Mailing List Archive: vpnc: devel

VPNC Front End

Index | Next | Previous | View Threaded

stellarspace69 at yahoo

Feb 20, 2009, 11:15 PM

Post #1 of 9 (5587 views)
Permalink

VPNC Front End

I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:

cyggcrypt-11.dll
cyggpg-error-0.dll
cygiconv-2.dll
cygintl-8.dll
cygwin1.dll

I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.

I also provide the TAP drivers provided by OpenVPN.

I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.

I know there are probably quite a few people out there looking for something like this.

https://sourceforge.net/project/showfiles.php?group_id=252530

gary at webguild

Feb 21, 2009, 6:16 AM

Post #2 of 9 (5379 views)
Permalink

Re: VPNC Front End [In reply to]

Great idea, Josh.

I installed on my Vista 64 PC which already has a working VPNC and Tap
interface. The installation added a new Tap but used the old one.

The config popped up and I used the default.conf file to fill in all the
fields. After starting, I see there is a pcf import feature. This would be
nice on the initial config screen.

I right-clicked the tray icon and did the connect which then said connected.

One modification I did to my VPNC setup was also necessary for your version.
Without doing this, even though it says it is connected, I can't get to some
of the destination servers.

The route that is set up is:

10.243.56.0 255.255.254.0 On-link 10.243.56.182 286

However, this does not let me get to the server at 10.243.37.56 since the
mask is not "wide" enough.

So, I entered this command to add another route:

route add 10.243.0.0 mask 255.255.0.0 10.243.56.182

which adds this to the rout print display:

10.243.0.0 255.255.0.0 On-link 10.243.56.182 31

And now I can connect. The way I do this in my VPNC setup is an addition to
the vpnc-script file:

export INTERNAL_IP4_NETMASK="255.255.0.0"

One thing I have not figured out is how to set up the VPN connection prior
to logging on to Windows which is possible using Cisco's client.

Gary Davis

From: vpnc-devel-bounces [at] unix-ag
[mailto:vpnc-devel-bounces [at] unix-ag] On Behalf Of Joshua Bahnsen
Sent: Saturday, February 21, 2009 2:16 AM
To: vpnc-devel [at] unix-ag
Subject: [vpnc-devel] VPNC Front End

I created an open source VPNC Front End for Windows, it is currently hosted
on Sourceforge. I'm sending an email to this list because I want to make
sure I'm not stepping on any toes. I have not modified any of the vpnc
sources, they are just compiled with cygwin. I am providing in an installer
the required cygwin libraries:

cyggcrypt-11.dll
cyggpg-error-0.dll
cygiconv-2.dll
cygintl-8.dll
cygwin1.dll

I modified the source of cygwin so I do not interfere with other cygwin
applications. It will load in an entirely separate memory space and it uses
an alternate registry location.

I also provide the TAP drivers provided by OpenVPN.

I'm in the process of setting up the Sourceforge site below, but the main
sources and the installer are there.

I know there are probably quite a few people out there looking for something
like this.

https://sourceforge.net/project/showfiles.php?group_id=252530

waynechan at yahoo

Feb 26, 2009, 9:30 PM

Post #3 of 9 (5428 views)
Permalink

Re: VPNC Front End [In reply to]

joshua, i downloaded your vpnc front-end and tested a bit on my Vista system.
i have few questions about how to use your vpnc front-end to work with the
my own copy of vpnc. This is my custom built vpnc with some Vista/x64 fixes.

I noticed from your tarball, the bin directory has your copy of vpnc.exe and sh.exe
along with your other *.dll files. If i want to use my own compiled vpnc.exe
and vpnc-script-win.js is that all i need to do is to replace those files with my own ??

Also my authentication requires 2-phase challenges..i.e. i need to provide 2 auth-challenges
in sequence... While your GUI front-end only prompts for the first challenge but didn't
prompts again when the 2nd challenge was requested by my Cisco vpn server...
(i have Xauth Interactive set in my default.conf to have it working when doing command
line connection). Is this something you can modify to address this 2-phase auth-challenge ??

thanks...

wayne chan

________________________________
From: Joshua Bahnsen <stellarspace69 [at] yahoo>
To: vpnc-devel [at] unix-ag
Sent: Friday, February 20, 2009 11:15:42 PM
Subject: [vpnc-devel] VPNC Front End

I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:

cyggcrypt-11.dll
cyggpg-error-0.dll
cygiconv-2.dll
cygintl-8.dll
cygwin1.dll

I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.

I also provide the TAP drivers provided by OpenVPN.

I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.

I know there are probably quite a few people out there looking for something like this.

https://sourceforge.net/project/showfiles.php?group_id=252530

stellarspace69 at yahoo

Feb 27, 2009, 3:33 PM

Post #4 of 9 (5429 views)
Permalink

Re: VPNC Front End [In reply to]

What are the specific Vista and x64 fixes? You may not need them, vpnc works fine on Vista.

The cygwin�DLL is modified to use an alternate registry location, the front end relies on this registry location to function, you would then need to ensure those registry keys exist. Probably more work than it is worth. You should be able to just drop your vpnc.exe in the same directory, assuming you aren't linked against any further DLLs. I do not use the jscript file, I have implemented its functionality in an AutoIt script which has been compiled into an exe. I'm not a big fan of jscript.

What does the output of vpnc look like during this two phase challenge? It should be easy to implement.

________________________________
From: wayne chan <waynechan [at] yahoo>
To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
Sent: Thursday, February 26, 2009 10:30:32 PM
Subject: Re: [vpnc-devel] VPNC Front End

joshua, i downloaded your vpnc front-end and tested a bit on my Vista system.
i have few questions about how to use your vpnc front-end to work with the
my own copy of vpnc. This is my custom built vpnc with some Vista/x64 fixes.

I noticed from your tarball, the bin directory has� your copy of vpnc.exe and sh.exe
along with your other *.dll files. If i want to use my own compiled vpnc.exe
and vpnc-script-win.js is that all i need to do is to replace those files with my own ??

Also my authentication requires 2-phase challenges..i.e. i need to provide 2 auth-challenges
in sequence... While your GUI front-end only prompts for the first challenge but didn't
prompts again when the 2nd challenge was requested by my Cisco vpn server...
(i have Xauth Interactive set in my default.conf to have it working when doing command
line connection). Is this something you can modify to address this 2-phase auth-challenge ??

thanks...

wayne chan

________________________________
From: Joshua Bahnsen <stellarspace69 [at] yahoo>
To: vpnc-devel [at] unix-ag
Sent: Friday, February 20, 2009 11:15:42 PM
Subject: [vpnc-devel] VPNC Front End

I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:

cyggcrypt-11.dll
cyggpg-error-0.dll
cygiconv-2.dll
cygintl-8.dll
cygwin1.dll

I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.

I also provide the TAP drivers provided by OpenVPN.

I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.

I know there are probably quite a few people out there looking for something like this.

https://sourceforge.net/project/showfiles.php?group_id=252530

tilman.schroeder at tu-dortmund

Feb 28, 2009, 3:51 AM

Post #5 of 9 (5418 views)
Permalink

Re: VPNC Front End [In reply to]

Heyho,

you partly implemented the fixes, which are:
- Query "route print" for the route to 0.0.0.0 instead of looking for
"Default route" which only works for windows in english.

- however, looking at "route print 0.0.0.0" is still not a good idea
because this may not be the right route or the shortest way to the vpn
gateway. On linux, it is done by "ip route get <vpn-gateway-ip-address>"
which prints out the correct route. we need a similar program for
windows or a script that does this by looking at the whole routing
table. more at
http://lists.unix-ag.uni-kl.de/pipermail/vpnc-devel/2009-February/002979.html

- your script does not delete the wins and dns entries of the vpn tap device

- your script does not delete the routes set up at the connect stage

- it was necessary for me to set up the route to the vpn gateway at the
pre-init stage, otherwise vpnc was not able to establish the connection.
if it works for you, fine. I think it is the safest to set up this route
as early as possible, so you might consider changing this in your script

I did not test your frontend yet, I just looked at your vpnc-script.au3

I appreciate your sleep command before adding the routes, however, there
should be a command to check whether the device is set up correctly
before adding routes.

