At the moment dco-win doesn't support --persist-tun and --server,
so check for these options at startup time.
Signed-off-by: Antonio Quartulli <a...@unstable.cc>
Signed-off-by: Lev Stipakov <l...@openvpn.net>
---
Changes from v102:
* remove platform defined log level and make check_options_ calls on
Windows explicit and document why.
Changes from v101:
* rebased
* remove call to dco_check_option_ from verify() and reuse invocation
that was already implemented for linux/freebsd in mutate_ce()
* hide log level to use in case of option check failure inside
dco_win/linux/freebsd.h
Changes from v100:
* improved commit title/message
---
src/openvpn/dco.c | 17 +++++++++++++++--
src/openvpn/options.c | 8 +++++++-
2 files changed, 22 insertions(+), 3 deletions(-)
diff --git a/src/openvpn/dco.c b/src/openvpn/dco.c
index 757ac19b..0aeecc54 100644
--- a/src/openvpn/dco.c
+++ b/src/openvpn/dco.c
@@ -225,7 +225,20 @@ dco_update_keys(dco_context_t *dco, struct tls_multi
*multi)
bool
dco_check_startup_option_conflict(int msglevel, const struct options *o)
{
-#if defined(TARGET_LINUX)
+#if defined(_WIN32)
+ if (o->mode == MODE_SERVER)
+ {
+ msg(msglevel, "Only client and p2p data channel offload is supported "
+ "with ovpn-dco-win.");
+ return false;
+ }
+
+ if (o->persist_tun)
+ {
+ msg(msglevel, "--persist-tun is not supported with ovpn-dco-win.");
+ return false;
+ }
+#elif defined(TARGET_LINUX)
/* if the device name is fixed, we need to check if an interface with this
* name already exists. IF it does, it must be a DCO interface, otherwise
* DCO has to be disabled in order to continue.
@@ -250,7 +263,7 @@ dco_check_startup_option_conflict(int msglevel, const
struct options *o)
strerror(-ret), ret);
}
}
-#endif /* if defined(TARGET_LINUX) */
+#endif /* if defined(_WIN32) */
#if defined(HAVE_LIBCAPNG)
/* DCO can't operate without CAP_NET_ADMIN. To retain it when switching
user
diff --git a/src/openvpn/options.c b/src/openvpn/options.c
index 2415c1a8..272f8741 100644
--- a/src/openvpn/options.c
+++ b/src/openvpn/options.c
@@ -3669,10 +3669,16 @@ options_postprocess_mutate(struct options *o, struct
env_set *es)
"incompatible with each other.");
}
+#if defined(TARGET_LINUX) && defined(TARGET_FREEBSD)
/* check if any option should force disabling DCO */
-#if defined(TARGET_LINUX) || defined(TARGET_FREEBSD)
o->tuntap_options.disable_dco = !dco_check_option_conflict(D_DCO, o)
||
!dco_check_startup_option_conflict(D_DCO, o);
+#elif defined(_WIN32)
+ /* in Windows we have no 'fallback to non-DCO' strategy, so if a
conflicting
+ * option is found, we simply bail out by means of M_USAGE
+ */
+ dco_check_option_conflict(M_USAGE, o);
+ dco_check_startup_option_conflict(M_USAGE, o);
#endif
if (dco_enabled(o) && o->dev_node)
--
2.30.2
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
