Re: [Openvpn-devel] [PATCH] compat/lz4: Update to v1.9.2

2020-10-02 Thread Илья Шипицин
пт, 2 окт. 2020 г. в 13:51, Arne Schwabe : > Am 01.10.20 um 17:46 schrieb David Sommerseth: > > It's a long while since the bundled lz4 library has received an update. > > It pulls in a lot of various fixes and enhancements, some of the changes > > fixes compiler warnings and hardens the code a

Re: [Openvpn-devel] New man-section pages format

2020-09-04 Thread Илья Шипицин
I thought of using autogen. No time yet On Fri, Sep 4, 2020, 4:23 PM tincanteksup wrote: > Hi, > > this is just something to chew-over.. > > See: > > https://github.com/OpenVPN/openvpn/blob/master/doc/man-sections/generic-options.rst > > I noticed that generally the option names, eg:

Re: [Openvpn-devel] MSI Installer: Add .ovpn file

2020-08-04 Thread Илья Шипицин
Hello, we used to put *.ovpn files on special dedicated website (some guide + installer downloads + ovpn). works as charm чт, 30 июл. 2020 г. в 13:37, Robert Grätz : > Hello, > > I am very happy that 2.5 will be hopefully soon released. > > I want to integrate my config file inside the msi

Re: [Openvpn-devel] Summary of the community meeting (24th June 2020)

2020-06-24 Thread Илья Шипицин
there's quite an interesting patchset https://patchwork.openvpn.net/project/openvpn2/list/?series=230 is it scheduled for 2.5 release ? or I've missed something and all patches are scheduled for 2.5 ? ср, 24 июн. 2020 г. в 16:11, Samuli Seppänen : > Hi, > > Here's the summary of the IRC

Re: [Openvpn-devel] [PATCH applied] Re: Add unit tests for engine keys

2020-06-23 Thread Илья Шипицин
ср, 24 июн. 2020 г. в 00:37, Gert Doering : > Hi, > > On Tue, Jun 23, 2020 at 12:32:42PM -0700, James Bottomley wrote: > > > James, are you triggering on specific openvpn messages? "--enable- > > > small" > > > changes these (trimming some warnings and help texts). Can you test > > > with > > >

Re: [Openvpn-devel] [PATCH applied] Re: Add unit tests for engine keys

2020-06-23 Thread Илья Шипицин
вт, 23 июн. 2020 г. в 23:17, James Bottomley < james.bottom...@hansenpartnership.com>: > On Tue, 2020-06-23 at 21:43 +0500, Илья Шипицин wrote: > > as far as I understand, openssl-1.0.2 does not support engines ? > > No, it does. Engines were a pre 0.9.8 thing. I support o

Re: [Openvpn-devel] [PATCH applied] Re: Add unit tests for engine keys

2020-06-23 Thread Илья Шипицин
as far as I understand, openssl-1.0.2 does not support engines ? вт, 23 июн. 2020 г. в 21:42, Илья Шипицин : > apparently, it fails for some build on travis > https://travis-ci.org/github/OpenVPN/openvpn/jobs/701158156 > > вт, 23 июн. 2020 г. в 18:07, James Bottomley <

Re: [Openvpn-devel] [PATCH applied] Re: Add unit tests for engine keys

2020-06-23 Thread Илья Шипицин
apparently, it fails for some build on travis https://travis-ci.org/github/OpenVPN/openvpn/jobs/701158156 вт, 23 июн. 2020 г. в 18:07, James Bottomley < james.bottom...@hansenpartnership.com>: > On Tue, 2020-06-23 at 09:21 +0200, Gert Doering wrote: > > Hi, > > > > On Tue, Jun 23, 2020 at

Re: [Openvpn-devel] [PATCH v6 2/3] crypto_openssl: add initialization to pick up local configuration

2020-06-08 Thread Илья Шипицин
пн, 8 июн. 2020 г. в 15:06, Arne Schwabe : > > > > > Sorry about that. Best guess is it's missing an include for > > openssl/conf.h. You don't need that today because pretty much every > > other openssl header includes it, but that may not always have been so. > > > > Does the below patch fix

Re: [Openvpn-devel] is anybody running tests on Fedora ?

2020-05-04 Thread Илья Шипицин
пн, 4 мая 2020 г. в 16:41, Samuli Seppänen : > Hi, > > We do have a Fedora 30 buildslave and run fping tests there. It also > seems to run t_client IPv6 ping tests. > can you please run the following dnf whatprovides fping6 ? > > Samuli > > Il 03/05/20 23:

[Openvpn-devel] is anybody running tests on Fedora ?

2020-05-03 Thread Илья Шипицин
Hello, t_client.sh requires "fping6" binary, which is not available on Fedora. on Fedora "fping" is capable of running ipv6 pings. shall we adopt test ? Cheers, Ilya Shipitcin ___ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net

Re: [Openvpn-devel] Possible memory alignment Problem in 2.4 ?

2020-03-24 Thread Илья Шипицин
вт, 24 мар. 2020 г. в 22:19, Michael Kress : > Am Tue, 24 Mar 2020 11:21:56 +0100 > schrieb Arne Schwabe : > > > Am 23.03.20 um 17:11 schrieb Michael Kress: > > > Hello list, > > > > > > There seems to be some kind of alignment problem in OpenVPN 2.4 > > > versions on ARMv4 based machines (32

Re: [Openvpn-devel] [PATCH v3] travis-ci: add arm64, s390x builds.

