[Openvpn-devel] English language? Re: [PATCH] Support non-ASCII characters in Windows tmp path

Am 19.11.2013 18:36, schrieb Heiko Hund: > Get the temporary path from the system as UCS-2 and convert it to > UTF-8 and return that for internal use. > > Signed-off-by: Heiko Hund > + msg (M_WARN, "Could not find a suitable temporary directory." > + " (GetTempPath() failed). Con

Re: [Openvpn-devel] [PATCH] Support non-ASCII characters in Windows tmp path

I also found http://moser-isi.ethz.ch/docs/english_verb_inf_ing.pdf after my earlier post.

[Openvpn-devel] NAK on uninitialized handle fix (serious issue on Win 8.1)

Am 04.12.2013 14:12, schrieb Илья Шипицин: > Hello! > > I confirm issue described here: https://forums.openvpn.net/topic13246.html > also, I confirm that it is due to random handle value (which somehow > was null before Win 8.1 was released) > > also, I do not understand why we should check "err"

Re: [Openvpn-devel] Openvpn 2.3.2: "Could not create temporary file" ....Too many open files

Am 23.07.2014 08:19, schrieb arno.oderm...@ch.schindler.com: > Dear both, > > thank you for your reply. > Yes, we are using the "--client-connect" and according to 2.3 OpenVPN > manual (see section below) it does create files by writing to "file > named by $1." > > Gert, we are sure, there was no

[Openvpn-devel] AES-NI trouble, and patch - please review/comment

Greetings, I received a bug report against the FreeBSD OpenVPN port, but before applying a patch (by Ermal Luçi) I do not currently oversee, I would like your input. https://redmine.pfsense.org/issues/3966 original https://community.openvpn.net/openvpn/ticket/480 copy htt

Re: [Openvpn-devel] [PATCH] configure.ac: fix default behavior

Am 22.11.2014 um 10:43 schrieb Steffan Karger: > Hi Yegor, > > On 21-11-14 20:43, Yegor Yefremov wrote: >> This patch is a result of our IRC discussion with Arne. Alternative >> approach were to always build with password-save functionality without >> configure option at all. > > Thanks for the p

Re: [Openvpn-devel] AES-NI trouble, and patch - please review/comment

Am 18.11.2014 um 23:46 schrieb Matthias Andree: > Greetings, > > I received a bug report against the FreeBSD OpenVPN port, but before > applying a patch (by Ermal Luçi) I do not currently oversee, I would > like your input. > > https://redmine.pf

Re: [Openvpn-devel] [PATCH] Add more dash escaping to the man page

Am 26.01.2015 um 14:04 schrieb David Woodhouse: > FWIW I *can* search for 'For --management-client' even before this > patch, on Fedora 21. Changing to \- isn't required to fix the searching > here. Is it still required on Debian? I have a rather faint recollection because I tried fixing this in

Re: [Openvpn-devel] Topics for next week's (Monday, 30th Mar 2015) community meeting

Am 23.03.2015 um 20:21 schrieb Samuli Seppänen: > Hi, > > We're going to have an IRC meeting _next_ Monday, 30th March, starting > at 20:00 CET (19:00 UTC) on #openvpn-de...@irc.freenode.net. Current > topic list along with basic information is here: > >

[Openvpn-devel] [PATCH] Manual page update for Re-enabled TLS version negotiation.

Signed-off-by: Matthias Andree --- doc/openvpn.8 | 13 - 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/doc/openvpn.8 b/doc/openvpn.8 index a95d353..1420bdd 100644 --- a/doc/openvpn.8 +++ b/doc/openvpn.8 @@ -4286,16 +4286,19 @@ include "1.0", "1.1"

Re: [Openvpn-devel] [PATCH] Re-enable TLS version negotiation by default

Am 10.03.2015 um 20:26 schrieb Steffan Karger: > Re-enable TLS version negotiation by default, so that users > benefit from the stronger and better crypto of TLSv1.1 and > TLSv1.2, without having to add 'tls-version-min' to their > config files. > > We tried this before in 2.3.3, but got various r

Re: [Openvpn-devel] [PATCH] Remove useless dash escapes from the man-page

Am 31.03.2015 um 08:44 schrieb sam...@openvpn.net: > From: Samuli Seppänen > > This patch is against the release/2.3 branch > > Trac: 512 > Signed-off-by: Samuli Seppänen > --- > doc/openvpn.8 | 1800 > - > 1 file changed, 900 insertions

Re: [Openvpn-devel] [Openvpn-users] FreeBSD+cryptodev testers wanted

Am 31.03.2015 um 19:19 schrieb Gert Doering: > Hi, > > On Tue, Mar 31, 2015 at 10:30:39AM -0400, Mike Tancsa wrote: >> On 3/31/2015 10:23 AM, Gert Doering wrote: >>> On Tue, Mar 31, 2015 at 09:39:46AM -0400, Mike Tancsa wrote: I am not able to reproduce this. >>> >>> You need to use --daemon

Re: [Openvpn-devel] [PATCH] m4: enable silent build

Am 14.04.2015 um 20:34 schrieb Yegor Yefremov: > Signed-off-by: Yegor Yefremov > --- > configure.ac | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git a/configure.ac b/configure.ac > index 9132468..ca0d9c3 100644 > --- a/configure.ac > +++ b/configure.ac > @@ -374,6 +374,9 @@ AC_DEFINE_UN

Re: [Openvpn-devel] [PATCH] m4: enable silent build

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 27.04.2015 um 16:48 schrieb David Sommerseth: > Having this said, if you do builds on systems with a more modern > automake, I do want to encourage people to run 'make V=0' or use > ./configure --enable-silent-rules. This will ensure we can capture

Re: [Openvpn-devel] [PATCH] Remove useless dash escapes from the man-page

Am 29.04.2015 um 14:07 schrieb David Woodhouse: > On Tue, 2015-03-31 at 09:19 +0200, Matthias Andree wrote: >> I am concerned this will cause misformattings and inability to search >> for options with leading dashes on some systems - I don't recall >> versions, but I do k

Re: [Openvpn-devel] OpenVPN 2.3.12 released

beyond the attached patch that solves (1.) above partially. The FreeBSD port of OpenVPN will forego the unit tests, and I will patch the warning out so I don't get "but just add cmake as a requisite" spam - which, when rectified, would lead to (2.) above... Cheers, Matthias From 9595

Re: [Openvpn-devel] [PATCH] Fix unittests for out-of-source builds

Am 15.08.2016 um 20:02 schrieb Steffan Karger: > Signed-off-by: Steffan Karger > --- > configure.ac | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/configure.ac b/configure.ac > index 4f14ebd..9189c94 100644 > --- a/configure.ac > +++ b/configure.ac > @@ -1215,7 +1215,7 @

Re: [Openvpn-devel] OpenVPN 2.3.12 released

Please - instead of my patch, use Steffan Karger's, subject "[PATCH] Fix unittests for out-of-source builds" of 2016-08-15. Thanks. -- ___ Openvpn-devel mailing list Openvpn-deve

Re: [Openvpn-devel] Protocol Change policy

way to go. Anything else adds too much complexity. -- Matthias Andree pgpeQ6M1nzUJe.pgp Description: PGP signature

Re: [Openvpn-devel] Default MTU

's not necessary. > So at this point a static default is certainly the simpler way to go, but > any changes to the static default should be carefully considered since they > would introduce backward incompatibility issues. -- Matthias Andree pgp9Q_xTZB8nZ.pgp Description: PGP signature

Re: [Openvpn-devel] OpenVPN Project Update

ke more money, and to control ever more markets to further maximize its huge revenues, should not be supported by OpenSource developers. If your opinion differs from mine, that's called freedom. :-) -- Matthias Andree

Re: [Openvpn-devel] OpenVPN Project Update

protocol= udp wait= yes user= root server = /usr/local/sbin/openvpn-log server_args = --user vpn --verb 5 --float --dev tun0 --ifconfig 192.168.0.1 192.168.0.129 --up /service/openvpn/script-up --comp-lzo --mlock --secret /

Re: [Openvpn-devel] New pre-1.3.2 beta available, please test

n Christoph Pfisterer's tun driver at http://chrisp.de/en/projects/tunnel.html See the man page for more information, usage examples, and -- Matthias Andree

Re: [Openvpn-devel] Another pre-1.3.2 beta

On Sun, 20 Oct 2002, James Yonan wrote: > Changes since last beta: > > * Added inetd/xinetd support (--inetd) including > documentation in the HOWTO. Works for me. Thanks.