Hang in there,
Tilman

Joshua Bahnsen schrieb:
> What are the specific Vista and x64 fixes? You may not need them, vpnc works fine on Vista.
>
> The cygwin DLL is modified to use an alternate registry location, the front end relies on this registry location to function, you would then need to ensure those registry keys exist. Probably more work than it is worth. You should be able to just drop your vpnc.exe in the same directory, assuming you aren't linked against any further DLLs. I do not use the jscript file, I have implemented its functionality in an AutoIt script which has been compiled into an exe. I'm not a big fan of jscript.
>
> What does the output of vpnc look like during this two phase challenge? It should be easy to implement.
>
>
>
>
> ________________________________
> From: wayne chan <waynechan [at] yahoo>
> To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
> Sent: Thursday, February 26, 2009 10:30:32 PM
> Subject: Re: [vpnc-devel] VPNC Front End
>
>
> joshua, i downloaded your vpnc front-end and tested a bit on my Vista system.
> i have few questions about how to use your vpnc front-end to work with the
> my own copy of vpnc. This is my custom built vpnc with some Vista/x64 fixes.
>
> I noticed from your tarball, the bin directory has your copy of vpnc.exe and sh.exe
> along with your other *.dll files. If i want to use my own compiled vpnc.exe
> and vpnc-script-win.js is that all i need to do is to replace those files with my own ??
>
> Also my authentication requires 2-phase challenges..i.e. i need to provide 2 auth-challenges
> in sequence... While your GUI front-end only prompts for the first challenge but didn't
> prompts again when the 2nd challenge was requested by my Cisco vpn server...
> (i have Xauth Interactive set in my default.conf to have it working when doing command
> line connection). Is this something you can modify to address this 2-phase auth-challenge ??
>
> thanks...
>
> wayne chan
>
>
>
>
>
> ________________________________
> From: Joshua Bahnsen <stellarspace69 [at] yahoo>
> To: vpnc-devel [at] unix-ag
> Sent: Friday, February 20, 2009 11:15:42 PM
> Subject: [vpnc-devel] VPNC Front End
>
>
> I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:
>
> cyggcrypt-11.dll
> cyggpg-error-0.dll
> cygiconv-2.dll
> cygintl-8.dll
> cygwin1.dll
>
> I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.
>
> I also provide the TAP drivers provided by OpenVPN.
>
> I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.
>
> I know there are probably quite a few people out there looking for something like this.
>
> https://sourceforge.net/project/showfiles.php?group_id=252530
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> vpnc-devel mailing list
> vpnc-devel [at] unix-ag
> https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
> http://www.unix-ag.uni-kl.de/~massar/vpnc/

_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/

stellarspace69 at yahoo

Feb 28, 2009, 4:53 PM

Post #6 of 9 (5419 views)
Permalink

Re: VPNC Front End [In reply to]

So I implemented your idea using 'tracert -d -h 1 <vpngateway>' and it falls back to the original method if that method fails. This is in 0.6.16. Maybe I've oversimplified it, but it's another one of those things that "works for me".

I'm not exactly sure how I would go about verifying that the device is setup correctly? What exactly do you mean by that? It has an IP? DNS?

________________________________
From: Tilman Schr�der <tilman.schroeder [at] tu-dortmund>
To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
Sent: Saturday, February 28, 2009 4:51:30 AM
Subject: Re: [vpnc-devel] VPNC Front End

Heyho,

you partly implemented the fixes, which are:
- Query "route print" for the route to 0.0.0.0 instead of looking for
"Default route" which only works for windows in english.

- however, looking at "route print 0.0.0.0" is still not a good idea
because this may not be the right route or the shortest way to the vpn
gateway. On linux, it is done by "ip route get <vpn-gateway-ip-address>"
which prints out the correct route. we need a similar program for
windows or a script that does this by looking at the whole routing
table. more at
http://lists.unix-ag.uni-kl.de/pipermail/vpnc-devel/2009-February/002979.html

- your script does not delete the wins and dns entries of the vpn tap device

- your script does not delete the routes set up at the connect stage

- it was necessary for me to set up the route to the vpn gateway at the
pre-init stage, otherwise vpnc was not able to establish the connection.
if it works for you, fine. I think it is the safest to set up this route
as early as possible, so you might consider changing this in your script

I did not test your frontend yet, I just looked at your vpnc-script.au3

I appreciate your sleep command before adding the routes, however, there
should be a command to check whether the device is set up correctly
before adding routes.

Hang in there,
Tilman

Joshua Bahnsen schrieb:
> What are the specific Vista and x64 fixes? You may not need them, vpnc works fine on Vista.
>
> The cygwin DLL is modified to use an alternate registry location, the front end relies on this registry location to function, you would then need to ensure those registry keys exist. Probably more work than it is worth. You should be able to just drop your vpnc.exe in the same directory, assuming you aren't linked against any further DLLs. I do not use the jscript file, I have implemented its functionality in an AutoIt script which has been compiled into an exe. I'm not a big fan of jscript.
>
> What does the output of vpnc look like during this two phase challenge? It should be easy to implement.
>
>
>
>
> ________________________________
> From: wayne chan <waynechan [at] yahoo>
> To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
> Sent: Thursday, February 26, 2009 10:30:32 PM
> Subject: Re: [vpnc-devel] VPNC Front End
>
>
> joshua, i downloaded your vpnc front-end and tested a bit on my Vista system.
> i have few questions about how to use your vpnc front-end to work with the
> my own copy of vpnc. This is my custom built vpnc with some Vista/x64 fixes.
>
> I noticed from your tarball, the bin directory has your copy of vpnc.exe and sh.exe
> along with your other *.dll files. If i want to use my own compiled vpnc.exe
> and vpnc-script-win.js is that all i need to do is to replace those files with my own ??
>
> Also my authentication requires 2-phase challenges..i.e. i need to provide 2 auth-challenges
> in sequence... While your GUI front-end only prompts for the first challenge but didn't
> prompts again when the 2nd challenge was requested by my Cisco vpn server...
> (i have Xauth Interactive set in my default.conf to have it working when doing command
> line connection). Is this something you can modify to address this 2-phase auth-challenge ??
>
> thanks...
>
> wayne chan
>
>
>
>
>
> ________________________________
> From: Joshua Bahnsen <stellarspace69 [at] yahoo>
> To: vpnc-devel [at] unix-ag
> Sent: Friday, February 20, 2009 11:15:42 PM
> Subject: [vpnc-devel] VPNC Front End
>
>
> I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:
>
> cyggcrypt-11.dll
> cyggpg-error-0.dll
> cygiconv-2.dll
> cygintl-8.dll
> cygwin1.dll
>
> I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.
>
> I also provide the TAP drivers provided by OpenVPN.
>
> I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.
>
> I know there are probably quite a few people out there looking for something like this.
>
> https://sourceforge.net/project/showfiles.php?group_id=252530
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> vpnc-devel mailing list
> vpnc-devel [at] unix-ag
> https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
> http://www.unix-ag.uni-kl.de/~massar/vpnc/

_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/

waynechan at yahoo

Mar 2, 2009, 1:12 PM

Post #7 of 9 (5424 views)
Permalink

Re: VPNC Front End [In reply to]

hi joshua,

I built my vpnc to run on Vista/X64 and your front-end GUI worked out great
if you can support 2-phase authentication... I was using vpnc release 0.5.3 +
Tilman Schroder's Vista Patch. (the one fixed the routing table using 0.0.0.0 routes).

Using your vpnc front-end, i got prompted (a pop-up) dialog for the 1st challenge
but i didn't get another prompted dialog for the 2nd challenge . . Is that somewhere you
can modify your GUI to allow users to define 1-phase or 2-phase challenge...

Here is my vpnc connection output with 2-phase authentication:
-------------------------------
Script started on Tue Feb 17 10:48:45 2009
^[]0;/etc/vpnc^G
^[.[.32mwaynec [at] vaio-sony-wayn ^[.[.33m/etc/vpnc^[.[.0m
$ /usr/local/sbin/vpnc
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Device: my-tap
TAP-Win32 Driver Version 9.4
Warning: using insecure memory!
Enter Username and Password.
Password for VPN xx12345 [at] 192: <------ 1st challenge here
Challenge: 9 4425 Response? <-----------------------2nd challenge
Password for VPN xx12345 [at] 192: <--------2nd response
Microsoft (R) Windows Script Host Version 5.7 <-------- then i got authenticated and connected
Copyright (C) Microsoft Corporation. All rights reserved.

VPN Gateway: 111.22.33.44
Internal Address: 155.166.77.88
Internal Netmask:
Interface: "my-tap"
Configuring "my-tap" interface...
done.
Configuring networks:
Gateway did not provide network configuration.
Route configuration done.

--------------------

thanks,

wayne

________________________________
From: Joshua Bahnsen <stellarspace69 [at] yahoo>
To: vpnc-devel [at] unix-ag
Sent: Friday, February 27, 2009 3:33:04 PM
Subject: Re: [vpnc-devel] VPNC Front End

What are the specific Vista and x64 fixes? You may not need them, vpnc works fine on Vista.

The cygwin DLL is modified to use an alternate registry location, the front end relies on this registry location to function, you would then need to ensure those registry keys exist. Probably more work than it is worth. You should be able to just drop your vpnc.exe in the same directory, assuming you aren't linked against any further DLLs. I do not use the jscript file, I have implemented its functionality in an AutoIt script which has been compiled into an exe. I'm not a big fan of jscript.

What does the output of vpnc look like during this two phase challenge? It should be easy to implement.

________________________________
From: wayne chan <waynechan [at] yahoo>
To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
Sent: Thursday, February 26, 2009 10:30:32 PM
Subject: Re: [vpnc-devel] VPNC Front End

joshua, i downloaded your vpnc front-end and tested a bit on my Vista system.
i have few questions about how to use your vpnc front-end to work with the
my own copy of vpnc. This is my custom built vpnc with some Vista/x64 fixes.

I noticed from your tarball, the bin directory has your copy of vpnc.exe and sh.exe
along with your other *.dll files. If i want to use my own compiled vpnc.exe
and vpnc-script-win.js is that all i need to do is to replace those files with my own ??

Also my authentication requires 2-phase challenges..i.e. i need to provide 2 auth-challenges
in sequence... While your GUI front-end only prompts for the first challenge but didn't
prompts again when the 2nd challenge was requested by my Cisco vpn server...
(i have Xauth Interactive set in my default.conf to have it working when doing command
line connection). Is this something you can modify to address this 2-phase auth-challenge ??

thanks...

wayne chan

________________________________
From: Joshua Bahnsen <stellarspace69 [at] yahoo>
To: vpnc-devel [at] unix-ag
Sent: Friday, February 20, 2009 11:15:42 PM
Subject: [vpnc-devel] VPNC Front End

I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:

cyggcrypt-11.dll
cyggpg-error-0.dll
cygiconv-2.dll
cygintl-8.dll
cygwin1.dll

I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.

I also provide the TAP drivers provided by OpenVPN.

I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.

I know there are probably quite a few people out there looking for something like this.

https://sourceforge.net/project/showfiles.php?group_id=252530

stellarspace69 at yahoo

Mar 3, 2009, 1:24 AM

Post #8 of 9 (5401 views)
Permalink

Re: VPNC Front End [In reply to]

Version 0.7.0 has preliminary 2-Phase authentication support, as I do not have a server configured to use this I'm just guessing this will work based on the text below. To enable this, go to the Connection Settings Page and check the 2-Phase checkbox. Once you click Connect, it will prompt you for the 2 phases of the authentication.

https://sourceforge.net/project/platformdownload.php?group_id=252530

________________________________
From: wayne chan <waynechan [at] yahoo>
To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
Sent: Monday, March 2, 2009 2:12:11 PM
Subject: Re: [vpnc-devel] VPNC Front End

hi joshua,

I built my vpnc to run on Vista/X64 and your front-end GUI worked out great
if you can support 2-phase authentication... I was using vpnc release 0.5.3 +
Tilman Schroder's Vista Patch. (the one fixed the routing table using 0.0.0.0 routes).

Using your vpnc front-end, i got prompted (a pop-up) dialog for the 1st challenge
but i didn't get another prompted dialog for the 2nd challenge . . Is that somewhere you
can modify your GUI to allow users to define 1-phase or 2-phase challenge...

Here is my vpnc connection output with 2-phase authentication:
-------------------------------
Script started on Tue Feb 17 10:48:45 2009
^[]0;/etc/vpnc^G
^[.[.32mwaynec [at] vaio-sony-wayn ^[.[.33m/etc/vpnc^[.[.0m
$ /usr/local/sbin/vpnc
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Device: my-tap
TAP-Win32 Driver Version 9.4
Warning: using insecure memory!
Enter Username and Password.
Password for VPN xx12345 [at] 192: <------ 1st challenge here
Challenge: 9 4425 Response? <-----------------------2nd challenge
Password for VPN xx12345 [at] 192: <--------2nd response
Microsoft (R) Windows Script Host Version 5.7 <-------- then i got authenticated and connected
Copyright (C) Microsoft Corporation. All rights reserved.

VPN Gateway: 111.22.33.44
Internal Address: 155.166.77.88
Internal Netmask:
Interface: "my-tap"
Configuring "my-tap" interface...
done.
Configuring networks:
Gateway did not provide network configuration.
Route configuration done.

--------------------

thanks,

wayne

________________________________
From: Joshua Bahnsen <stellarspace69 [at] yahoo>
To: vpnc-devel [at] unix-ag
Sent: Friday, February 27, 2009 3:33:04 PM
Subject: Re: [vpnc-devel] VPNC Front End

What are the specific Vista and x64 fixes? You may not need them, vpnc works fine on Vista.

The cygwin DLL is modified to use an alternate registry location, the front end relies on this registry location to function, you would then need to ensure those registry keys exist. Probably more work than it is worth. You should be able to just drop your vpnc.exe in the same directory, assuming you aren't linked against any further DLLs. I do not use the jscript file, I have implemented its functionality in an AutoIt script which has been compiled into an exe. I'm not a big fan of jscript.

What does the output of vpnc look like during this two phase challenge? It should be easy to implement.

________________________________
From: wayne chan <waynechan [at] yahoo>
To: vpnc list to send bug reports and discussions with developers <vpnc-devel [at] unix-ag>
Sent: Thursday, February 26, 2009 10:30:32 PM
Subject: Re: [vpnc-devel] VPNC Front End

joshua, i downloaded your vpnc front-end and tested a bit on my Vista system.
i have few questions about how to use your vpnc front-end to work with the
my own copy of vpnc. This is my custom built vpnc with some Vista/x64 fixes.

I noticed from your tarball, the bin directory has your copy of vpnc.exe and sh.exe
along with your other *.dll files. If i want to use my own compiled vpnc.exe
and vpnc-script-win.js is that all i need to do is to replace those files with my own ??

Also my authentication requires 2-phase challenges..i.e. i need to provide 2 auth-challenges
in sequence... While your GUI front-end only prompts for the first challenge but didn't
prompts again when the 2nd challenge was requested by my Cisco vpn server...
(i have Xauth Interactive set in my default.conf to have it working when doing command
line connection). Is this something you can modify to address this 2-phase auth-challenge ??

thanks...

wayne chan

________________________________
From: Joshua Bahnsen <stellarspace69 [at] yahoo>
To: vpnc-devel [at] unix-ag
Sent: Friday, February 20, 2009 11:15:42 PM
Subject: [vpnc-devel] VPNC Front End

I created an open source VPNC Front End for Windows, it is currently hosted on Sourceforge. I'm sending an email to this list because I want to make sure I'm not stepping on any toes. I have not modified any of the vpnc sources, they are just compiled with cygwin. I am providing in an installer the required cygwin libraries:

cyggcrypt-11.dll
cyggpg-error-0.dll
cygiconv-2.dll
cygintl-8.dll
cygwin1.dll

I modified the source of cygwin so I do not interfere with other cygwin applications. It will load in an entirely separate memory space and it uses an alternate registry location.

I also provide the TAP drivers provided by OpenVPN.

I'm in the process of setting up the Sourceforge site below, but the main sources and the installer are there.

I know there are probably quite a few people out there looking for something like this.

https://sourceforge.net/project/showfiles.php?group_id=252530

daveroth at acm

Mar 5, 2009, 8:54 AM

Post #9 of 9 (5369 views)
Permalink

Re: VPNC Front End [In reply to]

On 2/20/2009 11:15 PM, Joshua Bahnsen wrote:
> I created an open source VPNC Front End for Windows, it is currently
> hosted on Sourceforge. I'm sending an email to this list because I want
> to make sure I'm not stepping on any toes. I have not modified any of
> the vpnc sources, they are just compiled with cygwin. I am providing in
> an installer the required cygwin libraries:
>
> cyggcrypt-11.dll
> cyggpg-error-0.dll
> cygiconv-2.dll
> cygintl-8.dll
> cygwin1.dll
>
> I modified the source of cygwin so I do not interfere with other cygwin
> applications. It will load in an entirely separate memory space and it
> uses an alternate registry location.
>
> I also provide the TAP drivers provided by OpenVPN.
>
> I'm in the process of setting up the Sourceforge site below, but the
> main sources and the installer are there.

I applaud this effort, but you need to distribute the source code
(whether modified or not) for the Cygwin DLLs, and possibly other
packages like OpenVPN and VPNC itself. Cygwin is GPL'd, so if you
distribute the binaries, you have to distribute the source, too [1].

I don't see any real reason to use a modified Cygwin DLL. The Cygwin
folks take great pains to ensure backwards compatibility, so you could
instruct users to install Cygwin from www.cygwin.com and add the Cygwin
bin directory to their path [2]. That would obviate the requirement for
distributing sources.

[1] http://www.gnu.org/licenses/gpl-faq.html#UnchangedJustBinary

[2] Note: Do NOT instruct users to copy the cygwin1.dll to the VPNC
Front End directory.

--
David Rothenberger ---- daveroth [at] acm

buzzword, n:
The fly in the ointment of computer literacy.

_______________________________________________
vpnc-devel mailing list
vpnc-devel [at] unix-ag
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads