Re: [Openvpn-devel] Combined 32/64-bit OpenVPN 2.4_beta1 installer available for testing

[Samuli Seppänen]

Il 21/11/2016 19:00, debbie10t ha scritto:
>
>
> On 21/11/16 13:28, Samuli Seppänen wrote:
>> Il 20/11/2016 23:16, debbie10t ha scritto:
>
>>>
>>> Provided that the previous install is fully removed (including registry)
>>> then the install is successful. Otherwise it fails in a non-standard dir
>
>>
>> Hi,
>>
>> How and at which point does it fail if previous OpenVPN version is not
>> uninstalled first?
>
> In fact, if any previous version is *not Fully Uninstalled* first (Which
> means cleaning the registry by manually removing entire registry key
> HKLocalMach_SW_Openvpn) .. And then this version is installed to any
> *other* directory than the one it was previously installed to .. The
> resulting installation will not work.
>
> Please see attached

Hi,

Yes, I actually noticed that myself when testing the combined installer 
patch[1] myself:



That problem is also present in official 2.4_beta1 installers also and 
does not seem related to silent or interactive installations.

Samuli

[1] 


--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] [PATCH v2] Handle --dhcp-option DNS6 on Windows using netsh

[Selva Nair]

v2: On closing tun delete the ipv6 dns addresses (if any were set).
Also use "validate=no" only in Windows 7 and higher where it is
supported. Its used to skip the time consuming automatic address
validation which is on by default on those platforms.

Tested on Windows Server 2008 (i686), Win 7 (x64) and Win 10 (x64)

TODO: set dns servers using the interactive service

Signed-off-by: Selva Nair 
---
 doc/openvpn.8 |  5 ++---
 src/openvpn/options.c | 22 ++
 src/openvpn/tun.c | 52 +++
 src/openvpn/tun.h |  3 +++
 4 files changed, 71 insertions(+), 11 deletions(-)

diff --git a/doc/openvpn.8 b/doc/openvpn.8
index d454a36..171bd72 100644
--- a/doc/openvpn.8
+++ b/doc/openvpn.8
@@ -5634,13 +5634,12 @@ this option to set secondary DNS server addresses.
 Set primary domain name server IPv6 address.  Repeat
 this option to set secondary DNS server IPv6 addresses.
 
-Note: currently this is somewhat of a placeholder option - it is
-understood, but OpenVPN has no code to tell Windows about it (the
+Note: currently this is handled using netsh and requires admin rights (the
 existing DHCP code can only do IPv4 DHCP, and that protocol only
 permits IPv4 addresses anywhere).  The option will be put into the
 environment, so an
 .B \-\-up
-script could act upon it.
+script could act upon it if needed.
 
 .B WINS addr \-\-
 Set primary WINS server address (NetBIOS over TCP/IP Name Server).
diff --git a/src/openvpn/options.c b/src/openvpn/options.c
index f30e62d..9ee6f27 100644
--- a/src/openvpn/options.c
+++ b/src/openvpn/options.c
@@ -6407,14 +6407,20 @@ add_option (struct options *options,
{
  dhcp_option_address_parse ("DNS", p[2], o->dns, &o->dns_len, 
msglevel);
}
-  else if (streq (p[1], "DNS6") && p[2])
-   {
- /* this is somewhat of a placeholder - we understand the option,
-  * but cannot act upon it - so we'll just accept it and put it
-  * into the environment, as we would do on all non-win32 platforms
-  */
- foreign_option (options, p, 3, es);
-   }
+  else if (streq (p[1], "DNS6") && p[2] && ipv6_addr_safe(p[2]))
+{
+  struct in6_addr addr;
+  foreign_option (options, p, 3, es);
+  if (o->dns6_len >= N_DHCP_ADDR)
+{
+  msg (msglevel, "--dhcp-option DNS6: maximum of %d dns servers 
can be specified",
+  N_DHCP_ADDR);
+}
+  else if (get_ipv6_addr (p[2], &addr, NULL, msglevel))
+{
+  o->dns6[o->dns6_len++] = addr;
+}
+}
   else if (streq (p[1], "WINS") && p[2])
{
  dhcp_option_address_parse ("WINS", p[2], o->wins, &o->wins_len, 
msglevel);
diff --git a/src/openvpn/tun.c b/src/openvpn/tun.c
index 36e0b15..8c0d6a4 100644
--- a/src/openvpn/tun.c
+++ b/src/openvpn/tun.c
@@ -68,6 +68,9 @@ static void netsh_ifconfig (const struct tuntap_options *to,
const in_addr_t ip,
const in_addr_t netmask,
const unsigned int flags);
+static void netsh_set_dns6_servers (const struct in6_addr *addr_list,
+const int addr_len,
+const char *flex_name);
 static void netsh_command (const struct argv *a, int n, int msglevel);
 
 static const char *netsh_get_id (const char *dev_node, struct gc_arena *gc);
@@ -1381,6 +1384,7 @@ do_ifconfig (struct tuntap *tt,
else if (tt->options.msg_channel)
  {
do_address_service (true, AF_INET6, tt);
+/* TODO: do_dns6_service() */
  }
else
  {
@@ -1394,6 +1398,8 @@ do_ifconfig (struct tuntap *tt,
 iface,
 ifconfig_ipv6_local );
netsh_command (&argv, 4, M_FATAL);
+/* set ipv6 dns servers if any are specified */
+   netsh_set_dns6_servers(tt->options.dns6, tt->options.dns6_len, 
actual);
  }
 
/* explicit route needed */
@@ -4626,6 +4632,41 @@ ip_addr_member_of (const in_addr_t addr, const 
IP_ADDR_STRING *ias)
   return false;
 }
 
+/**
+ * Set the ipv6 dns servers on the specified interface.
+ * The list of dns servers currently set on the interface
+ * are cleared first.
+ * No action is taken if number of addresses (addr_len) < 1.
+ */
+static void
+netsh_set_dns6_servers (const struct in6_addr *addr_list,
+const int addr_len,
+const char *flex_name)
+{
+struct gc_arena gc = gc_new ();
+struct argv argv = argv_new ();
+
+for (int i = 0; i < addr_len; ++i)
+{
+const char *fmt = (i == 0) ?
+"%s%sc interface ipv6 set dns %s static %s"
+   : "%s%sc interface ipv6 add dns %s %s";
+argv_printf (&argv, fmt, get_win_sys_path(),
+ NETSH_PATH_SUFFIX, flex_name,
+  

Re: [Openvpn-devel] [PATCH applied] Re: Do not set ipv6 address if '--ip-win32 manual' is used

[Selva Nair]

On Mon, Nov 21, 2016 at 11:18 AM, Gert Doering  wrote:

> This solves the issue at hand for the time being, without breaking
> people's configs by removing "ip-win32 manual", and without changing
> expectations "how things work on Windows".
>
> For 2.5, we should look at removing the "ip-win32 manual" code path (and
> maybe map it in the other direction, setting "--ifconfig_nexec" instead)
>
> Your patch has been applied to the master branch.
>

While this skips setting the ipv6 address when --ifconfig-noexec is in use,
the code still tries to delete the ipv6 address and fails during SIGHUP
restarts. Its a non-fatal failure, so ignore for now?