Re: [Openvpn-devel] OpenVPN 1.3.2 Released

On Thu, 24 Oct 2002, James Yonan wrote: > Download: > > https://sourceforge.net/projects/openvpn/ > > Change Log: > > * Added FreeBSD 4.1.1+ TUN/TAP driver notes to > INSTALL (Matthias Andree). The FreeBSD port update (to version 1.3.2, you'd guessed that) h

Re: [Openvpn-devel] RE: [Openvpn-users] OpenVPN w/ TAP device on Linux/FreeBSD

On Wed, 27 Nov 2002, James Yonan wrote: > Given that this assumption is flawed, it is probably necessary to add a new > variable which I am calling tun_mtu_extra which is the maximum number of > bytes in excess of the MTU size that a TUN/TAP device might return in a read > operation. > > I've

Re: [Openvpn-devel] Pre-1.3.3 beta available for testing

m -f Makefile.in aclocal.m4 config.h.in configure cvs rm -f config.guess config.sub depcomp install-sh missing cvs rm -f mkinstalldirs cvs commit -m "Remove generated files from CVS." -- Matthias Andree

Re: [Openvpn-devel] Pre-1.3.3 beta available for testing

: /home/ma/tmp/openvpn/openvpn.c:346: structure has no member named `packet_id_file' /home/ma/tmp/openvpn/openvpn.c:347: structure has no member named `packet_id_file' /home/ma/tmp/openvpn/openvpn.c: In function `main': /home/ma/tmp/openvpn/openvpn.c:1730: storage size of `pid_persist' isn't known -- Matthias Andree

Re: [Openvpn-devel] Pre-1.3.3 beta available for testing

On Wed, 19 Feb 2003, Matthias Andree wrote: > On Sun, 16 Feb 2003, James Yonan wrote: > > > Beta is available on CVS as well as here: > > > > http://openvpn.sourceforge.net/beta/openvpn-1.3.2.9.tar.gz > > I tried the current CVS as of some minutes ago on Linux

Re: [Openvpn-devel] Pre-1.3.3 beta available for testing

OK, here is a full patch for your convenience without the "apply on top" junk, with this patch, the current CVS compiles on: SuSE Linux 7.3 x86 gcc 2.95.3 SuSE Linux 8.1 x86 gcc 3.2 FreeBSD 4-STABLE x86 gcc 2.95.3+FreeBSD Solaris 8 Sparc gcc 2.95.3 Solaris 8 Sparc SunPro Workshop 6. The unfixed

Re: [Openvpn-devel] Pre-1.3.3 beta available for testing

On Wed, 19 Feb 2003, James Yonan wrote: > Hey, thanks for the patch and all the testing work on different platforms. You're welcome. I thought if I give it a whirl, I'd spin it until it was dizzy :-) > You raise a number of good points which I will address below: There were more warnings that

Re: [Openvpn-devel] Pre-1.3.3 beta available for testing

e exceptions, you may name auto variables _[a-z]*, but not functions. You could use x_ as prefix though. I've googled a little and found http://oakroadsystems.com/tech/c-predef.htm#Groups to be a very useful resource (and it's concise as well). -- Matthias Andree

[Openvpn-devel] First half of macro-vs-function hacks (was: Pre-1.3.3 beta available for testing)

Jim, this is the configure.ac part of the variadic macro test patch, it seems to work OK and cache the results. I have added also some unrelated AC_CACHE_SAVE (supported since autoconf 2.13) to checkpoint the cache should some later test fail, so the user can more quickly pick up when she typed "

Second half of variadic macro fix (was: [Openvpn-devel] Pre-1.3.3 beta available for testing)

Dear Jim, this second patch completes the varargs stuff. Tested on all machines I listed last time, and SUNpro 6 is very happy with the ISO C99 stuff and uses the macro (rather than the function). I tried to force the function underneath gcc 2.95 (edited config.cache, ran ./config.status --recheck

[Openvpn-devel] warnings quencher #1

against current CVS: Index: thread.h === RCS file: /cvsroot/openvpn/openvpn/thread.h,v retrieving revision 1.3 diff -u -r1.3 thread.h --- thread.h25 Jun 2002 06:56:16 - 1.3 +++ thread.h19 Feb 2003 21:21:03 - @@ -1

Re: [Openvpn-devel] First half of macro-vs-function hacks (was: Pre-1.3.3 beta available for testing)

ate a tarball that has ./configure > already generated, so that openvpn can be built and installed with the > usual "./configure && make && make install"? The canonical way is: make distcheck If you're absolutely confident it works, because you just changed documentation, "make dist" will suffice. -- Matthias Andree

Re: [Openvpn-devel] New pre-1.3.3 beta

shes. Do you intend to silence the warnings or are you interested to see them? I think they're harmless but annoying. Other than that, it compiles on FreeBSD 4.8-RC x86 and Solaris 8 sparc (32-bit mode), on the latter with Sun's compiler and gcc 2.95. -- Matthias Andree

Re: [Openvpn-devel] New pre-1.3.3 beta

On Sat, 15 Mar 2003, James Yonan wrote: > Yes, I think we should try to fix if it's only a trivial cast involved to > silence the warning. > > I don't see them on gcc 2.96, even with "-Wall -W -Wpointer-arith > -Wsign-compare -Winline". Indeed, it takes the sun compiler or the even more picky sp

[Openvpn-devel] Re: New beta available + progress update

thread_self () == x_main_thread_id) ? MAIN_THREAD : WORK_THREAD; } @@ -100,11 +100,11 @@ } } -void thread_init(); -void thread_cleanup(); +void thread_init(void); +void thread_cleanup(void); void work_thread_create (void *(*start_routine) (void *), void* arg); -void work_thread_join (); +void work_thread_join (void); #else /* USE_PTHREAD */ Index: tun.c === RCS file: /cvsroot/openvpn/openvpn/tun.c,v retrieving revision 1.28 diff -u -r1.28 tun.c --- tun.c 17 Apr 2003 07:12:16 - 1.28 +++ tun.c 17 Apr 2003 10:51:22 - @@ -417,7 +417,7 @@ int fd; if ((fd = socket(PF_INET, SOCK_DGRAM, 0)) < 0) - msg (M_WARN, "Cannot open control_fd", dev); + msg (M_WARN, "Cannot open control_fd"); else { strncpynt (r.ifr_name, tt->actual, IFNAMSIZ); Index: tun.h === RCS file: /cvsroot/openvpn/openvpn/tun.h,v retrieving revision 1.20 diff -u -r1.20 tun.h --- tun.h 17 Apr 2003 07:12:16 - 1.20 +++ tun.h 17 Apr 2003 10:51:22 - @@ -88,7 +88,7 @@ #define IFCONFIG_DEFAULT 1 static inline int -ifconfig_order() +ifconfig_order(void) { #if defined(TARGET_LINUX) return IFCONFIG_AFTER_TUN_OPEN; -- Matthias Andree

[Openvpn-devel] Re: New beta available + progress update

139,7 +139,7 @@ } static inline void -work_thread_join () +work_thread_join (void) { } -- Matthias Andree

Re: [Openvpn-devel] Re: New beta available + progress update

On Thu, 17 Apr 2003, James Yonan wrote: > The nice part about a radio link is that it is probably under your control, > meaning that you can ensure that ICMPs get properly passed. This allows path > MTU discovery to work and therefore solves a lot of the harder problems. Well, at least for the

Re: [Openvpn-devel] Fwd: RE: Multi-channel VPN

On Fri, 18 Apr 2003, James Yonan wrote: > I'm forwarding this discussion of an interesting feature request. Namely, > could (and should) OpenVPN have a channel bonding capability, where more than > one UDP connection over different paths is used to connect two peers, and > OpenVPN does channel bo

[Openvpn-devel] TCP-over-TCP (was: Multi-channel VPN)

in my configurations) across congested links, but I haven't compared vpnd to openvpn. (And I've found vtund to be fragile, a single ping -f into a tunnel usually let the tunnel collapse on Linux. OpenVPN is solid in these circumstances.) -- Matthias Andree

Re: [Openvpn-devel] TCP-over-TCP (was: Multi-channel VPN)

eam sockets into dgram sockets for connections that use the tunnel is sufficient. However, this doesn't actually apply to openvpn because openvpn does TCP-over-UDP. -- Matthias Andree

Re: [Openvpn-devel] TCP-over-TCP (was: Multi-channel VPN)

re all simply byte streams flowing over the TUN pipe. They > can be filtered without resorting to raw sockets or any other such potentially > unportable constructs. Only that OpenVPN would have to parse the TCP protocol for IPv4 and IPv6. -- Matthias Andree

Re: [Openvpn-devel] Openvpn for RH62 - eek!

On Fri, 02 May 2003, James Yonan wrote: > How do most other initialization scripts handle the differences between bash 1 > and 2? Do they just restrict themselves to the least common denominator (a)? Yes. /bin/sh is standardized; Solaris for some strange reason ship b0rked year-old stuff though

Re: [Openvpn-devel] Fwd: Re: comp-lzo and licensing issues

On Mon, 28 Apr 2003, Alberto Gonzalez Iniesta wrote: > Sorry for the huge forward, but everything needed to understand this > problem should be there :) FYI: My post of the FreeBSD-ports mailing list how I should handle this license issue LZO <-> OpenSSL hasn't turned up anything in some days; s

Re: [Openvpn-devel] Fwd: Re: comp-lzo and licensing issues

> If OpenSSL is in the base system of FreeBSD, then there shouldn't be any > problem linking LZO with it. > You could also allow OpenVPN binaries without LZO support (as I > currently do in Debian). This will break compatibility and is no longer needed in the light of the special permission Markus

Re: [Openvpn-devel] 1.4.0 Released

On Thu, 08 May 2003, James Yonan wrote: > Release Notes: > > This release adds options for persistence of replay protection information > across sessions, pass through of IPv4 TOS bits from the TUN/TAP device to the > UDP link, some advanced MTU control options, moderate revamping of the build >

Re: [Openvpn-devel] Fwd: Bug#182020: openvpn needs dynamic choice on HAVE_LINUX_IF_TUN_H

On Thu, 08 May 2003, James Yonan wrote: > OpenVPN's config script assumes that if 2.4 headers are present (i.e. > if_tun.h), then it should build for the 2.4 tun/tap driver. This may not be true for build hosts of a distributor, who needs the most conservative code if he's still shipping 2.2 kern

Re: [Openvpn-devel] OpenVPN 1.4.2 release candidate, please test

On Thu, 10 Jul 2003, James Yonan wrote: > > This is a maintenance release which (a) fixes the previously discussed ISO C99 > vararg efficiency bug, and (b) further stabilizes the experimental > --mtu-dynamic option which causes OpenVPN to perform internal datagram > fragmentation in cases where n

Re: [Openvpn-devel] OpenVPN 1.4.2 release candidate, please test

n prototypes causing an implicit type conversion. Most of these are > pretty harmless. > > Anyway, I've fixed them. Thanks. -- Matthias Andree

Re: [Openvpn-devel] Need 1.5 beta testers for *BSD, Linux 2.2, OS X

uld think the client would always want to compress data to avoid redundancy-based or "known-plaintext" attacks on the encrypted connection, but anyways.) -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] MailMarshal has detected a Virus in your message!

On Mon, 01 Sep 2003, mm-ad...@nzqa.govt.nz wrote: > MailMarshal has stopped the following message because it believes it contains > a virus: > >FROM:openvpn-devel@lists.sourceforge.net >TO: rachael.boi...@nzqa.govt.nz >Subject: Re: Thank you! >Message: B0001df6fa.0

Re: [Openvpn-devel] New feature: --ifconfig for tap devices

--dev-type tap results in: 4: Can't set multiplexor id: No such device or address (errno=6) Did I miss anything? -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] New feature: --ifconfig for tap devices

... I'd think it can be done. Tried loading a "tap" or "if_tap" module or something? FreeBSD compiles tap as a module that isn't loaded by default, you need to manually kldload it on FreeBSD. -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] Re: [Openvpn-users] Windows tun driver

cols. I for one don't need Windoze broadcast traffic gated, and "my" Windows boxes hardly generate non-IP traffic. IPX or NetBEUI drivers aren't installed on the Windows machines I maintain. ARP isn't needed. Granted, if you need IGMP, you'll want tap, but I'd g

Re: [Openvpn-devel] Re: [Openvpn-users] Windows tun driver

f you "tap" one IP into an existing eth subnet is non-trivial and requires like 4 lines of --up scripting. My Linux distro also defaults to ethertap rather than tun, so if you're running SuSE, better make sure you load the "tun" module early. ethertap won't work with tun

Re: [Openvpn-devel] RE: [Openvpn-users] Windows tun driver

nted, with current Windoze versions, SMB and all that stuff isn't bound to PPP devices by default but is likely that the user wants it bound to TUN, however, there are convenience features like --ifconfig. -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] CVS

c. I was wondering why the trunk hadn't changed :-) -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] Working with 2.6

On Tue, 18 Nov 2003, James Yonan wrote: > > That should allow openvpn to open the tun interface. > > If that works, and you can't figure out what lines in the devfs > > configuration to edit, post to this list and I'll see if I can determine > > what exactly it is that I changed in the (devfsd) co

Re: [Openvpn-devel] OpenVPN + Linux 2.6

from OpenVPN 1.4.X on Linux 2.4 (tun, no specials) continued to work flawlessly on Linux 2.6.0 and 2.6.1. -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] Re: [Openvpn-users] Problem while compiling openvpn

ars ago, which was a rather unpleasant experience). -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

[Openvpn-devel] Idea for --ifconfig & co.

Hi, would it be feasible to have openvpn create interfaces (--ifconfig or something) in "down" state until a remote peer connects - unless the tunnel is marked persistent? I know I can do this with scripts, but it might be the natural choice to reflect the tunnel status in interface configuration

[Openvpn-devel] OpenVPN 1.6-beta6 on Windows XP - observations

I know little of Windows IP and interface configuration and its quirks. Thanks in advance and have a nice week-end, -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] OpenVPN 1.6-beta6 on Windows XP - observations

an version that is. Apart from outright stupid translations "metric -> Anzahl", the all-numeric printout with addresses where BSD has interface names isn't helpful, and DNS configuration adds to the confusion. With Samba and "net view \\bigserver", WINS also gets into play

Re: [Openvpn-devel] OpenVPN multi instancing

ode > leak-free? go figure as a side project, going to fill your thesis or homework or whatever other paper or PDF you're going to turn in. :-) -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] OpenVPN multi instancing

o check out? Or a mailing list I should subscribe to? May I suggest to post the pointer to the document or add one to openvpn.sourceforge.net? Thanks. (It's incredible how much room for improvement OpenVPN still has, while having been stable and production-ready for so long already.) -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

[Openvpn-devel] Files missing from BETA20 CVS

Hi, the files list.c, mroute.c and multi.c appear to be missing from the BETA20 branch in CVS: ma@merlin:~/cvs-3rdparty/openvpn> LANG=C make -ks 2>&1 | grep ^make make[1]: *** No rule to make target `list.c', needed by `list.o'. make[1]: *** No rule to make target `mroute.c', needed by `mroute.o'

Re: [Openvpn-devel] OpenVPN 2.0 -- Project Update and Release Notes

owed me to work full-time on the project during the > last month. In how far does the new OpenVPN 2.0 server require client upgrades? Which client versions (providing the clients use TLS) are still compatible? -- Matthias Andree Encrypt your mail: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] OpenVPN 2.0-test26 released

On Thu, 29 Apr 2004, James Yonan wrote: > Ooops... let's try that again with the correct subject line. > > A new release of the 2.0 beta is available. This prompted me to pull from CVS, I figured I need this patch on Linux when compiling with GCC 3.4 with strict error checking enabled: Index: s

Re: [Openvpn-devel] OpenVPN 2.0-test26 released

vent the definition of __USE_MISC in , hence IFNAMSIZ and struct ifr aren't defined. gcc -std=gnu99 is fine. /One/ way to define these symbol and struct them is to use _BSD_SOURCE, but I wasn't aware of the glibc "override POSIX with BSD, require -lbsd-compat" behaviour, so

Re: [Openvpn-devel] CVS out-of-date

ot/openvpn login > cvs -z3 -d:pserver:anonym...@cvs.sourceforge.net:/cvsroot/openvpn co openvpn You need to tell CVS to check out the branch, i. e. use cvs -z3 -d:pserver:anonym...@cvs.sourceforge.net:/cvsroot/openvpn checkout -rBETA20 openvpn -- Matthias Andree Encrypted mail welcome: my GnuPG key ID is 0x052E7D95

Re: [Openvpn-devel] Trying to use zlib with openvpn

On Thu, 27 May 2004, Ming-Ching Tiew wrote: > OK thanks for the response. Upon closer investigation, I > found that it is my own problem. The LZO_COMPRESS is > taking the parameters as (source, source_len, dst, dest_len) > whereas zlib compress is (dest, dest_len, source, source_len). > > There

Re: [Openvpn-devel] compiling statically - how?

would probably be ./configure CC="gcc -static" - it's untested and may require the installation of static libraries on some systems. -- Matthias Andree Encrypted mail welcome: my GnuPG key ID is 0x052E7D95 (PGP/MIME preferred)

Re: [Openvpn-devel] CVS repository for version 2 - but where?

vs checkout). HTH, -- Matthias Andree Encrypted mail welcome: my GnuPG key ID is 0x052E7D95 (PGP/MIME preferred)

Re: [Openvpn-devel] OpenVPN Licensing Issues

exclusive copyright once in my life, with bad experiences, and I'd have to be paid some larger sum to ever do that again. -- Matthias Andree Encrypted mail welcome: my GnuPG key ID is 0x052E7D95 (PGP/MIME preferred)

Re: [Openvpn-devel] [PATCH] UDPv6 support (UDP/IPv6)

On Fri, 24 Sep 2004, JuanJo Ciarlante wrote: > This README covers UDP/IPv6 ( --udp6 ) support for openvpn-2.0_beta11 > Also, with address family "generalization" changes came local AF_UNIX socket > support. Is there a use for AF_UNIX in a VPN driver? -- Matthias Andree Enc

Re: [Openvpn-devel] [PATCH]: small tweaks to beta16

e software that builds the LZO archive and shared library (liblzo.a and .so) in src/.libs is libtool, and libtool should then be used to either _install_ or _link_ against the LZO library. (Libtool stores information that describes the .a and .so files in its .la files.) Is libtool used for Windows builds? -- Matthias Andree

Re: [Openvpn-devel] [PATCH]: small tweaks to beta16

this is applicable. -- Matthias Andree

[Openvpn-devel] CFT: untested FreeBSD of 2.0-rc8 available

"... http://home.pages.de/~mandree/freebsd/ Please send your feedback on the port to matthias.and...@gmx.de. Regards, -- Matthias Andree

Re: [Openvpn-devel] RPM build of 2.0-rc16 fails on MandrakeSoft

and be done with distro-specific differences whether it is liblzo, lzo, lzo1, liblzo1, my_grandma_ate_all_her_chickens or whatever. -- Matthias Andree

Re: [Openvpn-devel] RPM build of 2.0-rc16 fails on MandrakeSoft

ec which everyone else is using. Are names/provides/whatever standardized in any way? (LSB perhaps)? -- Matthias Andree

Re: [Openvpn-devel] RPM build of 2.0-rc16 fails on MandrakeSoft

rise Server, too) for instance ships 0.9.6. -- Matthias Andree

Re: [Openvpn-devel] RPM build of 2.0-rc16 fails on MandrakeSoft

kages other than the minimum > requisite packages to start & run a basic Linux system, RPM > construction, etc. RPM appears to, at least on Red Hat and Novell/SUSE derived machines, support the libraries' ELF SONAME, too, which is what my former suggestion has been about, and AFAICS, the soname is the same on all machines, namely liblzo.so.1 (use readelf -d to figure). -- Matthias Andree

Re: [Openvpn-devel] OpenVPN 2.0 released

FreeBSD 4 has had three competing thread models for a long time - so we're not losing this feature in the FreeBSD port). Thank you for your great work on OpenVPN 2.0. -- Matthias Andree

Re: [Openvpn-devel] LZO 2.0

On Wed, 15 Jun 2005, Hampus wrote: > I was just wondering if anyone has been able to build openvpn 2.0 when using > LZO 2.0 ? I myself get some strange errors. A patch with additional build instructions was posted a few days ago. Check the archives of this list. -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

ience link to libfoo.so.4.2) man/man3/foo.3.gz include/foo.h -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

ding to your patch, but leave the default for now > as is. This could be run and determined automatically by the autoconf/automake couple, automake supports conditional compilation (i. e. depending on autoconf findings, link another module into a program, or something like that). -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

Is this portable to non-GNU makes? If it is not, does OpenVPN require GNU make? I don't think it does. Is there a broken-out C program that fails to link at run-time if the workaround is required? This would be tested from configure.{in|ac} and set DLOPEN_PAM appropriately. -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

hat critical part. You have even provided an example where libfoo.so > is in the -devel rpm, just as I said. Sorry. I totally misread the problem that was discussed, and your assertions. -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

1 => /lib/libselinux.so.1 (0xb7f6b000) libc.so.6 => /lib/tls/libc.so.6 (0xb7e52000) /lib/ld-linux.so.2 (0x8000) -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

, you say you want it simple, on the other hand, you paint auto* as viable for the auth-pam plugin. I don't yet have a reasonable test to stuff into autoconf though, lack of time. Perhaps tomorrow. -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

odules. ...which constitutes an incentive to update to the non-broken PAM installation. If you compile something for glibc 2.3, chances are it doesn't work with glibc 2.2 either. -- Matthias Andree

Re: [Openvpn-devel] Why must PAM library be dlopened?

t usually works on FreeBSD and Solaris, if it doesn't work on Linux, Linux must improve in this compatibility regard. If I need an RPM for several versions of the same distribution, I usually compile on the oldest available and it usually works. Notable exception being kernel modules perhaps. -- Matthias Andree

Re: [Openvpn-devel] Unix-Compatibility

are and the OS with developer documentation and SDK. Solaris appears to be supported, it's a long time since I've tried it though. FreeBSD 5 and SuSE Linux 9.X are fine. -- Matthias Andree

[Openvpn-devel] [PATCH 1/2] 2.0.1-rc6: include linux/types.h before linux/errqueue.h

The attached patch includes linux/types.h before checking linux/errqueue.h, as future autoconf versions might otherwise assume linux/errqueue.h isn't present, fixing a huge configure warnings along the way. -- Matthias Andree Index: Chan

[Openvpn-devel] [PATCH 2/2] 2.0.1-rc6: support LZO 2.01 (liblzo.* -> liblzo2.*)

The attached patch checks for liblzo2 if LZO v2 headers have been found, to support LZO 2.01 and newer, which renamed the library to liblzo2. This was tested on SUSE Linux 9.3 without LZO, with LZO 1.08, 2.00 and 2.01. -- Matthias Andree --- ChangeLog~ 2005-07-20 11:12:27.0 +0200

[Openvpn-devel] PATCH: "make check" support for OpenVPN 2

lease apply. Kind regards, -- Matthias Andree Index: Makefile.am === RCS file: /cvsroot/openvpn/openvpn/Makefile.am,v retrieving revision 1.22 diff -u -r1.22 Makefile.am --- Makefile.am 11 Apr 2005 04:16:15 - 1.22 +++ Makefile.a

<    1   2   3   >