Re: [Openvpn-devel] ASLR/DEP -enabled 2.4.0 Windows installer available

[Samuli Seppänen]

Il 19/01/2017 22:46, debbie10t ha scritto:
>
> On 18/01/17 07:48, Samuli Seppänen wrote:
>> Hi,
>>
>> There's now a 2.4.0 Windows installer where all executables and
>> libraries have ASLR/DEP enabled:
>>
>> 
>> 
>>
>> I ran the installer through the Windows test suite and did not encounter
>> any obvious issues.
>>
>> More testing would be welcome - especially on 32-bit Windows - before we
>> make this the default.
>
> I have tested this on Win10Pro x86_64 as server and concurrent client.
> For 24 hours .. so far without error.
>
> Task manager shows DEP enabled while Windows is configured for
> DEP on Windows processes only but the machine has Hardware enabled DEP
> and shows DEP for 2.4.0-i601 as well . so not a very good test.
>
> I don't have a 32bit windows compatible with 2.4
>
> Regards.

Thanks for testing! I think we just have to merge the ASLR/DEP change in 
openvpn-build and see what happens.

-- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] [PATCH] git: Merge .gitignore files into a single file

[David Sommerseth]

We already track a lot of files over the whole directory structure
in the main .gitignore file.  But a few additional ones had been
added into some of the subdirectories.

This unifies all these files into a master file for the whole project,
making it easier to know where to look at and edit if changes needs
to be done.

Signed-off-by: David Sommerseth 
---
 .gitignore| 5 +
 sample/sample-keys/.gitignore | 1 -
 tests/unit_tests/.gitignore   | 1 -
 vendor/.gitignore | 2 --
 4 files changed, 5 insertions(+), 4 deletions(-)
 delete mode 100644 sample/sample-keys/.gitignore
 delete mode 100644 tests/unit_tests/.gitignore
 delete mode 100644 vendor/.gitignore

diff --git a/.gitignore b/.gitignore
index fc1e223..72593cf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -51,11 +51,16 @@ config-msvc-local.h
 config-msvc-version.h
 doc/openvpn.8.html
 distro/rpm/openvpn.spec
+sample/sample-keys/sample-ca/
+vendor/.build
+vendor/dist
 
 tests/t_client.sh
 tests/t_client-*-20??-??/
 t_client.rc
 t_client_ips.rc
+tests/unit_tests/*/*_testdriver
+tests/unit_tests/*/*/*_testdriver
 
 src/openvpn/openvpn
 include/openvpn-plugin.h
diff --git a/sample/sample-keys/.gitignore b/sample/sample-keys/.gitignore
deleted file mode 100644
index f148752..000
--- a/sample/sample-keys/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-sample-ca/
diff --git a/tests/unit_tests/.gitignore b/tests/unit_tests/.gitignore
deleted file mode 100644
index 8655de8..000
--- a/tests/unit_tests/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-*_testdriver
diff --git a/vendor/.gitignore b/vendor/.gitignore
deleted file mode 100644
index e11dfec..000
--- a/vendor/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-.build/
-dist/
-- 
2.11.0


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH 1/2] use automake tools to install systemd files

[David Sommerseth]

On 27/12/16 23:15, Christian Hesse wrote:
> From: Christian Hesse 
> 
> If systemd is enabled we install unit files to $libdir/systemd/system
> (or the path specified by SYSTEMD_UNIT_DIR).
> The unit files are generated on the fly with matching $sbindir.
> 
> Signed-off-by: Christian Hesse 
> ---
>  configure.ac   | 10 
>  distro/Makefile.am |  4 +---
>  distro/systemd/.gitignore  |  1 +
>  distro/systemd/Makefile.am | 27 
> ++
>  ...-client@.service => openvpn-cli...@.service.in} |  2 +-
>  ...-server@.service => openvpn-ser...@.service.in} |  2 +-
>  6 files changed, 41 insertions(+), 5 deletions(-)
>  create mode 100644 distro/systemd/.gitignore
>  create mode 100644 distro/systemd/Makefile.am
>  rename distro/systemd/{openvpn-client@.service => 
> openvpn-cli...@.service.in} (89%)
>  rename distro/systemd/{openvpn-server@.service => 
> openvpn-ser...@.service.in} (83%)


Finally had some time to look at this!  Some comments below.

[...snip...]

> --- /dev/null
> +++ b/distro/systemd/.gitignore
> @@ -0,0 +1 @@
> +*.service
> \ No newline at end of file

I think it is better to put all of these things into the .gitignore file
in the project root directory.  I see that this have slipped through a
few times (./vendor, ./test/unit_tests and sample/sample-keys/) ... but
as do ignore directories in the "master" .gitignore, I think we should
have everything there.  It will be easier to know where to look.  And
rather split things up when that master file gets too long and complicated.


