Re: [Openvpn-devel] two tls-auth questions

2012-03-23 Thread Jan Just Keijser
Mr Dash Four wrote: Is there a way to generate a symmetric ta.key without using "openvpn --genkey --secret ta.key"? yep, just use any freeform key that has enough entropy. For example, this ta.key file is good enough ]# cat mykey garble warble we need lots of entropy So, in

Re: [Openvpn-devel] two tls-auth questions

2012-03-23 Thread Mr Dash Four
Is there a way to generate a symmetric ta.key without using "openvpn --genkey --secret ta.key"? yep, just use any freeform key that has enough entropy. For example, this ta.key file is good enough ]# cat mykey garble warble we need lots of entropy So, in theory, I could use, for example,

Re: [Openvpn-devel] two tls-auth questions

2012-03-23 Thread Jan Just Keijser
Mr Dash Four wrote: Is there a way to generate a symmetric ta.key without using "openvpn --genkey --secret ta.key"? yep, just use any freeform key that has enough entropy. For example, this ta.key file is good enough ]# cat mykey garble warble we need lots of entropy when openvpn starts

Re: [Openvpn-devel] discussion: get rid of useless HAVE_* tests

2012-03-23 Thread Alon Bar-Lev
Hello Gert, There are a lot of extra cleanups to do in code. I left this as-is as I have some thoughts of further work on platform.c, like splitting it into its own library. The problem is to support the loggings, need to allocate some time to properly integrate that. So please wait with this

Re: [Openvpn-devel] [PATCH 49/52] build: move wrappers into platform module

2012-03-23 Thread Gert Doering
Hi, On Fri, Mar 09, 2012 at 10:24:30AM +0200, Samuli Seppänen wrote: > I give this one a feature-ACK, but could somebody else take a better > look at the actual code changes? code ACK. Verified that code is just moved + function names renamed, and in a few places, parts of functions moved to a

[Openvpn-devel] discussion: get rid of useless HAVE_* tests

2012-03-23 Thread Gert Doering
Hi, reviewing some of the build patches, I found tests like #ifdef HAVE_CHDIR or #ifdef HAVE_GETPID ... which is craziness. All platforms OpenVPN runs on (except for WIN32) are fully POSIX compliant, and those are all required to have these functions - so testing for them, and having

Re: [Openvpn-devel] [openvpn-devel] OpenVPN 2.1.4/Linux: route-gatewy not working

2012-03-23 Thread Samuel CUELLA
On 03/23/2012 03:34 PM, David Sommerseth wrote: > > Hi Samuel, > > Interesting finding you've found here. However, we're not developing the > 2.1 branch any more. So if you could try the latest git master branch > [1], that'd be great ... And if that still fails, try to apply your patch > to

Re: [Openvpn-devel] [PATCH 48/52] cleanup: move console related function into its own module

2012-03-23 Thread Gert Doering
Hi, On Thu, Mar 08, 2012 at 03:23:50PM +0200, Samuli Seppänen wrote: > Currently many files (42) include misc.h, which is a lot. Also, misc.c > is among the biggest files in the codebase[1], so splitting it into > smaller files with good names and well-defined functionality makes sense: > > "Oh,

Re: [Openvpn-devel] [openvpn-devel] OpenVPN 2.1.4/Linux: route-gatewy not working

2012-03-23 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23/03/12 13:12, Samuel CUELLA wrote: > Hi list, > > I've been struggling with OpenVPN bridge mode an entire day before > going down to the source code: > > The documentation (man page) says that the server-bridge > configuration directive expands

Re: [Openvpn-devel] 2.3alpha1 fails on OS X when the --up argument contains more than an execution path

2012-03-23 Thread Gert Doering
Hi, sorry for not coming back to this. We *do* appreciate (very much!) that you are interested and working on getting 2.3-alpha into tunnelblick - but life got in the way, as usual. On Thu, Mar 08, 2012 at 04:57:11PM -0500, Jonathan K. Bullard wrote: > Below is a patch to fix this problem. >

Re: [Openvpn-devel] New generic buildsystem: lzo enabled or disabled by default?

2012-03-23 Thread Samuli Seppänen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Alon, Are you saying that there's no way you can generate a series of fixes (=patches) that apply on top of your previous patches? Or, if the fixes are fairly trivial, you could provide a diff of the old and new trees and explain what changes are

[Openvpn-devel] [openvpn-devel] OpenVPN 2.1.4/Linux: route-gatewy not working

2012-03-23 Thread Samuel CUELLA
Hi list, I've been struggling with OpenVPN bridge mode an entire day before going down to the source code: The documentation (man page) says that the server-bridge configuration directive expands to more directives, including a "route-gateway" push. The push is actually done and is received on

[Openvpn-devel] two tls-auth questions

2012-03-23 Thread Mr Dash Four
Is there a way to generate a symmetric ta.key without using "openvpn --genkey --secret ta.key"? Is it possible to embed the contents of the above file in my openvpn config file in a similar fashion as it is done with the tag for example? If so, what tag should I use for this?