Re: [Openvpn-devel] Summary of the community meeting (9th December 2020)

2020-12-09 Thread Arne Schwabe
> --- > > Discussed the data-channel offload module (DCO) in context of OpenVPN > 2.5. The current ovpn-dco only works with p2p but the current p2p model > is not easily extendable to p2mp. Therefore plaisthos and ordex agreed > that they will switch to a newer model in ovpn-dco that will also >

[Openvpn-devel] Summary of the community meeting (9th December 2020)

2020-12-09 Thread Samuli Seppänen
Hi, Here's the summary of the IRC meeting. --- COMMUNITY MEETING Place: #openvpn-meeting on irc.freenode.net Date: Wed 9th December 2020 Time: 11:30 CET (10:30 UTC) Planned meeting topics for this meeting were here: Your local me

[Openvpn-devel] OpenVPN 2.4.10 released

2020-12-09 Thread Samuli Seppänen
The OpenVPN community project team is proud to release OpenVPN 2.4.10 which is primarily a maintenance release with bugfixes and small improvements. Windows installers include the latest OpenSSL version (1.1.1i) which includes security fixes. A summary of the changes is available here:

[Openvpn-devel] [PATCH 2/3] Move NCP saving and restore to the prepush restore code

2020-12-09 Thread Arne Schwabe
This unifies save/restoring options that might be changed by a push from the server. It also removes using the context_1 to store something that is not related to a SIGHUP lifetime. Signed-off-by: Arne Schwabe --- src/openvpn/init.c| 36 +--- src/openvpn/openv

[Openvpn-devel] [PATCH 1/3] Move restoring pr pull options to initialising of c2 context

2020-12-09 Thread Arne Schwabe
We currently delay restoring these options until we actually must restore them. Since there is no reason to do so apart from the very minor saving to not have to execute that code when a connection fails, move them it into the general context_2 initialisation. Signed-off-by: Arne Schwabe --- src

[Openvpn-devel] [PATCH 3/3] Restore also ping related options on a reconnect

2020-12-09 Thread Arne Schwabe
This fixes the issue that if a client reconnects the next connection entries inherits the keepalive settings that were pushed or set by the previous entry. Since UDP+PULL entries have an implicit 120s timeout, this timeout also got applied to a TCP session after an UDP entry. Reported-By: Jan Just

Re: [Openvpn-devel] weird issue with server failover when *Not* using keepalive

2020-12-09 Thread Arne Schwabe
Am 09.12.20 um 09:42 schrieb Jan Just Keijser: > Hi, > > On 04/12/20 16:24, Arne Schwabe wrote: If I change the client config to list only a single    remote 1194 udp line then this reconnect behavior does NOT occur ?!?!?!? >>> This might be a bug in the initialisation order.

Re: [Openvpn-devel] weird issue with server failover when *Not* using keepalive

2020-12-09 Thread Jan Just Keijser
Hi, On 04/12/20 16:24, Arne Schwabe wrote: If I change the client config to list only a single   remote 1194 udp line then this reconnect behavior does NOT occur ?!?!?!? This might be a bug in the initialisation order. That the ping timer is armed before next_connection_entry is called. If y