-;  Push $INSTDIR
-;  Call un.RemoveFromPath
-;  # ...
-;SectionEnd
-
-!verbose 3
-!include "WinMessages.NSH"
-!verbose 4
-
-;====================================================
-; AddToPath - Adds the given dir to the search path.
-;        Input - head of the stack
-;        Note - Win9x systems requires reboot
-;====================================================
-Function AddToPath
-  Exch $0
-  Push $1
-  Push $2
-
-  Call IsNT
-  Pop $1
-  StrCmp $1 1 AddToPath_NT
-    ; Not on NT
-    StrCpy $1 $WINDIR 2
-    FileOpen $1 "$1\autoexec.bat" a
-    FileSeek $1 0 END
-    GetFullPathName /SHORT $0 $0
-    FileWrite $1 "$\r$\nSET PATH=%PATH%;$0$\r$\n"
-    FileClose $1
-    Goto AddToPath_done
-
-  AddToPath_NT:
-    ReadRegStr $1 HKCU "Environment" "PATH"
-    StrCpy $2 $1 1 -1 # copy last char
-    StrCmp $2 ";" 0 +2 # if last char == ;
-      StrCpy $1 $1 -1 # remove last char
-
-    StrCmp $1 "" AddToPath_NTdoIt
-      StrCpy $0 "$1;$0"
-      Goto AddToPath_NTdoIt
-    AddToPath_NTdoIt:
-      WriteRegExpandStr HKCU "Environment" "PATH" $0
-      SendMessage ${HWND_BROADCAST} ${WM_WININICHANGE} 0 "STR:Environment" /TIMEOUT=5000
-
-  AddToPath_done:
-    Pop $2
-    Pop $1
-    Pop $0
-FunctionEnd
-
-;====================================================
-; RemoveFromPath - Remove a given dir from the path
-;     Input: head of the stack
-;====================================================
-!macro RemoveFromPath un
-Function ${un}RemoveFromPath
-  Exch $0
-  Push $1
-  Push $2
-  Push $3
-  Push $4
-  Push $5
-
-  Call ${un}IsNT
-  Pop $1
-  StrCmp $1 1 RemoveFromPath_NT
-    ; Not on NT
-    StrCpy $1 $WINDIR 2
-    FileOpen $1 "$1\autoexec.bat" r
-    GetTempFileName $4
-    FileOpen $2 $4 w
-    GetFullPathName /SHORT $0 $0
-    StrCpy $0 "SET PATH=%PATH%;$0"
-    SetRebootFlag true
-    Goto RemoveFromPath_dosLoop
-
-    RemoveFromPath_dosLoop:
-      FileRead $1 $3
-      StrCmp $3 "$0$\r$\n" RemoveFromPath_dosLoop
-      StrCmp $3 "$0$\n" RemoveFromPath_dosLoop
-      StrCmp $3 "$0" RemoveFromPath_dosLoop
-      StrCmp $3 "" RemoveFromPath_dosLoopEnd
-      FileWrite $2 $3
-      Goto RemoveFromPath_dosLoop
-
-    RemoveFromPath_dosLoopEnd:
-      FileClose $2
-      FileClose $1
-      StrCpy $1 $WINDIR 2
-      Delete "$1\autoexec.bat"
-      CopyFiles /SILENT $4 "$1\autoexec.bat"
-      Delete $4
-      Goto RemoveFromPath_done
-
-  RemoveFromPath_NT:
-    StrLen $2 $0
-    ReadRegStr $1 HKCU "Environment" "PATH"
-    Push $1
-    Push $0
-    Call ${un}StrStr ; Find $0 in $1
-    Pop $0 ; pos of our dir
-    IntCmp $0 -1 RemoveFromPath_done
-      ; else, it is in path
-      StrCpy $3 $1 $0 ; $3 now has the part of the path before our dir
-      IntOp $2 $2 + $0 ; $2 now contains the pos after our dir in the path (';')
-      IntOp $2 $2 + 1 ; $2 now containts the pos after our dir and the semicolon.
-      StrLen $0 $1
-      StrCpy $1 $1 $0 $2
-      StrCpy $3 "$3$1"
-
-      StrCpy $5 $3 1 -1 # copy last char
-      StrCmp $5 ";" 0 +2 # if last char == ;
-        StrCpy $3 $3 -1 # remove last char
-
-      WriteRegExpandStr HKCU "Environment" "PATH" $3
-      SendMessage ${HWND_BROADCAST} ${WM_WININICHANGE} 0 "STR:Environment" /TIMEOUT=5000
-
-  RemoveFromPath_done:
-    Pop $5
-    Pop $4
-    Pop $3
-    Pop $2
-    Pop $1
-    Pop $0
-FunctionEnd
-!macroend
-!insertmacro RemoveFromPath ""
-!insertmacro RemoveFromPath "un."
-
-
-;====================================================
-; StrStr - Finds a given string in another given string.
-;               Returns -1 if not found and the pos if found.
-;          Input: head of the stack - string to find
-;                      second in the stack - string to find in
-;          Output: head of the stack
-;====================================================
-!macro StrStr un
-Function ${un}StrStr
-  Push $0
-  Exch
-  Pop $0 ; $0 now have the string to find
-  Push $1
-  Exch 2
-  Pop $1 ; $1 now have the string to find in
-  Exch
-  Push $2
-  Push $3
-  Push $4
-  Push $5
-
-  StrCpy $2 -1
-  StrLen $3 $0
-  StrLen $4 $1
-  IntOp $4 $4 - $3
-
-  StrStr_loop:
-    IntOp $2 $2 + 1
-    IntCmp $2 $4 0 0 StrStrReturn_notFound
-    StrCpy $5 $1 $3 $2
-    StrCmp $5 $0 StrStr_done StrStr_loop
-
-  StrStrReturn_notFound:
-    StrCpy $2 -1
-
-  StrStr_done:
-    Pop $5
-    Pop $4
-    Pop $3
-    Exch $2
-    Exch 2
-    Pop $0
-    Pop $1
-FunctionEnd
-!macroend
-!insertmacro StrStr ""
-!insertmacro StrStr "un."
-
-;====================================================
-; IsNT - Returns 1 if the current system is NT, 0
-;        otherwise.
-;     Output: head of the stack
-;====================================================
-!macro IsNT un
-Function ${un}IsNT
-  Push $0
-  ReadRegStr $0 HKLM "SOFTWARE\Microsoft\Windows NT\CurrentVersion" CurrentVersion
-  StrCmp $0 "" 0 IsNT_yes
-  ; we are not NT.
-  Pop $0
-  Push 0
-  Return
-
-  IsNT_yes:
-    ; NT!!!
-    Pop $0
-    Push 1
-FunctionEnd
-!macroend
-!insertmacro IsNT ""
-!insertmacro IsNT "un."
-
install-win32/settings.in deleted +0 -71
deleted file mode 100644
index 4a0a564..0000000
@@ -1,71 +0,0 @@
-# Version numbers, settings, and dependencies
-# for Windows OpenVPN installer.
-
-# Get the OpenVPN version number
-!include "autodefs/version.in"
-
-# Branding
-!define PRODUCT_NAME      "OpenVPN"
-!define PRODUCT_UNIX_NAME "openvpn"
-!define PRODUCT_FILE_EXT  "ovpn"
-
-# Allow --askpass and --auth-user-pass passwords to be read from a file
-;!define ENABLE_PASSWORD_SAVE
-
-# Include the OpenVPN GUI exe in the installer.
-# May be undefined.
-!define OPENVPN_GUI_DIR "../openvpn-gui"
-!define OPENVPN_GUI     "openvpn-gui-1.0.3.exe"
-
-# Include the OpenVPN XML-based GUI exe in the installer.
-# May be undefined.
-;!define OPENVPN_XGUI_DIR "../ovpnxml"
-
-# Prebuilt libraries.  DMALLOC is optional.
-!define OPENSSL_DIR      "../openssl.mingw/openssl-0.9.8o"
-!define LZO_DIR                  "../lzo-2.02"
-!define PKCS11_HELPER_DIR "../pkcs11-helper"
-;!define DMALLOC_DIR     "../dmalloc-5.4.2"
-
-# Prebuilt TAP drivers and tapinstall
-!define TAPBINSRC "../tap_dist"
-
-# Directory containing python script for signing .exe files
-!define SIGNTOOL        "../signtool"
-
-# Optional directory of prebuilt OpenVPN binary components,
-# to be used as a source when build-from-scratch prerequisites
-# are not met.
-;!define GENOUT_PREBUILT  "../gen-prebuilt"
-
-# -j parameter passed to make
-!define MAKE_JOBS 1
-
-# output directory for built binaries
-# and other generated files
-!define GENOUT "gen"
-
-# delete GENOUT directory before starting
-# set to "yes" or "no"
-!define CLEAN "yes"
-
-# Don't strip executables and DLLs
-;!define NO_STRIP
-
-; DEBUGGING -- set to something like "-DBG2"
-!define OUTFILE_LABEL ""
-
-; DEBUGGING -- set to something like "DEBUG2"
-!define TITLE_LABEL ""
-
-# include a sample configuration file and key
-;!define SAMPCONF_DIR   "test-key"
-;!define SAMPCONF_CONF  "test.ovpn"
-;!define SAMPCONF_P12   "test.p12"
-;!define SAMPCONF_TA    "ta.key"
-;!define SAMPCONF_CA    "ca.crt"
-;!define SAMPCONF_CRT   "test.crt"
-;!define SAMPCONF_KEY   "test.key"
-
-# Extract files embedded in installer
-;!define EXTRACT_FILES
install-win32/trans.pl deleted +0 -97
deleted file mode 100644
index 34fd207..0000000
@@ -1,97 +0,0 @@
-#!/usr/bin/perl
-
-# This script translates a simple definition-based grammar
-# to either C, sh, Javascript, or in (in = identity grammar, i.e.
-# same grammar as input).
-#
-# Input grammar:
-#   (1) comments having ';' or '#' as the first char in the line
-#   (2) a blank line
-#   (3) !include "file"
-#   (4) !define foo bar
-#   (5) !define foo "bar"
-#
-# Environmental variables can be used to override a setting.
-# The special value "null" causes the variable to be undefined.
-# If an environmental value is bracketed, i.e [abc], the brackets
-# will be converted to double quotes prior to output.
-
-sub comment {
-  my ($cmt) = @_;
-  print "//$cmt\n" if ($mode =~ /^(c|js|h)$/);
-  print "#$cmt\n" if ($mode =~ /^(sh|nsi|in)$/);
-}
-
-sub define {
-  my ($name, $value) = @_;
-  if ($mode eq "sh") {
-    $value="true" if !$value;
-    print "[ -z \"\$$name\" ] && export $name=$value\n";
-    print "[ \"\$$name\" = \"$nulltag\" ] && unset $name\n";
-  } else {
-    if ($ENV{$name}) {
-      $value = $ENV{$name};
-      $value = "\"$1\"" if ($value =~ /\[(.*)\]$/);
-    }
-    if ($value ne $nulltag) {
-      print "#define $name $value\n" if ($mode =~ /^(c|h)$/);
-      print "!define $name $value\n" if ($mode =~ /^(nsi|in)$/);
-      print "var $name=$value;\n" if ($mode eq "js");
-    } else {
-      print "//#undef $name\n" if ($mode =~ /^(c|h)$/);
-      print "#!undef $name\n" if ($mode eq "nsi");
-      print ";!undef $name\n" if ($mode eq "in");
-      print "//undef $name\n" if ($mode eq "js");
-    }
-  }
-}
-
-sub include_file {
-  local $_;
-  $include_file_level++;
-  die "!include file nesting too deep" if ($include_file_level > $max_inc_depth);
-  my ($parm) = @_;
-  my $fn = "$incdir/$parm";
-  local *IN;
-  open(IN, "< $fn") or die "cannot open $fn";
-    while (<IN>) {
-      chomp;
-      if (/^\s*$/) {
-       print "\n";
-      } elsif (/^[#;](.*)$/) {
-       comment ($1);
-      } elsif (/^!define\s+(\w+)(?:\s+(.*?))?\s*$/) {
-       define ($1, $2);
-      } elsif (/^!include\s+"(.+)"$/) {
-       include_file ($1);
-      } else {
-       die "can't parse this line: $_\n";
-      }
-    }
-  $include_file_level--;
-}
-
-die "usage: trans <c|h|sh|js|nsi|in> [-I<dir>] [files ...]" if (@ARGV < 1);
-
-($mode) = shift(@ARGV);
-die "mode must be one of c, h, sh, js, nsi, or in" if !($mode =~ /^(c|h|sh|js|nsi|in)$/);
-
-$nulltag = "null";
-$max_inc_depth = 10;
-$include_file_level = 0;
-$incdir = ".";
-
-comment(" This file was automatically generated by trans.pl");
-
-while ($arg=shift(@ARGV)) {
-  if ($arg =~ /^-/) {
-    if ($arg =~ /^-I(.*)$/) {
-      $incdir = $1;
-    } else {
-      die "unrecognized option: $arg";
-    }
-  } else {
-    print "\n";
-    include_file ($arg);
-  }
-}
install-win32/u2d.c deleted +0 -20
deleted file mode 100755
index bf1f5e8..0000000
@@ -1,20 +0,0 @@
-#include <stdio.h>
-
-int
-main (int argc, char *argv[])
-{
-  int c;
-  int enable = 1;
-
-  while ((c = getchar()) != EOF)
-    {
-#if 0
-      if (c == '\r')
-       enable = 0;
-      if (enable && c == '\n')
-       putchar ('\r');
-#endif
-      putchar (c);
-    }
-  return 0;
-}
install-win32/winconfig deleted +0 -19
deleted file mode 100644
index 9d686c9..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-# prepare files for building on Windows
-# run from top directory: install-win32/winconfig
-
-rm -rf autodefs
-mkdir autodefs
-
-# build multi-grammar definition files
-perl install-win32/m4todef.pl <version.m4 >autodefs/version.in
-for g in "h" "sh" "nsi" "in" ; do
-    perl install-win32/trans.pl $g install-win32/settings.in >autodefs/defs.$g
-done
-
-cat /dev/null >autodefs/guidefs.nsi
-
-echo '#include "autodefs/defs.h"' >autodefs.h
-echo '#include "config.h"' >>autodefs.h
--

1.7.3.4

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Openvpn-devel mailing list [email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

#33 lore raw

PATCH 18/52 Remove easy-rsa

In reply to Alon Bar-Lev
---
 Makefile.am                                |    1 -
 easy-rsa/1.0/README                        |  161 ------------
 easy-rsa/1.0/build-ca                      |   13 -
 easy-rsa/1.0/build-dh                      |   12 -
 easy-rsa/1.0/build-inter                   |   19 --
 easy-rsa/1.0/build-key                     |   20 --
 easy-rsa/1.0/build-key-pass                |   20 --
 easy-rsa/1.0/build-key-pkcs12              |   21 --
 easy-rsa/1.0/build-key-server              |   22 --
 easy-rsa/1.0/build-req                     |   18 --
 easy-rsa/1.0/build-req-pass                |   18 --
 easy-rsa/1.0/clean-all                     |   19 --
 easy-rsa/1.0/list-crl                      |   18 --
 easy-rsa/1.0/make-crl                      |   18 --
 easy-rsa/1.0/openssl.cnf                   |  255 -------------------
 easy-rsa/1.0/revoke-crt                    |   18 --
 easy-rsa/1.0/revoke-full                   |   29 ---
 easy-rsa/1.0/sign-req                      |   18 --
 easy-rsa/1.0/vars                          |   49 ----
 easy-rsa/2.0/Makefile                      |   13 -
 easy-rsa/2.0/README                        |  229 -----------------
 easy-rsa/2.0/build-ca                      |    8 -
 easy-rsa/2.0/build-dh                      |   11 -
 easy-rsa/2.0/build-inter                   |    7 -
 easy-rsa/2.0/build-key                     |    7 -
 easy-rsa/2.0/build-key-pass                |    7 -
 easy-rsa/2.0/build-key-pkcs12              |    8 -
 easy-rsa/2.0/build-key-server              |   10 -
 easy-rsa/2.0/build-req                     |    7 -
 easy-rsa/2.0/build-req-pass                |    7 -
 easy-rsa/2.0/clean-all                     |   16 --
 easy-rsa/2.0/inherit-inter                 |   39 ---
 easy-rsa/2.0/list-crl                      |   13 -
 easy-rsa/2.0/openssl-0.9.6.cnf             |  265 -------------------
 easy-rsa/2.0/openssl-0.9.8.cnf             |  290 ---------------------
 easy-rsa/2.0/openssl-1.0.0.cnf             |  285 ---------------------
 easy-rsa/2.0/pkitool                       |  379 ----------------------------
 easy-rsa/2.0/revoke-full                   |   40 ---
 easy-rsa/2.0/sign-req                      |    7 -
 easy-rsa/2.0/vars                          |   74 ------
 easy-rsa/2.0/whichopensslcnf               |   26 --
 easy-rsa/Windows/README.txt                |   44 ----
 easy-rsa/Windows/build-ca-pass.bat         |    8 -
 easy-rsa/Windows/build-ca.bat              |    4 -
 easy-rsa/Windows/build-dh.bat              |    4 -
 easy-rsa/Windows/build-key-pass.bat        |    8 -
 easy-rsa/Windows/build-key-pkcs12.bat      |   10 -
 easy-rsa/Windows/build-key-server-pass.bat |    8 -
 easy-rsa/Windows/build-key-server.bat      |    8 -
 easy-rsa/Windows/build-key.bat             |    8 -
 easy-rsa/Windows/clean-all.bat             |   13 -
 easy-rsa/Windows/init-config.bat           |    1 -
 easy-rsa/Windows/revoke-full.bat           |   13 -
 easy-rsa/Windows/serial.start              |    1 -
 easy-rsa/Windows/vars.bat.sample           |   40 ---
 openvpn.spec.in                            |    2 +-
 56 files changed, 1 insertions(+), 2668 deletions(-)
 delete mode 100644 easy-rsa/1.0/README
 delete mode 100755 easy-rsa/1.0/build-ca
 delete mode 100755 easy-rsa/1.0/build-dh
 delete mode 100755 easy-rsa/1.0/build-inter
 delete mode 100755 easy-rsa/1.0/build-key
 delete mode 100755 easy-rsa/1.0/build-key-pass
 delete mode 100755 easy-rsa/1.0/build-key-pkcs12
 delete mode 100755 easy-rsa/1.0/build-key-server
 delete mode 100755 easy-rsa/1.0/build-req
 delete mode 100755 easy-rsa/1.0/build-req-pass
 delete mode 100755 easy-rsa/1.0/clean-all
 delete mode 100644 easy-rsa/1.0/list-crl
 delete mode 100644 easy-rsa/1.0/make-crl
 delete mode 100644 easy-rsa/1.0/openssl.cnf
 delete mode 100644 easy-rsa/1.0/revoke-crt
 delete mode 100755 easy-rsa/1.0/revoke-full
 delete mode 100755 easy-rsa/1.0/sign-req
 delete mode 100644 easy-rsa/1.0/vars
 delete mode 100644 easy-rsa/2.0/Makefile
 delete mode 100644 easy-rsa/2.0/README
 delete mode 100755 easy-rsa/2.0/build-ca
 delete mode 100755 easy-rsa/2.0/build-dh
 delete mode 100755 easy-rsa/2.0/build-inter
 delete mode 100755 easy-rsa/2.0/build-key
 delete mode 100755 easy-rsa/2.0/build-key-pass
 delete mode 100755 easy-rsa/2.0/build-key-pkcs12
 delete mode 100755 easy-rsa/2.0/build-key-server
 delete mode 100755 easy-rsa/2.0/build-req
 delete mode 100755 easy-rsa/2.0/build-req-pass
 delete mode 100755 easy-rsa/2.0/clean-all
 delete mode 100755 easy-rsa/2.0/inherit-inter
 delete mode 100755 easy-rsa/2.0/list-crl
 delete mode 100755 easy-rsa/2.0/openssl-0.9.6.cnf
 delete mode 100755 easy-rsa/2.0/openssl-0.9.8.cnf
 delete mode 100755 easy-rsa/2.0/openssl-1.0.0.cnf
 delete mode 100755 easy-rsa/2.0/pkitool
 delete mode 100755 easy-rsa/2.0/revoke-full
 delete mode 100755 easy-rsa/2.0/sign-req
 delete mode 100755 easy-rsa/2.0/vars
 delete mode 100755 easy-rsa/2.0/whichopensslcnf
 delete mode 100644 easy-rsa/Windows/README.txt
 delete mode 100644 easy-rsa/Windows/build-ca-pass.bat
 delete mode 100644 easy-rsa/Windows/build-ca.bat
 delete mode 100644 easy-rsa/Windows/build-dh.bat
 delete mode 100644 easy-rsa/Windows/build-key-pass.bat
 delete mode 100644 easy-rsa/Windows/build-key-pkcs12.bat
 delete mode 100644 easy-rsa/Windows/build-key-server-pass.bat
 delete mode 100644 easy-rsa/Windows/build-key-server.bat
 delete mode 100644 easy-rsa/Windows/build-key.bat
 delete mode 100644 easy-rsa/Windows/clean-all.bat
 delete mode 100644 easy-rsa/Windows/index.txt.start
 delete mode 100755 easy-rsa/Windows/init-config.bat
 delete mode 100644 easy-rsa/Windows/revoke-full.bat
 delete mode 100644 easy-rsa/Windows/serial.start
 delete mode 100644 easy-rsa/Windows/vars.bat.sample
Makefile.am +0 -1
index 33c4545..b6fcfbb 100644
@@ -40,7 +40,6 @@ MAINTAINERCLEANFILES = \
 CLEANFILES = openvpn.8.html configure.h
 
