On Tue, Oct 21, 2014 at 6:43 AM, Gert Doering <g...@greenie.muc.de> wrote:
> Yes, exactly. In essence, you have a windows service running with full
> privileges, which is instructed by the GUI to run an openvpn.exe process
> (with user privs, so OpenVPN can't do damage) and OpenVPN communicates
> back to the service what should be ifconfig'ed and what routes should
> be installed. So the network config is done by the service, and
> undone when OpenVPN exits or crashes.
That's what I am hoping for -- either an extension to the management
interface, or an similar but separate interface.
> Unfortunately, right now, there is nothing at all yet - there is most of
> the code, but it's still living in Heiko's private tree. We plan to meet
> in person in November ("Munich Hackathon") and hopefully this will unravel
> the knot that's holding up this change.
I look forward to hearing about it.
> How do you handle things in Tunnelblick today? Run OpenVPN "as root"?
Yes, exactly. I'd love to make that not necessary.
Thanks for the info.
Jon
