synchronized codebase with main branch, bringing this up to date with 2.1rc7a. no significant changes other than supporting options in that release of openvpn.exe

synchronized codebase with main branch, bringing this up to date with 2.1rc2e. I haven't personally added anything to it, but it picks up all fixes from the main branch of 2.1.

future work I'm going to focus on in the short term is:
* various bugs in the controlling gui (OpenVPN Connection Manager) causing 'invisible' vpn sessions.
* re-engineer the controlling gui (OpenVPN Connection Manager) to either be in .NET or native SDK. This is for preparation to possibly support other non-PocketPC platforms like Smartphone. I might also rename it just because the name choice unfortunately collides with Windows Connection Manager, and why would I want that?
* CE6 support; been meaning to do this for a while

I'm going to continue work in the 2.1 branch only, and discontinue 2.0.5.  Really, 2.1.0 is quite stable and is backwards compatible with 2.0.x servers, so it saves me a bunch of time doing merges.  I've tested 2.1.0 much more than in the last build and use it more or less daily on my PPC6700.  The 2.0.5 build is still available if you need it.

This build mostly tracks changes in the official 2.1.0 OpenVPN project.  The Windows Connection Manger code was moved into openvpn.exe proper (no visible change to the end user).  I'll document this feature forthwith, and intend to rework this whole web site sometime this week as it has gotten a bit behind reality...

Continuing work has been shifted to the 2.1 rc branch of openvpn.  The 2.0.5-derived code is being left as-is despite outstanding issues because 2.1 is very stable and it's too much to maintain the two branches in the time I have to invest.  I'd suggest using 2.1 unless you just can't get it to work and you could get 2.0.5 to work.

Aside from picking up openvpn 2.1 features, there have been some minor fixes/changes:

fix printout problem when cannot open device and using --dev-node (previously printed trash)

Minor enhancement to allow specifying adapter name (e.g. "TAP Device 1" with --dev-node as alternative to device name (e.g. TAP1: )

Workaround for PPP adapter behaviour where IP is not on the the same subnet as the Gateway.  This caused route setup problems when using redirect-gateway over some dialup connections (this depends on how the provider configures their service).

Provide capability to use the Windows Connection Manager (henceforth WCM to save reading) to get network connection that VPN will tunnel through.  This was not previously done, and led to dropped connections that were not on 'zero cost' networks; e.g. dialup and phone networks.  Some explanation is in order:

WCM is a Windows Mobile contraption (i.e. there isn't one on desktop).  It's supposed to make connecting easier by having an application say where it wants to go and then it will figure out which network card to turn on based on some internal algorithm.  It will also drop a network connection if it finds itself to have a 'better' one on-hand.

Previously, openvpn had used whatever network happened to be on at the time it started, which is how it worked on desktop.  Later, after it had connected, a new virtual NIC (i.e. the TAP adapter) would be brought into the 'media connected' state.  So there are two adapters whilst connected:  the physical one that sends the tunnel over the Internet, and the virtual one that provides the tunnel implementation.

After this, when another application (such as PocketIE or MSTSC) asks WCM to make sure there's some way to communicate, it notices that it has two adapters, and one of them it thinks is more costly than the other, so it shuts it down the one it feels is more costly.

To work with WCM I added some more settings to specify:

• use the connection manager; I put this in mostly so if someone finds that this is problematic they can turn it off.  My expectation is that this will be fine to always leave on.
• Which network to request.  You should select the real network you want; e.g. on my phone it is called 'Sprint'.  It's certainly something else for other folks who are not using Sprint or have a modem or the like.  I haven't figured out a way to make the right choice programmatically, so you'll have to manually configure it for now.
• there is an option to specify 'exclusive' use of the connection.  I would leave it on; this seems to be part of the key to keeping the connection from being dropped.

Short story is that I don't really love this, and will almost certainly change it before release to something more usable, but I did want to provide something that folks can try out and confirm if this does fix their phone-related problems.  If so then I'll work on recasting it into a more usable form.

Initial Greek GUI translation; thanks to Nikos Zaharioudakis for the translation effort. Help file pending.
Icons changed; thanks to Mathias Sundman of OpenVPN GUI for permission to use the icons from his project, which are decidedly better-looking
Added additional icon state to show that a connection is in progress.
Added main-level menu item to stop all VPN instance. This provides convenience over drilling down through the GUI just to stop the tunnel.

Initial German GUI translation; thanks to Boris Friedrichs for the translation effort. Help file pending.

Reworked language dll.  WM5 binaries did not seem to enjoy the resources in an MFC Extension dll.  This manifested itself especially with crashes whenever a dialog box was presented whose resource came from the language dll (including About, and Authentication).  I converted this to a resource only (no code) dll.  Most folks probably did not notice the About box, however folks with password protected private keys and/or the need to authenticate with the server definitely would.  Interestingly, WM2003 does not exhibit the problem.

Corrected help file linkage in Portuguese build, along with some minor text changes.

 Added localized build for the language:

• Portuguese

Thanks go to Pedro Cancela for performing this translation.

Temporary work-around for WM5 About Box anomaly reported by Dr Fix.  WM5 does not seems to play well with dialogs in a MFC 'extension' dll.  For the short term I replaced the About Box with a message box.

Re-added CAB installers to files page.  Some folks prefer CAB installers (because they don't use Active Sync) and they're also good for installing directly from the web to your device.

auth-user-pass can take a file that contains the user name and password to use (avoiding the dialog box).  This functionality was absent in previous builds because a build option was not specified to include it.

minor updates to French translation.

Added localized builds for the languages:

• English
• French
• Italian
• Polish

Thanks go to SQ7RO, Drakpzone, and Cepexa for performing these translations.  Any misplacement of text are my fault.

auth-user-pass can take a file that contains the user name and password to use (avoiding the dialog box).
This functionality was absent in previous builds because a build option was not specified to include it.minor updates to French translation.

Initial support for 'proto tcp'. Proto TCP is inherently sub-optimal for VPN applications, yet is very handy for traversing some firewalls that out of your administrative control.
The fix involved working around the problem: 'most of the time WSARecv will not queue overlapped IO unless they can be immediately satisfied'. This gave rise to high CPU usage in openvpn.exe, which made the device appear locked up and otherwise generally unusable.

Support for 'ip-win32 dynamic'. This is the default when the the ip-win32 option is not explicitly set. Word on the streets is that this method is better than ipapi, and regardless of that certain configuration options won't work otherwise (e.g. 'dhcp-option DNS ...' which is typically pushed from the server).
This option didn't work before, so existing confguration files probably have it set to 'ipapi'. I would delete or comment-out that line.
This change affects the TAP driver, so you will need to do a full uninstall taking care that the previous TAP driver is definitely gone. If you're extra paranoid, the driver binary is located in the \Windows directory with the filename of 'tap-ce.dll'. When an uninstall happens successfully, this file should be absent.

Added password query dialog to ask user for password when needed.
Added management tab for viewing detailed info on a running vpn instance.
Fixed greying of config file menu items when they are already running.
Change visible aspect of icon on today screen when a vpn instance is running.

Fixed MRU (most recently used) menu feature. Provided SIP for use on Settings page.
Added debug build as downloadable CAB.

Added config parsing logic to issue warning when it detects 'proto tcp'. This option causes serious interactions with GWES for unknown reasons. Use proto UDP instead. Thanks to HotSpotVPN for the generous use of their server and time in diagnosing this.

Open Alpha 0 published