> diff --git a/distro/systemd/Makefile.am b/distro/systemd/Makefile.am
> new file mode 100644
> index 000..53a88c9
> --- /dev/null
> +++ b/distro/systemd/Makefile.am
> @@ -0,0 +1,27 @@
> +#
> +#  OpenVPN -- An application to securely tunnel IP networks
> +# over a single UDP port, with support for SSL/TLS-based
> +# session authentication and key exchange,
> +# packet encryption, packet authentication, and
> +# packet compression.
> +#
> +#  Copyright (C) 2017 OpenVPN Technologies, Inc. 
> +#
> +
> +%.service: %.service.in Makefile
> + $(AM_V_GEN)sed -e 's|\@sbindir\@|$(sbindir)|' \
> + $< > $@.tmp && mv $@.tmp $@
> +
> +EXTRA_DIST = \
> + openvpn-cli...@.service.in \
> + openvpn-ser...@.service.in
> +
> +if ENABLE_SYSTEMD
> +systemdunitdir = $(systemdunitdir)

This conflicts with AC_SUBST([systemdunitdir]) in configure.ac.  So this
line should not be here.

[...snip]

> diff --git a/distro/systemd/openvpn-client@.service 
> b/distro/systemd/openvpn-cli...@.service.in
> similarity index 89%
> rename from distro/systemd/openvpn-client@.service
> rename to distro/systemd/openvpn-cli...@.service.in
> index 5618af3..d9fd6b0 100644
> --- a/distro/systemd/openvpn-client@.service
> +++ b/distro/systemd/openvpn-cli...@.service.in
> @@ -12,7 +12,7 @@ PrivateTmp=true
>  RuntimeDirectory=openvpn-client
>  RuntimeDirectoryMode=0710
>  WorkingDirectory=/etc/openvpn/client
> -ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config %i.conf
> +ExecStart=@sbindir@ --suppress-timestamps --nobind --config %i.conf

It should be: ExecStart=@sbindir@/openvpn  otherwise the generated
files are pointing at a only a directory.

[...snip]

> diff --git a/distro/systemd/openvpn-server@.service 
> b/distro/systemd/openvpn-ser...@.service.in
> similarity index 83%
> rename from distro/systemd/openvpn-server@.service
> rename to distro/systemd/openvpn-ser...@.service.in
> index b9b4dba..a270982 100644
> --- a/distro/systemd/openvpn-server@.service
> +++ b/distro/systemd/openvpn-ser...@.service.in
> @@ -12,7 +12,7 @@ PrivateTmp=true
>  RuntimeDirectory=openvpn-server
>  RuntimeDirectoryMode=0710
>  WorkingDirectory=/etc/openvpn/server
> -ExecStart=/usr/sbin/openvpn --status %t/openvpn-server/status-%i.log 
> --status-version 2 --suppress-timestamps --config %i.conf
> +ExecStart=@sbindir@ --status %t/openvpn-server/status-%i.log 
> --status-version 2 --suppress-timestamps --config %i.conf

Same as above.


-- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc




signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH] add PR template in order to simplify new developers cooperate properly if they open PR. discussed here: https://sourceforge.net/p/openvpn/mailman/message/35601310/

[David Sommerseth]

On 13/01/17 10:05, Samuli Seppänen wrote:
> Il 13/01/2017 10:50, Ilya Shipitsin ha scritto:
>> ---
>>  .github/PULL_REQUEST_TEMPLATE.md | 8 
>>  1 file changed, 8 insertions(+)
>>  create mode 100644 .github/PULL_REQUEST_TEMPLATE.md
>>
>> diff --git a/.github/PULL_REQUEST_TEMPLATE.md 
>> b/.github/PULL_REQUEST_TEMPLATE.md
>> new file mode 100644
>> index 000..d0cfd7f
>> --- /dev/null
>> +++ b/.github/PULL_REQUEST_TEMPLATE.md
>> @@ -0,0 +1,8 @@
>> +# Thank you for your contribution
>> +
>> +You are welcome to open PR, but they are used for discussion only. All
>> +patches must eventually go to the openvpn-devel mailing list for review.
>> +For details, see these Wiki articles:
>> +
>> +* https://community.openvpn.net/openvpn/wiki/Contributing
>> +* https://community.openvpn.net/openvpn/wiki/DeveloperDocumentation
>>
> 
> Based on testing in the travis-openssl-test repository the template 
> works as intended, so ACK on that part.
> 
> Any comments on the text itself?

How does this work with branches?  Do we need to say that new patches
should go into the master branch primarily, unless it is fixing a bug or
another issue which is only relevant for specific release branches?


-- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc




signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH applied] Add a check for -Wl, --wrap support in linker

[Selva Nair]

On Fri, Jan 20, 2017 at 1:16 PM, David Sommerseth 
wrote:

> Your patch has been applied to the following branches
>
> commit f91ab283a407e25c4b32aecb390911b212ce2694  (master)
> commit 2f5f1d8fffcba26d21d47cbcb1e99e0e1c313568  (release/2.4)
>

I am curious to know whether the opensolaris buildbot (there is one isn't
it?) run and pass all tests?

Selva
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH 2/2] do not race on RuntimeDirectory

[David Sommerseth]

On 27/12/16 23:15, Christian Hesse wrote:
> From: Christian Hesse 
> 
> Different unit instances create and destroy the same RuntimeDirectory.
> This leads to running instances where the status file (and possibly
> more runtime data) is no longer accessible.
> 
> So do not handle this in unit files but provide a tmpfiles.d
> configuration and let systemd-tmpfiles do the work.
> Nobody will (unintentionally) delete the directories and its content.
> As /run is volatile we do not have to care about cleanup.
> 
> Signed-off-by: Christian Hesse 
> ---
>  configure.ac  | 8 
>  distro/systemd/Makefile.am| 8 
>  distro/systemd/openvpn-cli...@.service.in | 2 --
>  distro/systemd/openvpn-ser...@.service.in | 2 --
>  distro/systemd/openvpn.conf   | 2 ++
>  5 files changed, 18 insertions(+), 4 deletions(-)
>  create mode 100644 distro/systemd/openvpn.conf
> 

[...snip...]

> diff --git a/distro/systemd/Makefile.am b/distro/systemd/Makefile.am
> index 53a88c9..1a6c974 100644
> --- a/distro/systemd/Makefile.am
> +++ b/distro/systemd/Makefile.am
> @@ -12,7 +12,12 @@
>   $(AM_V_GEN)sed -e 's|\@sbindir\@|$(sbindir)|' \
>   $< > $@.tmp && mv $@.tmp $@
>  
> +install-data-local:
> + $(INSTALL) -d -m0710 $(DESTDIR)/run/openvpn-client
> + $(INSTALL) -d -m0710 $(DESTDIR)/run/openvpn-server

Hmm ... that doesn't make much sense, does it?

$ mount | grep '/run '
tmpfs on /run type tmpfs (rw,nosuid,nodev,seclabel,mode=755)

IIRC, upstream systemd recommends /run to be a ramdisk, as it should
always be clean on freshly rebooted systems.  And it probably saves a
lot of SSD/flash storage write cycles, for those using that.

[...snip...]

> @@ -21,6 +26,9 @@ systemdunitdir = $(systemdunitdir)
>  systemdunit_DATA = \
>   openvpn-client@.service \
>   openvpn-server@.service
> +tmpfilesdir = $(tmpfilesdir)

This conflicts with AC_SUBST([tmpfilesdir])

$ autoreconf -vi
autoreconf: Entering directory `.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal -I m4
autoreconf: configure.ac: tracing
autoreconf: running: libtoolize --copy
autoreconf: running: /usr/bin/autoconf
autoreconf: running: /usr/bin/autoheader
autoreconf: running: automake --add-missing --copy --no-force
distro/systemd/Makefile.am:28: warning: tmpfilesdir was already defined
in condition TRUE, which includes condition ENABLE_SYSTEMD ...
configure.ac:1293: ... 'tmpfilesdir' previously defined here
autoreconf: Leaving directory `.'
$ rpm -q autoconf
autoconf-2.69-11.el7.noarch

Removing that tmpfilesdir declaration line in Makefile.am resolves this
issue, and it still works as expected.

[...snip...]

> diff --git a/distro/systemd/openvpn.conf b/distro/systemd/openvpn.conf
> new file mode 100644
> index 000..57f20cd
> --- /dev/null
> +++ b/distro/systemd/openvpn.conf
> @@ -0,0 +1,2 @@
> +d /run/openvpn-client 0710 root root -
> +d /run/openvpn-server 0710 root root -
> \ No newline at end of file

This makes more sense though, as this will tell systemd to create these
directories with the proper attributes.

But I'm not too happy about the filename in our git repository.  The
destination file may very well be called openvpn.conf, as then it should
reside in $libdir/tmpfiles.d/ ... but openvpn.conf causes quite a bit of
ambiguity inside the openvpn source tree, and unaware users might more
see this as a sample configuration for OpenVPN and be even more confused.

I propose ... either rename this file to tmpfiles.d--openvpn.conf or
move this openvpn.conf inside a tmpfiles.d/ subdirectory inside the
./distro/systemd/ directory.


Otherwise, this looks very reasonable.


-- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc




signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] ASLR/DEP -enabled 2.4.0 Windows installer available

[Selva Nair]

Hi,
On Fri, Jan 20, 2017 at 11:42 AM, Selva Nair  wrote:

> On Fri, Jan 20, 2017 at 9:43 AM, Samuli Seppänen 
>> wrote:
>> Thanks for testing! I think we just have to merge the ASLR/DEP change in
>> openvpn-build and see what happens.
>>
>
> For ASLR we may have to add some option to get reloc information into the
> exe? As per discussion under GUI PR 123 (https://github.com/OpenVPN/
> openvpn-gui/pull/123) mingw does not do this by default. There
> --export-all-symbols is used, which I think is a terrible hack.
>
> Checking aslr is enabled or not using process explorer may help -- openssl
> dll has to be checked too.
>

Checked this on win7. Process explorer shows ASLR flag is set on the
executable. But ASLR is not really active. The GUI is loaded at the same
address each time (as per vmmap from sysinternals). I see no address
randomization.

Recompiling by exporting at least one function fixes this so the linker is
indeed not adding reloc section to the exe otherwise.

The build option does make ASLR work for openssl dll so the only thing
missing there was the flag in the header. Not so for the executables.

We need to find some fix for this, else I fear this will be ASLR in name
only.

Selva
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH applied] Add a check for -Wl, --wrap support in linker

[Gert Doering]

Hi,

On Fri, Jan 20, 2017 at 03:38:46PM -0500, Selva Nair wrote:
> I am curious to know whether the opensolaris buildbot (there is one isn't
> it?) run and pass all tests?

There is one, but it uses gcc and GNU ld, so --wrap never was a problem
there...

gert@osol10:/home/gert$ ld --version
GNU ld version 2.15
Copyright 2002 Free Software Foundation, Inc.

I do not have a machine with the Sun development tools (yet, supposedly
there is a way to get a free license, but I had no time to follow up on
this)

gert

-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH applied] Add a check for -Wl, --wrap support in linker

[David Sommerseth]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 20/01/17 21:38, Selva Nair wrote:
> 
> On Fri, Jan 20, 2017 at 1:16 PM, David Sommerseth
> > wrote:
> 
> Your patch has been applied to the following branches
> 
> commit f91ab283a407e25c4b32aecb390911b212ce2694  (master) commit
> 2f5f1d8fffcba26d21d47cbcb1e99e0e1c313568  (release/2.4)
> 
> 
> I am curious to know whether the opensolaris buildbot (there is
> one isn't it?) run and pass all tests?

We have a few opensolaris builds getting kicked off.  If ignoring a
temporary and odd t_client.sh error on one of the OSX builds,
everything built correctly now without any issues.

TL;DR: Buildbot haven't had so many green cells as it has now in a
long time.  So I'm happy, and I believe Gert is happy too!


- -- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
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=7QMK
-END PGP SIGNATURE-

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH applied] Add a check for -Wl, --wrap support in linker

[Selva Nair]

Hi,

On Fri, Jan 20, 2017 at 4:40 PM, Gert Doering  wrote:

> On Fri, Jan 20, 2017 at 03:38:46PM -0500, Selva Nair wrote:
> > I am curious to know whether the opensolaris buildbot (there is one isn't
> > it?) run and pass all tests?
>
> There is one, but it uses gcc and GNU ld, so --wrap never was a problem
> there...
>
> gert@osol10:/home/gert$ ld --version
> GNU ld version 2.15
> Copyright 2002 Free Software Foundation, Inc.


I see... Recently I've used opensolaris only as in Illumo's omnios
and gcc -v shows

Target: i386-pc-solaris2.11
Configured with: ./configure --host i386-pc-solaris2.11 [...snip...]
--without-gnu-ld --with-ld=/bin/ld --with-as=/usr/bin/gas --with-gnu-as
 etc..

And /bin/ld gives
usage: ld [-3:6:abc:d:e:f:h:il:mo:p:rstu:z:B:CD:F:GI:L:M:N:P:Q:R:S:VW:Y:?]
file(s)

It does support --wrap though.

Selva
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH applied] Add a check for -Wl, --wrap support in linker

[David Sommerseth]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

ACK to this approach, with one commit-time modification (removed the AC_DEFINE
line, as already discussed in the patch mail thread)

Your patch has been applied to the following branches

commit f91ab283a407e25c4b32aecb390911b212ce2694  (master)
commit 2f5f1d8fffcba26d21d47cbcb1e99e0e1c313568  (release/2.4)
Author: Selva Nair
Date:   Wed Jan 18 15:42:52 2017 -0500

 Add a check for -Wl, --wrap support in linker

 Signed-off-by: Selva Nair 
 Acked-by: Gert Doering 
 Acked-by: David Sommerseth 
 Message-Id: <1484772172-19758-1-git-send-email-selva.n...@gmail.com>
 URL: 
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg13897.html
 Signed-off-by: David Sommerseth 


- --
kind regards,

David Sommerseth

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
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=0Y0J
-END PGP SIGNATURE-

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel