Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Selva Nair
Hi, On Thu, Oct 22, 2015 at 3:58 PM, Morris, Russell wrote: > Hi, > > Just checked - yep, 9.0.0.21. It seems to be from 2014 though? > > And to the other email I just sent (that seemed to bounce?), > Probably my mistake, in one of the posts I changed the address from devel

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Morris, Russell
Hi, Just checked - yep, 9.0.0.21. It seems to be from 2014 though? And to the other email I just sent (that seemed to bounce?), Yes, this is a Windows 7 machine. I think the issue is standby / network change related. In particular, standby / resume seems to cause a lot of grief. I also run on

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Jan Just Keijser
Hi, On 22-Oct-15 20:28, Morris, Russell wrote: Hi, 90% sure it's I60x ... but I installed it a little bit ago, and didn't keep the installer. Is there an easy way to check (to be 100% sure, so I don't accidentally lie to you)? try looking in the list of installed programs Control Panel

[Openvpn-devel] Fwd: Creating a Windows team for OpenVPN?

2015-10-22 Thread Selva Nair
Hi, On Thu, Oct 22, 2015 at 1:44 AM, Heiko Hund wrote: > On Tuesday 20 October 2015 22:12:06 Selva Nair wrote: > > > But a sever admin would not want it in the system as it can allow any > user > > with some VPN server account to change the routes etc using the > >

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Morris, Russell
Hi, 90% sure it's I60x ... but I installed it a little bit ago, and didn't keep the installer. Is there an easy way to check (to be 100% sure, so I don't accidentally lie to you)? Thanks! ... Russell -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent:

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 06:22:02PM +, Morris, Russell wrote: > Actually, I already have nobind in my config file (and am running v2.3.8). I > tend to see 2 errors, > - CONNECTION, but with ERROR (TAP adapter hung, have to close openvpn.exe, > disable / enable TAP, restart openvpn.exe)

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Morris, Russell
Hi, Actually, I already have nobind in my config file (and am running v2.3.8). I tend to see 2 errors, - CONNECTION, but with ERROR (TAP adapter hung, have to close openvpn.exe, disable / enable TAP, restart openvpn.exe) - TAP adapter exited Thanks, ... Russell -Original Message-

[Openvpn-devel] [PATCH applied] Re: Replace variable length array with malloc

2015-10-22 Thread Gert Doering
ACK. Looks sane and is totally in line with coding conventions :-) - and very useful to actually have a gc around! Your patch has been applied to the master branch. commit 41e4b67a229e774ebc57a882c386e10d80e10e7e Author: Lev Stipakov List-Post: openvpn-devel@lists.sourceforge.net Date: Wed

[Openvpn-devel] [PATCH applied] Re: openssl: remove usage of OPENSSL_malloc() from show_available_curves

2015-10-22 Thread Gert Doering
Your patch has been applied to the master branch. commit 470eb8b6b6a9970a68cb17a185359adffbaeabf5 Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Wed Oct 21 00:39:04 2015 +0200 openssl: remove usage of OPENSSL_malloc() from show_available_curves

[Openvpn-devel] [PATCH applied] Re: Fix memory leak in auth-pam plugin

2015-10-22 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. commit cfc13b38bc6504b9768e4cc43311807d6b074672 (master) commit 6a5e978085cc721bb09796ab44d77c3142b5f78b (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Wed Oct 21 00:38:26 2015 +0200

[Openvpn-devel] [PATCH applied] Re: Generate openvpn-plugin.h for MSVC build

2015-10-22 Thread Gert Doering
ACK. I have no idea what it does in particular, but as it does only touch files for MSVC build and this basically affects only you and (possibly) James, I just trust you :-) Your patch has been applied to the master branch. commit dd8d351dbc92ede6726b7090ed4eceb9b95318c6 Author: Lev Stipakov

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 04:43:05PM +, Morris, Russell wrote: > Sorry, catching up, but to the comments previously ... I do see openvpn.exe > crash quite regularly. I run it on a laptop, sleeping / resuming and moving > from wired to wireless (and) back quite a bit. These tend to break

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Morris, Russell
Sorry, catching up, but to the comments previously ... I do see openvpn.exe crash quite regularly. I run it on a laptop, sleeping / resuming and moving from wired to wireless (and) back quite a bit. These tend to break openvpn.exe, and in some cases can hang the TAP adapter also ... :-(.

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 07:16:57PM +0300, ValdikSS ValdikSS wrote: > Actually, we should have used indexes and not interface names from the > beginning. This particular code was out there for review and comments for a few years now... gert -- USENET is *not* the non-clickable part of

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread ValdikSS ValdikSS
If like this index approach. Actually, we should have used indexes and not interface names from the beginning.   Original Message   From: Gert Doering Sent: Thursday, 22 October 2015 18:26 To: Lev Stipakov Cc: openvpn-devel@lists.sourceforge.net Subject: Re: [Openvpn-devel] [PATCH] Use adapter

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 05:29:54PM +0300, Lev Stipakov wrote: > > And with interface indexes, it works all the time? > > We have tested it on a few machines which previously have had this > problem and this patch has fixed that. We will test it for larger > audience in near future and

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 03:24:53PM +0100, David Woodhouse wrote: > I don't understand why you're feeding get_adapter_index_method_1() a > GUID prefixed with \DEVICE\TCPIP_ instead of a name, either, since the > MSDN documentation for GetAdapterIndex() suggests that it takes the > interface

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Jan Just Keijser
Hi *, On 22/10/15 16:24, David Woodhouse wrote: On Thu, 2015-10-22 at 16:17 +0200, Gert Doering wrote: Hi, On Thu, Oct 22, 2015 at 03:09:57PM +0100, David Woodhouse wrote: So Olli and Lev would appear to be saying. For OpenConnect I haven't actually tested this hypothesis. Unfortunately I'd

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Lev Stipakov
Hello, > And with interface indexes, it works all the time? We have tested it on a few machines which previously have had this problem and this patch has fixed that. We will test it for larger audience in near future and report results. -Lev On 22.10.2015 16.59, Gert Doering wrote: hi,

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread David Woodhouse
On Thu, 2015-10-22 at 16:17 +0200, Gert Doering wrote: > Hi, > > On Thu, Oct 22, 2015 at 03:09:57PM +0100, David Woodhouse wrote: > > So Olli and Lev would appear to be saying. For OpenConnect I > > haven't > > actually tested this hypothesis. Unfortunately I'd need to > > reimplement > > the

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 03:09:57PM +0100, David Woodhouse wrote: > So Olli and Lev would appear to be saying. For OpenConnect I haven't > actually tested this hypothesis. Unfortunately I'd need to reimplement > the get_adapter_index stuff under LGPL first... Looking at our tun.c I wish I

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread David Woodhouse
On Thu, 2015-10-22 at 15:59 +0200, Gert Doering wrote: > hi, > > On Thu, Oct 22, 2015 at 02:55:44PM +0100, David Woodhouse wrote: > > > So what is the underlying issue here? Non-ASCII characters in the > > > device name ("this *should* have been fixed a few releases ago")? > > > > No, and not

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
hi, On Thu, Oct 22, 2015 at 02:55:44PM +0100, David Woodhouse wrote: > > So what is the underlying issue here? Non-ASCII characters in the > > device name ("this *should* have been fixed a few releases ago")? > > No, and not spaces (despite the vpn.ccrypto.org link above suggesting > that it

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread David Woodhouse
On Thu, 2015-10-22 at 15:51 +0200, Gert Doering wrote: > Hi, > > On Thu, Oct 22, 2015 at 04:47:56PM +0300, Olli Männistö wrote: > > Many VPN providers like us experience these issues and have to give users > > workarounds to fix it. Here are couple of examples: > >

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 04:47:56PM +0300, Olli Männistö wrote: > Many VPN providers like us experience these issues and have to give users > workarounds to fix it. Here are couple of examples: > https://community.f-secure.com/t5/F-Secure/After-a-Windows-10-upgrade/ta-p/72732 >

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread David Woodhouse
On Thu, 2015-10-22 at 15:26 +0200, Gert Doering wrote: > > NAK on that - it's extra code, another "two branches that need testing" > addition, and I have not seen any mention of these "weird issues" yet - > so please explain the problem scenario better. > > (I might be happy to go for "use

Re: [Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 04:09:20PM +0300, Lev Stipakov wrote: > From: Olli Mannisto > > Some windows machines get weird issues with netsh when using > adapter name on "netsh.exe interface ipv6 set address" command. > > Changed logic to get adapter index and use it

[Openvpn-devel] [PATCH] Use adapter index instead of name

2015-10-22 Thread Lev Stipakov
From: Olli Mannisto Some windows machines get weird issues with netsh when using adapter name on "netsh.exe interface ipv6 set address" command. Changed logic to get adapter index and use it instead of adapter name for netsh set address command. if unable to get adapter

[Openvpn-devel] [PATCH] Generate openvpn-plugin.h for MSVC build

2015-10-22 Thread Lev Stipakov
openvpn-plugin.h was not generated for MSVC build since it has been removed from sources and made generated by configure script. This fix generates it for MSVC build and substitutes macroses like @OPENVPN_VERSION_MAJOR@ with actual values. Signed-off-by: Lev Stipakov ---

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Gert Doering
Hi, On Thu, Oct 22, 2015 at 07:49:45AM +0200, Heiko Hund wrote: > On Tuesday 20 October 2015 14:01:33 Samuli Seppänen wrote: > > My NSSM-based replacement thingie aims to address all these > > shortcomings. I believe the interactive service and NSSM are complementary. > > Or we extend the GUI to

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Heiko Hund
On Tuesday 20 October 2015 14:01:33 Samuli Seppänen wrote: > My NSSM-based replacement thingie aims to address all these > shortcomings. I believe the interactive service and NSSM are complementary. Or we extend the GUI to make it start tunnels automatically on startup, then the additional

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Heiko Hund
On Tuesday 20 October 2015 22:12:06 Selva Nair wrote: > The interactive service (based on a quick scan through the code) looks to > be very useful on a desktop with a single user, allowing the GUI and openvpn > to run with user privileges. I hope the "windows team" would soon start > working on

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

2015-10-22 Thread Selva Nair
Hi, On Wed, Oct 21, 2015 at 7:54 AM, Morris, Russell wrote: > Hi, > > Lots of discussion on this - awesome to see! Perhaps a dumb question, but > I can see a few different ways to go on this, as I see comments about > services, applications, etc. ... so a couple thoughts, >

Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing

2015-10-22 Thread debbie10t
Apologies for the "You must be" comment .. - Original Message - From: To: "Eric Crist" Cc: Sent: Wednesday, October 21, 2015 11:31 PM Subject: Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version