2020-03-24 Thread Илья Шипицин
sometimes, arm64 build fails https://travis-ci.org/github/OpenVPN/openvpn/jobs/666389482?utm_medium=notification_source=github_status if that will become often, we will mark it as "allowed failures" thanks to everyone, we have cmocka tests back! вт, 24 мар. 2020 г. в 14:04, Ил

Re: [Openvpn-devel] [PATCH v3] travis-ci: add arm64, s390x builds.

2020-03-24 Thread Илья Шипицин
I guess nobody yet reported that issue. Maybe, I'll report. вт, 24 мар. 2020 г. в 14:03, Lev Stipakov : > Yes, I agree that with name is looks much better. > > I wonder why displaying arch requires you to be logged in. > ___ Openvpn-devel mailing list

Re: [Openvpn-devel] Possible memory alignment Problem in 2.4 ?

2020-03-23 Thread Илья Шипицин
thank you for wonderful investigation. however, are there reasons for using lzo ? it consumes too much cpu (comparing to lz4). also, it highly depends on traffic itself, many application already compress their bytes themselves. if you are stick to lzo, because it is propagated to all configs,

Re: [Openvpn-devel] [PATCH v3] travis-ci: add arm64, s390x builds.

2020-03-22 Thread Илья Шипицин
sorry, I sent it twice. the last one is good, please ignore previous "v2" I've managed to resolve "travis_wait" issue. it was non trivial output redirection issue. the rest is just fine. patch itself is important it re-enables cmocka tests in travis (they are not running now, after cmocka git

Re: [Openvpn-devel] [PATCH] Fix float comparisons of OPENVPN_VERSION_NUMBER

2020-02-20 Thread Илья Шипицин
чт, 20 февр. 2020 г. в 13:44, Arne Schwabe : > Am 20.02.20 um 09:38 schrieb Arne Schwabe: > > These checks are probably the result of copying a > > check from the LibreSSL and modifying it to be > > a OpenSSL check. For some arcane reason LibreSSL decided > > that its version number should be a

Re: [Openvpn-devel] [PATCH v4 2/2] Add unit tests for engine keys

2020-02-15 Thread Илья Шипицин
сб, 15 февр. 2020 г. в 19:59, James Bottomley < james.bottom...@hansenpartnership.com>: > On Fri, 2020-02-14 at 18:33 +0500, Илья Шипицин wrote: > > пт, 14 февр. 2020 г. в 18:05, James Bottomley < > > james.bottom...@hansenpartnership.com>: > > > > &g

Re: [Openvpn-devel] [PATCH v4 2/2] Add unit tests for engine keys

2020-02-14 Thread Илья Шипицин
пт, 14 февр. 2020 г. в 18:05, James Bottomley < james.bottom...@hansenpartnership.com>: > On Thu, 2020-02-13 at 19:18 +0100, Arne Schwabe wrote: > > Am 10.02.18 um 23:50 schrieb James Bottomley: > > > Testing engines is problematic, so one of the prerequisites built > > > for the tests is a

Re: [Openvpn-devel] [PATCH v2] travis-ci: add arm64, s390x builds.

2020-02-03 Thread Илья Шипицин
пн, 3 февр. 2020 г. в 14:51, Steffan Karger : > On 03-02-2020 09:04, Илья Шипицин wrote: > > also, ARM64 builds are flaky. maybe we should add them as allow_failures. > > What is flaky about the ARM64 builds? Is it our build? Is it the travis > infra? > in travis-ci term

Re: [Openvpn-devel] [PATCH v2] travis-ci: add arm64, s390x builds.

2020-02-03 Thread Илья Шипицин
also, ARM64 builds are flaky. maybe we should add them as allow_failures. пн, 3 февр. 2020 г. в 12:49, Илья Шипицин : > https://travis-ci.org/chipitsine/openvpn/jobs/645173717#L62 > > I expected it to be 30 minutes wait. > > пн, 3 февр. 2020 г. в 12:48, Илья Шипицин : > >>

Re: [Openvpn-devel] [PATCH v2] travis-ci: add arm64, s390x builds.

2020-02-02 Thread Илья Шипицин
https://travis-ci.org/chipitsine/openvpn/jobs/645173717#L62 I expected it to be 30 minutes wait. пн, 3 февр. 2020 г. в 12:48, Илья Шипицин : > > > пн, 3 февр. 2020 г. в 12:40, Lev Stipakov : > >> Hi, >> >> Could you provide a link to a travis build with your ch

Re: [Openvpn-devel] [PATCH v2] travis-ci: add arm64, s390x builds.

2020-02-02 Thread Илья Шипицин
пн, 3 февр. 2020 г. в 12:40, Lev Stipakov : > Hi, > > Could you provide a link to a travis build with your changes? > https://travis-ci.org/chipitsine/openvpn/builds/645173716 there's at least issue regarding "travis_wait 30", as I can see, windows builds waits for 10 minutes. I'll fix it in

[Openvpn-devel] linux arm64 tests fail

2020-02-01 Thread Илья Шипицин
Hello, https://travis-ci.org/chipitsine/openvpn/jobs/644745481?utm_medium=notification_source=github_status it indicates "ERROR" when running tests, however tests are ok after all. [ RUN ] tls_crypt_v2_wrap_too_long_metadata ERROR: could not crypt: insufficient space in dst [ OK ]

Re: [Openvpn-devel] [PATCH] Fix ACL_CHECK_ADD_COMPILE_FLAGS to work with clang

2019-11-14 Thread Илья Шипицин
Thank you for your efforts. As you are touching this, can you try "dist: bionic" ? It might bring newer compilers On Thu, Nov 14, 2019, 8:41 PM wrote: > From: Selva Nair > > Some compilers (e.g., clang) only issue a warning for > unsupported options unless additional flags such > as -Werror

Re: [Openvpn-devel] using arm64 on travis ?

2019-11-08 Thread Илья Шипицин
пт, 8 нояб. 2019 г. в 14:02, Gert Doering : > Hi, > > On Fri, Nov 08, 2019 at 12:39:00PM +0500, ?? wrote: > > https://docs.travis-ci.com/user/multi-cpu-architectures > > > > we can switch some builds to arm64. any suggestions ? > > Sounds good. Right now we only have i386

[Openvpn-devel] using arm64 on travis ?

2019-11-07 Thread Илья Шипицин
hello, https://docs.travis-ci.com/user/multi-cpu-architectures we can switch some builds to arm64. any suggestions ? Cheers, Ilya Shipitsin ___ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net

Re: [Openvpn-devel] [PATCH v2 1/7] Visual Studio: upgrade project files to VS2019

2019-11-07 Thread Илья Шипицин
чт, 7 нояб. 2019 г. в 22:49, Lev Stipakov : > From: Lev Stipakov > > Signed-off-by: Lev Stipakov > --- > src/compat/compat.vcxproj | 12 ++-- > src/openvpn/openvpn.vcxproj | 12 ++-- > src/openvpnmsica/openvpnmsica.vcxproj | 14 +++--- >

Re: [Openvpn-devel] [PATCH] msvc: OpenSSL 1.1.0 support

2019-10-17 Thread Илья Шипицин
it sounds strange (it does not make a lot of sense), but we can build openssl without TLS1.3 support чт, 17 окт. 2019 г. в 19:27, Selva Nair : > On Thu, Oct 17, 2019 at 8:11 AM Lev Stipakov wrote: > > > > Hi François, > > > > François Kooman kirjoitti 17.10.2019 klo 13.39: > > > > > "Version

Re: [Openvpn-devel] [PATCH applied] Re: travis-ci: fix osx builds

2019-07-02 Thread Илья Шипицин
вт, 2 июл. 2019 г. в 12:11, Gert Doering : > Hi, > > On Tue, Jul 02, 2019 at 12:09:48PM +0500, ?? wrote: > > , 2 ??. 2019 ??. ?? 12:07, Gert Doering : > > > > > Acked-by: Gert Doering > > > > > > (I have no idea what this does, specifically, but it is not a code > >

Re: [Openvpn-devel] [PATCH applied] Re: travis-ci: fix osx builds

2019-07-02 Thread Илья Шипицин
вт, 2 июл. 2019 г. в 12:07, Gert Doering : > Acked-by: Gert Doering > > (I have no idea what this does, specifically, but it is not a code > change and if it fixes our Travis builds, I'm happy - and the explanation > given says "it will fix things") > > Your patch has been applied to the master

Re: [Openvpn-devel] [bui...@travis-ci.org: Still Failing: OpenVPN/openvpn#874 (master - 7473f32)]

2019-06-30 Thread Илья Шипицин
Documentation lacks. The reason of failure is caching homebrew. It is not common practice, we should either drop cache or enforce update On Sun, Jun 30, 2019, 12:46 PM Gert Doering wrote: > Hi, > > On Sun, Jun 30, 2019 at 02:53:18AM +0500, ?? wrote: > > I submitted a fix >

Re: [Openvpn-devel] [bui...@travis-ci.org: Still Failing: OpenVPN/openvpn#874 (master - 7473f32)]

2019-06-29 Thread Илья Шипицин
I submitted a fix https://patchwork.openvpn.net/project/openvpn2/list/?series=506 пн, 24 июн. 2019 г. в 11:17, Илья Шипицин : > Thank you for the investigation, Gert. > I'll have a look soon > > On Sun, Jun 23, 2019, 11:55 PM Gert Doering wrote: > >> Hi, >> >>

Re: [Openvpn-devel] [PATCH] Insert client connection data into PAM environment

2019-06-28 Thread Илья Шипицин
Do not pay attention to osx. I will fix it soon On Fri, Jun 28, 2019, 4:29 PM Paolo wrote: > Hi, > > after rebasing my fork on current master, the are no conflicts with > current source code. Travis error on osx are not releated to my code, > they are errors about configuration peace not

Re: [Openvpn-devel] how to migrate users to "no compression" config

2019-06-28 Thread Илья Шипицин
пт, 28 июн. 2019 г. в 12:49, Gert Doering : > Hi, > > On Fri, Jun 28, 2019 at 12:14:40PM +0500, ?? wrote: > > by "high level" compression doc I mean something like that > > > > a) road warrior scenario (remote access for enterprise users) - should we > > enable compression ?

Re: [Openvpn-devel] how to migrate users to "no compression" config

2019-06-28 Thread Илья Шипицин
by "high level" compression doc I mean something like that a) road warrior scenario (remote access for enterprise users) - should we enable compression ? or traffic usually is compressed ? RDP is compressed ? any way to estimate compression (like $gzip_ratio in nginx) b) lz4, lzo, ... which one

Re: [Openvpn-devel] how to migrate users to "no compression" config

2019-06-26 Thread Илья Шипицин
Should we add some high level documentation on compression? On Wed, Jun 26, 2019, 5:05 PM Arne Schwabe wrote: > Am 26.06.19 um 08:35 schrieb Gert Doering: > > Hi, > > > > On Wed, Jun 26, 2019 at 01:48:34AM +0500, ?? wrote: > >> 2) use push "compress empty" (if there's such

[Openvpn-devel] how to migrate users to "no compression" config

2019-06-25 Thread Илья Шипицин
Hello, for example, let us imagine we provisioned a lot of users with config files containing "comp-lzo" and we want to migrate them to server without compression. I see two options 1) set up new server (actually, new udp/tcp ports on the same server) and send new config to users 2) use push

Re: [Openvpn-devel] Summary of the community meeting (20th June 2019)

2019-06-24 Thread Илья Шипицин
пн, 24 июн. 2019 г. в 23:14, Samuli Seppänen : > Hi, > > Il 24/06/19 14:33, Samuli Seppänen ha scritto: > > Hi Simon, > > > > Thanks for the info again! > > > > Il 21/06/19 18:59, Simon Rozman ha scritto: > >> (21:04:58) mattock: assuming Microsoft's systems are happy with the > test submission

Re: [Openvpn-devel] [bui...@travis-ci.org: Still Failing: OpenVPN/openvpn#874 (master - 7473f32)]

2019-06-24 Thread Илья Шипицин
Thank you for the investigation, Gert. I'll have a look soon On Sun, Jun 23, 2019, 11:55 PM Gert Doering wrote: > Hi, > > travis CI builds for MacOS fail (and have failed for quite some time, > it seems) because LZO is not installed as pre-requisite - the configure > run in the log below ends

Re: [Openvpn-devel] state of sitnl patchset ?

2019-06-09 Thread Илья Шипицин
пн, 10 июн. 2019 г. в 02:11, Gert Doering : > Hi, > > On Mon, Jun 10, 2019 at 02:06:47AM +0500, ?? wrote: > > > On Mon, Jun 10, 2019 at 12:05:52AM +0500, ?? > wrote: > > > > https://patchwork.openvpn.net/project/openvpn2/list/?series=428 says > > > "new"

Re: [Openvpn-devel] state of sitnl patchset ?

2019-06-09 Thread Илья Шипицин
пн, 10 июн. 2019 г. в 01:37, Gert Doering : > Hi, > > On Mon, Jun 10, 2019 at 12:05:52AM +0500, ?? wrote: > > https://patchwork.openvpn.net/project/openvpn2/list/?series=428 says > "new" > > however, I see patchset is applied (and travis-ci is somewhat broken) > > > > are all

[Openvpn-devel] state of sitnl patchset ?

2019-06-09 Thread Илья Шипицин
Hello, https://patchwork.openvpn.net/project/openvpn2/list/?series=428 says "new" however, I see patchset is applied (and travis-ci is somewhat broken) are all paches applied already ? cheers, Ilya Shipitsin ___ Openvpn-devel mailing list

Re: [Openvpn-devel] Wintun performance results

2019-05-15 Thread Илья Шипицин
it will most probably get lost in mailing list. can we add it to https://openvpn.net website ? something like "performance testing" with full configs provided ? ср, 15 мая 2019 г. в 18:49, Lev Stipakov : > Hi guys, > > I made openvpn3 (required changes will be incorporated into main branch at >

Re: [Openvpn-devel] cirrus-ci: freebsd builds ?

2019-04-17 Thread Илья Шипицин
ср, 17 апр. 2019 г. в 14:45, Steffan Karger : > On Thu, 11 Apr 2019 at 00:54, Илья Шипицин wrote: > > 1) error when built with mbedtls-2.16.0 (surprizingly, build does not > fail) > > > > [ OK ] tls_crypt_v2_wrap_unwrap_no_metadata > > [ RUN ] tls_cry

Re: [Openvpn-devel] cirrus-ci: freebsd builds ?

2019-04-17 Thread Илья Шипицин
ср, 17 апр. 2019 г. в 14:45, Steffan Karger : > On Thu, 11 Apr 2019 at 00:54, Илья Шипицин wrote: > > 1) error when built with mbedtls-2.16.0 (surprizingly, build does not > fail) > > > > [ OK ] tls_crypt_v2_wrap_unwrap_no_metadata > > [ RUN ] tls_cry

Re: [Openvpn-devel] cirrus-ci: freebsd builds ?

2019-04-10 Thread Илья Шипицин
Testing tls-crypt-v2 key generation (max length metadata)/t_lpback.sh: base64: not found OK PASS: t_lpback.sh ср, 10 апр. 2019 г. в 23:44, Илья Шипицин : > hello, > > I have implemented cirrus-ci support (with freebsd fix), > please have a look > > https://github.com/Open

[Openvpn-devel] cirrus-ci: freebsd builds ?

2019-04-10 Thread Илья Шипицин
hello, I have implemented cirrus-ci support (with freebsd fix), please have a look https://github.com/OpenVPN/openvpn/pull/125 builds: https://cirrus-ci.com/task/6511771119517696 https://cirrus-ci.com/task/5385871212675072 thoughts ? suggestions ?

[Openvpn-devel] missing cover letter for "modernize travis-ci" patchset

2019-03-11 Thread Илья Шипицин
Hello, somehow cover letter was lost for no reason (it was delivered during test git send-email). the rationale behind switching to xenial is trusty EOL coming on 30 Apr 2019. also, it is good time to refresh few more things like building on new arch "linux-ppc64le" and simplify osx brew

Re: [Openvpn-devel] [PATCH (2.4)] Fix --disable-crypto build

2018-10-05 Thread Илья Шипицин
shall we add "--disable-crypto" to travis-ci matrix in 2.4 branch ? пт, 5 окт. 2018 г. в 19:00, Steffan Karger : > Commit d2ff5164 was fine for the master branch, but broke the 2.4 build if > the --disable-crypto configure options was used (which is removed in the > master branch). > >

Re: [Openvpn-devel] [PATCH] travis: add OpenSSL 1.1 Windows build

2018-10-05 Thread Илья Шипицин
openssl versions were aligned to those used in "openvpn-build" repo, i.e. the same version were used as in installer creation. not sure why do we want to have big matrix for cross builds. but I do not mind, the more tests the better :) пт, 5 окт. 2018 г. в 17:40, Steffan Karger : > So we catch

Re: [Openvpn-devel] Slow outbound network speed for Windows Server 2016 only via the OpenVPN tunnel

2018-10-04 Thread Илья Шипицин
, Rostyslav Maryliak < rostyslav.maryl...@idealscorp.com>: > Dear Ilya, > > No, it is disabled. > > [image: image.png] > > > On Thu, Oct 4, 2018 at 3:14 PM Илья Шипицин wrote: > >> congestion can be setup using datacenter bridging >> >> >> h

Re: [Openvpn-devel] Slow outbound network speed for Windows Server 2016 only via the OpenVPN tunnel

2018-10-04 Thread Илья Шипицин
inor BuildRevision > --- > 10 014393 0 > > On Thu, Oct 4, 2018 at 2:45 PM Илья Шипицин wrote: > >> >> >> чт, 4 окт. 2018 г. в 15:50, Rostyslav Maryliak < >> rostyslav.maryl...@idealscorp.com>: >> >&g

Re: [Openvpn-devel] Slow outbound network speed for Windows Server 2016 only via the OpenVPN tunnel

2018-10-04 Thread Илья Шипицин
"none" somehow. > But still it is very strange for me that I have such slow network speed > via the tunnel for all win2016 servers "out of the box". > > Can you please check this from your side as well and confirm or disprove > the issue? > > > On Thu, Oct

Re: [Openvpn-devel] Slow outbound network speed for Windows Server 2016 only via the OpenVPN tunnel

2018-10-04 Thread Илья Шипицин
State : enabled > Non Sack Rtt Resiliency : disabled > Max SYN Retransmissions : 2 > TCP Fast Open : disabled > > > That is why I believe that the root cause of the issue lies in "Congestion > Contr

Re: [Openvpn-devel] Slow outbound network speed for Windows Server 2016 only via the OpenVPN tunnel

2018-10-03 Thread Илья Шипицин
Hello, can you do some things and tell us your observation ? starting with win2012 so called network profiles were introduced (Internet / Intranet / Datacenter) those profiles are very different for tcp connection (if you observe degradation in case of udp, most probably that is not related)

Re: [Openvpn-devel] switching openvpn-gui to github releases (instead if http://build.openvpn.net/...)

2018-10-01 Thread Илья Шипицин
sorry, I meant "OPENVPN_GUI_URL" variable of course. пн, 1 окт. 2018 г. в 14:49, Илья Шипицин : > Hello, > > I was absent for few days :) Glad to see you again. > I want to discuss whether we can choose github releases as primary source > here: > > https://github

[Openvpn-devel] switching openvpn-gui to github releases (instead if http://build.openvpn.net/...)

2018-10-01 Thread Илья Шипицин
Hello, I was absent for few days :) Glad to see you again. I want to discuss whether we can choose github releases as primary source here: https://github.com/OpenVPN/openvpn-build/blob/master/generic/build.vars#L15 Cheers, Ilya Shipitsin ___

Re: [Openvpn-devel] [PATCH] [openvpn-gui] Update system tray to populate Windows VPN flyout

2018-07-25 Thread Илья Шипицин
чт, 26 июл. 2018 г. в 1:04, Kevin Kane via Openvpn-devel < openvpn-devel@lists.sourceforge.net>: > Alright, I found the SMTP server and sent the patches out again with git > send-email. Let me know how those look. > looks good from patchwork point of view:

Re: [Openvpn-devel] Upstreaming pqcrypto changes from microsoft/openvpn

2018-07-04 Thread Илья Шипицин
th the updates or > making other improvements, as well as any suggestions you may have on > future directions for this work. > > -Original Message- > From: Jon Kunkee > Sent: Tuesday, July 3, 2018 4:20 PM > To: Samuli Seppänen ; Илья Шипицин < > chipits...@

Re: [Openvpn-devel] Topics for the community meeting (Wed, 13th June 2018)

2018-07-03 Thread Илья Шипицин
Hello, Jon. do you know this activity https://github.com/Microsoft/openvpn/ ? there are interesting things вт, 3 июл. 2018 г. в 22:43, Jon Kunkee via Openvpn-devel < openvpn-devel@lists.sourceforge.net>: > Hi, > > 2. Tap-windows6 patches, building and testing > > In order to get the

Re: [Openvpn-devel] [PATCH v2] travis-ci: cleanup, refactor, upgrade ssl libraries

2018-06-23 Thread Илья Шипицин
Someone who has admin rights, can purge the cache On Sun, Jun 24, 2018, 8:28 AM Antonio Quartulli wrote: > Hi, > > On 28/05/18 03:00, Ilya Shipitsin wrote: > > -- MBEDTLS_VERSION="2.5.1" > > +- MBEDTLS_VERSION="2.8.0" > > I know travis-ci currently is caching both the downloaded tarball

Re: [Openvpn-devel] tap-windows6 and AppVeyor

2018-06-15 Thread Илья Шипицин
hi, I have some very amazing expirience with app veyor when I was playing with mingw builds. there was an issue related to mingw and I saw it between builds (mingw upgraded), so I first decided "could it be app veyor ?!" people from app veyor were very helpful in troubleshooting that. so, I

Re: [Openvpn-devel] linking interactive service and openvpn.exe into single binary ?

2018-05-23 Thread Илья Шипицин
2018-05-23 14:06 GMT+05:00 David Sommerseth < open...@sf.lists.topphemmelig.net>: > On 23/05/18 10:08, Илья Шипицин wrote: > > Hello, > > > > we observe weird registry corruption, when "exe_path" points to wrong > location. > > I came to an idea

[Openvpn-devel] linking interactive service and openvpn.exe into single binary ?

2018-05-23 Thread Илья Шипицин
Hello, we observe weird registry corruption, when "exe_path" points to wrong location. I came to an idea, why not to link both service and openvpn.exe into single openvpn.exe thus removing the need to specify exe_path at all ? thoughts ? Ilya Shipitsin

[Openvpn-devel] Getting rid of bundled lz4 ?

2018-03-04 Thread Илья Шипицин
Hello, It was broadcasted several times that we will get rid of bundled lz4 someday. Currently, windows installer is built using that lib. Does it make sense to change windows installer? Cheers, Ilya Shipitsin -- Check

Re: [Openvpn-devel] [PATCH applied] Re: travis-ci: modify openssl build script to support openssl-1.1.0

2018-02-24 Thread Илья Шипицин
2018-02-25 8:26 GMT+05:00 Selva Nair : > Hi, > > On Tue, Feb 20, 2018 at 8:07 AM, Gert Doering wrote: > > Your patch has been applied to the master and release/2.4 branch. > > > > commit 437be780996501becb18f0d34c256ab9c9fe27af (master) > > commit

Re: [Openvpn-devel] challenge/response example ?

2018-02-21 Thread Илья Шипицин
2018-02-22 8:52 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > Hi, > > On Wed, Feb 21, 2018 at 10:18 PM, Илья Шипицин <chipits...@gmail.com> > wrote: > > > > > > 2018-02-21 22:03 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > >> > >

Re: [Openvpn-devel] challenge/response example ?

2018-02-21 Thread Илья Шипицин
2018-02-21 22:03 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > Hi, > > On Tue, Feb 20, 2018 at 10:10 AM, Илья Шипицин <chipits...@gmail.com> > wrote: > > Hello, > > > > is there any step-by-step example of implementing either static or > dynami

[Openvpn-devel] challenge/response example ?

2018-02-21 Thread Илья Шипицин
Hello, is there any step-by-step example of implementing either static or dynamic challenge response ? Cheers, Ilya Shipitsin -- Check out the vibrant tech community on one of the world's most engaging tech sites,

Re: [Openvpn-devel] [Openvpn-users] "Reconnect" button in openvpn-gui

2018-02-08 Thread Илья Шипицин
2018-02-08 20:40 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > Hi, > > On Thu, Feb 8, 2018 at 3:15 AM, Samuli Seppänen <sam...@openvpn.net> > wrote: > > Il 07/02/2018 21:58, David Sommerseth ha scritto: > >> On 07/02/18 20:32, Илья Шипицин wrote: > >&

Re: [Openvpn-devel] [Openvpn-users] "Reconnect" button in openvpn-gui

2018-02-07 Thread Илья Шипицин
2018-02-08 1:43 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > Hi, > > On Wed, Feb 7, 2018 at 3:30 PM, Илья Шипицин <chipits...@gmail.com> wrote: > > > > > > 2018-02-08 1:21 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > >> > >>

Re: [Openvpn-devel] [Openvpn-users] "Reconnect" button in openvpn-gui

2018-02-07 Thread Илья Шипицин
2018-02-08 1:21 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > Hi, > > On Wed, Feb 7, 2018 at 2:58 PM, David Sommerseth > <open...@sf.lists.topphemmelig.net> wrote: > > On 07/02/18 20:32, Илья Шипицин wrote: > >> After auth-token were introduced

Re: [Openvpn-devel] "Reconnect" button in openvpn-gui

2018-02-07 Thread Илья Шипицин
8 12:07 AM, "Selva Nair" <selva.n...@gmail.com> wrote: > Hi, > > On Wed, Feb 7, 2018 at 1:47 AM, Илья Шипицин <chipits...@gmail.com> wrote: > > Hi, > > > > based on our UX investigation, I think we can remove "Reconnect" button > for > &g

[Openvpn-devel] "Reconnect" button in openvpn-gui

2018-02-06 Thread Илья Шипицин
Hi, based on our UX investigation, I think we can remove "Reconnect" button for good. any reason to keep it ? Cheers, Ilya Shipitsin -- Check out the vibrant tech community on one of the world's most engaging tech

Re: [Openvpn-devel] [Openvpn-users] test latest binary on vista

2018-01-30 Thread Илья Шипицин
2018-01-30 14:33 GMT+05:00 Samuli Seppänen : > Hi, > > Il 29/01/2018 20:09, Selva Nair ha scritto: > > (Cross posting to users and devel) > > > > Hi, > > > > 2.4.x needs to support, Vista, isn't it? > > Good question and we have discussed in the past. Windows Vista is no >

Re: [Openvpn-devel] On testing with openssl 0.9.8

2018-01-20 Thread Илья Шипицин
it might depend on why do we want support openssl-0.9.8 vanilla openssl is different from redhat, I mean which one do we want ? 2018-01-20 22:22 GMT+05:00 Selva Nair : > Hi, > > Does openvpn-vagrant include any VM provisioning with openssl-0.9.8? > Until recently I had

Re: [Openvpn-devel] consider exe_path optional ?

2018-01-18 Thread Илья Шипицин
Selva Nair <selva.n...@gmail.com>: > > On Thu, Jan 18, 2018 at 3:49 AM, Илья Шипицин <chipits...@gmail.com> > wrote: > >> Hello, >> >> changes https://github.com/OpenVPN/openvpn-gui/pull/197 actually make >> openvpn-gui less dependent on registry >&g

Re: [Openvpn-devel] consider exe_path optional ?

2018-01-18 Thread Илья Шипицин
2018-01-18 22:11 GMT+05:00 Selva Nair <selva.n...@gmail.com>: > > On Thu, Jan 18, 2018 at 3:49 AM, Илья Шипицин <chipits...@gmail.com> > wrote: > >> Hello, >> >> changes https://github.com/OpenVPN/openvpn-gui/pull/197 actually make >> openvpn-gui

[Openvpn-devel] consider exe_path optional ?

2018-01-18 Thread Илья Шипицин
Hello, changes https://github.com/OpenVPN/openvpn-gui/pull/197 actually make openvpn-gui less dependent on registry we sometimes see similar issue with interactive service: openvpnserv error: Не удается найти указанный файл. (0x2) Error querying registry value: HKLM\SOFTWARE\OpenVPN\exe_path

Re: [Openvpn-devel] travis builds

2018-01-16 Thread Илья Шипицин
it started to happen after travis-ci image was updated to clang-5.0, somehow it does not work well with ccache (that's why we removed ccache recently) 2018-01-15 22:28 GMT+05:00 Selva Nair : > Hi, > > Out of the 12 or so jobs we have in the travis build matrix a few >

Re: [Openvpn-devel] [PATCH] travis-ci: modify openssl build script to support openssl-1.1.0

2018-01-15 Thread Илья Шипицин
I've built an installer without "no-multilib" and tested on both x86 and x64. 2018-01-14 23:33 GMT+05:00 Илья Шипицин <chipits...@gmail.com>: > > > 2018-01-14 21:05 GMT+05:00 Steffan Karger <stef...@karger.me>: > >> Hi, >> >> On 14-01-18 1

Re: [Openvpn-devel] [PATCH] travis-ci: modify openssl build script to support openssl-1.1.0

2018-01-14 Thread Илья Шипицин
2018-01-14 21:05 GMT+05:00 Steffan Karger : > Hi, > > On 14-01-18 15:06, Ilya Shipitsin wrote: > > no-multilib is only supported on openssl-1.0.X, do not use it > > if OPENSSL_VERSION is 1.1.0 > > > > Signed-off-by: Ilya Shipitsin > > --- > >

Re: [Openvpn-devel] [PATCH 0/2] Make cryptoapicert work with TLS 1.2

2018-01-08 Thread Илья Шипицин
2018-01-08 7:21 GMT+05:00 : > From: Selva Nair > > Hi, > > I am not sure how receptive the crypto maintaineres are to the > idea of adding more code into cryptoapi.c, but here goes: > > I've been wanting to add TLS 1.2 support for certs in the >

Re: [Openvpn-devel] [PATCH v3] travis-ci: add brew cache, remove ccache

2018-01-04 Thread Илья Шипицин
2018-01-05 3:23 GMT+05:00 Antonio Quartulli : > > > On 05/01/18 03:37, Ilya Shipitsin wrote: > > 1-2 minutes speedup osx builds by using brew cache. > > Also, ccache was removed for a while (builds fail > > after travis-ci upgraded clang to version 5.0.0) > > --- > > v2: this is

Re: [Openvpn-devel] [PATCH] travis-ci: speedup osx build by enabling brew cache

2018-01-04 Thread Илья Шипицин
wait a bit, we might need to remove ccache (it became broken after travis-ci upgraded to clang-5) https://travis-ci.org/chipitsine/openvpn/jobs/325002858 2018-01-04 17:19 GMT+05:00 Ilya Shipitsin : > 1-2 minutes speedup by using brew cache, also ccache > is no more

Re: [Openvpn-devel] [PATCH] Return NULL if GetAdaptersInfo fails

2018-01-03 Thread Илья Шипицин
is it related to trac#973 ? 2018-01-03 9:02 GMT+05:00 : > From: Selva Nair > > - Currently a pointer to potentially uninitialized IP_ADAPTER_INFO > struct is returned on error causing ill-defined behaviour. > > Signed-off-by: Selva Nair

Re: [Openvpn-devel] better handling of revoked certs

2018-01-01 Thread Илья Шипицин
2018-01-01 17:56 GMT+05:00 Antonio Quartulli : > Hi, > > On 01/01/18 20:30, Steffan Karger wrote: > > [CUT] > > > > > Note the '5 seconds' reconnect loop, which is the same as what current > > released openvpn would do in response to an alert. So if we change our > > servers to

Re: [Openvpn-devel] [PATCH] travis-ci: enable ccache for osx and mingw builds

2017-12-30 Thread Илья Шипицин
2017-12-30 16:19 GMT+05:00 Steffan Karger : > Hi, > > Sorry for taking so long to respond. > > On 21-11-17 07:36, Ilya Shipitsin wrote: > > -- > > ccache was now tested by me and works for osx > > and mingw builds as well > > By how much does this improve build times? I'm

Re: [Openvpn-devel] --with-mem-check, what to do with it?

2017-12-29 Thread Илья Шипицин
2017-12-29 16:02 GMT+05:00 Antonio Quartulli <a...@unstable.cc>: > Hi, > > On 29/12/17 18:23, Steffan Karger wrote: > > Hi, > > > > On 29-12-17 11:11, Илья Шипицин wrote: > >> thank for the patch. > >> > >> not directly related to the p

Re: [Openvpn-devel] [PATCH] travis: use clang's -fsanitize=address to catch more bugs

2017-12-29 Thread Илья Шипицин
thank for the patch. not directly related to the patch itself, but openvpn is shipped with several memory debugging options --with-mem-check=TYPE build with debug memory checking should we get rid of them (in favour of sanitizers) ? or, maybe add to tests instead ? 2017-12-29 14:47

Re: [Openvpn-devel] [PATCH v2] Use lowest metric interface when multiple interfaces match a route

2017-12-06 Thread Илья Шипицин
2017-11-06 6:14 GMT+05:00 : > From: Selva Nair > > Currently a route addition using IPAPI or service is skipped if the > route gateway is reachable by multiple interfaces. This changes that > to use the interface with lowest metric. Implemented by > >

Re: [Openvpn-devel] [PATCH applied] Re: openvpnserv: Add support for multi-instances

2017-12-05 Thread Илья Шипицин
2017-12-05 16:19 GMT+05:00 Samuli Seppänen : > Il 05/12/2017 13:01, Simon Rozman ha scritto: > > Hi, > > > >> I've done a bit of staring at the code as well, and it seems to make > sense (but > >> thanks to Selva for a thorough review and actually testing this :-) ). > >> > >>

Re: [Openvpn-devel] strange behaviour of "auth-token"

2017-12-03 Thread Илья Шипицин
2017-12-03 15:06 GMT+05:00 Antonio Quartulli <a...@unstable.cc>: > > > On 03/12/17 17:57, Илья Шипицин wrote: > > Hello, > > > > I noticed strange "TLS Auth Error: Auth Username/Password verification > > failed for peer" when I restarted openvpn se

[Openvpn-devel] strange behaviour of "auth-token"

2017-12-03 Thread Илья Шипицин
Hello, I noticed strange "TLS Auth Error: Auth Username/Password verification failed for peer" when I restarted openvpn server. deeper digging into that discovered the following flow 1) client is authenticated via login/password --> auth token is assigned 2) reauth is done via username/token

Re: [Openvpn-devel] input validation for username, password etc.

2017-11-18 Thread Илья Шипицин
2017-11-19 10:43 GMT+05:00 Selva <selva.n...@gmail.com>: > > > On Sun, Nov 19, 2017 at 12:06 AM, Илья Шипицин <chipits...@gmail.com> > wrote: > >> >> >> 2017-11-18 8:25 GMT+05:00 Selva <selva.n...@gmail.com>: >> >>> Hi, >>

Re: [Openvpn-devel] input validation for username, password etc.

2017-11-18 Thread Илья Шипицин
2017-11-18 8:25 GMT+05:00 Selva : > Hi, > > I want to add some form of validation for user input in the GUI so that > the user can be alerted when username, password etc. contains characters > that may not work. > > So far the only characters that appear to be problematic

Re: [Openvpn-devel] [PATCH v2] doxygen: add make target and use relative paths

2017-11-08 Thread Илья Шипицин
2017-11-08 15:01 GMT+05:00 Steffan Karger : > Add a make target, such that 'make doxygen' works (both for in-tree and > out-of-tree builds). > should we add both variants of 'make doxygen' to travis-ci matrix ? > > While doing so, instead of genering docs with full

Re: [Openvpn-devel] OpenVPN Interactive Service Branding

2017-11-02 Thread Илья Шипицин
Simon has achieved a great progress in building on Windows. WIX perfectly integrates into visual studio SLN, and than perfectly builds on app veyor)) no more cross builds:) On Nov 2, 2017 1:32 PM, "Samuli Seppänen" wrote: > On 01/11/2017 20:46, Simon Rozman wrote: > > Hi, >

Re: [Openvpn-devel] OpenVPN Interactive Service Branding

2017-11-01 Thread Илья Шипицин
2017-11-01 23:46 GMT+05:00 Simon Rozman : > Hi, > > > > > Hi Simon, > > > > Speaking of MSIs... we are planning on moving from NSIS to MSI due to > > security issues like the one we fixed in previous release. At the moment > four > > (other) people who have expressed interest in

  1   2   3   4   >