Added support for static challenge/response protocol.

This includes the new "static-challenge" directive.

See management/management-notes.txt for details on both
static and dynamic challenge/response protocols.

All client-side challenge/response code is #ifdefed on
ENABLE_CLIENT_CR and can be removed from the build
by commenting out the definition of ENABLE_CLIENT_CR
in syshead.h.

Version 2.1.3x.


git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@7316 e7ae566f-a301-0410-adde-c780ea21d3b5

1 files changed, 5 insertions, 1 deletions

diff --git a/ssl.h b/ssl.h
index 1b23d7d..08bf53b 100644
--- a/ssl.h
+++ b/ssl.h
@@ -516,6 +516,10 @@ struct tls_options
   const struct x509_track *x509_track;
 #endif
 
+#ifdef ENABLE_CLIENT_CR
+  const struct static_challenge_info *sci;
+#endif
+
   /* --gremlin bits */
   int gremlin;
 };
@@ -723,7 +727,7 @@ void get_highest_preference_tls_cipher (char *buf, int size);
 
 void pem_password_setup (const char *auth_file);
 int pem_password_callback (char *buf, int size, int rwflag, void *u);
-void auth_user_pass_setup (const char *auth_file);
+void auth_user_pass_setup (const char *auth_file, const struct static_challenge_info *sc_info);
 void ssl_set_auth_nocache (void);
 void ssl_set_auth_token (const char *token);
 void ssl_purge_auth (const bool auth_user_pass_only);