Bug#1012129:

2022-07-16 Thread Fabio Pedretti
This is fixed also in the dco branch now:
https://github.com/OpenVPN/openvpn/commits/dco?after=63409150834208582031876dab70beefa2ee48f6+34=dco_name=refs%2Fheads%2Fdco



Bug#1012129: openvpn: 2.6 client fails authentication against older server

2022-05-30 Thread Bernhard Schmidt

Control: tags -1 + moreinfo

Hi Guillem,


Just upgraded openvpn the other day and could not connect anymore to the
VPN. Reverting back to 2.5.6-1 makes it work again. I checked #1011473
and nothing there seemed relevant. Here's an (edited) excerpt from the
log (from today's retry):




   2022-05-30 18:07:08 us=863166 AUTH: Received control message: AUTH_FAILED


This one looks weird, do you have any chance to check the logs on the 
other side?



The auth setting is locally set to SHA512, I'm assuming OpenSSL remaps
it, but that's just a warning. It just seems to be failing at the
PUSH_REQUEST step. Setting «compat-mode 2.5.6» did not help either.


This (different name between OpenSSL 1.1 and OPenSSL 3.0 for the same 
algo) has been fixed upstream already, but not yet imported into the dco 
tree. Unless you run opt-verify on the other side that should not matter 
though.


Bernhard