GitLab

Loop over all possible 32-bit IPv4 routes. We're guaranteed not to get more.

At this time, openfortivpn limits the number of routes to 65,535; so we
should cater for at least that many routes.

[lkundrak@v3.sk: clamp at G_MAXUINT - 1. One less possible route, but
improves readability]

#14
!10

We will never see a negative route environment variable (VPN_ROUTE_DEST_-1),
so make the variable unsigned.

GNOME/NetworkManager-fortisslvpn#14
GNOME/NetworkManager-fortisslvpn!10

Make openfortivpn invoke a pinentry-compatible helper that proxies the
password requests back to the daemon.

Also, defer OTP from NeedSecrets() for interactive connection. Otherwise
we're asking too early for poor souls who get OTP via SMS only once they
initiated the authentication and supplied the password.

!9

There is a mismatch between the documentation and the code. Option --listen is
not recognized but --local is. I changed all occurrences of local to listen to
match the documentation and because it seems more clear to me.

!8

We may want to keep libnm-glib enabled f28 for some time. We'll fix this
instead.

This reverts commits d3bc4d85 and
3868d8ca.

We need the ITS rules for gettext.

Fixes subdir build from git checkout.

This reduces the chance pppd does something stupid. It almost always does,
by executing /etc/ppp/ip-up, and it can not be told not to.

This reduces the chance pppd does something stupid. It almost always does,
by executing /etc/ppp/ip-up, and it can not be told not to.

Everything else is a bad idea. Always.

Add an option to enable it.

Otherwise the IPCP packet that has address and ipcp also has compression
config before and openfortinets's packet_is_ip_plus_dns() doesn't match it.