Re: [Openvpn-devel] Solaris 11: t_lpback.sh coredump on AES-GCM

2017-09-20 Thread Alexander Pyhalov

Hello.

Spent a day debugging this issue on OpenIndiana.
If anyone steps on this once again...
It seems the issue was caused OI/Solaris OpenSSL specific patches, in 
particular by 
https://github.com/OpenIndiana/oi-userland/blob/oi/hipster/components/library/openssl/openssl-1.0.2/patches/036-evp_leak.patch 
. It was fixed in solaris-userland in this commit - 
https://github.com/oracle/solaris-userland/commit/05790938481cdceaedb2a9aee700bcec6fca7e34 
 .

--
Best regards,
Alexander Pyhalov,
system administrator of Southern Federal University IT department

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


Re: [Openvpn-devel] help wanted: OpenSolaris building

2016-12-09 Thread Alexander Pyhalov
On 09/11/16 09:51 PM, Gert Doering wrote:
> Hi,
>
> as you might know, we try to build everything we commit to git on all
> supported platforms (using buildbot).  This works quite well and has
> helped us keep things consistently working across all platforms, at least
> as far as we have tests for each feature...
>
> One of my problem childs is (Open)Solaris, though.  I have a VM that is
> fairly old and has the GNU toolchain on it, but we have no access to
> a current system, using the Sun/Oracle C compiler.
>
> So, I'm looking for pointers :-)
>
>  - is there an (easy to install and maintain) OpenSource variant of
>"Solaris" still around?
>
>  - is there a developer program at Oracle, where one can get access to
>a current Solaris version plus Oracle C compiler, free of charge
>(a hosted build environment is only partially usable, because we
>run VM tests from buildbot, and those need root access...)

Hi.

I was looking through openvpn-devel archives and found this message.
Do you still need any help with illumos build bot? Like dedicated zone? 
Or do you have some technical issues?
-- 
Best regards,
Alexander Pyhalov,
system administrator of Southern Federal University IT department

--
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


[Openvpn-devel] [PATCH] Use getpassphrase on Solaris/illumos

2016-12-09 Thread Alexander Pyhalov


--
С уважением,
Александр Пыхалов,
программист отдела телекоммуникационной инфраструктуры
управления информационно-коммуникационной инфраструктуры ЮФУ
>From 971d1d5e66ba714fc8f74b8da0672e7da47dc557 Mon Sep 17 00:00:00 2001
From: Alexander Pyhalov <apyha...@gmail.com>
Date: Fri, 9 Dec 2016 13:16:01 +0300
Subject: [PATCH] Use getpassphrase on Solaris/illumos

---
 src/openvpn/console_builtin.c | 5 +
 1 file changed, 5 insertions(+)

diff --git a/src/openvpn/console_builtin.c b/src/openvpn/console_builtin.c
index 06994fd..98257b6 100644
--- a/src/openvpn/console_builtin.c
+++ b/src/openvpn/console_builtin.c
@@ -214,7 +214,12 @@ static bool get_console_input (const char *prompt, const bool echo, char *input,
 }
 close_tty (fp);
 } else {
+#ifdef __sun
+/* On Solaris/illumos getpass() returns up to 8 symbols */
+char *gp = getpassphrase (prompt);
+#else
 char *gp = getpass (prompt);
+#endif
 if (gp)
 {
 strncpynt (input, gp, capacity);
-- 
2.9.2

--
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


Re: [Openvpn-devel] Default gateway can't be determined on illumos/solaris

2014-12-02 Thread Alexander Pyhalov

On 10/13/2014 13:47, Alexander Pyhalov wrote:

Hello.
In openvpn 2.3.4 on illumos/Solaris clients gateway for client can't be
determined, because default stub is used instead of
get_default_gateway() function. This means that the following push route
option in server config is not working:
push "route remote_host 255.255.255.255 net_gateway"

OpenVPN  client says that it doesn't know net_gateway.
The following patch mostly uses existing FreeBSD code to add
get_default_gateway() implementation:
https://github.com/pyhalov/oi-userland/blob/openvpn/components/openvpn/patches/get_default_gateway.patch
.


Hello.
I've sent two patches (from apyha...@gmail.com address) against 2.3 and 
master branch), correcting  to the list, implementing 
get_default_gateway() for Solaris / illumos platforms. Are there any 
issues with them?

--
С уважением,
Александр Пыхалов,
программист отдела телекоммуникационной инфраструктуры
управления информационно-коммуникационной инфраструктуры ЮФУ



[Openvpn-devel] Default gateway can't be determined on illumos/solaris

2014-10-13 Thread Alexander Pyhalov

Hello.
In openvpn 2.3.4 on illumos/Solaris clients gateway for client can't be 
determined, because default stub is used instead of 
get_default_gateway() function. This means that the following push route 
option in server config is not working:

push "route remote_host 255.255.255.255 net_gateway"

OpenVPN  client says that it doesn't know net_gateway.
The following patch mostly uses existing FreeBSD code to add 
get_default_gateway() implementation: 
https://github.com/pyhalov/oi-userland/blob/openvpn/components/openvpn/patches/get_default_gateway.patch 
. 


The difference is that on Solaris there's no sa_len field.
I'm not absolutely sure that patch is correct, but as I see in route.c 
only sockaddr_in structures are supposed to be passed to NEXTADDR and 
ADVANCE macroses. This patch works for me.

--
Best regards,
Alexander Pyhalov,
system administrator of Southern Federal University IT department