[Openvpn-devel] [PATCH applied] Re: Add tap driver initialization and ifconfig for AIX.

2014-07-07 Thread Gert Doering
Your patch has been applied to the master branch. commit 7e1e7b46701214f7886af6b408d6954a6621be46 Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Jun 10 16:04:31 2014 +0200 Add tap driver initialization and ifconfig for AIX. Signed-off-by: Gert Doering

[Openvpn-devel] [PATCH applied] Re: implement adding/deleting routes on AIX, for IPv4 and IPv6

2014-07-07 Thread Gert Doering
Your patch has been applied to the master branch. (A followup patch will have to come, making use of count_netmask_bits(), and drop the netmask_to_netbits2() helper again) commit b4b92ae5dca218325dfbe16992922716ea83e261 Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date

[Openvpn-devel] [PATCH applied] Re: Recognize AIX, define TARGET_AIX

2014-07-07 Thread Gert Doering
Your patch has been applied to the master branch. commit 42f13dc03c12805b994ea67fe77c9cb9dd55c10d Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Jun 10 16:04:30 2014 +0200 Recognize AIX, define TARGET_AIX Signed-off-by: Gert Doering <g...@medat

[Openvpn-devel] [PATCH applied] Re: Make t_client.sh work on AIX.

2014-07-07 Thread Gert Doering
Your patch has been applied to the master branch. commit a637016ea3a6b49e3c792ca335f50eb32a182093 Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Jun 10 16:04:33 2014 +0200 Make t_client.sh work on AIX. Signed-off-by: Gert Doering <g...@medat

[Openvpn-devel] [PATCH applied] Re: Rename ALLOW_NON_CBC_CIPHERS to ENABLE_OFB_CFB_MODE, and add to configure.

2014-07-07 Thread Gert Doering
. Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Arne Schwabe <a...@rfc2549.org> Message-Id: <1402244175-31462-2-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/8781 Signed-off-by: Gert Doering <g...@gree

[Openvpn-devel] [PATCH applied] Re: Add proper check for crypto modes (CBC or OFB/CFB)

2014-07-07 Thread Gert Doering
Karger <stef...@karger.me> Acked-by: Arne Schwabe <a...@rfc2549.org> Message-Id: <1402244175-31462-3-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/8779 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: Improve --show-ciphers to show if a cipher can be used in static key mode

2014-07-07 Thread Gert Doering
Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Arne Schwabe <a...@rfc2549.org> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <53baef65.2070...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/8852 Signed

[Openvpn-devel] [PATCH applied] Re: Don't issue warning for 'translate to self' tls-ciphers

2014-07-07 Thread Gert Doering
Karger <stef...@karger.me> Acked-by: Arne Schwabe <a...@rfc2549.org> Message-Id: <1404424065-24787-1-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/8824 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH] Call init script helpers with explicit path (./)

2014-07-08 Thread Gert Doering
t be found otherwise, and ensuring that the script isn't searched in $PATH is the right thing anyway. Reported in trac #423 Signed-off-by: Gert Doering <g...@greenie.muc.de> --- distro/rpm/openvpn.init.d.rhel | 2 +- distro/rpm/openvpn.init.d.suse | 2 +- 2 files changed, 2 insertions(+),

[Openvpn-devel] [PATCH] Fix t_lpback.sh platform-dependent failures

2014-07-08 Thread Gert Doering
commit e97aa06dc058 introduced "full openvpn cipher testing", but fails on OpenSSL 0.9.8 with DES-CFB1 (skip), on NetBSD for RC5-* (needs extra library, libcrypto_rc5.a) and on Solaris for POSIXly "tail" (rewrite). Signed-off-by: Gert Doering <g...@greenie.muc.de> ---

[Openvpn-devel] [PATCH applied] Re: Fix t_lpback.sh platform-dependent failures

2014-07-08 Thread Gert Doering
Patch has been applied to the master and release/2.3 branch. commit bbae238d5084012525a61a0e3ab947c414a555ae (master) commit 9ce3670aee49d8c4407983af014663dc6185f166 (release/2.3) Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Jul 8 16:45:58 2014 +0200 Fix

