Re: [Openvpn-devel] Adding Google Analytics code to Trac?

[Christian Rank]

On 10/24/18 1:47 PM, Samuli Seppänen wrote:

Hi,

The OpenVPN Inc. webmaster would like to add Google Analytics to
community.openvpn.net, i.e. our Trac wiki/bug tracker. I said we need to
consult the community first because GA can be seen as a form of spying.
Here's our webmaster's view on this subject:

[...]

"The goal of this would be to understand what information first-time
users are finding the most valuable on community.openvpn.net."

"As this is a publicly accessible community without the requirement to
join to read the articles, it would be advantageous for all to
understand which pieces of content the public are finding the most
useful, what encourages them to become a part of the community, and what
potentially persuaded them to use start using a commercial product."

[...]
---

In today's community meeting there was some concern about the spying
aspect of Google Analytics, but nobody was strongly opposed. This was I
believe, in part, because it is fairly easy to block Google Analytics if
one so wishes.

So, what do _you_ think?



Hi,

I would propose to evaluate the usage of Matomo (former Piwik) as 
analytics tool which is much more privacy friendly than Google Analytics:

https://matomo.org/

Best regards,
Christian


___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

[Christian Rank]

On 21.10.2015 00:39, openvpn-devel-requ...@lists.sourceforge.net wrote:
> From: ValdikSS 
> 
> By the way, there is an open-source SecurePoint VPN client 
> (https://sourceforge.net/projects/securepoint/) which handles current 
> versions of Windows very well.

Hi,

it seems that the current version of Securepoint's VPN client is no
longer open source. The repo at
> https://github.com/Securepoint/openvpn-client
has the source for version 1.0.3 (last commit 2 years ago), whereas the
current version (binaries) on sf.net is 2.0.10.

Securepoint's website
http://www.securepoint.cc/products-vpn-clients.html
says "The Securepoint OpenVPN client is free of charge" - the term "open
source" is not mentioned.

Regards,
Christian

-- 
Dr. Christian Rank
Rechenzentrum Universität Passau
Bereich Netzwerk und Telekommunikation
IT-Sicherheitsbeauftragter der Universität
Innstr. 33
D-94032 Passau
GERMANY



smime.p7s
Description: S/MIME Cryptographic Signature

Re: [Openvpn-devel] Help with testing OpenVPN 2.3.3 installers with tap-windows6? (Openvpn-devel Digest, Vol 95, Issue 44)

[Christian Rank]

On 04/30/2014 02:15 PM, Samuli Seppänen wrote:
> 
>> On 04/29/2014 10:02 PM, Samuli Sepp?nen wrote:
>>> Hi all,
>>>
>>> I built OpenVPN 2.3.3 installers that contain tap-windows6 (NDIS 6) drivers:
>>>
>>> <http://build.openvpn.net/downloads/temp/ndis6>
>>>
>>> Note the build number, "605", where the first digit ("6") means "comes
>>> with an NDIS 6 driver".
>>>
>>> I tested the 64-bit version on Win7 64-bit and it seemed to work ok, but
>>> my testing was anything but extensive.  So, if [some of] you happen to
>>> have a non-critical Windows box(es) lying around it'd be great if you
>>> could test whether the new driver works ok in your environment. I
>>> suggest removing any previous OpenVPN installations, installing the new
>>> package and then verifying the driver version using the Device Manager;
>>> the NDIS 5 driver version is 9.9.2, whereas this new driver is 9.21.0
>>>
>>> Note that as tap-windows6 is still an unproven driver it can BSOD. We
>>> haven't experienced any problems with it, but it's best too keep that
>>> possibility in mind.
>>>
>>> We will soon start offering the OpenVPN installer with NDIS 6-driver as
>>> an option and hopefully soon afterwards make them the default option for
>>> Windows Vista and above.
>>>
>> Hello,
>>
>> I've just done some testing on Win7 64-bit (german localization) and
>> didn't notice any problems. However, driver assembly version is
>> indicated as "9.0.0.21", not "9.21.0". (?)
>>
>> Regards,
>>  Christian
>>
> Thanks for testing, Christian!
> 
> I believe that odd version number is to be expected, and really boils
> down to formatting differences. Similarly the old tap-windows (NDIS 5)
> driver will report 9.0.0.9 as it's version - in our parlance that
> translates to 9.9.x.
> 

Hello Samuli,

thanks for clarification. I've now tested successfully on Win 8.1 64-bit
(german localization). Version numbers are the same as on Win 7.

Regards,
Christian

-- 
Dr. Christian Rank
Rechenzentrum Universität Passau
Bereich Netzwerk und Telekommunikation
IT-Sicherheitsbeauftragter der Universität
Innstr. 33
D-94032 Passau
GERMANY
Tel.: 0851/509-1838
Fax:  0851/509-1802



smime.p7s
Description: S/MIME Cryptographic Signature

Re: [Openvpn-devel] Help with testing OpenVPN 2.3.3 installers with tap-windows6? (Openvpn-devel Digest, Vol 95, Issue 44)

[Christian Rank]

On 04/29/2014 10:02 PM, Samuli Sepp?nen wrote:
> Hi all,
> 
> I built OpenVPN 2.3.3 installers that contain tap-windows6 (NDIS 6) drivers:
> 
> <http://build.openvpn.net/downloads/temp/ndis6>
> 
> Note the build number, "605", where the first digit ("6") means "comes
> with an NDIS 6 driver".
> 
> I tested the 64-bit version on Win7 64-bit and it seemed to work ok, but
> my testing was anything but extensive.  So, if [some of] you happen to
> have a non-critical Windows box(es) lying around it'd be great if you
> could test whether the new driver works ok in your environment. I
> suggest removing any previous OpenVPN installations, installing the new
> package and then verifying the driver version using the Device Manager;
> the NDIS 5 driver version is 9.9.2, whereas this new driver is 9.21.0
> 
> Note that as tap-windows6 is still an unproven driver it can BSOD. We
> haven't experienced any problems with it, but it's best too keep that
> possibility in mind.
> 
> We will soon start offering the OpenVPN installer with NDIS 6-driver as
> an option and hopefully soon afterwards make them the default option for
> Windows Vista and above.
> 

Hello,

I've just done some testing on Win7 64-bit (german localization) and
didn't notice any problems. However, driver assembly version is
indicated as "9.0.0.21", not "9.21.0". (?)

Regards,
Christian

-- 
Dr. Christian Rank
Rechenzentrum Universität Passau
Bereich Netzwerk und Telekommunikation
IT-Sicherheitsbeauftragter der Universität
Innstr. 33
D-94032 Passau
GERMANY
Tel.: 0851/509-1838
Fax:  0851/509-1802



smime.p7s
Description: S/MIME Cryptographic Signature

[Openvpn-devel] [PATCH] OpenVPN Windows uninstallation does not remove TAP driver

[Christian Rank]

Author: Christian Rank 

32-bit Windows version of OpenVPN installed on a 64-bit Windows does not
remove TAP driver on uninstallation.

If you install OpenVPN on a 64-bit Windows using the 32-bit installer from
> http://swupdate.openvpn.org/community/releases/openvpn-install-2.3.2-I003-i686.exe
the TAP driver gets installed by default (if not deselected during
installation).

However, uninstalling the OpenVPN software leaves the TAP driver installed.

Here is patch for the NSIS configuration file which corrects this
installer issue.

Signed-off-by: Christian Rank 

-- 
Dr. Christian Rank
Rechenzentrum Universität Passau
Bereich Netzwerk und Telekommunikation
IT-Sicherheitsbeauftragter der Universität
Innstr. 33
D-94032 Passau
GERMANY
Tel.: 0851/509-1838
Fax:  0851/509-1802

*** openvpn.nsi	2013-09-26 11:19:46.0 +0200
--- openvpn-20130926.nsi	2013-09-26 14:26:16.0 +0200
***
*** 509,516 
--- 509,519 
  	Sleep 3000
  
  	!ifdef USE_TAP_WINDOWS
+ SetRegView 64
  		ReadRegStr $R0 HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\${PACKAGE_NAME}" "tap"
+ 		ReadRegStr $R1 HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\${PACKAGE_NAME}" "tap"
  		${If} $R0 == "installed"
+ 		${OrIf} $R1 == "installed"
  			ReadRegStr $R0 HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TAP-Windows" "UninstallString"
  			${If} $R0 != ""
  DetailPrint "TAP UNINSTALL"
***
*** 518,523 
--- 521,527 
  Pop $R0 # return value/error/timeout
  			${EndIf}
  		${EndIf}
+ SetRegView lastused
  	!endif
  
  	${un.EnvVarUpdate} $R0 "PATH" "R" "HKLM" "$INSTDIR\bin"



smime.p7s
Description: S/MIME Cryptographic Signature

Re: [Openvpn-devel] Openvpn-devel Digest, Vol 53, Issue 7

[Christian Rank]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> Date: Mon, 18 Oct 2010 18:41:39 +0200
> From: Alberto Gonzalez Iniesta 
> Subject: Re: [Openvpn-devel] Errors adding routes on Windows 7 with
>   OpenVPN 2.1.3
> To: openvpn-devel@lists.sourceforge.net
> Message-ID: <20101018164138.gb16...@lib.inittab.org>
> Content-Type: text/plain; charset=iso-8859-1
> 
> On Mon, Oct 18, 2010 at 05:50:44PM +0200, Christian Rank wrote:
>> Hello,
>>
>> we noticed a strange problem with OpenVPN 2.1.3 on a Windows 7 client
>> here: The VPN tunnel to an OpenVPN server does no longer work since the
>> OpenVPN 2.1.3 software tries to insert many strange routes into the
>> Windows 7 routing tables. With OpenVPN 2.1.1, all goes well. Our OpenVPN
>> server is running on OpenVPN 2.1_rc15 i686-pc-linux-gnu.
>>
>> I have attached the Windows OpenVPN log file (with verbosity 4).
>>
>> Maybe this is a bug in the Windows implementation of OpenVPN 2.1.3?
>>
> 
> Hi Christian,
> 
> It's not a bug in the Windows implementation but in OpenVPN 2.1.3
> itself. The bug is reported and it is being worked in.
> I think you're using 'remote_host' on your client configuration (or
> pushing it from the server). If that's the case, try changing that with
> the IP of the VPN server and see if that fixes it in the meantime.

Hi Alberto,

you are right. It was exactly "remote_host" that caused our problem.
After replacing this with the real IP of our VPN gateway, all goes well
again.

Thank you very much for your help.

Best regards,
Christian

- -- 
Dr. Christian Rank
Rechenzentrum Universität Passau
Bereich Netzwerk und Telekommunikation
Innstr. 33
D-94032 Passau
GERMANY
Tel.: 0851/509-1838
Fax:  0851/509-1802
PGP public key see http://www.rz.uni-passau.de/mitarbeiter/rank
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iJwEAQECAAYFAky9OAUACgkQICQoVWVVBdW/AwP+I3j2qYBi8N0EaWMeHuEAOFon
HgUXJx4EaD3JdYWHq1iaGT2r8Pvp76wiEtzsiRXSti+K1LebcgzO5qKFG8ffeLQq
FliOx4byYgW6X7hVqINbgJmpZ9n/xCkD2SRMmLiuz5N2d1wj48ZYD9+s/v2msWEg
QRp0/f/3vf+eELDL11A=
=gLRG
-END PGP SIGNATURE-

[Openvpn-devel] Errors adding routes on Windows 7 with OpenVPN 2.1.3

[Christian Rank]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

we noticed a strange problem with OpenVPN 2.1.3 on a Windows 7 client
here: The VPN tunnel to an OpenVPN server does no longer work since the
OpenVPN 2.1.3 software tries to insert many strange routes into the
Windows 7 routing tables. With OpenVPN 2.1.1, all goes well. Our OpenVPN
server is running on OpenVPN 2.1_rc15 i686-pc-linux-gnu.

I have attached the Windows OpenVPN log file (with verbosity 4).

Maybe this is a bug in the Windows implementation of OpenVPN 2.1.3?

Thanks in advance for any help,
Christian

- -- 
Dr. Christian Rank
Rechenzentrum Universität Passau
Bereich Netzwerk und Telekommunikation
Innstr. 33
D-94032 Passau
GERMANY
Tel.: 0851/509-1838
Fax:  0851/509-1802
PGP public key see http://www.rz.uni-passau.de/mitarbeiter/rank
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iJwEAQECAAYFAky8bM8ACgkQICQoVWVVBdXzYQQAlDytBOe1ssO6hgghgd80Kfa5
PY+7NkSLg+0ejCtEv2zLJ28YXf0Up5164celXVY2Hd+xjNXuUNOPezQ5cV2/agAh
ZIR97cfGZx0gDl92E7dwo0enCL23n/fwEnzJD9VkrjJ13eIiKIRhGZO297vSTsL2
jvtBTIMCvxPtKBonmX0=
=WRBl
-END PGP SIGNATURE-
Mon Oct 18 17:37:52 2010 NOTE: --user option is not implemented on Windows
Mon Oct 18 17:37:52 2010 NOTE: --group option is not implemented on Windows
Mon Oct 18 17:37:52 2010 us=32 Current Parameter Settings:
Mon Oct 18 17:37:52 2010 us=32   config = 'pers-ext.ovpn'
Mon Oct 18 17:37:52 2010 us=32   mode = 0
Mon Oct 18 17:37:52 2010 us=32   show_ciphers = DISABLED
Mon Oct 18 17:37:52 2010 us=32   show_digests = DISABLED
Mon Oct 18 17:37:52 2010 us=32   show_engines = DISABLED
Mon Oct 18 17:37:52 2010 us=32   genkey = DISABLED
Mon Oct 18 17:37:52 2010 us=32   key_pass_file = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   show_tls_ciphers = DISABLED
Mon Oct 18 17:37:52 2010 us=32 Connection profiles [default]:
Mon Oct 18 17:37:52 2010 us=32   proto = tcp-client
Mon Oct 18 17:37:52 2010 us=32   local = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   local_port = 0
Mon Oct 18 17:37:52 2010 us=32   remote = '132.231.254.253'
Mon Oct 18 17:37:52 2010 us=32   remote_port = 1198
Mon Oct 18 17:37:52 2010 us=32   remote_float = DISABLED
Mon Oct 18 17:37:52 2010 us=32   bind_defined = DISABLED
Mon Oct 18 17:37:52 2010 us=32   bind_local = DISABLED
Mon Oct 18 17:37:52 2010 us=32   connect_retry_seconds = 15
Mon Oct 18 17:37:52 2010 us=32   connect_timeout = 10
Mon Oct 18 17:37:52 2010 us=32   connect_retry_max = 2
Mon Oct 18 17:37:52 2010 us=32   socks_proxy_server = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   socks_proxy_port = 0
Mon Oct 18 17:37:52 2010 us=32   socks_proxy_retry = DISABLED
Mon Oct 18 17:37:52 2010 us=32 Connection profiles END
Mon Oct 18 17:37:52 2010 us=32   remote_random = DISABLED
Mon Oct 18 17:37:52 2010 us=32   ipchange = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   dev = 'tun'
Mon Oct 18 17:37:52 2010 us=32   dev_type = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   dev_node = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   lladdr = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   topology = 1
Mon Oct 18 17:37:52 2010 us=32   tun_ipv6 = DISABLED
Mon Oct 18 17:37:52 2010 us=32   ifconfig_local = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   ifconfig_remote_netmask = '[UNDEF]'
Mon Oct 18 17:37:52 2010 us=32   ifconfig_noexec = DISABLED
Mon Oct 18 17:37:52 2010 us=32   ifconfig_nowarn = DISABLED
Mon Oct 18 17:37:52 2010 us=32   shaper = 0
Mon Oct 18 17:37:52 2010 us=32   tun_mtu = 1500
Mon Oct 18 17:37:52 2010 us=32   tun_mtu_defined = ENABLED
Mon Oct 18 17:37:52 2010 us=32   link_mtu = 1500
Mon Oct 18 17:37:52 2010 us=32   link_mtu_defined = DISABLED
Mon Oct 18 17:37:52 2010 us=32   tun_mtu_extra = 0
Mon Oct 18 17:37:52 2010 us=32   tun_mtu_extra_defined = DISABLED
Mon Oct 18 17:37:52 2010 us=32   fragment = 0
Mon Oct 18 17:37:52 2010 us=32   mtu_discover_type = -1
Mon Oct 18 17:37:52 2010 us=32   mtu_test = 0
Mon Oct 18 17:37:52 2010 us=32   mlock = DISABLED
Mon Oct 18 17:37:52 2010 us=32   keepalive_ping = 0
Mon Oct 18 17:37:52 2010 us=32   keepalive_timeout = 0
Mon Oct 18 17:37:52 2010 us=32   inactivity_timeout = 0
Mon Oct 18 17:37:52 2010 us=32   ping_send_timeout = 0
Mon Oct 18 17:37:52 2010 us=32   ping_rec_timeout = 0
Mon Oct 18 17:37:52 2010 us=32   ping_rec_timeout_action = 0
Mon Oct 18 17:37:52 2010 us=32   ping_timer_remote = DISABLED
Mon Oct 18 17:37:52 2010 us=32   remap_sigusr1 = 0
Mon Oct 18 17:37:52 2010 us=32   explicit_exit_notification = 0
Mon Oct 18 17:37:52 2010 us=32   persist_tun = ENABLED
Mon Oct 18 17:37:52 2010 us=32   persist_local_ip = DISABLED
Mon Oct 18 17:37:52 2010