 EXTRA_DIST = \
-	easy-rsa \
 	sample-config-files \
 	sample-keys \
 	sample-scripts \
easy-rsa/1.0/README deleted +0 -161

161 lines not on this page · raw message

easy-rsa/1.0/build-ca deleted +0 -13
deleted file mode 100755
index 5ad59cc..0000000
@@ -1,13 +0,0 @@
-#!/bin/sh
-
-#
-# Build a root certificate
-#
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl req -days 3650 -nodes -new -x509 -keyout ca.key -out ca.crt -config $KEY_CONFIG && \
-        chmod 0600 ca.key
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-dh deleted +0 -12
deleted file mode 100755
index 6de4baf..0000000
@@ -1,12 +0,0 @@
-#!/bin/sh
-
-#
-# Build Diffie-Hellman parameters for the server side
-# of an SSL/TLS connection.
-#
-
-if test $KEY_DIR; then
-    openssl dhparam -out ${KEY_DIR}/dh${KEY_SIZE}.pem ${KEY_SIZE}
-else
-    echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-inter deleted +0 -19
deleted file mode 100755
index 8b3a6b2..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-#
-# Make an intermediate CA certificate/private key pair using a locally generated
-# root certificate.
-#
-
-if test $# -ne 1; then
-        echo "usage: build-inter <name>";
-        exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-	openssl ca -extensions v3_ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key deleted +0 -20
deleted file mode 100755
index 3159d2b..0000000
@@ -1,20 +0,0 @@
-#!/bin/sh
-
-#
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-#
-
-if test $# -ne 1; then
-        echo "usage: build-key <name>";
-        exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-	openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG && \
-	chmod 0600 $1.key
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key-pass deleted +0 -20
deleted file mode 100755
index 03ab304..0000000
@@ -1,20 +0,0 @@
-#!/bin/sh
-
-#
-# Similar to build-key, but protect the private key
-# with a password.
-#
-
-if test $# -ne 1; then
-        echo "usage: build-key-pass <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl req -days 3650 -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-	openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG && \
-	chmod 0600 $1.key
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key-pkcs12 deleted +0 -21
deleted file mode 100755
index f8a057b..0000000
@@ -1,21 +0,0 @@
-#!/bin/sh
-
-#
-# Make a certificate/private key pair using a locally generated
-# root certificate and convert it to a PKCS #12 file including the
-# the CA certificate as well.
-
-if test $# -ne 1; then
-        echo "usage: build-key-pkcs12 <name>";
-        exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-	openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG && \
-        openssl pkcs12 -export -inkey $1.key -in $1.crt -certfile ca.crt -out $1.p12 && \
-	chmod 0600 $1.key $1.p12
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key-server deleted +0 -22
deleted file mode 100755
index 30dc41e..0000000
@@ -1,22 +0,0 @@
-#!/bin/sh
-
-#
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-#
-# Explicitly set nsCertType to server using the "server"
-# extension in the openssl.cnf file.
-
-if test $# -ne 1; then
-        echo "usage: build-key-server <name>";
-        exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -extensions server -config $KEY_CONFIG && \
-	openssl ca -days 3650 -out $1.crt -in $1.csr -extensions server -config $KEY_CONFIG && \
-        chmod 0600 $1.key
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-req deleted +0 -18
deleted file mode 100755
index 30f62f5..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# Build a certificate signing request and private key.  Use this
-# when your root certificate and key is not available locally.
-#
-
-if test $# -ne 1; then
-    echo "usage: build-req <name>";
-    exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-    cd $KEY_DIR && \
-    openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG
-else
-    echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-req-pass deleted +0 -18
deleted file mode 100755
index 829b286..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# Like build-req, but protect your private key
-# with a password.
-#
-
-if test $# -ne 1; then
-    echo "usage: build-req-pass <name>";
-    exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-    cd $KEY_DIR && \
-    openssl req -days 3650 -new -keyout $1.key -out $1.csr -config $KEY_CONFIG
-else
-    echo you must define KEY_DIR
-fi
easy-rsa/1.0/clean-all deleted +0 -19
deleted file mode 100755
index d10aef5..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-#
-# Initialize the $KEY_DIR directory.
-# Note that this script does a
-# rm -rf on $KEY_DIR so be careful!
-#
-
-d=$KEY_DIR
-
-if test $d; then
-	rm -rf $d
-	mkdir $d && \
-	chmod go-rwx $d && \
-	touch $d/index.txt && \
-	echo 01 >$d/serial
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/list-crl deleted +0 -18
deleted file mode 100644
index b214dbd..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# list revoked certificates
-#
-#
-
-if test $# -ne 1; then
-        echo "usage: list-crl <crlfile.pem>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl crl -text -noout -in $1
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/make-crl deleted +0 -18
deleted file mode 100644
index 62fe6c1..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# generate a CRL
-#
-#
-
-if test $# -ne 1; then
-        echo "usage: make-crl <crlfile.pem>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl ca -gencrl -out $1 -config $KEY_CONFIG
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/openssl.cnf deleted +0 -255

255 lines not on this page · raw message

easy-rsa/1.0/revoke-crt deleted +0 -18
deleted file mode 100644
index 35b071a..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# revoke a certificate
-#
-#
-
-if test $# -ne 1; then
-        echo "usage: revoke-crt <file.crt>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl ca -revoke $1 -config $KEY_CONFIG
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/revoke-full deleted +0 -29
deleted file mode 100755
index 66ea03f..0000000
@@ -1,29 +0,0 @@
-#!/bin/sh
-
-# revoke a certificate, regenerate CRL,
-# and verify revocation
-
-CRL=crl.pem
-RT=revoke-test.pem
-
-if test $# -ne 1; then
-        echo "usage: revoke-full <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR
-       rm -f $RT
-
-       # revoke key and generate a new CRL
-       openssl ca -revoke $1.crt -config $KEY_CONFIG
-
-       # generate a new CRL
-       openssl ca -gencrl -out $CRL -config $KEY_CONFIG
-       cat ca.crt $CRL >$RT
-    
-       # verify the revocation
-       openssl verify -CAfile $RT -crl_check $1.crt
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/sign-req deleted +0 -18
deleted file mode 100755
index 59edc42..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# Sign a certificate signing request (a .csr file)
-# with a local root certificate and key.
-#
-
-if test $# -ne 1; then
-        echo "usage: sign-req <name>";
-        exit 1
-fi                                                                             
-
-if test $KEY_DIR; then
-	cd $KEY_DIR && \
-	openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG
-else
-	echo you must define KEY_DIR
-fi
easy-rsa/1.0/vars deleted +0 -49

49 lines not on this page · raw message

easy-rsa/2.0/Makefile deleted +0 -13
deleted file mode 100644
index 8000cc5..0000000
@@ -1,13 +0,0 @@
-
-DESTDIR=
-PREFIX=
-
-all:
-	echo "All done."
-	echo "Run make install DESTDIR=/usr/share/somewhere"
-
-install:
-	install -d "${DESTDIR}/${PREFIX}"
-	install -m 0755 build-* "${DESTDIR}/${PREFIX}"
-	install -m 0755 clean-all list-crl inherit-inter pkitool revoke-full sign-req whichopensslcnf "${DESTDIR}/${PREFIX}"
-	install -m 0644 openssl-0.9.6.cnf openssl-0.9.8.cnf openssl-1.0.0.cnf README vars "${DESTDIR}/${PREFIX}"
easy-rsa/2.0/README deleted +0 -229

229 lines not on this page · raw message

easy-rsa/2.0/build-ca deleted +0 -8
deleted file mode 100755
index bce29a6..0000000
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-#
-# Build a root certificate
-#
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --initca $*
easy-rsa/2.0/build-dh deleted +0 -11
deleted file mode 100755
index 4beb127..0000000
@@ -1,11 +0,0 @@
-#!/bin/sh
-
-# Build Diffie-Hellman parameters for the server side
-# of an SSL/TLS connection.
-
-if [ -d $KEY_DIR ] && [ $KEY_SIZE ]; then
-    $OPENSSL dhparam -out ${KEY_DIR}/dh${KEY_SIZE}.pem ${KEY_SIZE}
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/build-inter deleted +0 -7
deleted file mode 100755
index 87bf98d..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Make an intermediate CA certificate/private key pair using a locally generated
-# root certificate.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --inter $*
easy-rsa/2.0/build-key deleted +0 -7
deleted file mode 100755
index 6c0fed8..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact $*
easy-rsa/2.0/build-key-pass deleted +0 -7
deleted file mode 100755
index 8ef8307..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Similar to build-key, but protect the private key
-# with a password.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --pass $*
easy-rsa/2.0/build-key-pkcs12 deleted +0 -8
deleted file mode 100755
index ba90e6a..0000000
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-# Make a certificate/private key pair using a locally generated
-# root certificate and convert it to a PKCS #12 file including the
-# the CA certificate as well.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --pkcs12 $*
easy-rsa/2.0/build-key-server deleted +0 -10
deleted file mode 100755
index fee0194..0000000
@@ -1,10 +0,0 @@
-#!/bin/sh
-
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-#
-# Explicitly set nsCertType to server using the "server"
-# extension in the openssl.cnf file.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --server $*
easy-rsa/2.0/build-req deleted +0 -7
deleted file mode 100755
index 559d512..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Build a certificate signing request and private key.  Use this
-# when your root certificate and key is not available locally.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --csr $*
easy-rsa/2.0/build-req-pass deleted +0 -7
deleted file mode 100755
index b73ee1b..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Like build-req, but protect your private key
-# with a password.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --csr --pass $*
easy-rsa/2.0/clean-all deleted +0 -16
deleted file mode 100755
index cc6e3b2..0000000
@@ -1,16 +0,0 @@
-#!/bin/sh
-
-# Initialize the $KEY_DIR directory.
-# Note that this script does a
-# rm -rf on $KEY_DIR so be careful!
-
-if [ "$KEY_DIR" ]; then
-    rm -rf "$KEY_DIR"
-    mkdir "$KEY_DIR" && \
-	chmod go-rwx "$KEY_DIR" && \
-	touch "$KEY_DIR/index.txt" && \
-	echo 01 >"$KEY_DIR/serial"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/inherit-inter deleted +0 -39
deleted file mode 100755
index aaa5168..0000000
@@ -1,39 +0,0 @@
-#!/bin/sh
-
-# Build a new PKI which is rooted on an intermediate certificate generated
-# by ./build-inter or ./pkitool --inter from a parent PKI.  The new PKI should
-# have independent vars settings, and must use a different KEY_DIR directory
-# from the parent.  This tool can be used to generate arbitrary depth
-# certificate chains.
-#
-# To build an intermediate CA, follow the same steps for a regular PKI but
-# replace ./build-key or ./pkitool --initca with this script.
-
-# The EXPORT_CA file will contain the CA certificate chain and should be
-# referenced by the OpenVPN "ca" directive in config files.  The ca.crt file
-# will only contain the local intermediate CA -- it's needed by the easy-rsa
-# scripts but not by OpenVPN directly.
-EXPORT_CA="export-ca.crt"
-
-if [ $# -ne 2 ]; then
-    echo "usage: $0 <parent-key-dir> <common-name>"
-    echo "parent-key-dir: the KEY_DIR directory of the parent PKI"
-    echo "common-name: the common name of the intermediate certificate in the parent PKI"
-    exit 1;
-fi
-
-if [ "$KEY_DIR" ]; then
-    cp "$1/$2.crt" "$KEY_DIR/ca.crt"
-    cp "$1/$2.key" "$KEY_DIR/ca.key"
-
-    if [ -e "$1/$EXPORT_CA" ]; then
-	PARENT_CA="$1/$EXPORT_CA"
-    else
-	PARENT_CA="$1/ca.crt"
-    fi
-    cp "$PARENT_CA" "$KEY_DIR/$EXPORT_CA"
-    cat "$KEY_DIR/ca.crt" >> "$KEY_DIR/$EXPORT_CA"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/list-crl deleted +0 -13
deleted file mode 100755
index d1d8a69..0000000
@@ -1,13 +0,0 @@
-#!/bin/sh
-
-# list revoked certificates
-
-CRL="${1:-crl.pem}"
-
-if [ "$KEY_DIR" ]; then
-    cd "$KEY_DIR" && \
-	$OPENSSL crl -text -noout -in "$CRL"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/openssl-0.9.6.cnf deleted +0 -265

265 lines not on this page · raw message

easy-rsa/2.0/openssl-0.9.8.cnf deleted +0 -290

290 lines not on this page · raw message

easy-rsa/2.0/openssl-1.0.0.cnf deleted +0 -285

285 lines not on this page · raw message

easy-rsa/2.0/pkitool deleted +0 -379

379 lines not on this page · raw message

easy-rsa/2.0/revoke-full deleted +0 -40
deleted file mode 100755
index 4169c4c..0000000
@@ -1,40 +0,0 @@
-#!/bin/sh
-
-# revoke a certificate, regenerate CRL,
-# and verify revocation
-
-CRL="crl.pem"
-RT="revoke-test.pem"
-
-if [ $# -ne 1 ]; then
-    echo "usage: revoke-full <cert-name-base>";
-    exit 1
-fi
-
-if [ "$KEY_DIR" ]; then
-    cd "$KEY_DIR"
-    rm -f "$RT"
-
-    # set defaults
-    export KEY_CN=""
-    export KEY_OU=""
-    export KEY_NAME=""
-
-    # revoke key and generate a new CRL
-    $OPENSSL ca -revoke "$1.crt" -config "$KEY_CONFIG"
-
-    # generate a new CRL -- try to be compatible with
-    # intermediate PKIs
-    $OPENSSL ca -gencrl -out "$CRL" -config "$KEY_CONFIG"
-    if [ -e export-ca.crt ]; then
-	cat export-ca.crt "$CRL" >"$RT"
-    else
-	cat ca.crt "$CRL" >"$RT"
-    fi
-    
-    # verify the revocation
-    $OPENSSL verify -CAfile "$RT" -crl_check "$1.crt"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/sign-req deleted +0 -7
deleted file mode 100755
index 6cae7b4..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Sign a certificate signing request (a .csr file)
-# with a local root certificate and key.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --sign $*
easy-rsa/2.0/vars deleted +0 -74

74 lines not on this page · raw message

easy-rsa/2.0/whichopensslcnf deleted +0 -26
deleted file mode 100755
index 2226a8e..0000000
@@ -1,26 +0,0 @@
-#!/bin/sh
-
-cnf="$1/openssl.cnf"
-
-if [ "$OPENSSL" ]; then
-	if $OPENSSL version | grep -E "0\.9\.6[[:alnum:]]" > /dev/null; then
-		cnf="$1/openssl-0.9.6.cnf"
-	elif $OPENSSL version | grep -E "0\.9\.8[[:alnum:]]" > /dev/null; then
-		cnf="$1/openssl-0.9.8.cnf"
-	elif $OPENSSL version | grep -E "1\.0\.([[:digit:]][[:alnum:]])" > /dev/null; then
-                cnf="$1/openssl-1.0.0.cnf"
-	else
-		cnf="$1/openssl.cnf"
-	fi
-fi
-
-echo $cnf
-
-if [ ! -r $cnf ]; then
-    echo "**************************************************************" >&2
-    echo "  No $cnf file could be found" >&2
-    echo "  Further invocations will fail" >&2
-    echo "**************************************************************" >&2
-fi
-
-exit 0
easy-rsa/Windows/README.txt deleted +0 -44

44 lines not on this page · raw message

easy-rsa/Windows/build-ca-pass.bat deleted +0 -8
deleted file mode 100644
index ab0b2a4..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-ca.bat deleted +0 -4
deleted file mode 100644
index a3f234b..0000000
@@ -1,4 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a cert authority valid for ten years, starting now
-openssl req -days 3650 -nodes -new -x509 -keyout %KEY_DIR%\ca.key -out %KEY_DIR%\ca.crt -config %KEY_CONFIG%
easy-rsa/Windows/build-dh.bat deleted +0 -4
deleted file mode 100644
index 74bc603..0000000
@@ -1,4 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a dh file for the server side
-openssl dhparam -out %KEY_DIR%/dh%KEY_SIZE%.pem %KEY_SIZE%
easy-rsa/Windows/build-key-pass.bat deleted +0 -8
deleted file mode 100644
index ab0b2a4..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key-pkcs12.bat deleted +0 -10
deleted file mode 100644
index 1fc083e..0000000
@@ -1,10 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem convert the key/cert and embed the ca cert into a pkcs12 file.
-openssl pkcs12 -export -inkey %KEY_DIR%\%1.key -in %KEY_DIR%\%1.crt -certfile %KEY_DIR%\ca.crt -out %KEY_DIR%\%1.p12
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key-server-pass.bat deleted +0 -8
deleted file mode 100644
index 99ed4d3..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -extensions server -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key-server.bat deleted +0 -8
deleted file mode 100644
index 20e3605..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -extensions server -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key.bat deleted +0 -8
deleted file mode 100644
index c040904..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/clean-all.bat deleted +0 -13
deleted file mode 100644
index 71cbf4d..0000000
@@ -1,13 +0,0 @@
[email protected]... off
-rem move to the HOME directory specified in VARS script
-cd %HOME%
-rem set a temporary KEY_DIR variable
-set d=%KEY_DIR%
-rem delete the KEY_DIR and any subdirs quietly
-rmdir /s /q %d%
-rem make a new KEY_DIR
-mkdir %d%
-rem copy in a fesh index file so we begin with an empty database
-copy index.txt.start %d%\index.txt
-rem copy in a fresh serial file so we begin generating keys at index 01
-copy serial.start %d%\serial.
easy-rsa/Windows/index.txt.start deleted +0 -0
deleted file mode 100644
index e69de29..0000000
easy-rsa/Windows/init-config.bat deleted +0 -1
deleted file mode 100755
index 12e6d78..0000000
@@ -1 +0,0 @@
-copy vars.bat.sample vars.bat
easy-rsa/Windows/revoke-full.bat deleted +0 -13
deleted file mode 100644
index ef2e4b5..0000000
@@ -1,13 +0,0 @@
[email protected]... off
-cd %HOME%
-rem revoke cert
-openssl ca -revoke %KEY_DIR%\%1.crt -config %KEY_CONFIG%
-rem generate new crl
-openssl ca -gencrl -out %KEY_DIR%\crl.pem -config %KEY_CONFIG%
-rem test revocation
-rem first concatinate ca cert with newly generated crl
-copy %KEY_DIR%\ca.crt+%KEY_DIR%\crl.pem %KEY_DIR%\revoke_test_file.pem
-rem now verify the revocation
-openssl verify -CAfile %KEY_DIR%\revoke_test_file.pem -crl_check %KEY_DIR%\%1.crt
-rem delete temporary test file
-del /q %KEY_DIR%\revoke_test_file.pem
easy-rsa/Windows/serial.start deleted +0 -1
deleted file mode 100644
index 8a0f05e..0000000
@@ -1 +0,0 @@
-01
easy-rsa/Windows/vars.bat.sample deleted +0 -40
deleted file mode 100644
index 36e6f71..0000000
@@ -1,40 +0,0 @@
[email protected]... off
-rem Edit this variable to point to
-rem the openssl.cnf file included
-rem with easy-rsa.
-
-set HOME=%ProgramFiles%\OpenVPN\easy-rsa
-set KEY_CONFIG=openssl-1.0.0.cnf
-
-rem Edit this variable to point to
-rem your soon-to-be-created key
-rem directory.
-rem
-rem WARNING: clean-all will do
-rem a rm -rf on this directory
-rem so make sure you define
-rem it correctly!
-set KEY_DIR=keys
-
-rem Increase this to 2048 if you
-rem are paranoid.  This will slow
-rem down TLS negotiation performance
-rem as well as the one-time DH parms
-rem generation process.
-set KEY_SIZE=1024
-
-rem These are the default values for fields
-rem which will be placed in the certificate.
-rem Change these to reflect your site.
-rem Don't leave any of these parms blank.
-
-set KEY_COUNTRY=US
-set KEY_PROVINCE=CA
-set KEY_CITY=SanFrancisco
-set KEY_ORG=OpenVPN
-set [email protected]...
-set KEY_CN=changeme
-set KEY_NAME=changeme
-set KEY_OU=changeme
-set PKCS11_MODULE_PATH=changeme
-set PKCS11_PIN=1234
openvpn.spec.in +1 -1
index 9a45c79..a2f0cb1 100644
@@ -222,7 +222,7 @@ fi
 %endif
 
 # Install extra %doc stuff
-%doc contrib/ easy-rsa/ sample-*/ plugins/README.*
+%doc contrib/ sample-*/ plugins/README.*
 
 %changelog
 * Thu Jul 30 2009 David Sommerseth <[email protected]...>
Signature · 1 line
1.7.3.4
#34 lore raw

Re: [Openvpn-devel] [PATCH 18/52] Remove easy-rsa

Moving easy-rsa into a separate subproject, so this makes sense.

ACK.

Signature · 5 lines
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock
Quoted 3,146 lines
---
 Makefile.am                                |    1 -
 easy-rsa/1.0/README                        |  161 ------------
 easy-rsa/1.0/build-ca                      |   13 -
 easy-rsa/1.0/build-dh                      |   12 -
 easy-rsa/1.0/build-inter                   |   19 --
 easy-rsa/1.0/build-key                     |   20 --
 easy-rsa/1.0/build-key-pass                |   20 --
 easy-rsa/1.0/build-key-pkcs12              |   21 --
 easy-rsa/1.0/build-key-server              |   22 --
 easy-rsa/1.0/build-req                     |   18 --
 easy-rsa/1.0/build-req-pass                |   18 --
 easy-rsa/1.0/clean-all                     |   19 --
 easy-rsa/1.0/list-crl                      |   18 --
 easy-rsa/1.0/make-crl                      |   18 --
 easy-rsa/1.0/openssl.cnf                   |  255 -------------------
 easy-rsa/1.0/revoke-crt                    |   18 --
 easy-rsa/1.0/revoke-full                   |   29 ---
 easy-rsa/1.0/sign-req                      |   18 --
 easy-rsa/1.0/vars                          |   49 ----
 easy-rsa/2.0/Makefile                      |   13 -
 easy-rsa/2.0/README                        |  229 -----------------
 easy-rsa/2.0/build-ca                      |    8 -
 easy-rsa/2.0/build-dh                      |   11 -
 easy-rsa/2.0/build-inter                   |    7 -
 easy-rsa/2.0/build-key                     |    7 -
 easy-rsa/2.0/build-key-pass                |    7 -
 easy-rsa/2.0/build-key-pkcs12              |    8 -
 easy-rsa/2.0/build-key-server              |   10 -
 easy-rsa/2.0/build-req                     |    7 -
 easy-rsa/2.0/build-req-pass                |    7 -
 easy-rsa/2.0/clean-all                     |   16 --
 easy-rsa/2.0/inherit-inter                 |   39 ---
 easy-rsa/2.0/list-crl                      |   13 -
 easy-rsa/2.0/openssl-0.9.6.cnf             |  265 -------------------
 easy-rsa/2.0/openssl-0.9.8.cnf             |  290 ---------------------
 easy-rsa/2.0/openssl-1.0.0.cnf             |  285 ---------------------
 easy-rsa/2.0/pkitool                       |  379 ----------------------------
 easy-rsa/2.0/revoke-full                   |   40 ---
 easy-rsa/2.0/sign-req                      |    7 -
 easy-rsa/2.0/vars                          |   74 ------
 easy-rsa/2.0/whichopensslcnf               |   26 --
 easy-rsa/Windows/README.txt                |   44 ----
 easy-rsa/Windows/build-ca-pass.bat         |    8 -
 easy-rsa/Windows/build-ca.bat              |    4 -
 easy-rsa/Windows/build-dh.bat              |    4 -
 easy-rsa/Windows/build-key-pass.bat        |    8 -
 easy-rsa/Windows/build-key-pkcs12.bat      |   10 -
 easy-rsa/Windows/build-key-server-pass.bat |    8 -
 easy-rsa/Windows/build-key-server.bat      |    8 -
 easy-rsa/Windows/build-key.bat             |    8 -
 easy-rsa/Windows/clean-all.bat             |   13 -
 easy-rsa/Windows/init-config.bat           |    1 -
 easy-rsa/Windows/revoke-full.bat           |   13 -
 easy-rsa/Windows/serial.start              |    1 -
 easy-rsa/Windows/vars.bat.sample           |   40 ---
 openvpn.spec.in                            |    2 +-
 56 files changed, 1 insertions(+), 2668 deletions(-)
 delete mode 100644 easy-rsa/1.0/README
 delete mode 100755 easy-rsa/1.0/build-ca
 delete mode 100755 easy-rsa/1.0/build-dh
 delete mode 100755 easy-rsa/1.0/build-inter
 delete mode 100755 easy-rsa/1.0/build-key
 delete mode 100755 easy-rsa/1.0/build-key-pass
 delete mode 100755 easy-rsa/1.0/build-key-pkcs12
 delete mode 100755 easy-rsa/1.0/build-key-server
 delete mode 100755 easy-rsa/1.0/build-req
 delete mode 100755 easy-rsa/1.0/build-req-pass
 delete mode 100755 easy-rsa/1.0/clean-all
 delete mode 100644 easy-rsa/1.0/list-crl
 delete mode 100644 easy-rsa/1.0/make-crl
 delete mode 100644 easy-rsa/1.0/openssl.cnf
 delete mode 100644 easy-rsa/1.0/revoke-crt
 delete mode 100755 easy-rsa/1.0/revoke-full
 delete mode 100755 easy-rsa/1.0/sign-req
 delete mode 100644 easy-rsa/1.0/vars
 delete mode 100644 easy-rsa/2.0/Makefile
 delete mode 100644 easy-rsa/2.0/README
 delete mode 100755 easy-rsa/2.0/build-ca
 delete mode 100755 easy-rsa/2.0/build-dh
 delete mode 100755 easy-rsa/2.0/build-inter
 delete mode 100755 easy-rsa/2.0/build-key
 delete mode 100755 easy-rsa/2.0/build-key-pass
 delete mode 100755 easy-rsa/2.0/build-key-pkcs12
 delete mode 100755 easy-rsa/2.0/build-key-server
 delete mode 100755 easy-rsa/2.0/build-req
 delete mode 100755 easy-rsa/2.0/build-req-pass
 delete mode 100755 easy-rsa/2.0/clean-all
 delete mode 100755 easy-rsa/2.0/inherit-inter
 delete mode 100755 easy-rsa/2.0/list-crl
 delete mode 100755 easy-rsa/2.0/openssl-0.9.6.cnf
 delete mode 100755 easy-rsa/2.0/openssl-0.9.8.cnf
 delete mode 100755 easy-rsa/2.0/openssl-1.0.0.cnf
 delete mode 100755 easy-rsa/2.0/pkitool
 delete mode 100755 easy-rsa/2.0/revoke-full
 delete mode 100755 easy-rsa/2.0/sign-req
 delete mode 100755 easy-rsa/2.0/vars
 delete mode 100755 easy-rsa/2.0/whichopensslcnf
 delete mode 100644 easy-rsa/Windows/README.txt
 delete mode 100644 easy-rsa/Windows/build-ca-pass.bat
 delete mode 100644 easy-rsa/Windows/build-ca.bat
 delete mode 100644 easy-rsa/Windows/build-dh.bat
 delete mode 100644 easy-rsa/Windows/build-key-pass.bat
 delete mode 100644 easy-rsa/Windows/build-key-pkcs12.bat
 delete mode 100644 easy-rsa/Windows/build-key-server-pass.bat
 delete mode 100644 easy-rsa/Windows/build-key-server.bat
 delete mode 100644 easy-rsa/Windows/build-key.bat
 delete mode 100644 easy-rsa/Windows/clean-all.bat
 delete mode 100644 easy-rsa/Windows/index.txt.start
 delete mode 100755 easy-rsa/Windows/init-config.bat
 delete mode 100644 easy-rsa/Windows/revoke-full.bat
 delete mode 100644 easy-rsa/Windows/serial.start
 delete mode 100644 easy-rsa/Windows/vars.bat.sample
Makefile.am +0 -1
index 33c4545..b6fcfbb 100644
@@ -40,7 +40,6 @@ MAINTAINERCLEANFILES = \
 CLEANFILES = openvpn.8.html configure.h
 
 EXTRA_DIST = \
-       easy-rsa \
        sample-config-files \
        sample-keys \
        sample-scripts \
easy-rsa/1.0/README deleted +0 -161
deleted file mode 100644
index fd424ef..0000000
@@ -1,161 +0,0 @@
-This is a small RSA key management package,
-based on the openssl command line tool, that
-can be found in the easy-rsa subdirectory
-of the OpenVPN distribution.
-
-These are reference notes.  For step
-by step instructions, see the HOWTO:
-
-http://openvpn.net/howto.html
-
-INSTALL
-
-1. Edit vars.
-2. Set KEY_CONFIG to point to the openssl.cnf file
-   included in this distribution.
-3. Set KEY_DIR to point to a directory which will
-   contain all keys, certificates, etc.  This
-   directory need not exist, and if it does,
-   it will be deleted with rm -rf, so BE
-   CAREFUL how you set KEY_DIR.
-4. (Optional) Edit other fields in vars
-   per your site data.  You may want to
-   increase KEY_SIZE to 2048 if you are
-   paranoid and don't mind slower key
-   processing, but certainly 1024 is
-   fine for testing purposes.  KEY_SIZE
-   must be compatible across both peers
-   participating in a secure SSL/TLS
-   connection.
-5  . vars
-6. ./clean-all
-7. As you create certificates, keys, and
-   certificate signing requests, understand that
-   only .key files should be kept confidential.
-   .crt and .csr files can be sent over insecure
-   channels such as plaintext email.
-8. You should never need to copy a .key file
-   between computers.  Normally each computer
-   will have its own certificate/key pair.
-
-BUILD YOUR OWN ROOT CERTIFICATE AUTHORITY (CA) CERTIFICATE/KEY
-
-1. ./build-ca
-2. ca.crt and ca.key will be built in your KEY_DIR
-   directory
-
-BUILD AN INTERMEDIATE CERTIFICATE AUTHORITY CERTIFICATE/KEY (optional)
-
-1. ./build-inter inter
-2. inter.crt and inter.key will be built in your KEY_DIR
-   directory and signed with your root certificate.
-
-BUILD DIFFIE-HELLMAN PARAMETERS (necessary for
-the server end of a SSL/TLS connection).
-
-1. ./build-dh
-
-BUILD A CERTIFICATE SIGNING REQUEST (If
-you want to sign your certificate with a root
-certificate controlled by another individual
-or organization, or residing on a different machine).
-
-1. Get ca.crt (the root certificate) from your
-   certificate authority.  Though this
-   transfer can be over an insecure channel, to prevent
-   man-in-the-middle attacks you must confirm that
-   ca.crt was not tampered with.  Large CAs solve this
-   problem by hardwiring their root certificates into
-   popular web browsers.  A simple way to verify a root
-   CA is to call the issuer on the telephone and confirm
-   that the md5sum or sha1sum signatures on the ca.crt
-   files match (such as with the command: "md5sum ca.crt").
-2. Choose a name for your certificate such as your computer
-   name.  In our example we will use "mycert".
-3. ./build-req mycert
-4. You can ignore most of the fields, but set
-   "Common Name" to something unique such as your
-   computer's host name.  Leave all password
-   fields blank, unless you want your private key
-   to be protected by password.  Using a password
-   is not required -- it will make your key more secure
-   but also more inconvenient to use, because you will
-   need to supply your password anytime the key is used.
-   NOTE: if you are using a password, use ./build-req-pass
-   instead of ./build-req
-5. Your key will be written to $KEY_DIR/mycert.key
-6. Your certificate signing request will be written to
-   to $KEY_DIR/mycert.csr
-7. Email mycert.csr to the individual or organization
-   which controls the root certificate.  This can be
-   done over an insecure channel.
-8. After the .csr file is signed by the root certificate
-   authority, you will receive a file mycert.crt
-   (your certificate).  Place mycert.crt in your
-   KEY_DIR directory.
-9. The combined files of mycert.crt, mycert.key,
-   and ca.crt can now be used to secure one end of
-   an SSL/TLS connection.
-
-SIGN A CERTIFICATE SIGNING REQUEST
-
-1. ./sign-req mycert
-2. mycert.crt will be built in your KEY_DIR
-   directory using mycert.csr and your root CA
-   file as input.
-
-BUILD AND SIGN A CERTIFICATE SIGNING REQUEST
-USING A LOCALLY INSTALLED ROOT CERTIFICATE/KEY -- this
-script generates and signs a certificate in one step,
-but it requires that the generated certificate and private
-key files be copied to the destination host over a
-secure channel.
-
-1. ./build-key mycert (no password protection)
-2. OR ./build-key-pass mycert (with password protection)
-3. OR ./build-key-pkcs12 mycert (PKCS #12 format)
-4. OR ./build-key-server mycert (with nsCertType=server)
-5. mycert.crt and mycert.key will be built in your
-   KEY_DIR directory, and mycert.crt will be signed
-   by your root CA. If ./build-key-pkcs12 was used a
-   mycert.p12 file will also be created including the
-   private key, certificate and the ca certificate.
-
-IMPORTANT
-
-To avoid a possible Man-in-the-Middle attack where an authorized
-client tries to connect to another client by impersonating the
-server, make sure to enforce some kind of server certificate
-verification by clients.  There are currently four different ways
-of accomplishing this, listed in the order of preference:
-
-(1) Build your server certificates with the build-key-server
-    script.  This will designate the certificate as a
-    server-only certificate by setting nsCertType=server.
-    Now add the following line to your client configuration:
-
-    ns-cert-type server
-
-    This will block clients from connecting to any
-    server which lacks the nsCertType=server designation
-    in its certificate, even if the certificate has been
-    signed by the CA which is cited in the OpenVPN configuration
-    file (--ca directive).
-
-(2) Use the --tls-remote directive on the client to
-    accept/reject the server connection based on the common
-    name of the server certificate.
-
-(3) Use a --tls-verify script or plugin to accept/reject the
-    server connection based on a custom test of the server
-    certificate's embedded X509 subject details.
-
-(4) Sign server certificates with one CA and client certificates
-    with a different CA.  The client config "ca" directive should
-    reference the server-signing CA while the server config "ca"
-    directive should reference the client-signing CA.
-
-NOTES
-
-Show certificate fields:
-  openssl x509 -in cert.crt -text
easy-rsa/1.0/build-ca deleted +0 -13
deleted file mode 100755
index 5ad59cc..0000000
@@ -1,13 +0,0 @@
-#!/bin/sh
-
-#
-# Build a root certificate
-#
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl req -days 3650 -nodes -new -x509 -keyout ca.key -out ca.crt -config $KEY_CONFIG && \
-        chmod 0600 ca.key
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-dh deleted +0 -12
deleted file mode 100755
index 6de4baf..0000000
@@ -1,12 +0,0 @@
-#!/bin/sh
-
-#
-# Build Diffie-Hellman parameters for the server side
-# of an SSL/TLS connection.
-#
-
-if test $KEY_DIR; then
-    openssl dhparam -out ${KEY_DIR}/dh${KEY_SIZE}.pem ${KEY_SIZE}
-else
-    echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-inter deleted +0 -19
deleted file mode 100755
index 8b3a6b2..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-#
-# Make an intermediate CA certificate/private key pair using a locally generated
-# root certificate.
-#
-
-if test $# -ne 1; then
-        echo "usage: build-inter <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-       openssl ca -extensions v3_ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key deleted +0 -20
deleted file mode 100755
index 3159d2b..0000000
@@ -1,20 +0,0 @@
-#!/bin/sh
-
-#
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-#
-
-if test $# -ne 1; then
-        echo "usage: build-key <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-       openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG && \
-       chmod 0600 $1.key
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key-pass deleted +0 -20
deleted file mode 100755
index 03ab304..0000000
@@ -1,20 +0,0 @@
-#!/bin/sh
-
-#
-# Similar to build-key, but protect the private key
-# with a password.
-#
-
-if test $# -ne 1; then
-        echo "usage: build-key-pass <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl req -days 3650 -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-       openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG && \
-       chmod 0600 $1.key
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key-pkcs12 deleted +0 -21
deleted file mode 100755
index f8a057b..0000000
@@ -1,21 +0,0 @@
-#!/bin/sh
-
-#
-# Make a certificate/private key pair using a locally generated
-# root certificate and convert it to a PKCS #12 file including the
-# the CA certificate as well.
-
-if test $# -ne 1; then
-        echo "usage: build-key-pkcs12 <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG && \
-       openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG && \
-        openssl pkcs12 -export -inkey $1.key -in $1.crt -certfile ca.crt -out $1.p12 && \
-       chmod 0600 $1.key $1.p12
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-key-server deleted +0 -22
deleted file mode 100755
index 30dc41e..0000000
@@ -1,22 +0,0 @@
-#!/bin/sh
-
-#
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-#
-# Explicitly set nsCertType to server using the "server"
-# extension in the openssl.cnf file.
-
-if test $# -ne 1; then
-        echo "usage: build-key-server <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -extensions server -config $KEY_CONFIG && \
-       openssl ca -days 3650 -out $1.crt -in $1.csr -extensions server -config $KEY_CONFIG && \
-        chmod 0600 $1.key
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-req deleted +0 -18
deleted file mode 100755
index 30f62f5..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# Build a certificate signing request and private key.  Use this
-# when your root certificate and key is not available locally.
-#
-
-if test $# -ne 1; then
-    echo "usage: build-req <name>";
-    exit 1
-fi
-
-if test $KEY_DIR; then
-    cd $KEY_DIR && \
-    openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -config $KEY_CONFIG
-else
-    echo you must define KEY_DIR
-fi
easy-rsa/1.0/build-req-pass deleted +0 -18
deleted file mode 100755
index 829b286..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# Like build-req, but protect your private key
-# with a password.
-#
-
-if test $# -ne 1; then
-    echo "usage: build-req-pass <name>";
-    exit 1
-fi
-
-if test $KEY_DIR; then
-    cd $KEY_DIR && \
-    openssl req -days 3650 -new -keyout $1.key -out $1.csr -config $KEY_CONFIG
-else
-    echo you must define KEY_DIR
-fi
easy-rsa/1.0/clean-all deleted +0 -19
deleted file mode 100755
index d10aef5..0000000
@@ -1,19 +0,0 @@
-#!/bin/sh
-
-#
-# Initialize the $KEY_DIR directory.
-# Note that this script does a
-# rm -rf on $KEY_DIR so be careful!
-#
-
-d=$KEY_DIR
-
-if test $d; then
-       rm -rf $d
-       mkdir $d && \
-       chmod go-rwx $d && \
-       touch $d/index.txt && \
-       echo 01 >$d/serial
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/list-crl deleted +0 -18
deleted file mode 100644
index b214dbd..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# list revoked certificates
-#
-#
-
-if test $# -ne 1; then
-        echo "usage: list-crl <crlfile.pem>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl crl -text -noout -in $1
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/make-crl deleted +0 -18
deleted file mode 100644
index 62fe6c1..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# generate a CRL
-#
-#
-
-if test $# -ne 1; then
-        echo "usage: make-crl <crlfile.pem>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl ca -gencrl -out $1 -config $KEY_CONFIG
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/openssl.cnf deleted +0 -255
deleted file mode 100644
index 270b069..0000000
@@ -1,255 +0,0 @@
-#
-# OpenSSL example configuration file.
-# This is mostly being used for generation of certificate requests.
-#
-
-# This definition stops the following lines choking if HOME isn't
-# defined.
-HOME                   = .
-RANDFILE               = $ENV::HOME/.rnd
-
-# Extra OBJECT IDENTIFIER info:
-#oid_file              = $ENV::HOME/.oid
-oid_section            = new_oids
-
-# To use this configuration file with the "-extfile" option of the
-# "openssl x509" utility, name here the section containing the
-# X.509v3 extensions to use:
-# extensions           =
-# (Alternatively, use a configuration file that has only
-# X.509v3 extensions in its main [= default] section.)
-
-[ new_oids ]
-
-# We can add new OIDs in here for use by 'ca' and 'req'.
-# Add a simple OID like this:
-# testoid1=1.2.3.4
-# Or use config file substitution like this:
-# testoid2=${testoid1}.5.6
-
-####################################################################
-[ ca ]
-default_ca     = CA_default            # The default ca section
-
-####################################################################
-[ CA_default ]
-
-dir            = $ENV::KEY_DIR         # Where everything is kept
-certs          = $dir                  # Where the issued certs are kept
-crl_dir                = $dir                  # Where the issued crl are kept
-database       = $dir/index.txt        # database index file.
-new_certs_dir  = $dir                  # default place for new certs.
-
-certificate    = $dir/ca.crt           # The CA certificate
-serial         = $dir/serial           # The current serial number
-crl            = $dir/crl.pem          # The current CRL
-private_key    = $dir/ca.key           # The private key
-RANDFILE       = $dir/.rand            # private random number file
-
-x509_extensions        = usr_cert              # The extentions to add to the cert
-
-# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
-# so this is commented out by default to leave a V1 CRL.
-# crl_extensions       = crl_ext
-
-default_days   = 3650                  # how long to certify for
-default_crl_days= 30                   # how long before next CRL
-default_md     = md5                   # which md to use.
-preserve       = no                    # keep passed DN ordering
-
-# A few difference way of specifying how similar the request should look
-# For type CA, the listed attributes must be the same, and the optional
-# and supplied fields are just that :-)
-policy         = policy_match
-
-# For the CA policy
-[ policy_match ]
-countryName            = match
-stateOrProvinceName    = match
-organizationName       = match
-organizationalUnitName = optional
-commonName             = supplied
-emailAddress           = optional
-
-# For the 'anything' policy
-# At this point in time, you must list all acceptable 'object'
-# types.
-[ policy_anything ]
-countryName            = optional
-stateOrProvinceName    = optional
-localityName           = optional
-organizationName       = optional
-organizationalUnitName = optional
-commonName             = supplied
-emailAddress           = optional
-
-####################################################################
-[ req ]
-default_bits           = $ENV::KEY_SIZE
-default_keyfile        = privkey.pem
-distinguished_name     = req_distinguished_name
-attributes             = req_attributes
-x509_extensions        = v3_ca # The extentions to add to the self signed cert
-
-# Passwords for private keys if not present they will be prompted for
-# input_password = secret
-# output_password = secret
-
-# This sets a mask for permitted string types. There are several options.
-# default: PrintableString, T61String, BMPString.
-# pkix  : PrintableString, BMPString.
-# utf8only: only UTF8Strings.
-# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
-# MASK:XXXX a literal mask value.
-# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
-# so use this option with caution!
-string_mask = nombstr
-
-# req_extensions = v3_req # The extensions to add to a certificate request
-
-[ req_distinguished_name ]
-countryName                    = Country Name (2 letter code)
-countryName_default            = $ENV::KEY_COUNTRY
-countryName_min                        = 2
-countryName_max                        = 2
-
-stateOrProvinceName            = State or Province Name (full name)
-stateOrProvinceName_default    = $ENV::KEY_PROVINCE
-
-localityName                   = Locality Name (eg, city)
-localityName_default           = $ENV::KEY_CITY
-
-0.organizationName             = Organization Name (eg, company)
-0.organizationName_default     = $ENV::KEY_ORG
-
-# we can do this but it is not needed normally :-)
-#1.organizationName            = Second Organization Name (eg, company)
-#1.organizationName_default    = World Wide Web Pty Ltd
-
-organizationalUnitName         = Organizational Unit Name (eg, section)
-#organizationalUnitName_default        =
-
-commonName                     = Common Name (eg, your name or your server\'s hostname)
-commonName_max                 = 64
-
-emailAddress                   = Email Address
-emailAddress_default           = $ENV::KEY_EMAIL
-emailAddress_max               = 40
-
-# SET-ex3                      = SET extension number 3
-
-[ req_attributes ]
-challengePassword              = A challenge password
-challengePassword_min          = 4
-challengePassword_max          = 20
-
-unstructuredName               = An optional company name
-
-[ usr_cert ]
-
-# These extensions are added when 'ca' signs a request.
-
-# This goes against PKIX guidelines but some CAs do it and some software
-# requires this to avoid interpreting an end user certificate as a CA.
-
-basicConstraints=CA:FALSE
-
-# Here are some examples of the usage of nsCertType. If it is omitted
-# the certificate can be used for anything *except* object signing.
-
-# This is OK for an SSL server.
-# nsCertType                   = server
-
-# For an object signing certificate this would be used.
-# nsCertType = objsign
-
-# For normal client use this is typical
-# nsCertType = client, email
-
-# and for everything including object signing:
-# nsCertType = client, email, objsign
-
-# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-# This will be displayed in Netscape's comment listbox.
-nsComment                      = "OpenSSL Generated Certificate"
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-
-# This stuff is for subjectAltName and issuerAltname.
-# Import the email address.
-# subjectAltName=email:copy
-
-# Copy subject details
-# issuerAltName=issuer:copy
-
-#nsCaRevocationUrl             = http://www.domain.dom/ca-crl.pem
-#nsBaseUrl
-#nsRevocationUrl
-#nsRenewalUrl
-#nsCaPolicyUrl
-#nsSslServerName
-
-[ server ]
-
-# JY ADDED -- Make a cert with nsCertType set to "server"
-basicConstraints=CA:FALSE
-nsCertType                     = server
-nsComment                      = "OpenSSL Generated Server Certificate"
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-
-[ v3_req ]
-
-# Extensions to add to a certificate request
-
-basicConstraints = CA:FALSE
-keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-[ v3_ca ]
-
-
-# Extensions for a typical CA
-
-
-# PKIX recommendation.
-
-subjectKeyIdentifier=hash
-
-authorityKeyIdentifier=keyid:always,issuer:always
-
-# This is what PKIX recommends but some broken software chokes on critical
-# extensions.
-#basicConstraints = critical,CA:true
-# So we do this instead.
-basicConstraints = CA:true
-
-# Key usage: this is typical for a CA certificate. However since it will
-# prevent it being used as an test self-signed certificate it is best
-# left out by default.
-# keyUsage = cRLSign, keyCertSign
-
-# Some might want this also
-# nsCertType = sslCA, emailCA
-
-# Include email address in subject alt name: another PKIX recommendation
-# subjectAltName=email:copy
-# Copy issuer details
-# issuerAltName=issuer:copy
-
-# DER hex encoding of an extension: beware experts only!
-# obj=DER:02:03
-# Where 'obj' is a standard or added object
-# You can even override a supported extension:
-# basicConstraints= critical, DER:30:03:01:01:FF
-
-[ crl_ext ]
-
-# CRL extensions.
-# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
-
-# issuerAltName=issuer:copy
-authorityKeyIdentifier=keyid:always,issuer:always
easy-rsa/1.0/revoke-crt deleted +0 -18
deleted file mode 100644
index 35b071a..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# revoke a certificate
-#
-#
-
-if test $# -ne 1; then
-        echo "usage: revoke-crt <file.crt>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl ca -revoke $1 -config $KEY_CONFIG
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/revoke-full deleted +0 -29
deleted file mode 100755
index 66ea03f..0000000
@@ -1,29 +0,0 @@
-#!/bin/sh
-
-# revoke a certificate, regenerate CRL,
-# and verify revocation
-
-CRL=crl.pem
-RT=revoke-test.pem
-
-if test $# -ne 1; then
-        echo "usage: revoke-full <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR
-       rm -f $RT
-
-       # revoke key and generate a new CRL
-       openssl ca -revoke $1.crt -config $KEY_CONFIG
-
-       # generate a new CRL
-       openssl ca -gencrl -out $CRL -config $KEY_CONFIG
-       cat ca.crt $CRL >$RT
-
-       # verify the revocation
-       openssl verify -CAfile $RT -crl_check $1.crt
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/sign-req deleted +0 -18
deleted file mode 100755
index 59edc42..0000000
@@ -1,18 +0,0 @@
-#!/bin/sh
-
-#
-# Sign a certificate signing request (a .csr file)
-# with a local root certificate and key.
-#
-
-if test $# -ne 1; then
-        echo "usage: sign-req <name>";
-        exit 1
-fi
-
-if test $KEY_DIR; then
-       cd $KEY_DIR && \
-       openssl ca -days 3650 -out $1.crt -in $1.csr -config $KEY_CONFIG
-else
-       echo you must define KEY_DIR
-fi
easy-rsa/1.0/vars deleted +0 -49
deleted file mode 100644
index da89cd2..0000000
@@ -1,49 +0,0 @@
-# easy-rsa parameter settings
-
-# NOTE: If you installed from an RPM,
-# don't edit this file in place in
-# /usr/share/openvpn/easy-rsa --
-# instead, you should copy the whole
-# easy-rsa directory to another location
-# (such as /etc/openvpn) so that your
-# edits will not be wiped out by a future
-# OpenVPN package upgrade.
-
-# This variable should point to
-# the top level of the easy-rsa
-# tree.
-export D=`pwd`
-
-# This variable should point to
-# the openssl.cnf file included
-# with easy-rsa.
-export KEY_CONFIG=$D/openssl.cnf
-
-# Edit this variable to point to
-# your soon-to-be-created key
-# directory.
-#