Re: [Openvpn-devel] [PATCH applied] Re: Extend t_lpback tests to test all ciphers reported by --show-ciphers

2014-07-08 Thread Gert Doering
Hi, On Mon, Jul 07, 2014 at 10:15:15PM +0200, Steffan Karger wrote: > On 07-07-14 22:09, Gert Doering wrote: > > Your patch has been applied to the master branch. > > Thanks. These are actually bugfixes for stuff that should just work in > 2.3 too, so I suggest to apply these

[Openvpn-devel] RFD: building OpenVPN without socks and/or http proxy support

2014-07-08 Thread Gert Doering
the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgp7qo5PmHJuL.pgp Description: PGP signature

Re: [Openvpn-devel] [Patch v3] Remove #ifdefs for client nat support.

2014-07-09 Thread Gert Doering
quite straightforward de-#ifdef-ing, which I like :) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgp920FmKqEBb.pgp Description: PGP signature

[Openvpn-devel] [PATCH applied] Re: Do not upcase x509-username-field for mixed-case arguments.

2014-07-10 Thread Gert Doering
r.me> Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: Don't exit daemon if opening or parsing the CRL fails.

2014-07-10 Thread Gert Doering
-by: Steffan Karger <steffan.kar...@fox-it.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <53bed57c.7070...@fox-it.com> Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

Re: [Openvpn-devel] [PATCH] Add topology in sample server configuration file

2014-07-11 Thread Gert Doering
dy sent a patch. So, what other issues exist? This is the only one I'm aware of... (and the recent trac ticket about "topology subnet not working on FreeBSD 10" turned out to be local confusion...) gert -- USENET is *not* the non-clickable part of WWW!

Re: [Openvpn-devel] [PATCH] Fix server routes not working in topology subnet with --server

2014-07-11 Thread Gert Doering
.. is this in host format, as in "we can just add +1 to o->ifconfig_local and it will work cross-endian"? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [Openvpn-devel] [PATCH] Add topology in sample server configuration file

2014-07-11 Thread Gert Doering
USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpL7QtYIJ7

Re: [Openvpn-devel] [PATCH] Add topology in sample server configuration file

2014-07-11 Thread Gert Doering
Hi, On Fri, Jul 11, 2014 at 08:17:50PM +0200, Jan Just Keijser wrote: > On 11/07/14 20:07, Gert Doering wrote: > >On Fri, Jul 11, 2014 at 04:50:38PM +0200, Jan Just Keijser wrote: > >>the master branch (from openvpn-testing) currently does not build on > >>either CentOS

Re: [Openvpn-devel] [PATCH] Add topology in sample server configuration file

2014-07-12 Thread Gert Doering
w customers may pay for). Any way to convince RH to pick up this security-relevant fix? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greeni

Re: [Openvpn-devel] [PATCH] Add topology in sample server configuration file

2014-07-12 Thread Gert Doering
enSSL considers this a "feature", not an "issue"... and being able to turn off session resumption is also considered a "feature"... gert -- USENET is *not* the non-clickable part of WWW! //www

[Openvpn-devel] [PATCH] Fix server routes not working in topology subnet with --server [v3]

2014-07-13 Thread Gert Doering
es not spoof ARP responses for itself). Signed-off-by: Arne Schwabe <a...@rfc2549.org> Signed-off-by: Gert Doering <g...@greenie.muc.de> --- doc/openvpn.8| 5 - src/openvpn/helper.c | 6 +- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/doc/openvpn.8 b

[Openvpn-devel] [PATCH applied] Re: Fix server routes not working in topology subnet with --server [v3]

2014-07-13 Thread Gert Doering
Fix server routes not working in topology subnet with --server [v3] Signed-off-by: Arne Schwabe <a...@rfc2549.org> Signed-off-by: Gert Doering <g...@greenie.muc.de> Acked-by: Arne Schwabe <a...@rfc2549.org> Acked-by: Gert Doering <g...@greenie.mu

[Openvpn-devel] [PATCH applied] Re: Add topology in sample server configuration file

2014-07-13 Thread Gert Doering
2014 +0200 Add topology in sample server configuration file Signed-off-by: Philipp Hagemeister <phi...@phihag.de> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <53bf9998.5020...@phihag.de> URL: http://article.gmane.org/gmane.network.openvpn.deve

Re: [Openvpn-devel] OpenVPN Windows client (GUI) config files under user homedir/profile

2014-07-13 Thread Gert Doering
ET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpAGpysMlS2D.pgp Description: PGP signature

[Openvpn-devel] [PATCH applied] Re: Always enable http-proxy and socks-proxy

2014-07-18 Thread Gert Doering
2014 +0200 Always enable http-proxy and socks-proxy Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1404735142-31420-2-git-send-email-a...@rfc2549.org> URL: http://article.gmane.org/gmane.network.openvpn.devel/8840 Signed-off-by: Ger

Re: [Openvpn-devel] [PATCH 3/4] Fix compiling without ENABLE_MANAGEMENT

2014-07-18 Thread Gert Doering
t; Openvpn-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-devel > -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpvYLb2Xh1Kg.pgp Description: PGP signature

Re: [Openvpn-devel] RFD: building OpenVPN without socks and/or http proxy support

2014-07-18 Thread Gert Doering
Hi, On Tue, Jul 08, 2014 at 09:56:09PM +0200, Gert Doering wrote: > we have a patch on the table to remove support for compile-time disabling > of socks proxy and http proxy support in OpenVPN. [..] > Otherwise, the #ifdef maze goes - that is, socks and http proxy will > be alw

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

2014-07-21 Thread Gert Doering
fully understood before using that. (Unfortunately I do not have the link that details this particular issue - came around it last week) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Do

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

2014-07-21 Thread Gert Doering
-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgp38uFSBNjLH.pgp Description: PGP signature

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

2014-07-21 Thread Gert Doering
> affected by OpenSSL's bugs? This is not the AS support channel, so we can't answer questions about AS. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [Openvpn-devel] Openvpn 2.3.2: "Could not create temporary file" ....Too many open files

2014-07-22 Thread Gert Doering
ible in "lsof" while OpenVPN is running and after a few connections have completed. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g.

Re: [Openvpn-devel] Openvpn 2.3.2: "Could not create temporary file" ....Too many open files

2014-07-24 Thread Gert Doering
is the problem. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpM_z8KSwnNg.pgp Description: PGP signature

Re: [Openvpn-devel] Openvpn 2.3.2: "Could not create temporary file" ....Too many open files

2014-07-24 Thread Gert Doering
be used to raise that limit to 2000 (if run as root, in the same shell that starts openvpn later)... I'm not a Fedora expert, so maybe they have some other limitations, or ways to control the limits. gert -- USENET is *not* the non-clickable part of WWW!

Re: [Openvpn-devel] OpenVPN FIPS 140-2 Compliant

2014-07-25 Thread Gert Doering
NET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpWJkcLx9TF9.pgp Description:

Re: [Openvpn-devel] OpenVPN FIPS 140-2 Compliant

2014-07-25 Thread Gert Doering
//www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpOyJ65WUv6e.pgp Description: PGP signature

Re: [Openvpn-devel] [PATCH] Export --redirect-gateway parameters

2014-07-25 Thread Gert Doering
t enough time in a day" - apologies for that. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025

Re: [Openvpn-devel] [PATCH] Fix --mtu-disc option with IPv6 transport

2014-07-29 Thread Gert Doering
on somewhere? (Last not least, because I'm too lazy to look: is that patch against git master or against release/2.3?) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [Openvpn-devel] [PATCH] Fix --mtu-disc option with IPv6 transport

2014-07-29 Thread Gert Doering
cting anything that is IPv4, and fixes a bug for IPv6. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025

[Openvpn-devel] [PATCH applied] Re: Fix typo in cipher_kt_mode_{cbc, ofb_cfb}() doxygen.

2014-07-29 Thread Gert Doering
+0200 Fix typo in cipher_kt_mode_{cbc, ofb_cfb}() doxygen. Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1406667866-14226-1-git-send-email-stef...@karger.me> URL: http:/

Re: [Openvpn-devel] [PATCH] Fix --mtu-disc option with IPv6 transport

2014-07-30 Thread Gert Doering
Hi, On Wed, Jul 30, 2014 at 03:15:53AM +0200, Julien Muchembled wrote: > Le 07/29/14 23:05, Gert Doering a écrit : > >> For example: > >> A --[mtu=1500]-- B --[mtu=1400]-- C > >> > >> Given a UDP6 socket on A with IPV6_MTU_DISCOVER=IP_PMTUDISC_DO, >

Re: [Openvpn-devel] [PATCH] Tease apart ipv6 and ipv4 ifconfig code.

2014-08-08 Thread Gert Doering
s like it's based on 2.3 (the AIX bits are missing, which is a giveaway). gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax:

Re: [Openvpn-devel] Openvpn-devel Digest, Vol 99, Issue 3

2014-08-09 Thread Gert Doering
of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgptRbIdykTVy.pgp Description: PGP signature

Re: [Openvpn-devel] Possible memory leaks found by Coverity

2014-08-14 Thread Gert Doering
issues look like problems? Does it make sense to submit a > patch fixing those? Again, I don't think it's a serious issue - but still, not having leaks is good practice, so a patch adding the appropriate free() calls would be welcome :-) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpSXd7bjR9Bo.pgp Description: PGP signature

Re: [Openvpn-devel] Bad signature

2014-08-15 Thread Gert Doering
he non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpFBqg2z6KTd.pgp Description: PGP signature

Re: [Openvpn-devel] Ongoing Windoes 8 issues

2014-08-20 Thread Gert Doering
d to ship all the windows installers "for Vista and up" with the NDIS6 driver by default. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@

Re: [Openvpn-devel] Ongoing Windoes 8 issues

2014-08-20 Thread Gert Doering
Hi, On Wed, Aug 20, 2014 at 10:17:01AM +0200, Richard Weinberger wrote: > On Wed, Aug 20, 2014 at 10:15 AM, Gert Doering <g...@greenie.muc.de> wrote: > > On Wed, Aug 20, 2014 at 09:32:46AM +0200, Richard Weinberger wrote: > >> This bug exists for almost 14 months

Re: [Openvpn-devel] Ongoing Windoes 8 issues

2014-08-20 Thread Gert Doering
re rolling out. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.

Re: [Openvpn-devel] Ongoing Windoes 8 issues

2014-08-20 Thread Gert Doering
> reports. Yes, please :-) Though I have to admit that our turn-around even for reviewing and commiting alone is not as good as it should be. Meh :-( gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doer

Re: [Openvpn-devel] [PATCH] kill command with IPv6 client address and port

2014-09-03 Thread Gert Doering
put. This will break applications that use the management interface - what you can do is add extra columns with a header, but not modify existing columns. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~ge

Re: [Openvpn-devel] [PATCH] kill command with IPv6 client address and port

2014-09-04 Thread Gert Doering
*not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpoBmPPQvCLY.pgp Description: PGP signature

Re: [Openvpn-devel] [PATCH] Add configure check for the path to systemd-ask-password

2014-09-06 Thread Gert Doering
not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgppXnF2yNAzC.pgp Description: PGP signature

Re: [Openvpn-devel] [PATCH 4/4] White-space clean-up of openvpn_popen()

2014-09-06 Thread Gert Doering
nt style. (I agree that we might want to reformat prior to releasing 2.4, and should discuss this in Munich) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [Openvpn-devel] [PATCH 1/4] Don't let openvpn_popen() keep zombies around

2014-09-06 Thread Gert Doering
ert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpvG7u27A3zk.pgp Description: PGP signature

Re: [Openvpn-devel] [PATCH 2/4] Don't try to use systemd-ask-password if it is not available

2014-09-06 Thread Gert Doering
. For clarity, you might want to keep the "a.st_dev != b.st_dev" comparison befor the stat() on SYSTEMD_ASK_PASSWORD_PATH, as the comparison belongs to the /sys/fs/... stuff, not to the third stat(). gert -- USENET is *not* the non-clickable part of WWW! /

Re: [Openvpn-devel] [PATCH 3/4] Clean up the pipe closing in openvpn_popen()

2014-09-06 Thread Gert Doering
-ACK, though :) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de p

Re: [Openvpn-devel] [PATCH] Remove quadratic complexity from openvpn_base64_decode()

2014-09-06 Thread Gert Doering
d be applied to both master and 2.3 branches as a bugfix. ACK. Will merge to both branches ASAP. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [Openvpn-devel] [PATCH v2 1/2] Don't try to use systemd-ask-password if it is not available

2014-09-09 Thread Gert Doering
eful functionality, code looks good. Not tested, no systemd here :) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025

Re: [Openvpn-devel] [PATCH v2 2/2] Clean up the pipe closing in openvpn_popen()

2014-09-09 Thread Gert Doering
//www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpg3GDVGYj2B.pgp Description: PGP signature

[Openvpn-devel] [PATCH applied] Re: Remove quadratic complexity from openvpn_base64_decode()

2014-09-14 Thread Gert Doering
Remove quadratic complexity from openvpn_base64_decode() Signed-off-by: Steffan Karger <steffan.kar...@fox-it.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <5408494d.7050...@fox-it.com> URL: http://article.gmane.org/gmane.network.openvpn.deve

[Openvpn-devel] [PATCH applied] Re: Fix some unintialized variable warnings

2014-09-15 Thread Gert Doering
tef...@karger.me> Acked-by: David Sommerseth <d...@users.sourceforge.net> Message-Id: <1408568426-19601-1-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/9003 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: Fix clang warning in options.c

2014-09-15 Thread Gert Doering
tef...@karger.me> Acked-by: David Sommerseth <d...@users.sourceforge.net> Message-Id: <1408568426-19601-2-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/9004 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: Fix compiler warnings in ssl_polarssl.c.

2014-09-15 Thread Gert Doering
Karger <stef...@karger.me> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1408396155-9017-1-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/8991 Signed-off-by: Gert Doering <g...@greenie.muc.de>

Re: [Openvpn-devel] [PATCH] Add systemd unit file for OpenVPN

2014-09-18 Thread Gert Doering
nvpn.net/openvpn/wiki/Openvpn23ManPage > +Documentation=http://community.openvpn.net/openvpn/wiki/HOWTO Agree with yourself whether http or https is the way forward :-) gert -- USENET is *not* the non-clickable part of WWW! //www.mu

Re: [Openvpn-devel] Problem with I603-64 under Vista 64 SP2

2014-09-25 Thread Gert Doering
ert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpI8FBwaGxJj.

Re: [Openvpn-devel] [PATCH] Implement on-link route adding for iproute2

2014-09-26 Thread Gert Doering
onding FIXME. > > Signed-off-by: Philipp Hagemeister <phi...@phihag.de> Looks good to me. Will test and then commit (might take a few days). gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert D

Re: [Openvpn-devel] Any Windows-based OpenVPN servers available for fixing bug #432?

2014-09-30 Thread Gert Doering
r OpenVPN 2.x) welcome :-9 gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgp522h8lyeWi.pgp Description: PGP signature

[Openvpn-devel] [PATCH applied] Re: ocsp_check - signature verification and cert staus results are separate

2014-10-06 Thread Gert Doering
/article.gmane.org/gmane.network.openvpn.devel/9054 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: ocsp_check - double check if ocsp didn't report any errors in execution

2014-10-06 Thread Gert Doering
off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: systemd: Use systemd functions to consider systemd availability

2014-10-07 Thread Gert Doering
ate: Fri Oct 3 19:16:07 2014 +0200 systemd: Use systemd functions to consider systemd availability Signed-off-by: David Sommerseth <dav...@redhat.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1412356567-27125-1-git-send-email-openvpn.l...@topphem

Re: [Openvpn-devel] [PATCH 2/2] systemd: Do not mask usernames when querying for it via systemd-ask-password

2014-10-08 Thread Gert Doering
will be relevant to any distribution), and it really can't wait to discuss the larger picture face to face, well, go ahead and do so. You have commit rights, and I won't stop you, as the project is too important to me to risk a schism right now. gert -- USENET is *not* the non-clickable part of WW

Re: [Openvpn-devel] [PATCH] Implement on-link route adding for iproute2

2014-10-14 Thread Gert Doering
rge.net Date: Fri Sep 26 18:11:01 2014 +0200 Implement on-link route adding for iproute2 Signed-off-by: Philipp Hagemeister <phi...@phihag.de> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <54259015.2030...@phihag.de> URL: http://article.gmane.or

Re: [Openvpn-devel] Default gateway can't be determined on illumos/solaris

2014-10-14 Thread Gert Doering
hub.com/pyhalov/oi-userland/blob/openvpn/components/openvpn/patches/get_default_gateway.patch > > . Thanks. Feature-ACK, but... please rebase against git master, as the code in question looks quite a bit different now, after commit cab6305be749930eae9c4a1348fb90c4c515d8d7 Author: Gert Doering

[Openvpn-devel] [PATCH applied] Re: extract_x509_extension(): hide status message during normal operation.

2014-10-14 Thread Gert Doering
@lists.sourceforge.net Date: Sun Aug 10 00:40:44 2014 +0200 extract_x509_extension(): hide status message during normal operation. Signed-off-by: Andris Kalnozols <and...@hpl.hp.com> Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Gert Doering <g...

Re: [Openvpn-devel] Default gateway can't be determined on illumos/solaris

2014-10-14 Thread Gert Doering
sely ASAP and merge. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.info

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

2014-10-21 Thread Gert Doering
of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpZ8xLagxuKq.pgp Description: PGP signature

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

2014-10-21 Thread Gert Doering
ssword input, but if MI does that via management interface, it can be done) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

2014-10-21 Thread Gert Doering
*not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpYUHBzrWdHN.pgp Description: PGP signature

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

2014-10-21 Thread Gert Doering
, while using IPv6 transport) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.

Re: [Openvpn-devel] Are OpenVPN 2.3.4 I005 and I605 builit with OpenSSL 1.0.1j and "no-ssl3" flag?

2014-10-23 Thread Gert Doering
. No, they haven't. Because it is not relevant for OpenVPN, as Steffan explained. (OpenVPN gets build with default flags, as you can see when you look into the build scripts in git) gert -- USENET is *not* the non-clickable part of WWW! //www

Re: [Openvpn-devel] man page and options.c contradict

2014-10-23 Thread Gert Doering
ickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpQG83TADXbV.pgp Description: PGP signature

Re: [Openvpn-devel] man page and options.c contradict

2014-10-23 Thread Gert Doering
e part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpx_tS8idRDG.pgp Description: PGP signature

Re: [Openvpn-devel] man page and options.c contradict

2014-10-24 Thread Gert Doering
and it can be a bit confusing, yes. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpketo4dD94H.pgp Description: PGP signature

[Openvpn-devel] [PATCH applied] Re: Modification to address bug where OpenVPN enters state where it is unresponsive and cannot be terminated. Log output is continuous spew of code=995 errors.

2014-10-24 Thread Gert Doering
terminated. Log output is continuous spew of "code=995" errors. Revised fix for code=995 sped bug. Adding new tap adapters while connected: https://community.openvpn.net/openvpn/ticket/430 Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <14139616

[Openvpn-devel] [PATCH applied] Re: Fix regression with password protected private keys (polarssl)

2014-10-24 Thread Gert Doering
private keys (polarssl) Signed-off-by: Steffan Karger <steffan.kar...@fox-it.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <5432e951.6020...@fox-it.com> Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: Fix regression with password protected private keys (polarssl)

2014-10-24 Thread Gert Doering
protected private keys (polarssl) Signed-off-by: Steffan Karger <steffan.kar...@fox-it.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <5432e951.6020...@fox-it.com> Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: ssl_polarssl.c: fix includes and make casts explicit

2014-10-25 Thread Gert Doering
-by: Steffan Karger <stef...@karger.me> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1414230469-2670-1-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/9194 Signed-off-by: Gert Doering <g...@greenie.muc.de>

[Openvpn-devel] [PATCH applied] Re: Remove unused variables from ssl_verify_openssl.c extract_x509_extension()

2014-10-25 Thread Gert Doering
() Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1414230851-5350-1-git-send-email-stef...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/9195 Signed-off-by: Gert Doering &l

Re: [Openvpn-devel] [PATCH applied] Re: Remove unused variables from ssl_verify_openssl.c extract_x509_extension()

2014-10-25 Thread Gert Doering
Hi, On Sat, Oct 25, 2014 at 12:41:50PM +0200, Gert Doering wrote: > ACK. > > Your patch has been applied to the release/2.3 branch. ... and to master. Given the comment on IRC I wasn't sure if that was only 2.3-specific (like the first patch) or "both branches" (this

[Openvpn-devel] [PATCH applied] Re: Fix assertion error when using --cipher none

2014-11-08 Thread Gert Doering
Fix assertion error when using --cipher none Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Arne Schwabe <a...@rfc2549.org> Message-Id: <545ded2c.5070...@karger.me> URL: http://article.gmane.org/gmane.network.openvpn.devel/9217 Signed-of

[Openvpn-devel] [PATCH applied] Re: Add --tls-version-max

2014-11-14 Thread Gert Doering
com> Acked-by: Arne Schwabe <a...@rfc2549.org> Message-Id: <544ec052.3080...@fox-it.com> URL: http://article.gmane.org/gmane.network.openvpn.devel/9210 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: Modernize sample keys and sample configs

2014-11-15 Thread Gert Doering
tef...@karger.me> Acked-by: Samuli Seppänen <sam...@openvpn.net> Message-Id: <caa1abxkzr_e6wk9gbbb3xplyjzybxsa1k21udxnc90d8ref...@mail.gmail.com> URL: http://article.gmane.org/gmane.network.openvpn.devel/9226 Signed-off-by: Gert Doering <g...@greenie.muc.de>

[Openvpn-devel] [PATCH applied] Re: fix compilation on Windows

2014-11-17 Thread Gert Doering
on Windows Signed-off-by: Heiko Hund <heiko.h...@sophos.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1416068708-6871-1-git-send-email-heiko.h...@sophos.com> URL: http://article.gmane.org/gmane.network.openvpn.devel/9228 Signed-off-b

[Openvpn-devel] [PATCH applied] Re: fix warnings on Windows

2014-11-17 Thread Gert Doering
com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1416068708-6871-2-git-send-email-heiko.h...@sophos.com> URL: http://article.gmane.org/gmane.network.openvpn.devel/9229 Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering

[Openvpn-devel] [PATCH applied] Re: fix compilation on Windows

2014-11-17 Thread Gert Doering
on Windows Signed-off-by: Heiko Hund <heiko.h...@sophos.com> Acked-by: Gert Doering <g...@greenie.muc.de> Message-Id: <1416068708-6871-1-git-send-email-heiko.h...@sophos.com> URL: http://article.gmane.org/gmane.network.openvpn.devel/9228 Signed-off-b

[Openvpn-devel] [PATCH applied] Re: Fix windows build on older mingw versions.

2014-11-18 Thread Gert Doering
Your patch has been applied to the master branch. commit 188a65153fb304db873694eaab21599e37ead908 Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Mon Nov 17 21:58:23 2014 +0100 Fix windows build on older mingw versions. Signed-off-by: Gert Doering &l

Re: [Openvpn-devel] [PATCH] configure.ac: fix default behavior

2014-11-22 Thread Gert Doering
which makes this a feature-NAK. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgp89nYqvRuhd.pgp Description: PGP signature

Re: [Openvpn-devel] [PATCH] configure.ac: fix default behavior

2014-11-22 Thread Gert Doering
the next meeting? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informati

[Openvpn-devel] [PATCH] Add client-only support for peer-id.

2014-11-22 Thread Gert Doering
This is a reduced version of the peer-id patch from Lev Stipakov implementing only the client side bits - send IV_PROTO=2, accept "peer-id " as pushed option, support P_DATA_V2 packets. Signed-off-by: Gert Doering <g...@greenie.muc.de> --- src/openvpn/init.c | 12 +

<    4   5   6   7   8   9   10   11   12   13   >