[Openvpn-devel] [PATCH applied] Re: Print remote IPv4 address on a dual-stack v6 socket in IPv4 format

2015-02-15 Thread Gert Doering
Patch has been applied to the master branch. commit 0b1a68fffa33e175c320c2828604cdc7dfb097e7 (master) Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Mon Dec 29 18:48:45 2014 +0100 Print remote IPv4 address on a dual-stack v6 socket in IPv4 format

Re: [Openvpn-devel] [PATCH v3] Mac OS X Keychain management client

2015-02-15 Thread Gert Doering
Hi, On Sun, Feb 15, 2015 at 10:05:07PM +0100, Arne Schwabe wrote: > Am 24.01.15 um 18:04 schrieb Vasily Kulikov: [..] > > OpenVPN itself gets new 'NEED-CERTIFICATE" command which is called when > > --management-external-cert is used. It is implemented as a multiline > > command very similar to

Re: [Openvpn-devel] [PATCH v3] Mac OS X Keychain management client

2015-02-15 Thread Arne Schwabe
Am 24.01.15 um 18:04 schrieb Vasily Kulikov: > This patch adds support for using certificates stored in the Mac OSX > Keychain to authenticate with the OpenVPN server. This works with > certificates stored on the computer as well as certificates on hardware > tokens that support Apple's tokend

Re: [Openvpn-devel] [PATCH] Print remote IPv4 address on a dual-stack v6 socket in IPv4 format

2015-02-15 Thread Gert Doering
Hi, On Mon, Feb 09, 2015 at 10:04:03AM +0100, Arne Schwabe wrote: > > --- a/src/openvpn/mroute.c > > +++ b/src/openvpn/mroute.c > > @@ -426,8 +426,16 @@ mroute_addr_print_ex (const struct mroute_addr *ma, > > break; > > case MR_ADDR_IPV6: > > { > > - buf_printf (, "%s", > >

[Openvpn-devel] [PATCH v2 for 2.3] New approach to handle peer-id related changes to link-mtu.

2015-02-15 Thread Gert Doering
Instead of statically increasing link-mtu by +3, keep the old value for OCC compatibility with old servers/clients, and only increase link-mtu if peer-id option is enabled (right now: is pushed by server). If link-mtu has been set in the config, keep configured value, and log warning (because the

[Openvpn-devel] [PATCH applied] Re: New approach to handle peer-id related changes to link-mtu.

2015-02-15 Thread Gert Doering
Patch has been applied to the master branch. Release/2.3 needs a slightly different patch due to different buffer space reservation in the compression code (which means that the extra bytes we need are not there unless comp-lzo is used). commit 9e0963c11aa439deb382d7d6bc40b6ade999401c

[Openvpn-devel] [PATCH applied] Re: Disable SSL compression

2015-02-15 Thread Gert Doering
ACKmetoo. Your patch has been applied to the master and release/2.3 branch. commit 5d5233778868ddd568140c394adfcfc8e3453245 (master) commit 5b46cf43432e69bb55747830494f613115a2af0c (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Sun Feb 15 15:24:26

Re: [Openvpn-devel] [PATCH] Disable SSL compression

2015-02-15 Thread Steffan Karger
On 15-02-15 16:00, Arne Schwabe wrote: > ACK from me. Sounds sensible to me. If do not support 0.9.8 anymore (in > -master perhaps?) I would like this to be commited without ifdef. Agreed, but we went from 0.9.6+ in 2.3 to 0.9.8+ in 2.4/master. I put 0.9.8 explicitly in the comment, so that if

Re: [Openvpn-devel] [PATCH] Disable SSL compression

2015-02-15 Thread Arne Schwabe
On 15.02.2015 15:24, Steffan Karger wrote: > As reported in trac #502, SSL compression can cause problems in some corner > cases. OpenVPN does not need SSL compression, since the control channel is > low bandwidth. This does not influence the data channel compressen (i.e. > --comp or

[Openvpn-devel] [PATCH] Disable SSL compression

2015-02-15 Thread Steffan Karger
As reported in trac #502, SSL compression can cause problems in some corner cases. OpenVPN does not need SSL compression, since the control channel is low bandwidth. This does not influence the data channel compressen (i.e. --comp or --comp-lzo). Even though this has not yet been relevant for