Re: [Openvpn-devel] [PATCH 10/10] Implement dual stack client support for OpenVPN

2012-12-15 Thread Tore Anderson
ACK, I tested several different fail-over scenarios and all worked fine. Also all my pre-existing VPNs (maintained by GNOME NetworkManager) worked just fine. -- Tore Anderson

Re: [Openvpn-devel] [PATCH 10/10] Implement dual stack client support for OpenVPN

2013-06-22 Thread Tore Anderson
* Samuli Seppänen >> On Sat, Dec 15, 2012 at 11:23:52AM +0100, Tore Anderson wrote: >>> * Arne Schwabe >>> >>>> This patch contains a number of changes. I did not further spit this >>>> since some changes make only sense being changed together.

[Openvpn-devel] git master proto udp6+multihome is broken

2014-01-10 Thread Tore Anderson
If I connect to an openvpn server using "proto udp6" and "multihome", it instantly crashes with an assertion failure: Jan 10 14:25:58 greed ovpn-server[9905]: 2a02:c0:100:0:9e8e:99ff:fed1:5243 TLS: Initial packet from [AF_INET6]2a02:c0:100:0:9e8e:99ff:fed1:5243:56277 (via

Re: [Openvpn-devel] git master proto udp6+multihome is broken

2014-02-17 Thread Tore Anderson
* Gert Doering > On Sat, Jan 11, 2014 at 12:59:02AM +0100, Tore Anderson wrote: >> FWIW: Now I also got to test git master with what I wanted to in the >> first place, namely to see whether or not all the nice dualstack changes >> had also made "multihome" work

Re: [Openvpn-devel] git master proto udp6+multihome is broken

2014-02-18 Thread Tore Anderson
Hi Gert, > Could you run my test program to see whether that gets it right? It doesn't: server$ mhome AF_INET6/IPV6_RECVPKTINFO enabled setsockopt(IPV6_V6ONLY=0) Socket bound to local address [AF_INET6][undef]:50001 -- CMSG_NXTHDR=(nil), level=41, type=50 IPV6_PKTINFO read: fromlen=28, r_len=5

[Openvpn-devel] Heartbleed

2014-04-08 Thread Tore Anderson
I'm guessing that everyone has seen http://heartbleed.com/ by now. My question is simple: Could anyone confirm whether or not OpenVPN is vulnerable (when linked to a vulnerable version of OpenSSL)? Tore

Re: [Openvpn-devel] [PATCH] Rewrite manpage section about --multihome

2014-04-26 Thread Tore Anderson
* Gert Doering > +Note 2: if you do an IPv6+IPv4 dual-stack bind on a Linux machine with > +multiple IPv4 address, connections to IPv4 addresses will not work > +right on kernels before 3.14, due to missing kernel support for the > +IPv4-mapped case. This isn't entirely accurate. There are

Re: [Openvpn-devel] [PATCH] Rewrite manpage section about --multihome

2014-04-26 Thread Tore Anderson
* Tore Anderson > The patches will eventually make it into the previous LTS release > 12.04 «Precise» too, as part of the upcoming 12.04.5 point release > (expected in August). Just a little followup here to clarify in case you decide to add this info to the documentation. The 12.04.5

Re: [Openvpn-devel] [PATCH] Rewrite manpage section about --multihome

2014-04-26 Thread Tore Anderson
* Gert Doering > I'm not sure if I really want to go there. Completely fine by me, just getting the information out there, so you can decide what to do with it, :-) > I'm happy to put your detailed text into the trac ticket, though, so > someone finding "it does not work!" and looking into

Re: [Openvpn-devel] [PATCH] Rewrite manpage section about --multihome

2014-04-26 Thread Tore Anderson
* Gert Doering >> Yeah, about that...I'm not sure your trac is completely healthy. >> Even though I submitted issue #306, I get "Warning: No permissions >> to add a comment." when trying to add info, there's no way I can >> close the ticket (which I think it should be, as it's not an >> OpenVPN

[Openvpn-devel] Debian/Ubuntu repo PGP key has expired

2014-08-04 Thread Tore Anderson
Good morning, FYI, it appears that the PGP key used to sign the Debian/Ubuntu binaries available at https://community.openvpn.net/openvpn/wiki/OpenvpnSoftwareRepos has expired. This causes APT to warn about invalid signatures whenever it's being run. $ curl -s