Selva
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Marvin Adeff]

Hi,

Power User Perspective:
Please ensure that these [X] selections can be controlled (as in "disabled") if 
openvpn is installed by command line (quiet mode). 

Thanks,
Marvin Adeff


> On Nov 21, 2016, at 11:46 AM, Gert Doering  wrote:
> 
> Hi,
> 
>> On Tue, Nov 22, 2016 at 12:41:24AM +0500,  ?? wrote:
>> should we also start openvpn-gui if "launch gui on windows startup" is
>> selected ?
> 
> I tend to de-couple this - what about a second checkbox "launch gui now"?
> 
> (With both defaulting to [X] checked)
> 
> gert
> 
> -- 
> USENET is *not* the non-clickable part of WWW!
>   //www.muc.de/~gert/
> Gert Doering - Munich, Germany g...@greenie.muc.de
> fax: +49-89-35655025g...@net.informatik.tu-muenchen.de
> --
> ___
> Openvpn-devel mailing list
> Openvpn-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-devel

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Gert Doering]

Hi,

On Mon, Nov 21, 2016 at 02:54:13PM -0500, Selva Nair wrote:
> On Mon, Nov 21, 2016 at 2:41 PM,  ?? 
>  wrote:
> 
> > should we also start openvpn-gui if "launch gui on windows startup" is
> > selected ?
> That would start the GUI with  admin rights, so we should not start the GUI.

Good point.  I withdraw my comments.

gert

-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Gert Doering]

Hi,

On Tue, Nov 22, 2016 at 12:51:21AM +0500,  ?? wrote:
> > I tend to de-couple this - what about a second checkbox "launch gui now"?
> 
> I like the approach of starting services:
> 
> https://github.com/OpenVPN/openvpn-build/blob/master/windows-nsis/openvpn.nsi#L540
> 
> if there's a service, ok, start it, why to ask user ?

We do *not* want to start openvpnserv2 or legacy openvpnserv unless
explicitely told - but we need the interactive service.  Quite a bit
of difference.

> the same with gui. if user selected to launch it automatically, why wait
> for reboot ?

"Choice"?  Admin might be installing a laptop but a user will use openvpn
later on...

gert
-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Selva Nair]

On Mon, Nov 21, 2016 at 2:41 PM, Илья Шипицин  wrote:

> should we also start openvpn-gui if "launch gui on windows startup" is
> selected ?


That would start the GUI with  admin rights, so we should not start the GUI.

Selva
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Илья Шипицин]

2016-11-22 0:46 GMT+05:00 Gert Doering :

> Hi,
>
> On Tue, Nov 22, 2016 at 12:41:24AM +0500,  ?? wrote:
> > should we also start openvpn-gui if "launch gui on windows startup" is
> > selected ?
>
> I tend to de-couple this - what about a second checkbox "launch gui now"?
>

I like the approach of starting services:

https://github.com/OpenVPN/openvpn-build/blob/master/windows-nsis/openvpn.nsi#L540

if there's a service, ok, start it, why to ask user ?


the same with gui. if user selected to launch it automatically, why wait
for reboot ?


>
> (With both defaulting to [X] checked)
>
> gert
>
> --
> USENET is *not* the non-clickable part of WWW!
>//
> www.muc.de/~gert/ 
> Gert Doering - Munich, Germany
> g...@greenie.muc.de
> fax: +49-89-35655025g...@net.informatik.tu-
> muenchen.de
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Gert Doering]

Hi,

On Tue, Nov 22, 2016 at 12:41:24AM +0500,  ?? wrote:
> should we also start openvpn-gui if "launch gui on windows startup" is
> selected ?

I tend to de-couple this - what about a second checkbox "launch gui now"?

(With both defaulting to [X] checked)

gert

-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Илья Шипицин]

should we also start openvpn-gui if "launch gui on windows startup" is
selected ?

2016-11-22 0:13 GMT+05:00 Илья Шипицин :

>
>
> 2016-11-16 23:47 GMT+05:00 Gert Doering :
>
>> Hi,
>>
>> On Wed, Nov 16, 2016 at 11:39:04PM +0500,  ?? wrote:
>> > > Samuli, Ilya, any idea how hard this is to do?
>> >
>> > it is trivial.
>>
>> Cool :-)
>>
>
> https://github.com/OpenVPN/openvpn-build/pull/50
>
>
> as for many options, I would simplify installer. i.e. we can install
> openvpn-gui always, the same for easy-rsa. it does not make much sense to
> make user choose between those things. But I would make multi language
> installer first :)
>
> I noticed a bug there https://github.com/OpenVPN/openvpn-build/issues/51
> it is not related to my PR, but I'll try to resolve it tomorrow
>
>
>> > I'm going to finish "x86 + x64" installer. The next thing is "check for
>> > .net 4 if openvpnserv2 is checked" and third maybe "start openvpn-gui on
>> > windows logon"
>>
>> Very much looking forward to this - thanks!
>>
>> gert
>>
>> --
>> USENET is *not* the non-clickable part of WWW!
>>//
>> www.muc.de/~gert/ 
>> Gert Doering - Munich, Germany
>> g...@greenie.muc.de
>> fax: +49-89-35655025
>> g...@net.informatik.tu-muenchen.de
>>
>
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] launch openvpn-gui at windows startup

[Илья Шипицин]

2016-11-16 23:47 GMT+05:00 Gert Doering :

> Hi,
>
> On Wed, Nov 16, 2016 at 11:39:04PM +0500,  ?? wrote:
> > > Samuli, Ilya, any idea how hard this is to do?
> >
> > it is trivial.
>
> Cool :-)
>

https://github.com/OpenVPN/openvpn-build/pull/50


as for many options, I would simplify installer. i.e. we can install
openvpn-gui always, the same for easy-rsa. it does not make much sense to
make user choose between those things. But I would make multi language
installer first :)

I noticed a bug there https://github.com/OpenVPN/openvpn-build/issues/51
it is not related to my PR, but I'll try to resolve it tomorrow


> > I'm going to finish "x86 + x64" installer. The next thing is "check for
> > .net 4 if openvpnserv2 is checked" and third maybe "start openvpn-gui on
> > windows logon"
>
> Very much looking forward to this - thanks!
>
> gert
>
> --
> USENET is *not* the non-clickable part of WWW!
>//
> www.muc.de/~gert/ 
> Gert Doering - Munich, Germany
> g...@greenie.muc.de
> fax: +49-89-35655025g...@net.informatik.tu-
> muenchen.de
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Combined 32/64-bit OpenVPN 2.4_beta1 installer available for testing

[Selva Nair]

Hi,


On Mon, Nov 21, 2016 at 12:34 PM, debbie10t  wrote:

> UNINSTALLING From C:\#Tools\Openvpn

...

Registry remains:
>
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN]
> "config_dir"="C:\\#Tools\\OpenVPN\\config"
> "config_ext"="ovpn"
> "exe_path"="C:\\#Tools\\OpenVPN\\bin\\openvpn.exe"
> "log_dir"="C:\\#Tools\\OpenVPN\\log"
> "priority"="NORMAL_PRIORITY_CLASS"
> "log_append"="0"
> @="C:\\#Tools\\OpenVPN"


Uninstall should remove the Registry key HKLM\SoftWare\OpenVPN but in this
case its not removed which is strange..

[HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN]
>
> "config_dir"="C:\\#Tools\\OpenVPN\\config"
>
> "config_ext"="ovpn"
>
> "exe_path"="C:\\#Tools\\OpenVPN\\bin\\openvpn.exe"
>
> "log_dir"="C:\\#Tools\\OpenVPN\\log"
>
> "priority"="NORMAL_PRIORITY_CLASS"
>
> "log_append"="0"
>
> @="C:\\Program Files\\OpenVPN"
>

If the registry key is not removed and then recreated, the above is
expected to happen as the installer always overwrites the default value
("C:\\Program Files\\OpenVPN" here) but uses WriteRegStringIfUndef for all
others. I think we should use WriteRegStr instead.

In fact it would be better if the installer always removes the
HKLM\Software\OpenVPN key and all values under it and then recreates it. We
anyway stop and remove the service in the beginning (even if service
installation is not selected) so no need to keep the original values in
this key.

Selva
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH v2] Stub implementation of "--dhcp-option DNS6 "

[Gert Doering]

Hi,

On Mon, Nov 21, 2016 at 12:20:41PM -0500, Selva Nair wrote:
> This will fix it. Hopefully non DHCPv4 options like this wont proliferate.

Not in the short run anyway :-) - medium term we'll see what is needed
to provide to windows clients (and *how*) if we run IPv6-only...

gert
-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] https://travis-ci.org/OpenVPN/openvpn/builds

[Gert Doering]

Hi,

On Mon, Nov 21, 2016 at 10:31:45PM +0500,  ?? wrote:
> this line
> 
> https://github.com/OpenVPN/openvpn/blob/master/tests/unit_tests/openvpn/Makefile.am#L17
> 
> causes an error

GNU LD manpage says this is a trick to make it link "another function"
"--wrap parse_line" would make it link __wrap_parse_line() instead - 
most likely because @d12fk provided a stub function that mocks the
result (or whatever).

Have not looked into this in more detail.

gert

-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] [PATCH applied] Re: Stub implementation of "--dhcp-option DNS6 "

[Gert Doering]

Patch has been applied to the master branch.

commit 94bfc256d4e96e6e91fa5a518352d758c09800f3
Author: Gert Doering 
Date:   Mon Nov 21 17:42:42 2016 +0100

 Stub implementation of "--dhcp-option DNS6 "

 Signed-off-by: Gert Doering 
 Acked-by: Selva Nair 
 Message-Id: <1479746562-751-1-git-send-email-g...@greenie.muc.de>
 URL: 
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg13174.html
 Signed-off-by: Gert Doering 

--
kind regards,

Gert Doering


--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH] Handle --dhcp-option DNS6 on Windows using netsh

[Arne Schwabe]

Am 21.11.16 um 05:22 schrieb Selva Nair:
> Hi,
> 
> On Sun, Nov 20, 2016 at 5:29 PM, Arne Schwabe  > wrote:
> 
> Am 20.11.16 um 22:38 schrieb Selva Nair:
> > TODO: set dns servers using the interactive service
> >
> 
> I was playing with ANdroid/IPv6 and this. For Android, the resolver
> takes the DNS server always in the order that I give it. Since there are
> now seperate lists for DNS and DNS6 I have to prefer always DNS or DNS6
> and cannot use the order I am given from the server.
> 
> I think we refactor the dns_list into a common dns list. I can also do
> this later since this is probably an Android specific problem.
> 
> 
> Yeah, we'll need a single list to preserve the inter-protocol ordering
> info, if that is really important. Does android support a mixed
> ipv4/ipv6 dns server ordering?

Yeah, it does. At least the first dns server I add (IPv4 or IPv6) is
always used as DNS server and the rest is treated as fallback.

Arne


--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Combined 32/64-bit OpenVPN 2.4_beta1 installer available for testing

[debbie10t]

On 21/11/16 17:00, debbie10t wrote:
>
>
> On 21/11/16 13:28, Samuli Seppänen wrote:
>> Il 20/11/2016 23:16, debbie10t ha scritto:
>
>>>
>>> Provided that the previous install is fully removed (including registry)
>>> then the install is successful. Otherwise it fails in a non-standard dir
>
>>
>> Hi,
>>
>> How and at which point does it fail if previous OpenVPN version is not
>> uninstalled first?
>
> In fact, if any previous version is *not Fully Uninstalled* first (Which
> means cleaning the registry by manually removing entire registry key
> HKLocalMach_SW_Openvpn) .. And then this version is installed to any
> *other* directory than the one it was previously installed to .. The
> resulting installation will not work.
>
> Please see attached

Sorry .. .zip blacklisted


See here:


UNINSTALLING From C:\#Tools\Openvpn


Stopping OpenVPN-GUI...

Removing OpenVPN Services...

OpenVPN Legacy Service removed.

Stopping OpenVPN Interactive Service.

OpenVPN Interactive Service stopped.

OpenVPN Interactive Service removed.

Uninstalling assembly 'C:\#Tools\OpenVPN\bin\openvpnserv2.exe'.

Affected parameters are:

assemblypath = C:\#Tools\OpenVPN\bin\openvpnserv2.exe

logfile = C:\#Tools\OpenVPN\bin\openvpnserv2.InstallLog

Removing EventLog source OpenVpnService.

Service OpenVpnService is being removed from the system...

Service OpenVpnService was successfully removed from the system.

Target was found and removed from PATH

Delete file: C:\#Tools\OpenVPN\bin\openvpn-gui.exe

Delete file: C:\Users\Public\Desktop\OpenVPN GUI.lnk

Delete file: C:\#Tools\OpenVPN\bin\openvpn.exe

Delete file: C:\#Tools\OpenVPN\bin\openvpnserv.exe

Delete file: C:\#Tools\OpenVPN\bin\openvpnserv2.exe

Delete file: C:\#Tools\OpenVPN\bin\libeay32.dll

Delete file: C:\#Tools\OpenVPN\bin\ssleay32.dll

Delete file: C:\#Tools\OpenVPN\bin\liblzo2-2.dll

Delete file: C:\#Tools\OpenVPN\bin\libpkcs11-helper-1.dll

Delete file: C:\#Tools\OpenVPN\config\README.txt

Delete file: C:\#Tools\OpenVPN\log\README.txt

Delete file: C:\#Tools\OpenVPN\bin\openssl.exe

Delete file: C:\#Tools\OpenVPN\doc\license.txt

Delete file: C:\#Tools\OpenVPN\doc\INSTALL-win32.txt

Delete file: C:\#Tools\OpenVPN\doc\openvpn.8.html

Delete file: C:\#Tools\OpenVPN\icon.ico

Delete file: C:\#Tools\OpenVPN\Uninstall.exe

Delete file: C:\#Tools\OpenVPN\easy-rsa\openssl-1.0.0.cnf

Delete file: C:\#Tools\OpenVPN\easy-rsa\vars.bat.sample

Delete file: C:\#Tools\OpenVPN\easy-rsa\init-config.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\README.txt

Delete file: C:\#Tools\OpenVPN\easy-rsa\build-ca.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\build-dh.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\build-key-server.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\build-key.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\build-key-pass.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\build-key-pkcs12.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\clean-all.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\index.txt.start

Delete file: C:\#Tools\OpenVPN\easy-rsa\revoke-full.bat

Delete file: C:\#Tools\OpenVPN\easy-rsa\serial.start

Delete file: C:\#Tools\OpenVPN\sample-config\client.ovpn

Delete file: C:\#Tools\OpenVPN\sample-config\sample.ovpn

Delete file: C:\#Tools\OpenVPN\sample-config\server.ovpn

Remove folder: C:\#Tools\OpenVPN\doc\

Remove folder: C:\#Tools\OpenVPN\easy-rsa\

Remove folder: C:\#Tools\OpenVPN\sample-config\

Remove folder: C:\#Tools\OpenVPN\log\

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\OpenVPN HOWTO.url

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\OpenVPN Manual Page.lnk

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\OpenVPN Support.url

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\OpenVPN Web Site.url

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\OpenVPN Wiki.url

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\OpenVPN Windows Notes.lnk

Remove folder: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Documentation\

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\OpenVPN GUI.lnk

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Shortcuts\OpenVPN configuration file directory.lnk

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Shortcuts\OpenVPN log file directory.lnk

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Shortcuts\OpenVPN Sample Configuration Files.lnk

Remove folder: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Shortcuts\

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Uninstall OpenVPN.lnk

Delete file: C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\OpenVPN\Utilities\Generate a static OpenVPN key.lnk

Remove folder: C:\Progr

Re: [Openvpn-devel] https://travis-ci.org/OpenVPN/openvpn/builds

[Илья Шипицин]

2016-11-17 3:04 GMT+05:00 Steffan Karger :

> On 16 November 2016 at 18:06, Илья Шипицин  wrote:
> > is it ok ?
>
> No, it's not.  But someone needs to figure out how to use cmocka on
> OSX, or disable the offending test on OSX.  If I find some time I
> will, but I haven't yet gotten around to it.
>

this line

https://github.com/OpenVPN/openvpn/blob/master/tests/unit_tests/openvpn/Makefile.am#L17

causes an error

https://travis-ci.org/OpenVPN/openvpn/jobs/177700958#L1258

I guess, someone who did that commit, can resolve it.


>
> -Steffan
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH v2] Stub implementation of "--dhcp-option DNS6 "

[Selva Nair]

On Mon, Nov 21, 2016 at 11:42 AM, Gert Doering  wrote:

> +
> +  /* flag that we have options to give to the TAP driver's DHCPv4
> server
> +   *  - skipped for "DNS6", as that's not a DHCPv4 option
> +   */
> +  if (!streq (p[1], "DNS6"))
> +   {
> + o->dhcp_options = true;
> +   }
>

This will fix it. Hopefully non DHCPv4 options like this wont proliferate.
ACK.
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] [PATCH] Handle --dhcp-option DNS6 on Windows using netsh

[Selva Nair]

On Sun, Nov 20, 2016 at 4:38 PM, Selva Nair  wrote:

> TODO: set dns servers using the interactive service
>
> Signed-off-by: Selva Nair 
> ---
>  doc/openvpn.8 |  5 ++---
>  src/openvpn/options.c | 22 ++
>  src/openvpn/tun.c | 30 ++
>  src/openvpn/tun.h |  3 +++
>  4 files changed, 49 insertions(+), 11 deletions(-)
>

Just realized the dns addresses should be removed when tun is closed (these
statically set server addresses will stick around otherwise). Will send a
v2 after the "stub implementation v2" is merged.

Selva
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] [PATCH v2] Stub implementation of "--dhcp-option DNS6 "

[Gert Doering]

This defines a new DHCP suboption "DNS6", but does not actually
implement anything but "document the option and understand it".

If received, it will be put into an "foreign_option_" environment
variable where an --up script or plugin could receive and act upon it.

On non-Windows platforms, all "dhcp-option" sub-options end up there,
so v4 and v6 DNS options will be reflected like this:

   foreign_option_1=dhcp-option DNS6 2001:608::2
   foreign_option_2=dhcp-option DNS 195.30.0.2

v2: do not set o->dhcp_options if DNS6 is the single dhcp-option seen
(spotted by Selva Nair)

Signed-off-by: Gert Doering 
---
 doc/openvpn.8 | 14 +-
 src/openvpn/options.c | 20 ++--
 2 files changed, 31 insertions(+), 3 deletions(-)

diff --git a/doc/openvpn.8 b/doc/openvpn.8
index 11564af..d454a36 100644
--- a/doc/openvpn.8
+++ b/doc/openvpn.8
@@ -5627,9 +5627,21 @@ across the VPN.
 Set Connection-specific DNS Suffix.
 
 .B DNS addr \-\-
-Set primary domain name server address.  Repeat
+Set primary domain name server IPv4 address.  Repeat
 this option to set secondary DNS server addresses.
 
+.B DNS6 addr \-\-
+Set primary domain name server IPv6 address.  Repeat
+this option to set secondary DNS server IPv6 addresses.
+
+Note: currently this is somewhat of a placeholder option - it is
+understood, but OpenVPN has no code to tell Windows about it (the
+existing DHCP code can only do IPv4 DHCP, and that protocol only
+permits IPv4 addresses anywhere).  The option will be put into the
+environment, so an
+.B \-\-up
+script could act upon it.
+
 .B WINS addr \-\-
 Set primary WINS server address (NetBIOS over TCP/IP Name Server).
 Repeat this option to set secondary WINS server addresses.
diff --git a/src/openvpn/options.c b/src/openvpn/options.c
index 7f128c3..f30e62d 100644
--- a/src/openvpn/options.c
+++ b/src/openvpn/options.c
@@ -704,7 +704,8 @@ static const char usage_message[] =
   "which allow multiple addresses,\n"
   "--dhcp-option must be repeated.\n"
   "DOMAIN name : Set DNS suffix\n"
-  "DNS addr: Set domain name server address(es)\n"
+  "DNS addr: Set domain name server address(es) 
(IPv4)\n"
+  "DNS6 addr   : Set domain name server address(es) 
(IPv6)\n"
   "NTP : Set NTP server address(es)\n"
   "NBDD: Set NBDD server address(es)\n"
   "WINS addr   : Set WINS server address(es)\n"
@@ -6406,6 +6407,14 @@ add_option (struct options *options,
{
  dhcp_option_address_parse ("DNS", p[2], o->dns, &o->dns_len, 
msglevel);
}
+  else if (streq (p[1], "DNS6") && p[2])
+   {
+ /* this is somewhat of a placeholder - we understand the option,
+  * but cannot act upon it - so we'll just accept it and put it
+  * into the environment, as we would do on all non-win32 platforms
+  */
+ foreign_option (options, p, 3, es);
+   }
   else if (streq (p[1], "WINS") && p[2])
{
  dhcp_option_address_parse ("WINS", p[2], o->wins, &o->wins_len, 
msglevel);
@@ -6427,7 +6436,14 @@ add_option (struct options *options,
  msg (msglevel, "--dhcp-option: unknown option type '%s' or missing or 
unknown parameter", p[1]);
  goto err;
}
-  o->dhcp_options = true;
+
+  /* flag that we have options to give to the TAP driver's DHCPv4 server
+   *  - skipped for "DNS6", as that's not a DHCPv4 option
+   */
+  if (!streq (p[1], "DNS6"))
+   {
+ o->dhcp_options = true;
+   }
 }
 #endif
 #ifdef _WIN32
-- 
2.7.3


--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] [PATCH applied] Re: Do not set ipv6 address if '--ip-win32 manual' is used

[Gert Doering]

ACK.  

This solves the issue at hand for the time being, without breaking
people's configs by removing "ip-win32 manual", and without changing
expectations "how things work on Windows".  

For 2.5, we should look at removing the "ip-win32 manual" code path (and 
maybe map it in the other direction, setting "--ifconfig_nexec" instead)

Your patch has been applied to the master branch.

(It does not apply cleanly to release/2.3 as the surrounding code is too 
different - the actual change is trivially adjusted, but I think it should 
see review - thus, not doing on-the-fly here)

commit d6ad8cac443f7f7540da595a3dbe7082d0f0a0cf (master)
Author: Selva Nair
Date:   Sun Nov 20 16:18:54 2016 -0500

 Do not set ipv6 address if '--ip-win32 manual' is used

 Signed-off-by: Selva Nair 
 Acked-by: Gert Doering 
 Message-Id: <1479676734-21630-1-git-send-email-selva.n...@gmail.com>
 URL: 
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg13143.html
 Signed-off-by: Gert Doering 


--
kind regards,

Gert Doering


--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Preparing 2.4-beta1 upload to Debian (Experimental)

[Alberto Gonzalez Iniesta]

On Mon, Nov 21, 2016 at 03:37:45PM +0100, David Sommerseth wrote:
> On 21/11/16 14:32, Samuli Seppänen wrote:
> > Il 21/11/2016 11:10, Alberto Gonzalez Iniesta ha scritto:
> >> Hi,
> >> 
> >> I'm preparing an upload to Debian Experimental of 2.4-beta1 in
> >> order to get the maximum exposition as possible. In the meantime
> >> I'd like to know your opinion on the following patch that I've
> >> been applying to Debian's package for some years: 
> >> https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=367716;filename=openvpn_367716.diff;msg=10
> >>
> >> 
> Fixing this:
> >> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=367716
> >> 
> >> Thanks,
> >> 
> >> Alberto
> > 
> > That bug report is mighty old, from 2008. I wonder if the problem
> > still persists at all?
> 
> I hope at least Arne can chime in on this one, as he has done
> tremendous work on the socket code.  And I'd be surprised if this
> patch applies cleanly on top of our master branch.

No, I doesn't. But I updated it to 2.4. Find it attached.

> Yes, it's an old issue.  But from my brief 3 minutes look at socket.c,
> I'd say it looks like to me this is still needed.  The explanation in
> the patch makes sense.

Yep, I think it's still needed.

Regards,

Alberto




> --

> ___
> Openvpn-devel mailing list
> Openvpn-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-devel


-- 
Alberto Gonzalez Iniesta| Formación, consultoría y soporte técnico
mailto/sip: a...@inittab.org | en GNU/Linux y software libre
Encrypted mail preferred| http://inittab.com

Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D  4BF2 009B 3375 6B9A AA55
Description: Set socket's FD_CLOEXEC flag before calling up script
 Moving the set_cloexec() call from link_socket_init_phase2() to
 link_socket_init_phase1().
Author: Julien Cristau 
Bug-Debian: http://bugs.debian.org/367716

Index: openvpn/src/openvpn/socket.c
===
--- openvpn.orig/src/openvpn/socket.c	2016-11-21 09:58:03.562096178 +0100
+++ openvpn/src/openvpn/socket.c	2016-11-21 10:01:20.143091482 +0100
@@ -1625,6 +1625,10 @@
   }
   resolve_remote (sock, 1, NULL, NULL);
 }
+
+  /* set socket file descriptor to not pass across execs, so that
+ scripts don't have access to it */
+  set_cloexec (sock->sd);
 }
 
 static
@@ -1677,10 +1681,6 @@
   /* set socket to non-blocking mode */
   set_nonblock (sock->sd);
 
-  /* set socket file descriptor to not pass across execs, so that
- scripts don't have access to it */
-  set_cloexec (sock->sd);
-
   if (socket_defined (sock->ctrl_sd))
 set_cloexec (sock->ctrl_sd);
 
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Preparing 2.4-beta1 upload to Debian (Experimental)

[David Sommerseth]

On 21/11/16 14:32, Samuli Seppänen wrote:
> Il 21/11/2016 11:10, Alberto Gonzalez Iniesta ha scritto:
>> Hi,
>> 
>> I'm preparing an upload to Debian Experimental of 2.4-beta1 in
>> order to get the maximum exposition as possible. In the meantime
>> I'd like to know your opinion on the following patch that I've
>> been applying to Debian's package for some years: 
>> https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=367716;filename=openvpn_367716.diff;msg=10
>>
>> 
Fixing this:
>> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=367716
>> 
>> Thanks,
>> 
>> Alberto
> 
> That bug report is mighty old, from 2008. I wonder if the problem
> still persists at all?

I hope at least Arne can chime in on this one, as he has done
tremendous work on the socket code.  And I'd be surprised if this
patch applies cleanly on top of our master branch.

Yes, it's an old issue.  But from my brief 3 minutes look at socket.c,
I'd say it looks like to me this is still needed.  The explanation in
the patch makes sense.

But lets hear what Arne and others who know these code paths have to say.


-- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc




signature.asc
Description: OpenPGP digital signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Preparing 2.4-beta1 upload to Debian (Experimental)

[Samuli Seppänen]

Il 21/11/2016 11:10, Alberto Gonzalez Iniesta ha scritto:
> Hi,
>
> I'm preparing an upload to Debian Experimental of 2.4-beta1 in order to
> get the maximum exposition as possible. In the meantime I'd like to know
> your opinion on the following patch that I've been applying to Debian's
> package for some years:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=367716;filename=openvpn_367716.diff;msg=10
> Fixing this:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=367716
>
> Thanks,
>
> Alberto
>

That bug report is mighty old, from 2008. I wonder if the problem still 
persists at all?

-- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] Combined 32/64-bit OpenVPN 2.4_beta1 installer available for testing

[Samuli Seppänen]

Il 20/11/2016 23:16, debbie10t ha scritto:
>
>
> On 18/11/16 20:14, debbie10t wrote:
>> Hi,
>>
>> On 18/11/16 13:29, Samuli Seppänen wrote:
>>> Hi,
>>>
>>> OpenVPN 2.4_rc1[1] will be bundled as a combined installer[2] that works
>>> on both 32-bit and 64-bit Windows versions (Vista and above). A preview
>>> installer based on 2.4_beta1 is available here:
>>>
>>> 
>>>
>>>
>>> The installer also contains an updated openvpnserv2 (OpenVPNService),
>>> which attempts to shut down OpenVPN instances cleanly instead of just
>>> killing them on service stop or restart[3].
>>>
>>> I already ran the Powershells tests[4] on it, and chipitsine has done
>>> independent testing. However, more testing would be welcome. In
>>> particular:
>>>
>>> - Ensure that by default the files are places to correct directory, that
>>> is, C:\Program Files\OpenVPN on both 32-bit and 64-bit Windows
>>
>>
>> I have tested the basic install plus adding a 2nd TAP adapter
>> Running my Server (with multiple clients) works (Will leave over night)
>> plus running a client all work as per the label :-)
>>
>>
>>
>>
>>> - Test silent install with default settings
>>> - Test silent install to a non-standard directory
>>> - Ensure that registry keys go to the correct (32-bit or 64-bit) registry
>>> - Test that uninstall works as expected
>>
>
> After some initial problems *uninstalling* snapshot versions, I finally
> managed to install this successfully into a non-standard dir
> C:\#Tools\Openvpn
>
>
> Provided that the previous install is fully removed (including registry)
> then the install is successful. Otherwise it fails in a non-standard dir


Hi,

How and at which point does it fail if previous OpenVPN version is not 
uninstalled first?

-- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] multi language / unicode installer

[David Sommerseth]

On 21/11/16 12:58, Илья Шипицин wrote:
> 
> 
> 2016-11-21 16:51 GMT+05:00 Samuli Seppänen  >:
> 
> Il 21/11/2016 13:32, Илья Шипицин ha scritto:
> 
> Hello,
> 
> I see different languages in openvpn.nsi, for example
> 
> https://github.com/OpenVPN/openvpn-build/blob/master/windows-nsis/openvpn.nsi#L97
>
> 

> 
> 
> we roll our own installer using nsis-2.50-unicode, and I'm not sure
> it is available for Linux. but I guess there might be some interest
> from community to have multilanguage installer (for, example, even
> for openvpn-nl).
> 
> can we switch to "unicode" nsis and start translating openvpn.nsi
> ?
> 
> 
> I think having proper internationalization (i18n) support would be 
> good to have. We will just have to ensure that openvpn-build is 
> capable of handling it. As for NSIS version availability: I have
> not checked what is the latest NSIS version available for *NIX, but
> I suspect it is the same as for Windows - we're speaking of a
> single project, not two separate ones, right?
> 
> 
> actually, there're 3 nsis
> 
> 1) nsis-2.46 from nsis.sf.net  (I guess it
> cames on Linux, no unicode support) 2) http://www.scratchpaper.com/
> (nsis unicode) 3) nsis 3.0 from http://nsis.sf.net (which I haven't
> seen on Linux)
> 
> currently, openvpn-build just uses makensis, but it does not check
> its version. if we decide to switch to unicode, it should also
> perform such check

Yes, and it could just run the .nsi file through iconv to convert it
to the proper/expected charset and then kickoff makensis using the
converted file - if we end up using a no-unicode supported nsis when
cross-building Windows builds.

I agree it makes a lot of sense to move towards UTF-8.


-- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc




signature.asc
Description: OpenPGP digital signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] multi language / unicode installer

[Илья Шипицин]

2016-11-21 16:51 GMT+05:00 Samuli Seppänen :

> Il 21/11/2016 13:32, Илья Шипицин ha scritto:
>
>> Hello,
>>
>> I see different languages in openvpn.nsi, for example
>>
>> https://github.com/OpenVPN/openvpn-build/blob/master/windows
>> -nsis/openvpn.nsi#L97
>>
>>
>> we roll our own installer using nsis-2.50-unicode, and I'm not sure it
>> is available for Linux.
>> but I guess there might be some interest from community to have
>> multilanguage installer (for, example, even for openvpn-nl).
>>
>> can we switch to "unicode" nsis and start translating openvpn.nsi  ?
>>
>
> I think having proper internationalization (i18n) support would be good to
> have. We will just have to ensure that openvpn-build is capable of handling
> it. As for NSIS version availability: I have not checked what is the latest
> NSIS version available for *NIX, but I suspect it is the same as for
> Windows - we're speaking of a single project, not two separate ones, right?
>

actually, there're 3 nsis

1) nsis-2.46 from nsis.sf.net (I guess it cames on Linux, no unicode
support)
2) http://www.scratchpaper.com/ (nsis unicode)
3) nsis 3.0 from http://nsis.sf.net (which I haven't seen on Linux)

currently, openvpn-build just uses makensis, but it does not check its
version. if we decide to switch to unicode, it should also perform such
check


>
> Samuli
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] multi language / unicode installer

[Samuli Seppänen]

Il 21/11/2016 13:32, Илья Шипицин ha scritto:
> Hello,
>
> I see different languages in openvpn.nsi, for example
>
> https://github.com/OpenVPN/openvpn-build/blob/master/windows-nsis/openvpn.nsi#L97
>
>
> we roll our own installer using nsis-2.50-unicode, and I'm not sure it
> is available for Linux.
> but I guess there might be some interest from community to have
> multilanguage installer (for, example, even for openvpn-nl).
>
> can we switch to "unicode" nsis and start translating openvpn.nsi  ?

I think having proper internationalization (i18n) support would be good 
to have. We will just have to ensure that openvpn-build is capable of 
handling it. As for NSIS version availability: I have not checked what 
is the latest NSIS version available for *NIX, but I suspect it is the 
same as for Windows - we're speaking of a single project, not two 
separate ones, right?

Samuli

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] multi language / unicode installer

[Илья Шипицин]

Hello,

I see different languages in openvpn.nsi, for example

https://github.com/OpenVPN/openvpn-build/blob/master/windows-nsis/openvpn.nsi#L97


we roll our own installer using nsis-2.50-unicode, and I'm not sure it is
available for Linux.
but I guess there might be some interest from community to have
multilanguage installer (for, example, even for openvpn-nl).

can we switch to "unicode" nsis and start translating openvpn.nsi  ?

Cheers,
Ilya Shipitsin
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] handle unsupported windows versions in installer

[Илья Шипицин]

2016-11-21 16:14 GMT+05:00 Samuli Seppänen :

> Il 21/11/2016 11:34, Илья Шипицин ha scritto:
>
>> as we will make it hard coded within installer, so, if "WinXP installer
>> link" will ever change, there'll be no way to change it in installer,
>> which were downloaded (as for our company, I can confirm such practice,
>> people download installer and put on smb shares, wiki, etc)
>>
>> so, which is the proper link to "the latest WinXP installer", which is
>> frozen for ever.
>>
>
> Right now there is no proper link. We have a bunch of static links here:
>
> 
>
> I could add two more links tailored for Windows XP, e.g.
>
> openvpn-install-latest-winxp-i686.exe
> openvpn-install-latest-winxp-x86_64.exe
>

I meant that for "url rewrite".
ok, it is good


>
> Then we could link to those in the installer, and the links would "never"
> break.
>
> Thoughts?
>
>
>> 2016-11-21 14:21 GMT+05:00 David Sommerseth
>> > >:
>>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 21/11/16 08:57,  ??? wrote:
>> > @mattock , can we use some url rewrite for that ?
>>
>> URL rewrite?  As on the web server?  I think that is a very bad idea.
>>  If you want to download a particular file, you should get what you
>> ask for.  The web server should not try to outsmart the user.
>>
>> However, how I understand Selva (and Gerts approval), is that the
>> *installer* can displaying the v2.3 download URL - and perhaps even
>> downloading it (on request).
>>
>>
>> - --
>> kind regards,
>>
>> David Sommerseth
>> OpenVPN Technologies, Inc
>>
>>
>>
>> > 2016-11-21 12:53 GMT+05:00 Gert Doering > 
>> > >>:
>> >
>> > Hi,
>> >
>> > On Sun, Nov 20, 2016 at 11:02:33PM -0500, Selva Nair wrote:
>> >> As for 2.4 installer, if run on XP, showing a link to the  latest
>> >> 2.3.x before bailing out is a nice thing to do. If its not too
>> >> much work, I would vote for offering to download the installer as
>> >> well.
>> >
>> > This sounds good, yes.
>> >
>> > gert
>>
>> -BEGIN PGP SIGNATURE-
>> Version: GnuPG v2.0.22 (GNU/Linux)
>>
>> iQIcBAEBAgAGBQJYMrywAAoJEIbPlEyWcf3yGvEP/2kejd40OfjkXorkKyoCQ/LD
>> XZGJmZxstOSiEc//Y+7l5TcUWcDdklXjZU2DKBhEpV6RyzhzFI9Hj4IIiDtPj3EB
>> c2u5xzm99RJe40LVWNGZnVailgTjg6epWyYsGXeMZVHVA+GBVKEtWQJelo4Jcb/i
>> 96+ElSUrqGTCBc993MTSzh6ejFSdkyFR5mLK9wGlgLamasim0d1Hd57LN4m9+221
>> QR5+PIQFCKzmOZhcFDmFBuZsjxpsNqf65Lw1dUSyekIJC49OLd3f11nancJ6nqhO
>> EwqS2OeM2ZKHjgLuQcGivJiZ3VbO+UFzP8d91w+r+463+xuoGzce+B/i9QcDxrLz
>> pi9+xfD5n+xLPQCcSOv1ALfZWSstT9N3RN9fTocE+NUlJ5y2t8FqoIhjL/5InR1r
>> mBbtcs+Bw4+hjCKQpRtkcIgkRtXrYm7wjZx79xeAAqNSYuz/fvROnhvyjUfcozGw
>> YVSER+ZwB3jBnJZ/ECTTYUz6Tzsimz6B7pRZCjrgW807jm3UJXex13wwU8fjvIF2
>> e06+E/tbSbRlfNeq6tZagWZMJOkHDu1EEEm0v2n7KP/vBXFWFUeM7tzJplXq42Fk
>> FzKMbLPBqXda/3VgjZFFD75/bK+zZYS6kG4xVvabqQkw8m7lAf1jRTKbgy7Fo2YX
>> n376Jqybah631uigBdPe
>> =Kzt/
>> -END PGP SIGNATURE-
>>
>>
>>
>>
>> 
>> --
>>
>>
>>
>> ___
>> Openvpn-devel mailing list
>> Openvpn-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/openvpn-devel
>>
>>
>
> --
> Samuli Seppänen
> Community Manager
> OpenVPN Technologies, Inc
>
> irc freenode net: mattock
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] Topics for the upcoming (Wednesday, 23rd Nov 2016) community meeting

[Samuli Seppänen]

Hi,

We're going to have an IRC meeting on Wednesday 23rd November 2016. The 
meeting begins at 20:00 CET (19:00 UTC) on #openvpn-meeting  
irc.freenode.net. You do not have to be logged in to Freenode to join 
the channel.

Current topic list along with basic information is here:



If you have any other things you'd like to bring up, respond to this 
mail, send me mail privately or add them to the list yourself.

In case you can't attend the meeting, please feel free to make comments 
on the topics by responding to this email or to the summary email sent 
after the meeting. Whenever possible, we'll also respond to existing, 
related email threads.

--
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] handle unsupported windows versions in installer

[Samuli Seppänen]

Il 21/11/2016 11:34, Илья Шипицин ha scritto:
> as we will make it hard coded within installer, so, if "WinXP installer
> link" will ever change, there'll be no way to change it in installer,
> which were downloaded (as for our company, I can confirm such practice,
> people download installer and put on smb shares, wiki, etc)
>
> so, which is the proper link to "the latest WinXP installer", which is
> frozen for ever.

Right now there is no proper link. We have a bunch of static links here:



I could add two more links tailored for Windows XP, e.g.

openvpn-install-latest-winxp-i686.exe
openvpn-install-latest-winxp-x86_64.exe

Then we could link to those in the installer, and the links would 
"never" break.

Thoughts?

>
> 2016-11-21 14:21 GMT+05:00 David Sommerseth
>  >:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On 21/11/16 08:57,  ??? wrote:
> > @mattock , can we use some url rewrite for that ?
>
> URL rewrite?  As on the web server?  I think that is a very bad idea.
>  If you want to download a particular file, you should get what you
> ask for.  The web server should not try to outsmart the user.
>
> However, how I understand Selva (and Gerts approval), is that the
> *installer* can displaying the v2.3 download URL - and perhaps even
> downloading it (on request).
>
>
> - --
> kind regards,
>
> David Sommerseth
> OpenVPN Technologies, Inc
>
>
>
> > 2016-11-21 12:53 GMT+05:00 Gert Doering  
> > >>:
> >
> > Hi,
> >
> > On Sun, Nov 20, 2016 at 11:02:33PM -0500, Selva Nair wrote:
> >> As for 2.4 installer, if run on XP, showing a link to the  latest
> >> 2.3.x before bailing out is a nice thing to do. If its not too
> >> much work, I would vote for offering to download the installer as
> >> well.
> >
> > This sounds good, yes.
> >
> > gert
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2.0.22 (GNU/Linux)
>
> iQIcBAEBAgAGBQJYMrywAAoJEIbPlEyWcf3yGvEP/2kejd40OfjkXorkKyoCQ/LD
> XZGJmZxstOSiEc//Y+7l5TcUWcDdklXjZU2DKBhEpV6RyzhzFI9Hj4IIiDtPj3EB
> c2u5xzm99RJe40LVWNGZnVailgTjg6epWyYsGXeMZVHVA+GBVKEtWQJelo4Jcb/i
> 96+ElSUrqGTCBc993MTSzh6ejFSdkyFR5mLK9wGlgLamasim0d1Hd57LN4m9+221
> QR5+PIQFCKzmOZhcFDmFBuZsjxpsNqf65Lw1dUSyekIJC49OLd3f11nancJ6nqhO
> EwqS2OeM2ZKHjgLuQcGivJiZ3VbO+UFzP8d91w+r+463+xuoGzce+B/i9QcDxrLz
> pi9+xfD5n+xLPQCcSOv1ALfZWSstT9N3RN9fTocE+NUlJ5y2t8FqoIhjL/5InR1r
> mBbtcs+Bw4+hjCKQpRtkcIgkRtXrYm7wjZx79xeAAqNSYuz/fvROnhvyjUfcozGw
> YVSER+ZwB3jBnJZ/ECTTYUz6Tzsimz6B7pRZCjrgW807jm3UJXex13wwU8fjvIF2
> e06+E/tbSbRlfNeq6tZagWZMJOkHDu1EEEm0v2n7KP/vBXFWFUeM7tzJplXq42Fk
> FzKMbLPBqXda/3VgjZFFD75/bK+zZYS6kG4xVvabqQkw8m7lAf1jRTKbgy7Fo2YX
> n376Jqybah631uigBdPe
> =Kzt/
> -END PGP SIGNATURE-
>
>
>
>
> --
>
>
>
> ___
> Openvpn-devel mailing list
> Openvpn-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-devel
>


-- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] handle unsupported windows versions in installer

[Илья Шипицин]

as we will make it hard coded within installer, so, if "WinXP installer
link" will ever change, there'll be no way to change it in installer, which
were downloaded (as for our company, I can confirm such practice, people
download installer and put on smb shares, wiki, etc)

so, which is the proper link to "the latest WinXP installer", which is
frozen for ever.

2016-11-21 14:21 GMT+05:00 David Sommerseth <
open...@sf.lists.topphemmelig.net>:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On 21/11/16 08:57,  ??? wrote:
> > @mattock , can we use some url rewrite for that ?
>
> URL rewrite?  As on the web server?  I think that is a very bad idea.
>  If you want to download a particular file, you should get what you
> ask for.  The web server should not try to outsmart the user.
>
> However, how I understand Selva (and Gerts approval), is that the
> *installer* can displaying the v2.3 download URL - and perhaps even
> downloading it (on request).
>
>
> - --
> kind regards,
>
> David Sommerseth
> OpenVPN Technologies, Inc
>
>
>
> > 2016-11-21 12:53 GMT+05:00 Gert Doering  > >:
> >
> > Hi,
> >
> > On Sun, Nov 20, 2016 at 11:02:33PM -0500, Selva Nair wrote:
> >> As for 2.4 installer, if run on XP, showing a link to the  latest
> >> 2.3.x before bailing out is a nice thing to do. If its not too
> >> much work, I would vote for offering to download the installer as
> >> well.
> >
> > This sounds good, yes.
> >
> > gert
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2.0.22 (GNU/Linux)
>
> iQIcBAEBAgAGBQJYMrywAAoJEIbPlEyWcf3yGvEP/2kejd40OfjkXorkKyoCQ/LD
> XZGJmZxstOSiEc//Y+7l5TcUWcDdklXjZU2DKBhEpV6RyzhzFI9Hj4IIiDtPj3EB
> c2u5xzm99RJe40LVWNGZnVailgTjg6epWyYsGXeMZVHVA+GBVKEtWQJelo4Jcb/i
> 96+ElSUrqGTCBc993MTSzh6ejFSdkyFR5mLK9wGlgLamasim0d1Hd57LN4m9+221
> QR5+PIQFCKzmOZhcFDmFBuZsjxpsNqf65Lw1dUSyekIJC49OLd3f11nancJ6nqhO
> EwqS2OeM2ZKHjgLuQcGivJiZ3VbO+UFzP8d91w+r+463+xuoGzce+B/i9QcDxrLz
> pi9+xfD5n+xLPQCcSOv1ALfZWSstT9N3RN9fTocE+NUlJ5y2t8FqoIhjL/5InR1r
> mBbtcs+Bw4+hjCKQpRtkcIgkRtXrYm7wjZx79xeAAqNSYuz/fvROnhvyjUfcozGw
> YVSER+ZwB3jBnJZ/ECTTYUz6Tzsimz6B7pRZCjrgW807jm3UJXex13wwU8fjvIF2
> e06+E/tbSbRlfNeq6tZagWZMJOkHDu1EEEm0v2n7KP/vBXFWFUeM7tzJplXq42Fk
> FzKMbLPBqXda/3VgjZFFD75/bK+zZYS6kG4xVvabqQkw8m7lAf1jRTKbgy7Fo2YX
> n376Jqybah631uigBdPe
> =Kzt/
> -END PGP SIGNATURE-
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] handle unsupported windows versions in installer

[Gert Doering]

Hi,

On Mon, Nov 21, 2016 at 10:21:52AM +0100, David Sommerseth wrote:
> However, how I understand Selva (and Gerts approval), is that the
> *installer* can displaying the v2.3 download URL - and perhaps even
> downloading it (on request).

This.

"This package does not work on your operating system.  The last version of
 OpenVPN supported on your OS is 2.3.  An installer can be found here: .
 Shall I open a web browser for you to download it?  [YES] [NO, END]"

gert
-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] handle unsupported windows versions in installer

[David Sommerseth]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 21/11/16 08:57,  ??? wrote:
> @mattock , can we use some url rewrite for that ?

URL rewrite?  As on the web server?  I think that is a very bad idea.
 If you want to download a particular file, you should get what you
ask for.  The web server should not try to outsmart the user.

However, how I understand Selva (and Gerts approval), is that the
*installer* can displaying the v2.3 download URL - and perhaps even
downloading it (on request).


- -- 
kind regards,

David Sommerseth
OpenVPN Technologies, Inc



> 2016-11-21 12:53 GMT+05:00 Gert Doering  >:
> 
> Hi,
> 
> On Sun, Nov 20, 2016 at 11:02:33PM -0500, Selva Nair wrote:
>> As for 2.4 installer, if run on XP, showing a link to the  latest
>> 2.3.x before bailing out is a nice thing to do. If its not too
>> much work, I would vote for offering to download the installer as
>> well.
> 
> This sounds good, yes.
> 
> gert

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
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=Kzt/
-END PGP SIGNATURE-

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] Preparing 2.4-beta1 upload to Debian (Experimental)

[Alberto Gonzalez Iniesta]

Hi,

I'm preparing an upload to Debian Experimental of 2.4-beta1 in order to
get the maximum exposition as possible. In the meantime I'd like to know
your opinion on the following patch that I've been applying to Debian's
package for some years:
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=367716;filename=openvpn_367716.diff;msg=10
Fixing this:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=367716

Thanks,

Alberto

-- 
Alberto Gonzalez Iniesta| Formación, consultoría y soporte técnico
mailto/sip: a...@inittab.org | en GNU/Linux y software libre
Encrypted mail preferred| http://inittab.com

Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D  4BF2 009B 3375 6B9A AA55

--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Re: [Openvpn-devel] handle unsupported windows versions in installer

[Илья Шипицин]

@mattock , can we use some url rewrite for that ?

2016-11-21 12:53 GMT+05:00 Gert Doering :

> Hi,
>
> On Sun, Nov 20, 2016 at 11:02:33PM -0500, Selva Nair wrote:
> > As for 2.4 installer, if run on XP, showing a link to the  latest 2.3.x
> > before bailing out is a nice thing to do. If its not too much work, I
> would
> > vote for offering to download the installer as well.
>
> This sounds good, yes.
>
> gert
> --
> USENET is *not* the non-clickable part of WWW!
>//
> www.muc.de/~gert/
> Gert Doering - Munich, Germany
> g...@greenie.muc.de
> fax: +49-89-35655025g...@net.informatik.tu-
> muenchen.de
>
--
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel