Lev Stipakov e34094e30d Refactor reauthentication logic ...

The reauthentication logic differs from openvpn2
and the code is a bit hard to follow. Simplify
the code and make it behave like in openvpn2.

 - password is cached by default

 - password is purged when auth-nocache is presented in a local config or pushed

 - when AUTH_FAILED is received and we have no session-id, throw a fatal error

 - when AUTH_FAILED is received and user interaction is required for
   authentication (MFA), throw a fatal error

 - when AUTH_FAILED is received, user interaction is not required
   for authentication and either we have a cached password OR password is not
   needed, we reconnect.

Password is "needed" when non-empty password is provided.

User interaction is required for static/dynamic challenge and SAML.

Signed-off-by: Lev Stipakov <lev@openvpn.net>

2024-05-08 16:39:24 +00:00

..

CMakeLists.txt

client: Switch to UseSWIG instead of manual custom command

2024-03-07 00:29:36 +02:00

ovpncli.cpp

Refactor reauthentication logic

2024-05-08 16:39:24 +00:00

ovpncli.hpp

Refactor reauthentication logic

2024-05-08 16:39:24 +00:00

ovpncli.i

client: Explicitely use int as socket type in SWIG

2024-03-06 13:00:04 +01:00