Re: [Openvpn-devel] [PATCH v5] Revert to original password authentication after failed auth-token

2018-12-06 Thread Antonio Quartulli
Hi all, On 11/10/2018 00:30, Arne Schwabe wrote: > Auth-tokens can expire. For by reconnecting when the server uses > auth-gen-toke. > The sentence above should be adjusted a bit before the patch is merged. > Behaviour of OpenVPN client is to never fallback to the previous > authentication meth

[Openvpn-devel] [PATCH] Rate-limit incoming P_CONTROL_HARD_RESET_* packets.

2018-12-06 Thread Gert Doering
Creation of new instances (= new incoming reset packets with different source IP addresses / source ports) can be rate-limited in the current code by use of the "--connect-freq" option. For packets sent with the same source port, OpenVPN would dilligently reply to every single packet, causing rout

Re: [Openvpn-devel] [PATCH v2 1/2] Make tls_version_max return the actual maximum version

2018-12-06 Thread Selva Nair
Hi, On Thu, Dec 6, 2018 at 3:29 AM Steffan Karger wrote: > > On 05-12-18 15:09, Arne Schwabe wrote: > > Am 05.12.18 um 11:51 schrieb Steffan Karger: > >> On Wed, 31 Oct 2018 at 17:53, Arne Schwabe wrote: > >>> Before OpenSSL 1.1.1 there could be no mismatch between > >>> compiled and actual Open

Re: [Openvpn-devel] [PATCH v2 1/2] Make tls_version_max return the actual maximum version

2018-12-06 Thread Steffan Karger
On 05-12-18 15:09, Arne Schwabe wrote: > Am 05.12.18 um 11:51 schrieb Steffan Karger: >> On Wed, 31 Oct 2018 at 17:53, Arne Schwabe wrote: >>> Before OpenSSL 1.1.1 there could be no mismatch between >>> compiled and actual OpenSSL version. With OpenSSL 1.1.1 we need >>> runtime detection to detect