-# WARNING: clean-all will do
-# a rm -rf on this directory
-# so make sure you define
-# it correctly!
-export KEY_DIR=$D/keys
-
-# Issue rm -rf warning
-echo NOTE: when you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
-
-# Increase this to 2048 if you
-# are paranoid.  This will slow
-# down TLS negotiation performance
-# as well as the one-time DH parms
-# generation process.
-export KEY_SIZE=1024
-
-# These are the default values for fields
-# which will be placed in the certificate.
-# Don't leave any of these fields blank.
-export KEY_COUNTRY=KG
-export KEY_PROVINCE=NA
-export KEY_CITY=BISHKEK
-export KEY_ORG="OpenVPN-TEST"
-export KEY_EMAIL="[email protected]..."
easy-rsa/2.0/Makefile deleted +0 -13
deleted file mode 100644
index 8000cc5..0000000
@@ -1,13 +0,0 @@
-
-DESTDIR=
-PREFIX=
-
-all:
-       echo "All done."
-       echo "Run make install DESTDIR=/usr/share/somewhere"
-
-install:
-       install -d "${DESTDIR}/${PREFIX}"
-       install -m 0755 build-* "${DESTDIR}/${PREFIX}"
-       install -m 0755 clean-all list-crl inherit-inter pkitool revoke-full sign-req whichopensslcnf "${DESTDIR}/${PREFIX}"
-       install -m 0644 openssl-0.9.6.cnf openssl-0.9.8.cnf openssl-1.0.0.cnf README vars "${DESTDIR}/${PREFIX}"
easy-rsa/2.0/README deleted +0 -229
deleted file mode 100644
index 6f5395c..0000000
@@ -1,229 +0,0 @@
-EASY-RSA Version 2.0-rc1
-
-This is a small RSA key management package, based on the openssl
-command line tool, that can be found in the easy-rsa subdirectory
-of the OpenVPN distribution.  While this tool is primary concerned
-with key management for the SSL VPN application space, it can also
-be used for building web certificates.
-
-These are reference notes.  For step-by-step instructions, see the
-HOWTO:
-
-http://openvpn.net/howto.html
-
-This package is based on the ./pkitool script.  Run ./pkitool
-without arguments for a detailed help message (which is also pasted
-below).
-
-Release Notes for easy-rsa-2.0
-
-* Most functionality has been consolidated into the pkitool
-  script. For compatibility, all previous scripts from 1.0 such
-  as build-key and build-key-server are provided as stubs
-  which call pkitool to do the real work.
-
-* pkitool has a --batch flag (enabled by default) which generates
-  keys/certs without needing any interactive input.  pkitool
-  can still generate certs/keys using interactive prompting by
-  using the --interact flag.
-
-* The inherit-inter script has been provided for creating
-  a new PKI rooted on an intermediate certificate built within a
-  higher-level PKI.  See comments in the inherit-inter script
-  for more info.
-
-* The openssl.cnf file has been modified.  pkitool will not
-  work with the openssl.cnf file included with previous
-  easy-rsa releases.
-
-* The vars file has been modified -- the following extra
-  variables have been added: EASY_RSA, CA_EXPIRE,
-  KEY_EXPIRE.
-
-* The make-crl and revoke-crt scripts have been removed and
-  are replaced by the revoke-full script.
-
-* The "Organizational Unit" X509 field can be set using
-  the KEY_OU environmental variable before calling pkitool.
-
-* This release only affects the Linux/Unix version of easy-rsa.
-  The Windows version (written to use the Windows shell) is unchanged.
-
-* Use the revoke-full script to revoke a certificate, and generate
-  (or update) the crl.pem file in the keys directory (as set by the
-  vars script).  Then use "crl-verify crl.pem" in your OpenVPN server
-  config file, so that OpenVPN can reject any connections coming from
-  clients which present a revoked certificate.  Usage for the script is:
-
-    revoke-full <common-name>
-
-  Note this this procedure is primarily designed to revoke client
-  certificates. You could theoretically use this method to revoke
-  server certificates as well, but then you would need to propagate
-  the crl.pem file to all clients as well, and have them include
-  "crl-verify crl.pem" in their configuration files.
-
-* PKCS#11 support was added.
-
-* For those interested in using this tool to generate web certificates,
-  A variant of the easy-rsa package that allows the creation of multi-domain
-  certificates with subjectAltName can be obtained from here:
-
-  http://www.bisente.com/proyectos/easy-rsa-subjectaltname/
-
-INSTALL easy-rsa
-
-1. Edit vars.
-2. Set KEY_CONFIG to point to the correct openssl-<version>.cnf
-   file included in this distribution.
-3. Set KEY_DIR to point to a directory which will
-   contain all keys, certificates, etc.  This
-   directory need not exist, and if it does,
-   it will be deleted with rm -rf, so BE
-   CAREFUL how you set KEY_DIR.
-4. (Optional) Edit other fields in vars
-   per your site data.  You may want to
-   increase KEY_SIZE to 2048 if you are
-   paranoid and don't mind slower key
-   processing, but certainly 1024 is
-   fine for testing purposes.  KEY_SIZE
-   must be compatible across both peers
-   participating in a secure SSL/TLS
-   connection.
-5. (Optional) If you intend to use PKCS#11,
-   install openssl >= 0.9.7, install the
-   following components from www.opensc.org:
-   - opensc >= 0.10.0
-   - engine_pkcs11 >= 0.1.3
-   Update the openssl.cnf to load the engine:
-   - Uncomment pkcs11 under engine_section.
-   - Validate path at dynamic_path under pkcs11_section.
-6. . vars
-7. ./clean-all
-8. As you create certificates, keys, and
-   certificate signing requests, understand that
-   only .key files should be kept confidential.
-   .crt and .csr files can be sent over insecure
-   channels such as plaintext email.
-
-IMPORTANT
-
-To avoid a possible Man-in-the-Middle attack where an authorized
-client tries to connect to another client by impersonating the
-server, make sure to enforce some kind of server certificate
-verification by clients.  There are currently four different ways
-of accomplishing this, listed in the order of preference:
-
-(1) Build your server certificates with specific key usage and
-    extended key usage. The RFC3280 determine that the following
-    attributes should be provided for TLS connections:
-
-    Mode      Key usage                                 Extended key usage
-    ---------------------------------------------------------------------------
-    Client    digitalSignature                  TLS Web Client Authentication
-              keyAgreement
-              digitalSignature, keyAgreement
-
-    Server    digitalSignature, keyEncipherment  TLS Web Server Authentication
-              digitalSignature, keyAgreement
-
-    Now add the following line to your client configuration:
-
-    remote-cert-tls server
-
-    This will block clients from connecting to any
-    server which lacks the required extension designation
-    in its certificate, even if the certificate has been
-    signed by the CA which is cited in the OpenVPN configuration
-    file (--ca directive).
-
-(3) Use the --tls-remote directive on the client to
-    accept/reject the server connection based on the common
-    name of the server certificate.
-
-(3) Use a --tls-verify script or plugin to accept/reject the
-    server connection based on a custom test of the server
-    certificate's embedded X509 subject details.
-
-(4) Sign server certificates with one CA and client certificates
-    with a different CA.  The client config "ca" directive should
-    reference the server-signing CA while the server config "ca"
-    directive should reference the client-signing CA.
-
-NOTES
-
-Show certificate fields:
-  openssl x509 -in cert.crt -text
-
-PKITOOL documentation
-
-pkitool 2.0
-Usage: pkitool [options...] [common-name]
-Options:
-  --batch    : batch mode (default)
-  --keysize  : Set keysize
-      size   : size (default=1024)
-  --interact : interactive mode
-  --server   : build server cert
-  --initca   : build root CA
-  --inter    : build intermediate CA
-  --pass     : encrypt private key with password
-  --csr      : only generate a CSR, do not sign
-  --sign     : sign an existing CSR
-  --pkcs12   : generate a combined PKCS#12 file
-  --pkcs11   : generate certificate on PKCS#11 token
-      lib    : PKCS#11 library
-      slot   : PKCS#11 slot
-      id     : PKCS#11 object id (hex string)
-      label  : PKCS#11 object label
-Standalone options:
-  --pkcs11-slots   : list PKCS#11 slots
-      lib    : PKCS#11 library
-  --pkcs11-objects : list PKCS#11 token objects
-      lib    : PKCS#11 library
-      slot   : PKCS#11 slot
-  --pkcs11-init    : initialize PKCS#11 token DANGEROUS!!!
-      lib    : PKCS#11 library
-      slot   : PKCS#11 slot
-      label  : PKCS#11 token label
-Notes:
-  Please edit the vars script to reflect your configuration,
-  then source it with "source ./vars".
-  Next, to start with a fresh PKI configuration and to delete any
-  previous certificates and keys, run "./clean-all".
-  Finally, you can run this tool (pkitool) to build certificates/keys.
-  In order to use PKCS#11 interface you must have opensc-0.10.0 or higher.
-Generated files and corresponding OpenVPN directives:
-(Files will be placed in the $KEY_DIR directory, defined in ./vars)
-  ca.crt     -> root certificate (--ca)
-  ca.key     -> root key, keep secure (not directly used by OpenVPN)
-  .crt files -> client/server certificates (--cert)
-  .key files -> private keys, keep secure (--key)
-  .csr files -> certificate signing request (not directly used by OpenVPN)
-  dh1024.pem or dh2048.pem -> Diffie Hellman parameters (--dh)
-Examples:
-  pkitool --initca          -> Build root certificate
-  pkitool --initca --pass   -> Build root certificate with password-protected key
-  pkitool --server server1  -> Build "server1" certificate/key
-  pkitool client1           -> Build "client1" certificate/key
-  pkitool --pass client2    -> Build password-protected "client2" certificate/key
-  pkitool --pkcs12 client3  -> Build "client3" certificate/key in PKCS#12 format
-  pkitool --csr client4     -> Build "client4" CSR to be signed by another CA
-  pkitool --sign client4    -> Sign "client4" CSR
-  pkitool --inter interca   -> Build an intermediate key-signing certificate/key
-                               Also see ./inherit-inter script.
-  pkitool --pkcs11 /usr/lib/pkcs11/lib1 0 010203 "client5 id" client5
-                              -> Build "client5" certificate/key in PKCS#11 token
-Typical usage for initial PKI setup.  Build myserver, client1, and client2 cert/keys.
-Protect client2 key with a password.  Build DH parms.  Generated files in ./keys :
-  [edit vars with your site-specific info]
-  source ./vars
-  ./clean-all
-  ./build-dh     -> takes a long time, consider backgrounding
-  ./pkitool --initca
-  ./pkitool --server myserver
-  ./pkitool client1
-  ./pkitool --pass client2
-Typical usage for adding client cert to existing PKI:
-  source ./vars
-  ./pkitool client-new
easy-rsa/2.0/build-ca deleted +0 -8
deleted file mode 100755
index bce29a6..0000000
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-#
-# Build a root certificate
-#
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --initca $*
easy-rsa/2.0/build-dh deleted +0 -11
deleted file mode 100755
index 4beb127..0000000
@@ -1,11 +0,0 @@
-#!/bin/sh
-
-# Build Diffie-Hellman parameters for the server side
-# of an SSL/TLS connection.
-
-if [ -d $KEY_DIR ] && [ $KEY_SIZE ]; then
-    $OPENSSL dhparam -out ${KEY_DIR}/dh${KEY_SIZE}.pem ${KEY_SIZE}
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/build-inter deleted +0 -7
deleted file mode 100755
index 87bf98d..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Make an intermediate CA certificate/private key pair using a locally generated
-# root certificate.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --inter $*
easy-rsa/2.0/build-key deleted +0 -7
deleted file mode 100755
index 6c0fed8..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact $*
easy-rsa/2.0/build-key-pass deleted +0 -7
deleted file mode 100755
index 8ef8307..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Similar to build-key, but protect the private key
-# with a password.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --pass $*
easy-rsa/2.0/build-key-pkcs12 deleted +0 -8
deleted file mode 100755
index ba90e6a..0000000
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-# Make a certificate/private key pair using a locally generated
-# root certificate and convert it to a PKCS #12 file including the
-# the CA certificate as well.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --pkcs12 $*
easy-rsa/2.0/build-key-server deleted +0 -10
deleted file mode 100755
index fee0194..0000000
@@ -1,10 +0,0 @@
-#!/bin/sh
-
-# Make a certificate/private key pair using a locally generated
-# root certificate.
-#
-# Explicitly set nsCertType to server using the "server"
-# extension in the openssl.cnf file.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --server $*
easy-rsa/2.0/build-req deleted +0 -7
deleted file mode 100755
index 559d512..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Build a certificate signing request and private key.  Use this
-# when your root certificate and key is not available locally.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --csr $*
easy-rsa/2.0/build-req-pass deleted +0 -7
deleted file mode 100755
index b73ee1b..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Like build-req, but protect your private key
-# with a password.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --csr --pass $*
easy-rsa/2.0/clean-all deleted +0 -16
deleted file mode 100755
index cc6e3b2..0000000
@@ -1,16 +0,0 @@
-#!/bin/sh
-
-# Initialize the $KEY_DIR directory.
-# Note that this script does a
-# rm -rf on $KEY_DIR so be careful!
-
-if [ "$KEY_DIR" ]; then
-    rm -rf "$KEY_DIR"
-    mkdir "$KEY_DIR" && \
-       chmod go-rwx "$KEY_DIR" && \
-       touch "$KEY_DIR/index.txt" && \
-       echo 01 >"$KEY_DIR/serial"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/inherit-inter deleted +0 -39
deleted file mode 100755
index aaa5168..0000000
@@ -1,39 +0,0 @@
-#!/bin/sh
-
-# Build a new PKI which is rooted on an intermediate certificate generated
-# by ./build-inter or ./pkitool --inter from a parent PKI.  The new PKI should
-# have independent vars settings, and must use a different KEY_DIR directory
-# from the parent.  This tool can be used to generate arbitrary depth
-# certificate chains.
-#
-# To build an intermediate CA, follow the same steps for a regular PKI but
-# replace ./build-key or ./pkitool --initca with this script.
-
-# The EXPORT_CA file will contain the CA certificate chain and should be
-# referenced by the OpenVPN "ca" directive in config files.  The ca.crt file
-# will only contain the local intermediate CA -- it's needed by the easy-rsa
-# scripts but not by OpenVPN directly.
-EXPORT_CA="export-ca.crt"
-
-if [ $# -ne 2 ]; then
-    echo "usage: $0 <parent-key-dir> <common-name>"
-    echo "parent-key-dir: the KEY_DIR directory of the parent PKI"
-    echo "common-name: the common name of the intermediate certificate in the parent PKI"
-    exit 1;
-fi
-
-if [ "$KEY_DIR" ]; then
-    cp "$1/$2.crt" "$KEY_DIR/ca.crt"
-    cp "$1/$2.key" "$KEY_DIR/ca.key"
-
-    if [ -e "$1/$EXPORT_CA" ]; then
-       PARENT_CA="$1/$EXPORT_CA"
-    else
-       PARENT_CA="$1/ca.crt"
-    fi
-    cp "$PARENT_CA" "$KEY_DIR/$EXPORT_CA"
-    cat "$KEY_DIR/ca.crt" >> "$KEY_DIR/$EXPORT_CA"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/list-crl deleted +0 -13
deleted file mode 100755
index d1d8a69..0000000
@@ -1,13 +0,0 @@
-#!/bin/sh
-
-# list revoked certificates
-
-CRL="${1:-crl.pem}"
-
-if [ "$KEY_DIR" ]; then
-    cd "$KEY_DIR" && \
-       $OPENSSL crl -text -noout -in "$CRL"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/openssl-0.9.6.cnf deleted +0 -265
deleted file mode 100755
index d28341d..0000000
@@ -1,265 +0,0 @@
-# For use with easy-rsa version 2.0
-
-#
-# OpenSSL example configuration file.
-# This is mostly being used for generation of certificate requests.
-#
-
-# This definition stops the following lines choking if HOME isn't
-# defined.
-HOME                   = .
-RANDFILE               = $ENV::HOME/.rnd
-
-# Extra OBJECT IDENTIFIER info:
-#oid_file              = $ENV::HOME/.oid
-oid_section            = new_oids
-
-# To use this configuration file with the "-extfile" option of the
-# "openssl x509" utility, name here the section containing the
-# X.509v3 extensions to use:
-# extensions           =
-# (Alternatively, use a configuration file that has only
-# X.509v3 extensions in its main [= default] section.)
-
-[ new_oids ]
-
-# We can add new OIDs in here for use by 'ca' and 'req'.
-# Add a simple OID like this:
-# testoid1=1.2.3.4
-# Or use config file substitution like this:
-# testoid2=${testoid1}.5.6
-
-####################################################################
-[ ca ]
-default_ca     = CA_default            # The default ca section
-
-####################################################################
-[ CA_default ]
-
-dir            = $ENV::KEY_DIR         # Where everything is kept
-certs          = $dir                  # Where the issued certs are kept
-crl_dir                = $dir                  # Where the issued crl are kept
-database       = $dir/index.txt        # database index file.
-new_certs_dir  = $dir                  # default place for new certs.
-
-certificate    = $dir/ca.crt           # The CA certificate
-serial         = $dir/serial           # The current serial number
-crl            = $dir/crl.pem          # The current CRL
-private_key    = $dir/ca.key           # The private key
-RANDFILE       = $dir/.rand            # private random number file
-
-x509_extensions        = usr_cert              # The extentions to add to the cert
-
-# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
-# so this is commented out by default to leave a V1 CRL.
-# crl_extensions       = crl_ext
-
-default_days   = 3650                  # how long to certify for
-default_crl_days= 30                   # how long before next CRL
-default_md     = md5                   # which md to use.
-preserve       = no                    # keep passed DN ordering
-
-# A few difference way of specifying how similar the request should look
-# For type CA, the listed attributes must be the same, and the optional
-# and supplied fields are just that :-)
-policy         = policy_anything
-
-# For the CA policy
-[ policy_match ]
-countryName            = match
-stateOrProvinceName    = match
-organizationName       = match
-organizationalUnitName = optional
-commonName             = supplied
-emailAddress           = optional
-
-# For the 'anything' policy
-# At this point in time, you must list all acceptable 'object'
-# types.
-[ policy_anything ]
-countryName            = optional
-stateOrProvinceName    = optional
-localityName           = optional
-organizationName       = optional
-organizationalUnitName = optional
-commonName             = supplied
-emailAddress           = optional
-
-####################################################################
-[ req ]
-default_bits           = $ENV::KEY_SIZE
-default_keyfile        = privkey.pem
-distinguished_name     = req_distinguished_name
-attributes             = req_attributes
-x509_extensions        = v3_ca # The extentions to add to the self signed cert
-
-# Passwords for private keys if not present they will be prompted for
-# input_password = secret
-# output_password = secret
-
-# This sets a mask for permitted string types. There are several options.
-# default: PrintableString, T61String, BMPString.
-# pkix  : PrintableString, BMPString.
-# utf8only: only UTF8Strings.
-# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
-# MASK:XXXX a literal mask value.
-# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
-# so use this option with caution!
-string_mask = nombstr
-
-# req_extensions = v3_req # The extensions to add to a certificate request
-
-[ req_distinguished_name ]
-countryName                    = Country Name (2 letter code)
-countryName_default            = $ENV::KEY_COUNTRY
-countryName_min                        = 2
-countryName_max                        = 2
-
-stateOrProvinceName            = State or Province Name (full name)
-stateOrProvinceName_default    = $ENV::KEY_PROVINCE
-
-localityName                   = Locality Name (eg, city)
-localityName_default           = $ENV::KEY_CITY
-
-0.organizationName             = Organization Name (eg, company)
-0.organizationName_default     = $ENV::KEY_ORG
-
-# we can do this but it is not needed normally :-)
-#1.organizationName            = Second Organization Name (eg, company)
-#1.organizationName_default    = World Wide Web Pty Ltd
-
-organizationalUnitName         = Organizational Unit Name (eg, section)
-#organizationalUnitName_default        =
-
-commonName                     = Common Name (eg, your name or your server\'s hostname)
-commonName_max                 = 64
-
-emailAddress                   = Email Address
-emailAddress_default           = $ENV::KEY_EMAIL
-emailAddress_max               = 40
-
-# JY -- added for batch mode
-organizationalUnitName_default = $ENV::KEY_OU
-commonName_default = $ENV::KEY_CN
-
-# SET-ex3                      = SET extension number 3
-
-[ req_attributes ]
-challengePassword              = A challenge password
-challengePassword_min          = 4
-challengePassword_max          = 20
-
-unstructuredName               = An optional company name
-
-[ usr_cert ]
-
-# These extensions are added when 'ca' signs a request.
-
-# This goes against PKIX guidelines but some CAs do it and some software
-# requires this to avoid interpreting an end user certificate as a CA.
-
-basicConstraints=CA:FALSE
-
-# Here are some examples of the usage of nsCertType. If it is omitted
-# the certificate can be used for anything *except* object signing.
-
-# This is OK for an SSL server.
-# nsCertType                   = server
-
-# For an object signing certificate this would be used.
-# nsCertType = objsign
-
-# For normal client use this is typical
-# nsCertType = client, email
-
-# and for everything including object signing:
-# nsCertType = client, email, objsign
-
-# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-# This will be displayed in Netscape's comment listbox.
-nsComment                      = "Easy-RSA Generated Certificate"
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-extendedKeyUsage=clientAuth
-keyUsage = digitalSignature
-
-# This stuff is for subjectAltName and issuerAltname.
-# Import the email address.
-# subjectAltName=email:copy
-
-# Copy subject details
-# issuerAltName=issuer:copy
-
-#nsCaRevocationUrl             = http://www.domain.dom/ca-crl.pem
-#nsBaseUrl
-#nsRevocationUrl
-#nsRenewalUrl
-#nsCaPolicyUrl
-#nsSslServerName
-
-[ server ]
-
-# JY ADDED -- Make a cert with nsCertType set to "server"
-basicConstraints=CA:FALSE
-nsCertType                     = server
-nsComment                      = "Easy-RSA Generated Server Certificate"
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-extendedKeyUsage=serverAuth
-keyUsage = digitalSignature, keyEncipherment
-
-[ v3_req ]
-
-# Extensions to add to a certificate request
-
-basicConstraints = CA:FALSE
-keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-[ v3_ca ]
-
-
-# Extensions for a typical CA
-
-
-# PKIX recommendation.
-
-subjectKeyIdentifier=hash
-
-authorityKeyIdentifier=keyid:always,issuer:always
-
-# This is what PKIX recommends but some broken software chokes on critical
-# extensions.
-#basicConstraints = critical,CA:true
-# So we do this instead.
-basicConstraints = CA:true
-
-# Key usage: this is typical for a CA certificate. However since it will
-# prevent it being used as an test self-signed certificate it is best
-# left out by default.
-# keyUsage = cRLSign, keyCertSign
-
-# Some might want this also
-# nsCertType = sslCA, emailCA
-
-# Include email address in subject alt name: another PKIX recommendation
-# subjectAltName=email:copy
-# Copy issuer details
-# issuerAltName=issuer:copy
-
-# DER hex encoding of an extension: beware experts only!
-# obj=DER:02:03
-# Where 'obj' is a standard or added object
-# You can even override a supported extension:
-# basicConstraints= critical, DER:30:03:01:01:FF
-
-[ crl_ext ]
-
-# CRL extensions.
-# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
-
-# issuerAltName=issuer:copy
-authorityKeyIdentifier=keyid:always,issuer:always
easy-rsa/2.0/openssl-0.9.8.cnf deleted +0 -290
deleted file mode 100755
index 340b8af..0000000
@@ -1,290 +0,0 @@
-# For use with easy-rsa version 2.0
-
-#
-# OpenSSL example configuration file.
-# This is mostly being used for generation of certificate requests.
-#
-
-# This definition stops the following lines choking if HOME isn't
-# defined.
-HOME                   = .
-RANDFILE               = $ENV::HOME/.rnd
-openssl_conf           = openssl_init
-
-[ openssl_init ]
-# Extra OBJECT IDENTIFIER info:
-#oid_file              = $ENV::HOME/.oid
-oid_section            = new_oids
-engines                 = engine_section
-
-# To use this configuration file with the "-extfile" option of the
-# "openssl x509" utility, name here the section containing the
-# X.509v3 extensions to use:
-# extensions           =
-# (Alternatively, use a configuration file that has only
-# X.509v3 extensions in its main [= default] section.)
-
-[ new_oids ]
-
-# We can add new OIDs in here for use by 'ca' and 'req'.
-# Add a simple OID like this:
-# testoid1=1.2.3.4
-# Or use config file substitution like this:
-# testoid2=${testoid1}.5.6
-
-####################################################################
-[ ca ]
-default_ca     = CA_default            # The default ca section
-
-####################################################################
-[ CA_default ]
-
-dir            = $ENV::KEY_DIR         # Where everything is kept
-certs          = $dir                  # Where the issued certs are kept
-crl_dir                = $dir                  # Where the issued crl are kept
-database       = $dir/index.txt        # database index file.
-new_certs_dir  = $dir                  # default place for new certs.
-
-certificate    = $dir/ca.crt           # The CA certificate
-serial         = $dir/serial           # The current serial number
-crl            = $dir/crl.pem          # The current CRL
-private_key    = $dir/ca.key           # The private key
-RANDFILE       = $dir/.rand            # private random number file
-
-x509_extensions        = usr_cert              # The extentions to add to the cert
-
-# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
-# so this is commented out by default to leave a V1 CRL.
-# crl_extensions       = crl_ext
-
-default_days   = 3650                  # how long to certify for
-default_crl_days= 30                   # how long before next CRL
-default_md     = md5                   # which md to use.
-preserve       = no                    # keep passed DN ordering
-
-# A few difference way of specifying how similar the request should look
-# For type CA, the listed attributes must be the same, and the optional
-# and supplied fields are just that :-)
-policy         = policy_anything
-
-# For the CA policy
-[ policy_match ]
-countryName            = match
-stateOrProvinceName    = match
-organizationName       = match
-organizationalUnitName = optional
-commonName             = supplied
-name                   = optional
-emailAddress           = optional
-
-# For the 'anything' policy
-# At this point in time, you must list all acceptable 'object'
-# types.
-[ policy_anything ]
-countryName            = optional
-stateOrProvinceName    = optional
-localityName           = optional
-organizationName       = optional
-organizationalUnitName = optional
-commonName             = supplied
-name                   = optional
-emailAddress           = optional
-
-####################################################################
-[ req ]
-default_bits           = $ENV::KEY_SIZE
-default_keyfile        = privkey.pem
-distinguished_name     = req_distinguished_name
-attributes             = req_attributes
-x509_extensions        = v3_ca # The extentions to add to the self signed cert
-
-# Passwords for private keys if not present they will be prompted for
-# input_password = secret
-# output_password = secret
-
-# This sets a mask for permitted string types. There are several options.
-# default: PrintableString, T61String, BMPString.
-# pkix  : PrintableString, BMPString.
-# utf8only: only UTF8Strings.
-# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
-# MASK:XXXX a literal mask value.
-# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings
-# so use this option with caution!
-string_mask = nombstr
-
-# req_extensions = v3_req # The extensions to add to a certificate request
-
-[ req_distinguished_name ]
-countryName                    = Country Name (2 letter code)
-countryName_default            = $ENV::KEY_COUNTRY
-countryName_min                        = 2
-countryName_max                        = 2
-
-stateOrProvinceName            = State or Province Name (full name)
-stateOrProvinceName_default    = $ENV::KEY_PROVINCE
-
-localityName                   = Locality Name (eg, city)
-localityName_default           = $ENV::KEY_CITY
-
-0.organizationName             = Organization Name (eg, company)
-0.organizationName_default     = $ENV::KEY_ORG
-
-# we can do this but it is not needed normally :-)
-#1.organizationName            = Second Organization Name (eg, company)
-#1.organizationName_default    = World Wide Web Pty Ltd
-
-organizationalUnitName         = Organizational Unit Name (eg, section)
-#organizationalUnitName_default        =
-
-commonName                     = Common Name (eg, your name or your server\'s hostname)
-commonName_max                 = 64
-
-name                           = Name
-name_max                       = 64
-
-emailAddress                   = Email Address
-emailAddress_default           = $ENV::KEY_EMAIL
-emailAddress_max               = 40
-
-# JY -- added for batch mode
-organizationalUnitName_default = $ENV::KEY_OU
-commonName_default = $ENV::KEY_CN
-name_default = $ENV::KEY_NAME
-
-# SET-ex3                      = SET extension number 3
-
-[ req_attributes ]
-challengePassword              = A challenge password
-challengePassword_min          = 4
-challengePassword_max          = 20
-
-unstructuredName               = An optional company name
-
-[ usr_cert ]
-
-# These extensions are added when 'ca' signs a request.
-
-# This goes against PKIX guidelines but some CAs do it and some software
-# requires this to avoid interpreting an end user certificate as a CA.
-
-basicConstraints=CA:FALSE
-
-# Here are some examples of the usage of nsCertType. If it is omitted
-# the certificate can be used for anything *except* object signing.
-
-# This is OK for an SSL server.
-# nsCertType                   = server
-
-# For an object signing certificate this would be used.
-# nsCertType = objsign
-
-# For normal client use this is typical
-# nsCertType = client, email
-
-# and for everything including object signing:
-# nsCertType = client, email, objsign
-
-# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-# This will be displayed in Netscape's comment listbox.
-nsComment                      = "Easy-RSA Generated Certificate"
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-extendedKeyUsage=clientAuth
-keyUsage = digitalSignature
-
-# This stuff is for subjectAltName and issuerAltname.
-# Import the email address.
-# subjectAltName=email:copy
-
-# Copy subject details
-# issuerAltName=issuer:copy
-
-#nsCaRevocationUrl             = http://www.domain.dom/ca-crl.pem
-#nsBaseUrl
-#nsRevocationUrl
-#nsRenewalUrl
-#nsCaPolicyUrl
-#nsSslServerName
-
-[ server ]
-
-# JY ADDED -- Make a cert with nsCertType set to "server"
-basicConstraints=CA:FALSE
-nsCertType                     = server
-nsComment                      = "Easy-RSA Generated Server Certificate"
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-extendedKeyUsage=serverAuth
-keyUsage = digitalSignature, keyEncipherment
-
-[ v3_req ]
-
-# Extensions to add to a certificate request
-
-basicConstraints = CA:FALSE
-keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-[ v3_ca ]
-
-
-# Extensions for a typical CA
-
-
-# PKIX recommendation.
-
-subjectKeyIdentifier=hash
-
-authorityKeyIdentifier=keyid:always,issuer:always
-
-# This is what PKIX recommends but some broken software chokes on critical
-# extensions.
-#basicConstraints = critical,CA:true
-# So we do this instead.
-basicConstraints = CA:true
-
-# Key usage: this is typical for a CA certificate. However since it will
-# prevent it being used as an test self-signed certificate it is best
-# left out by default.
-# keyUsage = cRLSign, keyCertSign
-
-# Some might want this also
-# nsCertType = sslCA, emailCA
-
-# Include email address in subject alt name: another PKIX recommendation
-# subjectAltName=email:copy
-# Copy issuer details
-# issuerAltName=issuer:copy
-
-# DER hex encoding of an extension: beware experts only!
-# obj=DER:02:03
-# Where 'obj' is a standard or added object
-# You can even override a supported extension:
-# basicConstraints= critical, DER:30:03:01:01:FF
-
-[ crl_ext ]
-
-# CRL extensions.
-# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
-
-# issuerAltName=issuer:copy
-authorityKeyIdentifier=keyid:always,issuer:always
-
-[ engine_section ]
-#
-# If you are using PKCS#11
-# Install engine_pkcs11 of opensc (www.opensc.org)
-# And uncomment the following
-# verify that dynamic_path points to the correct location
-#
-#pkcs11 = pkcs11_section
-
-[ pkcs11_section ]
-engine_id = pkcs11
-dynamic_path = /usr/lib/engines/engine_pkcs11.so
-MODULE_PATH = $ENV::PKCS11_MODULE_PATH
-PIN = $ENV::PKCS11_PIN
-init = 0
easy-rsa/2.0/openssl-1.0.0.cnf deleted +0 -285
deleted file mode 100755
index fa258a5..0000000
@@ -1,285 +0,0 @@
-# For use with easy-rsa version 2.0 and OpenSSL 1.0.0*
-
-# This definition stops the following lines choking if HOME isn't
-# defined.
-HOME                   = .
-RANDFILE               = $ENV::HOME/.rnd
-openssl_conf           = openssl_init
-
-[ openssl_init ]
-# Extra OBJECT IDENTIFIER info:
-#oid_file              = $ENV::HOME/.oid
-oid_section            = new_oids
-engines                        = engine_section
-
-# To use this configuration file with the "-extfile" option of the
-# "openssl x509" utility, name here the section containing the
-# X.509v3 extensions to use:
-# extensions           =
-# (Alternatively, use a configuration file that has only
-# X.509v3 extensions in its main [= default] section.)
-
-[ new_oids ]
-
-# We can add new OIDs in here for use by 'ca' and 'req'.
-# Add a simple OID like this:
-# testoid1=1.2.3.4
-# Or use config file substitution like this:
-# testoid2=${testoid1}.5.6
-
-####################################################################
-[ ca ]
-default_ca     = CA_default            # The default ca section
-
-####################################################################
-[ CA_default ]
-
-dir            = $ENV::KEY_DIR         # Where everything is kept
-certs          = $dir                  # Where the issued certs are kept
-crl_dir                = $dir                  # Where the issued crl are kept
-database       = $dir/index.txt        # database index file.
-new_certs_dir  = $dir                  # default place for new certs.
-
-certificate    = $dir/ca.crt           # The CA certificate
-serial         = $dir/serial           # The current serial number
-crl            = $dir/crl.pem          # The current CRL
-private_key    = $dir/ca.key           # The private key
-RANDFILE       = $dir/.rand            # private random number file
-
-x509_extensions        = usr_cert              # The extentions to add to the cert
-
-# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
-# so this is commented out by default to leave a V1 CRL.
-# crl_extensions       = crl_ext
-
-default_days   = 3650                  # how long to certify for
-default_crl_days= 30                   # how long before next CRL
-default_md     = md5                   # use public key default MD
-preserve       = no                    # keep passed DN ordering
-
-# A few difference way of specifying how similar the request should look
-# For type CA, the listed attributes must be the same, and the optional
-# and supplied fields are just that :-)
-policy         = policy_anything
-
-# For the CA policy
-[ policy_match ]
-countryName            = match
-stateOrProvinceName    = match
-organizationName       = match
-organizationalUnitName = optional
-commonName             = supplied
-name                   = optional
-emailAddress           = optional
-
-# For the 'anything' policy
-# At this point in time, you must list all acceptable 'object'
-# types.
-[ policy_anything ]
-countryName            = optional
-stateOrProvinceName    = optional
-localityName           = optional
-organizationName       = optional
-organizationalUnitName = optional
-commonName             = supplied
-name                   = optional
-emailAddress           = optional
-
-####################################################################
-[ req ]
-default_bits           = $ENV::KEY_SIZE
-default_keyfile        = privkey.pem
-distinguished_name     = req_distinguished_name
-attributes             = req_attributes
-x509_extensions        = v3_ca # The extentions to add to the self signed cert
-
-# Passwords for private keys if not present they will be prompted for
-# input_password = secret
-# output_password = secret
-
-# This sets a mask for permitted string types. There are several options.
-# default: PrintableString, T61String, BMPString.
-# pkix  : PrintableString, BMPString (PKIX recommendation after 2004).
-# utf8only: only UTF8Strings (PKIX recommendation after 2004).
-# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
-# MASK:XXXX a literal mask value.
-string_mask = nombstr
-
-# req_extensions = v3_req # The extensions to add to a certificate request
-
-[ req_distinguished_name ]
-countryName                    = Country Name (2 letter code)
-countryName_default            = $ENV::KEY_COUNTRY
-countryName_min                        = 2
-countryName_max                        = 2
-
-stateOrProvinceName            = State or Province Name (full name)
-stateOrProvinceName_default    = $ENV::KEY_PROVINCE
-
-localityName                   = Locality Name (eg, city)
-localityName_default           = $ENV::KEY_CITY
-
-0.organizationName             = Organization Name (eg, company)
-0.organizationName_default     = $ENV::KEY_ORG
-
-# we can do this but it is not needed normally :-)
-#1.organizationName            = Second Organization Name (eg, company)
-#1.organizationName_default    = World Wide Web Pty Ltd
-
-organizationalUnitName         = Organizational Unit Name (eg, section)
-#organizationalUnitName_default        =
-
-commonName                     = Common Name (eg, your name or your server\'s hostname)
-commonName_max                 = 64
-
-name                           = Name
-name_max                       = 64
-
-emailAddress                   = Email Address
-emailAddress_default           = $ENV::KEY_EMAIL
-emailAddress_max               = 40
-
-# JY -- added for batch mode
-organizationalUnitName_default = $ENV::KEY_OU
-commonName_default = $ENV::KEY_CN
-name_default = $ENV::KEY_NAME
-
-
-# SET-ex3                      = SET extension number 3
-
-[ req_attributes ]
-challengePassword              = A challenge password
-challengePassword_min          = 4
-challengePassword_max          = 20
-
-unstructuredName               = An optional company name
-
-[ usr_cert ]
-
-# These extensions are added when 'ca' signs a request.
-
-# This goes against PKIX guidelines but some CAs do it and some software
-# requires this to avoid interpreting an end user certificate as a CA.
-
-basicConstraints=CA:FALSE
-
-# Here are some examples of the usage of nsCertType. If it is omitted
-# the certificate can be used for anything *except* object signing.
-
-# This is OK for an SSL server.
-# nsCertType                   = server
-
-# For an object signing certificate this would be used.
-# nsCertType = objsign
-
-# For normal client use this is typical
-# nsCertType = client, email
-
-# and for everything including object signing:
-# nsCertType = client, email, objsign
-
-# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-# This will be displayed in Netscape's comment listbox.
-nsComment                      = "Easy-RSA Generated Certificate"
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-extendedKeyUsage=clientAuth
-keyUsage = digitalSignature
-
-
-# This stuff is for subjectAltName and issuerAltname.
-# Import the email address.
-# subjectAltName=email:copy
-
-# Copy subject details
-# issuerAltName=issuer:copy
-
-#nsCaRevocationUrl             = http://www.domain.dom/ca-crl.pem
-#nsBaseUrl
-#nsRevocationUrl
-#nsRenewalUrl
-#nsCaPolicyUrl
-#nsSslServerName
-
-[ server ]
-
-# JY ADDED -- Make a cert with nsCertType set to "server"
-basicConstraints=CA:FALSE
-nsCertType                     = server
-nsComment                      = "Easy-RSA Generated Server Certificate"
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
-extendedKeyUsage=serverAuth
-keyUsage = digitalSignature, keyEncipherment
-
-[ v3_req ]
-
-# Extensions to add to a certificate request
-
-basicConstraints = CA:FALSE
-keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-[ v3_ca ]
-
-
-# Extensions for a typical CA
-
-
-# PKIX recommendation.
-
-subjectKeyIdentifier=hash
-
-authorityKeyIdentifier=keyid:always,issuer:always
-
-# This is what PKIX recommends but some broken software chokes on critical
-# extensions.
-#basicConstraints = critical,CA:true
-# So we do this instead.
-basicConstraints = CA:true
-
-# Key usage: this is typical for a CA certificate. However since it will
-# prevent it being used as an test self-signed certificate it is best
-# left out by default.
-# keyUsage = cRLSign, keyCertSign
-
-# Some might want this also
-# nsCertType = sslCA, emailCA
-
-# Include email address in subject alt name: another PKIX recommendation
-# subjectAltName=email:copy
-# Copy issuer details
-# issuerAltName=issuer:copy
-
-# DER hex encoding of an extension: beware experts only!
-# obj=DER:02:03
-# Where 'obj' is a standard or added object
-# You can even override a supported extension:
-# basicConstraints= critical, DER:30:03:01:01:FF
-
-[ crl_ext ]
-
-# CRL extensions.
-# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
-
-# issuerAltName=issuer:copy
-authorityKeyIdentifier=keyid:always,issuer:always
-
-[ engine_section ]
-#
-# If you are using PKCS#11
-# Install engine_pkcs11 of opensc (www.opensc.org)
-# And uncomment the following
-# verify that dynamic_path points to the correct location
-#
-#pkcs11 = pkcs11_section
-
-[ pkcs11_section ]
-engine_id = pkcs11
-dynamic_path = /usr/lib/engines/engine_pkcs11.so
-MODULE_PATH = $ENV::PKCS11_MODULE_PATH
-PIN = $ENV::PKCS11_PIN
-init = 0
easy-rsa/2.0/pkitool deleted +0 -379
deleted file mode 100755
index 49588f5..0000000
@@ -1,379 +0,0 @@
-#!/bin/sh
-
-#  OpenVPN -- An application to securely tunnel IP networks
-#             over a single TCP/UDP port, with support for SSL/TLS-based
-#             session authentication and key exchange,
-#             packet encryption, packet authentication, and
-#             packet compression.
-#
-#  Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <[email protected]...>
-#
-#  This program is free software; you can redistribute it and/or modify
-#  it under the terms of the GNU General Public License version 2
-#  as published by the Free Software Foundation.
-#
-#  This program is distributed in the hope that it will be useful,
-#  but WITHOUT ANY WARRANTY; without even the implied warranty of
-#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-#  GNU General Public License for more details.
-#
-#  You should have received a copy of the GNU General Public License
-#  along with this program (see the file COPYING included with this
-#  distribution); if not, write to the Free Software Foundation, Inc.,
-#  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
-
-# pkitool is a front-end for the openssl tool.
-
-# Calling scripts can set the certificate organizational
-# unit with the KEY_OU environmental variable.
-
-# Calling scripts can also set the KEY_NAME environmental
-# variable to set the "name" X509 subject field.
-
-PROGNAME=pkitool
-VERSION=2.0
-DEBUG=0
-
-die()
-{
-    local m="$1"
-
-    echo "$m" >&2
-    exit 1
-}
-
-need_vars()
-{
-    echo '  Please edit the vars script to reflect your configuration,'
-    echo '  then source it with "source ./vars".'
-    echo '  Next, to start with a fresh PKI configuration and to delete any'
-    echo '  previous certificates and keys, run "./clean-all".'
-    echo "  Finally, you can run this tool ($PROGNAME) to build certificates/keys."
-}
-
-usage()
-{
-    echo "$PROGNAME $VERSION"
-    echo "Usage: $PROGNAME [options...] [common-name]"
-    echo "Options:"
-    echo "  --batch    : batch mode (default)"
-    echo "  --keysize  : Set keysize"
-    echo "      size   : size (default=1024)"
-    echo "  --interact : interactive mode"
-    echo "  --server   : build server cert"
-    echo "  --initca   : build root CA"
-    echo "  --inter    : build intermediate CA"
-    echo "  --pass     : encrypt private key with password"
-    echo "  --csr      : only generate a CSR, do not sign"
-    echo "  --sign     : sign an existing CSR"
-    echo "  --pkcs12   : generate a combined PKCS#12 file"
-    echo "  --pkcs11   : generate certificate on PKCS#11 token"
-    echo "      lib    : PKCS#11 library"
-    echo "      slot   : PKCS#11 slot"
-    echo "      id     : PKCS#11 object id (hex string)"
-    echo "      label  : PKCS#11 object label"
-    echo "Standalone options:"
-    echo "  --pkcs11-slots   : list PKCS#11 slots"
-    echo "      lib    : PKCS#11 library"
-    echo "  --pkcs11-objects : list PKCS#11 token objects"
-    echo "      lib    : PKCS#11 library"
-    echo "      slot   : PKCS#11 slot"
-    echo "  --pkcs11-init    : initialize PKCS#11 token DANGEROUS!!!"
-    echo "      lib    : PKCS#11 library"
-    echo "      slot   : PKCS#11 slot"
-    echo "      label  : PKCS#11 token label"
-    echo "Notes:"
-    need_vars
-    echo "  In order to use PKCS#11 interface you must have opensc-0.10.0 or higher."
-    echo "Generated files and corresponding OpenVPN directives:"
-    echo '(Files will be placed in the $KEY_DIR directory, defined in ./vars)'
-    echo "  ca.crt     -> root certificate (--ca)"
-    echo "  ca.key     -> root key, keep secure (not directly used by OpenVPN)"
-    echo "  .crt files -> client/server certificates (--cert)"
-    echo "  .key files -> private keys, keep secure (--key)"
-    echo "  .csr files -> certificate signing request (not directly used by OpenVPN)"
-    echo "  dh1024.pem or dh2048.pem -> Diffie Hellman parameters (--dh)"
-    echo "Examples:"
-    echo "  $PROGNAME --initca          -> Build root certificate"
-    echo "  $PROGNAME --initca --pass   -> Build root certificate with password-protected key"
-    echo "  $PROGNAME --server server1  -> Build \"server1\" certificate/key"
-    echo "  $PROGNAME client1           -> Build \"client1\" certificate/key"
-    echo "  $PROGNAME --pass client2    -> Build password-protected \"client2\" certificate/key"
-    echo "  $PROGNAME --pkcs12 client3  -> Build \"client3\" certificate/key in PKCS#12 format"
-    echo "  $PROGNAME --csr client4     -> Build \"client4\" CSR to be signed by another CA"
-    echo "  $PROGNAME --sign client4    -> Sign \"client4\" CSR"
-    echo "  $PROGNAME --inter interca   -> Build an intermediate key-signing certificate/key"
-    echo "                               Also see ./inherit-inter script."
-    echo "  $PROGNAME --pkcs11 /usr/lib/pkcs11/lib1 0 010203 \"client5 id\" client5"
-    echo "                              -> Build \"client5\" certificate/key in PKCS#11 token"
-    echo "Typical usage for initial PKI setup.  Build myserver, client1, and client2 cert/keys."
-    echo "Protect client2 key with a password.  Build DH parms.  Generated files in ./keys :"
-    echo "  [edit vars with your site-specific info]"
-    echo "  source ./vars"
-    echo "  ./clean-all"
-    echo "  ./build-dh     -> takes a long time, consider backgrounding"
-    echo "  ./$PROGNAME --initca"
-    echo "  ./$PROGNAME --server myserver"
-    echo "  ./$PROGNAME client1"
-    echo "  ./$PROGNAME --pass client2"
-    echo "Typical usage for adding client cert to existing PKI:"
-    echo "  source ./vars"
-    echo "  ./$PROGNAME client-new"
-}
-
-# Set tool defaults
-[ -n "$OPENSSL" ] || export OPENSSL="openssl"
-[ -n "$PKCS11TOOL" ] || export PKCS11TOOL="pkcs11-tool"
-[ -n "$GREP" ] || export GREP="grep"
-
-# Set defaults
-DO_REQ="1"
-REQ_EXT=""
-DO_CA="1"
-CA_EXT=""
-DO_P12="0"
-DO_P11="0"
-DO_ROOT="0"
-NODES_REQ="-nodes"
-NODES_P12=""
-BATCH="-batch"
-CA="ca"
-# must be set or errors of openssl.cnf
-PKCS11_MODULE_PATH="dummy"
-PKCS11_PIN="dummy"
-
-# Process options
-while [ $# -gt 0 ]; do
-    case "$1" in
-        --keysize  ) KEY_SIZE=$2
-                    shift;;
-       --server   ) REQ_EXT="$REQ_EXT -extensions server"
-                    CA_EXT="$CA_EXT -extensions server" ;;
-       --batch    ) BATCH="-batch" ;;
-       --interact ) BATCH="" ;;
-        --inter    ) CA_EXT="$CA_EXT -extensions v3_ca" ;;
-        --initca   ) DO_ROOT="1" ;;
-       --pass     ) NODES_REQ="" ;;
-        --csr      ) DO_CA="0" ;;
-        --sign     ) DO_REQ="0" ;;
-        --pkcs12   ) DO_P12="1" ;;
-       --pkcs11   ) DO_P11="1"
-                    PKCS11_MODULE_PATH="$2"
-                    PKCS11_SLOT="$3"
-                    PKCS11_ID="$4"
-                    PKCS11_LABEL="$5"
-                    shift 4;;
-
-       # standalone
-       --pkcs11-init)
-                    PKCS11_MODULE_PATH="$2"
-                    PKCS11_SLOT="$3"
-                    PKCS11_LABEL="$4"
-                    if [ -z "$PKCS11_LABEL" ]; then
-                      die "Please specify library name, slot and label"
-                    fi
-                    $PKCS11TOOL --module "$PKCS11_MODULE_PATH" --init-token --slot "$PKCS11_SLOT" \
-                       --label "$PKCS11_LABEL" &&
-                       $PKCS11TOOL --module "$PKCS11_MODULE_PATH" --init-pin --slot "$PKCS11_SLOT"
-                    exit $?;;
-       --pkcs11-slots)
-                    PKCS11_MODULE_PATH="$2"
-                    if [ -z "$PKCS11_MODULE_PATH" ]; then
-                      die "Please specify library name"
-                    fi
-                    $PKCS11TOOL --module "$PKCS11_MODULE_PATH" --list-slots
-                    exit 0;;
-       --pkcs11-objects)
-                    PKCS11_MODULE_PATH="$2"
-                    PKCS11_SLOT="$3"
-                    if [ -z "$PKCS11_SLOT" ]; then
-                      die "Please specify library name and slot"
-                    fi
-                    $PKCS11TOOL --module "$PKCS11_MODULE_PATH" --list-objects --login --slot "$PKCS11_SLOT"
-                    exit 0;;
-
-        --help|--usage)
-                    usage
-                    exit ;;
-        --version)
-                    echo "$PROGNAME $VERSION"
-                    exit ;;
-       # errors
-       --*        ) die "$PROGNAME: unknown option: $1" ;;
-       *          ) break ;;
-    esac
-    shift
-done
-
-if ! [ -z "$BATCH" ]; then
-       if $OPENSSL version | grep 0.9.6 > /dev/null; then
-               die "Batch mode is unsupported in openssl<0.9.7"
-       fi
-fi
-
-if [ $DO_P12 -eq 1 -a $DO_P11 -eq 1 ]; then
-       die "PKCS#11 and PKCS#12 cannot be specified together"
-fi
-
-if [ $DO_P11 -eq 1 ]; then
-       if ! grep "^pkcs11.*=" "$KEY_CONFIG" > /dev/null; then
-               die "Please edit $KEY_CONFIG and setup PKCS#11 engine"
-       fi
-fi
-
-# If we are generating pkcs12, only encrypt the final step
-if [ $DO_P12 -eq 1 ]; then
-    NODES_P12="$NODES_REQ"
-    NODES_REQ="-nodes"
-fi
-
-if [ $DO_P11 -eq 1 ]; then
-       if [ -z "$PKCS11_LABEL" ]; then
-               die "PKCS#11 arguments incomplete"
-       fi
-fi
-
-# If undefined, set default key expiration intervals
-if [ -z "$KEY_EXPIRE" ]; then
-    KEY_EXPIRE=3650
-fi
-if [ -z "$CA_EXPIRE" ]; then
-    CA_EXPIRE=3650
-fi
-
-# Set organizational unit to empty string if undefined
-if [ -z "$KEY_OU" ]; then
-    KEY_OU=""
-fi
-
-# Set X509 Name string to empty string if undefined
-if [ -z "$KEY_NAME" ]; then
-    KEY_NAME=""
-fi
-
-# Set KEY_CN, FN
-if [ $DO_ROOT -eq 1 ]; then
-    if [ -z "$KEY_CN" ]; then
-       if [ "$1" ]; then
-           KEY_CN="$1"
-       elif [ "$KEY_ORG" ]; then
-           KEY_CN="$KEY_ORG CA"
-       fi
-    fi
-    if [ $BATCH ] && [ "$KEY_CN" ]; then
-       echo "Using CA Common Name:" "$KEY_CN"
-    fi
-    FN="$KEY_CN"
-elif [ $BATCH ] && [ "$KEY_CN" ]; then
-    echo "Using Common Name:" "$KEY_CN"
-    FN="$KEY_CN"
-    if [ "$1" ]; then
-       FN="$1"
-    fi
-else
-    if [ $# -ne 1 ]; then
-       usage
-       exit 1
-    else
-       KEY_CN="$1"
-    fi
-    FN="$KEY_CN"
-fi
-
-export CA_EXPIRE KEY_EXPIRE KEY_OU KEY_NAME KEY_CN PKCS11_MODULE_PATH PKCS11_PIN
-
-# Show parameters (debugging)
-if [ $DEBUG -eq 1 ]; then
-    echo DO_REQ $DO_REQ
-    echo REQ_EXT $REQ_EXT
-    echo DO_CA $DO_CA
-    echo CA_EXT $CA_EXT
-    echo NODES_REQ $NODES_REQ
-    echo NODES_P12 $NODES_P12
-    echo DO_P12 $DO_P12
-    echo KEY_CN $KEY_CN
-    echo BATCH $BATCH
-    echo DO_ROOT $DO_ROOT
-    echo KEY_EXPIRE $KEY_EXPIRE
-    echo CA_EXPIRE $CA_EXPIRE
-    echo KEY_OU $KEY_OU
-    echo KEY_NAME $KEY_NAME
-    echo DO_P11 $DO_P11
-    echo PKCS11_MODULE_PATH $PKCS11_MODULE_PATH
-    echo PKCS11_SLOT $PKCS11_SLOT
-    echo PKCS11_ID $PKCS11_ID
-    echo PKCS11_LABEL $PKCS11_LABEL
-fi
-
-# Make sure ./vars was sourced beforehand
-if [ -d "$KEY_DIR" ] && [ "$KEY_CONFIG" ]; then
-    cd "$KEY_DIR"
-
-    # Make sure $KEY_CONFIG points to the correct version
-    # of openssl.cnf
-    if $GREP -i 'easy-rsa version 2\.[0-9]' "$KEY_CONFIG" >/dev/null; then
-       :
-    else
-       echo "$PROGNAME: KEY_CONFIG (set by the ./vars script) is pointing to the wrong"
-        echo "version of openssl.cnf: $KEY_CONFIG"
-       echo "The correct version should have a comment that says: easy-rsa version 2.x";
-       exit 1;
-    fi
-
-    # Build root CA
-    if [ $DO_ROOT -eq 1 ]; then
-       $OPENSSL req $BATCH -days $CA_EXPIRE $NODES_REQ -new -newkey rsa:$KEY_SIZE -sha1 \
-           -x509 -keyout "$CA.key" -out "$CA.crt" -config "$KEY_CONFIG" && \
-           chmod 0600 "$CA.key"
-    else
-        # Make sure CA key/cert is available
-       if [ $DO_CA -eq 1 ] || [ $DO_P12 -eq 1 ]; then
-           if [ ! -r "$CA.crt" ] || [ ! -r "$CA.key" ]; then
-               echo "$PROGNAME: Need a readable $CA.crt and $CA.key in $KEY_DIR"
-               echo "Try $PROGNAME --initca to build a root certificate/key."
-               exit 1
-           fi
-       fi
-
-       # Generate key for PKCS#11 token
-       PKCS11_ARGS=
-       if [ $DO_P11 -eq 1 ]; then
-               stty -echo
-               echo -n "User PIN: "
-               read -r PKCS11_PIN
-               stty echo
-               export PKCS11_PIN
-
-               echo "Generating key pair on PKCS#11 token..."
-               $PKCS11TOOL --module "$PKCS11_MODULE_PATH" --keypairgen \
-                       --login --pin "$PKCS11_PIN" \
-                       --key-type rsa:1024 \
-                       --slot "$PKCS11_SLOT" --id "$PKCS11_ID" --label "$PKCS11_LABEL" || exit 1
-               PKCS11_ARGS="-engine pkcs11 -keyform engine -key $PKCS11_SLOT:$PKCS11_ID"
-       fi
-
-        # Build cert/key
-       ( [ $DO_REQ -eq 0 ] || $OPENSSL req $BATCH -days $KEY_EXPIRE $NODES_REQ -new -newkey rsa:$KEY_SIZE \
-               -keyout "$FN.key" -out "$FN.csr" $REQ_EXT -config "$KEY_CONFIG" $PKCS11_ARGS ) && \
-           ( [ $DO_CA -eq 0 ]  || $OPENSSL ca $BATCH -days $KEY_EXPIRE -out "$FN.crt" \
-               -in "$FN.csr" $CA_EXT -md sha1 -config "$KEY_CONFIG" ) && \
-           ( [ $DO_P12 -eq 0 ] || $OPENSSL pkcs12 -export -inkey "$FN.key" \
-               -in "$FN.crt" -certfile "$CA.crt" -out "$FN.p12" $NODES_P12 ) && \
-           ( [ $DO_CA -eq 0 -o $DO_P11 -eq 1 ]  || chmod 0600 "$FN.key" ) && \
-           ( [ $DO_P12 -eq 0 ] || chmod 0600 "$FN.p12" )
-
-       # Load certificate into PKCS#11 token
-       if [ $DO_P11 -eq 1 ]; then
-               $OPENSSL x509 -in "$FN.crt" -inform PEM -out "$FN.crt.der" -outform DER && \
-                 $PKCS11TOOL --module "$PKCS11_MODULE_PATH" --write-object "$FN.crt.der" --type cert \
-                       --login --pin "$PKCS11_PIN" \
-                       --slot "$PKCS11_SLOT" --id "$PKCS11_ID" --label "$PKCS11_LABEL"
-               [ -e "$FN.crt.der" ]; rm "$FN.crt.der"
-       fi
-
-    fi
-
-# Need definitions
-else
-    need_vars
-fi
easy-rsa/2.0/revoke-full deleted +0 -40
deleted file mode 100755
index 4169c4c..0000000
@@ -1,40 +0,0 @@
-#!/bin/sh
-
-# revoke a certificate, regenerate CRL,
-# and verify revocation
-
-CRL="crl.pem"
-RT="revoke-test.pem"
-
-if [ $# -ne 1 ]; then
-    echo "usage: revoke-full <cert-name-base>";
-    exit 1
-fi
-
-if [ "$KEY_DIR" ]; then
-    cd "$KEY_DIR"
-    rm -f "$RT"
-
-    # set defaults
-    export KEY_CN=""
-    export KEY_OU=""
-    export KEY_NAME=""
-
-    # revoke key and generate a new CRL
-    $OPENSSL ca -revoke "$1.crt" -config "$KEY_CONFIG"
-
-    # generate a new CRL -- try to be compatible with
-    # intermediate PKIs
-    $OPENSSL ca -gencrl -out "$CRL" -config "$KEY_CONFIG"
-    if [ -e export-ca.crt ]; then
-       cat export-ca.crt "$CRL" >"$RT"
-    else
-       cat ca.crt "$CRL" >"$RT"
-    fi
-
-    # verify the revocation
-    $OPENSSL verify -CAfile "$RT" -crl_check "$1.crt"
-else
-    echo 'Please source the vars script first (i.e. "source ./vars")'
-    echo 'Make sure you have edited it to reflect your configuration.'
-fi
easy-rsa/2.0/sign-req deleted +0 -7
deleted file mode 100755
index 6cae7b4..0000000
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Sign a certificate signing request (a .csr file)
-# with a local root certificate and key.
-
-export EASY_RSA="${EASY_RSA:-.}"
-"$EASY_RSA/pkitool" --interact --sign $*
easy-rsa/2.0/vars deleted +0 -74
deleted file mode 100755
index 2ea1ced..0000000
@@ -1,74 +0,0 @@
-# easy-rsa parameter settings
-
-# NOTE: If you installed from an RPM,
-# don't edit this file in place in
-# /usr/share/openvpn/easy-rsa --
-# instead, you should copy the whole
-# easy-rsa directory to another location
-# (such as /etc/openvpn) so that your
-# edits will not be wiped out by a future
-# OpenVPN package upgrade.
-
-# This variable should point to
-# the top level of the easy-rsa
-# tree.
-export EASY_RSA="`pwd`"
-
-#
-# This variable should point to
-# the requested executables
-#
-export OPENSSL="openssl"
-export PKCS11TOOL="pkcs11-tool"
-export GREP="grep"
-
-
-# This variable should point to
-# the openssl.cnf file included
-# with easy-rsa.
-export KEY_CONFIG=`$EASY_RSA/whichopensslcnf $EASY_RSA`
-
-# Edit this variable to point to
-# your soon-to-be-created key
-# directory.
-#
-# WARNING: clean-all will do
-# a rm -rf on this directory
-# so make sure you define
-# it correctly!
-export KEY_DIR="$EASY_RSA/keys"
-
-# Issue rm -rf warning
-echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
-
-# PKCS11 fixes
-export PKCS11_MODULE_PATH="dummy"
-export PKCS11_PIN="dummy"
-
-# Increase this to 2048 if you
-# are paranoid.  This will slow
-# down TLS negotiation performance
-# as well as the one-time DH parms
-# generation process.
-export KEY_SIZE=1024
-
-# In how many days should the root CA key expire?
-export CA_EXPIRE=3650
-
-# In how many days should certificates expire?
-export KEY_EXPIRE=3650
-
-# These are the default values for fields
-# which will be placed in the certificate.
-# Don't leave any of these fields blank.
-export KEY_COUNTRY="US"
-export KEY_PROVINCE="CA"
-export KEY_CITY="SanFrancisco"
-export KEY_ORG="Fort-Funston"
-export KEY_EMAIL="[email protected]..."
-export [email protected]...
-export KEY_CN=changeme
-export KEY_NAME=changeme
-export KEY_OU=changeme
-export PKCS11_MODULE_PATH=changeme
-export PKCS11_PIN=1234
easy-rsa/2.0/whichopensslcnf deleted +0 -26
deleted file mode 100755
index 2226a8e..0000000
@@ -1,26 +0,0 @@
-#!/bin/sh
-
-cnf="$1/openssl.cnf"
-
-if [ "$OPENSSL" ]; then
-       if $OPENSSL version | grep -E "0\.9\.6[[:alnum:]]" > /dev/null; then
-               cnf="$1/openssl-0.9.6.cnf"
-       elif $OPENSSL version | grep -E "0\.9\.8[[:alnum:]]" > /dev/null; then
-               cnf="$1/openssl-0.9.8.cnf"
-       elif $OPENSSL version | grep -E "1\.0\.([[:digit:]][[:alnum:]])" > /dev/null; then
-                cnf="$1/openssl-1.0.0.cnf"
-       else
-               cnf="$1/openssl.cnf"
-       fi
-fi
-
-echo $cnf
-
-if [ ! -r $cnf ]; then
-    echo "**************************************************************" >&2
-    echo "  No $cnf file could be found" >&2
-    echo "  Further invocations will fail" >&2
-    echo "**************************************************************" >&2
-fi
-
-exit 0
easy-rsa/Windows/README.txt deleted +0 -44
deleted file mode 100644
index 2ede7b1..0000000
@@ -1,44 +0,0 @@
-Extract all zip'd files to the OpenVPN home directory,
-including the openssl.cnf file from the top-level
-"easy-rsa" directory.
-
-First run init-config.bat
-
-Next, edit vars.bat to adapt it to your environment, and
-create the directory that will hold your key files.
-
-To generate TLS keys:
-
-Create new empty index and serial files (once only)
-1. vars
-2. clean-all
-
-Build a CA key (once only)
-1. vars
-2. build-ca
-
-Build a DH file (for server side, once only)
-1. vars
-2. build-dh
-
-Build a private key/certficate for the openvpn server
-1. vars
-2. build-key-server <machine-name>
-
-Build key files in PEM format (for each client machine)
-1. vars
-2. build-key <machine-name>
-   (use <machine name> for specific name within script)
-
-or
-
-Build key files in PKCS #12 format (for each client machine)
-1. vars
-2. build-key-pkcs12 <machine-name>
-   (use <machine name> for specific name within script)
-
-To revoke a TLS certificate and generate a CRL file:
-1. vars
-2. revoke-full <machine-name>
-3. verify last line of output confirms revokation
-4. copy crl.pem to server directory and ensure config file uses "crl-verify <crl filename>"
easy-rsa/Windows/build-ca-pass.bat deleted +0 -8
deleted file mode 100644
index ab0b2a4..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-ca.bat deleted +0 -4
deleted file mode 100644
index a3f234b..0000000
@@ -1,4 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a cert authority valid for ten years, starting now
-openssl req -days 3650 -nodes -new -x509 -keyout %KEY_DIR%\ca.key -out %KEY_DIR%\ca.crt -config %KEY_CONFIG%
easy-rsa/Windows/build-dh.bat deleted +0 -4
deleted file mode 100644
index 74bc603..0000000
@@ -1,4 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a dh file for the server side
-openssl dhparam -out %KEY_DIR%/dh%KEY_SIZE%.pem %KEY_SIZE%
easy-rsa/Windows/build-key-pass.bat deleted +0 -8
deleted file mode 100644
index ab0b2a4..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key-pkcs12.bat deleted +0 -10
deleted file mode 100644
index 1fc083e..0000000
@@ -1,10 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem convert the key/cert and embed the ca cert into a pkcs12 file.
-openssl pkcs12 -export -inkey %KEY_DIR%\%1.key -in %KEY_DIR%\%1.crt -certfile %KEY_DIR%\ca.crt -out %KEY_DIR%\%1.p12
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key-server-pass.bat deleted +0 -8
deleted file mode 100644
index 99ed4d3..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -extensions server -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key-server.bat deleted +0 -8
deleted file mode 100644
index 20e3605..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -extensions server -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/build-key.bat deleted +0 -8
deleted file mode 100644
index c040904..0000000
@@ -1,8 +0,0 @@
[email protected]... off
-cd %HOME%
-rem build a request for a cert that will be valid for ten years
-openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem sign the cert request with our ca, creating a cert/key pair
-openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
-rem delete any .old files created in this process, to avoid future file creation errors
-del /q %KEY_DIR%\*.old
easy-rsa/Windows/clean-all.bat deleted +0 -13
deleted file mode 100644
index 71cbf4d..0000000
@@ -1,13 +0,0 @@
[email protected]... off
-rem move to the HOME directory specified in VARS script
-cd %HOME%
-rem set a temporary KEY_DIR variable
-set d=%KEY_DIR%
-rem delete the KEY_DIR and any subdirs quietly
-rmdir /s /q %d%
-rem make a new KEY_DIR
-mkdir %d%
-rem copy in a fesh index file so we begin with an empty database
-copy index.txt.start %d%\index.txt
-rem copy in a fresh serial file so we begin generating keys at index 01
-copy serial.start %d%\serial.
easy-rsa/Windows/index.txt.start deleted +0 -0
deleted file mode 100644
index e69de29..0000000
easy-rsa/Windows/init-config.bat deleted +0 -1
deleted file mode 100755
index 12e6d78..0000000
@@ -1 +0,0 @@
-copy vars.bat.sample vars.bat
easy-rsa/Windows/revoke-full.bat deleted +0 -13
deleted file mode 100644
index ef2e4b5..0000000
@@ -1,13 +0,0 @@
[email protected]... off
-cd %HOME%
-rem revoke cert
-openssl ca -revoke %KEY_DIR%\%1.crt -config %KEY_CONFIG%
-rem generate new crl
-openssl ca -gencrl -out %KEY_DIR%\crl.pem -config %KEY_CONFIG%
-rem test revocation
-rem first concatinate ca cert with newly generated crl
-copy %KEY_DIR%\ca.crt+%KEY_DIR%\crl.pem %KEY_DIR%\revoke_test_file.pem
-rem now verify the revocation
-openssl verify -CAfile %KEY_DIR%\revoke_test_file.pem -crl_check %KEY_DIR%\%1.crt
-rem delete temporary test file
-del /q %KEY_DIR%\revoke_test_file.pem
easy-rsa/Windows/serial.start deleted +0 -1
deleted file mode 100644
index 8a0f05e..0000000
@@ -1 +0,0 @@
-01
easy-rsa/Windows/vars.bat.sample deleted +0 -40
deleted file mode 100644
index 36e6f71..0000000
@@ -1,40 +0,0 @@
[email protected]... off
-rem Edit this variable to point to
-rem the openssl.cnf file included
-rem with easy-rsa.
-
-set HOME=%ProgramFiles%\OpenVPN\easy-rsa
-set KEY_CONFIG=openssl-1.0.0.cnf
-
-rem Edit this variable to point to
-rem your soon-to-be-created key
-rem directory.
-rem
-rem WARNING: clean-all will do
-rem a rm -rf on this directory
-rem so make sure you define
-rem it correctly!
-set KEY_DIR=keys
-
-rem Increase this to 2048 if you
-rem are paranoid.  This will slow
-rem down TLS negotiation performance
-rem as well as the one-time DH parms
-rem generation process.
-set KEY_SIZE=1024
-
-rem These are the default values for fields
-rem which will be placed in the certificate.
-rem Change these to reflect your site.
-rem Don't leave any of these parms blank.
-
-set KEY_COUNTRY=US
-set KEY_PROVINCE=CA
-set KEY_CITY=SanFrancisco
-set KEY_ORG=OpenVPN
-set [email protected]...
-set KEY_CN=changeme
-set KEY_NAME=changeme
-set KEY_OU=changeme
-set PKCS11_MODULE_PATH=changeme
-set PKCS11_PIN=1234
openvpn.spec.in +1 -2
index 9a45c79..a2f0cb1 100644
@@ -222,7 +222,7 @@ fi
 %endif
 
 # Install extra %doc stuff
-%doc contrib/ easy-rsa/ sample-*/ plugins/README.*
+%doc contrib/ sample-*/ plugins/README.*
 
 %changelog
 * Thu Jul 30 2009 David Sommerseth <[email protected]...>
--

1.7.3.4

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Openvpn-devel mailing list [email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

#35 lore raw

PATCH 19/52 Remove tap-win32

In reply to Alon Bar-Lev

Introduce tap-windows.h which is modified tap-win32/common.h. Except of function rename, it is the same without the tap_id. This file should be provided as part of tap-win32 MSI. For now we hold a copy.

---
 Makefile.am                    |    3 +-
 configure.ac                   |   14 +-
 tap-win32/MAKEFILE             |    6 -
 tap-win32/SOURCES.in           |   64 -
 tap-win32/common.h             |   82 --
 tap-win32/constants.h          |   52 -
 tap-win32/dhcp.c               |  599 --------
 tap-win32/dhcp.h               |  164 ---
 tap-win32/endian.h             |   35 -
 tap-win32/error.c              |  378 -----
 tap-win32/error.h              |   88 --
 tap-win32/hexdump.c            |   69 -
 tap-win32/hexdump.h            |   63 -
 tap-win32/i386/OemWin2k.inf.in |  195 ---
 tap-win32/instance.c           |  241 ---
 tap-win32/lock.h               |   75 -
 tap-win32/macinfo.c            |  154 --
 tap-win32/macinfo.h            |   38 -
 tap-win32/mem.c                |  186 ---
 tap-win32/proto.h              |  224 ---
 tap-win32/prototypes.h         |  260 ----
 tap-win32/resource.rc          |   58 -
 tap-win32/tapdrvr.c            | 3146 ----------------------------------------
 tap-win32/types.h              |  178 ---
 tap-windows.h                  |   68 +
 tun.h                          |    2 +-
 win/autodefs.h.in              |    2 +-
 27 files changed, 78 insertions(+), 6366 deletions(-)
 delete mode 100755 tap-win32/MAKEFILE
 delete mode 100755 tap-win32/SOURCES.in
 delete mode 100755 tap-win32/common.h
 delete mode 100755 tap-win32/constants.h
 delete mode 100755 tap-win32/dhcp.c
 delete mode 100755 tap-win32/dhcp.h
 delete mode 100755 tap-win32/endian.h
 delete mode 100755 tap-win32/error.c
 delete mode 100755 tap-win32/error.h
 delete mode 100755 tap-win32/hexdump.c
 delete mode 100755 tap-win32/hexdump.h
 delete mode 100755 tap-win32/i386/OemWin2k.inf.in
 delete mode 100755 tap-win32/instance.c
 delete mode 100755 tap-win32/lock.h
 delete mode 100755 tap-win32/macinfo.c
 delete mode 100755 tap-win32/macinfo.h
 delete mode 100755 tap-win32/mem.c
 delete mode 100755 tap-win32/proto.h
 delete mode 100755 tap-win32/prototypes.h
 delete mode 100755 tap-win32/resource.rc
 delete mode 100755 tap-win32/tapdrvr.c
 delete mode 100755 tap-win32/types.h
 create mode 100644 tap-windows.h
Makefile.am +1 -2
index b6fcfbb..74f388a 100644
@@ -44,7 +44,6 @@ EXTRA_DIST = \
 	sample-keys \
 	sample-scripts \
 	suse \
-	tap-win32 \
 	contrib \
 	debug \
 	plugins \
@@ -147,7 +146,7 @@ openvpn_SOURCES = \
 	ssl_verify_polarssl.c ssl_verify_polarssl.h \
 	status.c status.h \
 	syshead.h \
-	tun.c tun.h \
+	tun.c tun.h tap-windows.h \
 	win32.h win32.c \
 	cryptoapi.h cryptoapi.c
 
configure.ac +7 -7
index 747c7b4..937ce1f 100644
@@ -959,15 +959,15 @@ if test "$SELINUX" = "yes"; then
    )
 fi
 
-TAP_ID="PRODUCT_TAP_ID"
+TAP_COMPONENT_ID="PRODUCT_TAP_ID"
 TAP_WIN32_MIN_MAJOR="PRODUCT_TAP_WIN32_MIN_MAJOR"
 TAP_WIN32_MIN_MINOR="PRODUCT_TAP_WIN32_MIN_MINOR"
-AC_DEFINE_UNQUOTED(TAP_ID, "${TAP_ID}", [The TAP-Win32 id defined in tap-win32/SOURCES])
-AC_DEFINE_UNQUOTED(TAP_WIN32_MIN_MAJOR, ${TAP_WIN32_MIN_MAJOR}, [The TAP-Win32 version number is defined in tap-win32/SOURCES])
-AC_DEFINE_UNQUOTED(TAP_WIN32_MIN_MINOR, ${TAP_WIN32_MIN_MINOR}, [The TAP-Win32 version number is defined in tap-win32/SOURCES])
-AC_SUBST(TAP_ID)
-AC_SUBST(TAP_WIN32_MIN_MAJOR)
-AC_SUBST(TAP_WIN32_MIN_MINOR)
+AC_DEFINE_UNQUOTED([TAP_ID], ["${TAP_ID}"], [The TAP-Win32 id])
+AC_DEFINE_UNQUOTED([TAP_WIN32_MIN_MAJOR], [${TAP_WIN32_MIN_MAJOR}], [The TAP-Win32 version number is defined in tap-win32/SOURCES])
+AC_DEFINE_UNQUOTED([TAP_WIN32_MIN_MINOR], [${TAP_WIN32_MIN_MINOR}], [The TAP-Win32 version number is defined in tap-win32/SOURCES])
+AC_SUBST([TAP_COMPONENT_ID])
+AC_SUBST([TAP_WIN32_MIN_MAJOR])
+AC_SUBST([TAP_WIN32_MIN_MINOR])
 
 win32datadir="\${datadir}/${PACKAGE}-win32"
 AC_SUBST(win32datadir)
tap-win32/MAKEFILE deleted +0 -6
deleted file mode 100755
index 6ee4f43..0000000
@@ -1,6 +0,0 @@
-#
-# DO NOT EDIT THIS FILE!!!  Edit .\sources. if you want to add a new source
-# file to this component.  This file merely indirects to the real make file
-# that is shared by all the components of NT OS/2
-#
-!INCLUDE $(NTMAKEENV)\makefile.def
tap-win32/SOURCES.in deleted +0 -64

64 lines not on this page · raw message

tap-win32/common.h deleted +0 -82

82 lines not on this page · raw message

tap-win32/constants.h deleted +0 -52

52 lines not on this page · raw message

tap-win32/dhcp.c deleted +0 -599

599 lines not on this page · raw message

tap-win32/dhcp.h deleted +0 -164

164 lines not on this page · raw message

tap-win32/endian.h deleted +0 -35
deleted file mode 100755
index 128029a..0000000
@@ -1,35 +0,0 @@
-/*
- *  TAP-Win32/TAP-Win64 -- A kernel driver to provide virtual tap
- *                         device functionality on Windows.
- *
- *  This code was inspired by the CIPE-Win32 driver by Damion K. Wilson.
- *
- *  This source code is Copyright (C) 2002-2010 OpenVPN Technologies, Inc.,
- *  and is released under the GPL version 2 (see below).
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License version 2
- *  as published by the Free Software Foundation.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program (see the file COPYING included with this
- *  distribution); if not, write to the Free Software Foundation, Inc.,
- *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
- */
-
-#ifdef TAP_LITTLE_ENDIAN
-#define ntohs(x) RtlUshortByteSwap(x)
-#define htons(x) RtlUshortByteSwap(x)
-#define ntohl(x) RtlUlongByteSwap(x)
-#define htonl(x) RtlUlongByteSwap(x)
-#else
-#define ntohs(x) ((USHORT)(x))
-#define htons(x) ((USHORT)(x))
-#define ntohl(x) ((ULONG)(x))
-#define htonl(x) ((ULONG)(x))
-#endif
tap-win32/error.c deleted +0 -378

378 lines not on this page · raw message

tap-win32/error.h deleted +0 -88

88 lines not on this page · raw message

tap-win32/hexdump.c deleted +0 -69

69 lines not on this page · raw message

tap-win32/hexdump.h deleted +0 -63

63 lines not on this page · raw message

tap-win32/i386/OemWin2k.inf.in deleted +0 -195

195 lines not on this page · raw message

tap-win32/instance.c deleted +0 -241

241 lines not on this page · raw message

tap-win32/lock.h deleted +0 -75

75 lines not on this page · raw message

tap-win32/macinfo.c deleted +0 -154

154 lines not on this page · raw message

tap-win32/macinfo.h deleted +0 -38
deleted file mode 100755
index 51e930d..0000000
@@ -1,38 +0,0 @@
-/*
- *  TAP-Win32/TAP-Win64 -- A kernel driver to provide virtual tap
- *                         device functionality on Windows.
- *
- *  This code was inspired by the CIPE-Win32 driver by Damion K. Wilson.
- *
- *  This source code is Copyright (C) 2002-2010 OpenVPN Technologies, Inc.,
- *  and is released under the GPL version 2 (see below).
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License version 2
- *  as published by the Free Software Foundation.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program (see the file COPYING included with this
- *  distribution); if not, write to the Free Software Foundation, Inc.,
- *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
- */
-
-#ifndef MacInfoDefined
-#define MacInfoDefined
-
-//===================================================================================
-//                                      Macros
-//===================================================================================
-#define IsMacDelimiter(a) (a == ':' || a == '-' || a == '.')
-#define IsHexDigit(c) ((c >= '0' && c <= '9') || (c >= 'A' && c <= 'F') || (c >= 'a' && c <= 'f'))
-
-#define COPY_MAC(dest, src) NdisMoveMemory ((dest), (src), sizeof (MACADDR))
-#define CLEAR_MAC(dest)     NdisZeroMemory ((dest), sizeof (MACADDR))
-#define MAC_EQUAL(a,b)      (memcmp ((a), (b), sizeof (MACADDR)) == 0)
-
-#endif
tap-win32/mem.c deleted +0 -186

186 lines not on this page · raw message

tap-win32/proto.h deleted +0 -224

224 lines not on this page · raw message

tap-win32/prototypes.h deleted +0 -260

250 lines not on this page · raw message

tap-win32/resource.rc deleted +0 -58

58 lines not on this page · raw message

tap-win32/tapdrvr.c deleted +0 -3146

3,146 lines not on this page · raw message

tap-win32/types.h deleted +0 -178

178 lines not on this page · raw message

tap-windows.h new file +68 -0

68 lines not on this page · raw message

tun.h +1 -1
index 513257f..ad7b2b1 100644

Lines of this file are not shown. View the raw message.

win/autodefs.h.in +1 -1
index ad0af19..372eb81 100644

Lines of this file are not shown. View the raw message.

The rest of this diff is not shown. View the raw message.

Signature · 1 line
1.7.3.4

Part of the diff is not shown here. View the raw message.