Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-24 Thread Jonathan K. Bullard
Hi, On Tue, Jul 24, 2018 at 12:02 AM, Selva Nair wrote: > Hi, > > On Mon, Jul 23, 2018 at 10:58 PM, Jonathan K. Bullard > wrote: >> I was testing Tunnelblick with Selva's C/R server and config (thanks >> again for that) and there was a problem. Maybe I'm (still) >> misunderstanding something,

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-24 Thread Gert Doering
Hi, On Mon, Jul 23, 2018 at 10:31:03PM -0400, Selva Nair wrote: > On Sat, Jul 21, 2018 at 1:21 PM, Jonathan K. Bullard > wrote: > > > Some, perhaps including Selva's $payingCustomer, may not want to use > > Tunnelblick betas or use OpenVPN 2.5 until it is released. > > I missed this last

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-23 Thread Selva Nair
Hi, On Mon, Jul 23, 2018 at 10:58 PM, Jonathan K. Bullard wrote: > I was testing Tunnelblick with Selva's C/R server and config (thanks > again for that) and there was a problem. Maybe I'm (still) > misunderstanding something, but a SIGUSR1 restart asks for the normal > username/password instead

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-23 Thread Jonathan K. Bullard
Hi, On Mon, Jul 23, 2018 at 10:31 PM, Selva Nair wrote: > On Sat, Jul 21, 2018 at 1:21 PM, Jonathan K. Bullard > wrote: > >> Some, perhaps including Selva's $payingCustomer, may not want to use >> Tunnelblick betas or use OpenVPN 2.5 until it is released. > > I missed this last time... Its Gert

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-23 Thread Jonathan K. Bullard
I was testing Tunnelblick with Selva's C/R server and config (thanks again for that) and there was a problem. Maybe I'm (still) misunderstanding something, but a SIGUSR1 restart asks for the normal username/password instead of a static C/R. That is, the first thing after the restart is

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-23 Thread Selva Nair
Hi, On Sat, Jul 21, 2018 at 1:21 PM, Jonathan K. Bullard wrote: > Some, perhaps including Selva's $payingCustomer, may not want to use > Tunnelblick betas or use OpenVPN 2.5 until it is released. I missed this last time... Its Gert who has $$payingCustomer(s) :) Selva

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-23 Thread Selva Nair
Hi, On Sat, Jul 21, 2018 at 1:21 PM, Jonathan K. Bullard wrote: > Hi, > > On Thu, Jul 19, 2018 at 2:38 PM, Selva Nair wrote: >> Jon: I have a server for testing static and dynamic challenge. If >> interested I can send you a config. Or use access server with a free >> test license. Mine will

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-21 Thread Jonathan K. Bullard
Hi, On Thu, Jul 19, 2018 at 2:38 PM, Selva Nair wrote: > Jon: I have a server for testing static and dynamic challenge. If > interested I can send you a config. Or use access server with a free > test license. Mine will just challenge with 1 + 1 = ? kind of > questions, nothing fancy. Thanks,

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Gert Doering
Hi, On Thu, Jul 19, 2018 at 02:38:55PM -0400, Selva Nair wrote: > On Thu, Jul 19, 2018 at 1:52 PM, Gert Doering wrote: > > On Thu, Jul 19, 2018 at 11:43:17AM -0400, Jonathan K. Bullard wrote: > >> Thank you, Selva! (Now all I need to do is get it working!) > > > > Looking very much forward to

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Jonathan K. Bullard
Hi Arne, (For some reason Gmail put your post in my spam folder, so I just saw it now.) On Thu, Jul 19, 2018 at 11:49 AM, Arne Schwabe wrote: > Am 19.07.18 um 17:43 schrieb Jonathan K. Bullard: >> Thank you, Selva! (Now all I need to do is get it working!) >> > > If you do all that stuff, be

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Jonathan K. Bullard
Hi, Selva, On Thu, Jul 19, 2018 at 2:38 PM, Selva Nair wrote: >> Jon: I have a server for testing static and dynamic challenge. If > interested I can send you a config. Or use access server with a free > test license. Mine will just challenge with 1 + 1 = ? kind of > questions, nothing fancy.

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Selva Nair
Hi, On Thu, Jul 19, 2018 at 1:52 PM, Gert Doering wrote: > Hi, > > On Thu, Jul 19, 2018 at 11:43:17AM -0400, Jonathan K. Bullard wrote: >> Thank you, Selva! (Now all I need to do is get it working!) > > Looking very much forward to see this happen :-) > > ($payingCustomer ) Send some €€/$$ from

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Gert Doering
Hi, On Thu, Jul 19, 2018 at 11:43:17AM -0400, Jonathan K. Bullard wrote: > Thank you, Selva! (Now all I need to do is get it working!) Looking very much forward to see this happen :-) ($payingCustomer is using a LinOTP based auth backend which I'd like to make much nicer with static and dynamic

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Arne Schwabe
Am 19.07.18 um 17:43 schrieb Jonathan K. Bullard: > Thank you, Selva! (Now all I need to do is get it working!) > If you do all that stuff, be sure to also look at static-challenge that can be part of openvpn files, e.g. static-challenge "Please enter your gauth code" 1 Arne

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Jonathan K. Bullard
Thank you, Selva! (Now all I need to do is get it working!) Best regards, Jon On Thu, Jul 19, 2018 at 11:39 AM, Selva Nair wrote: > Hi, > > On Thu, Jul 19, 2018 at 10:48 AM, Jonathan K. Bullard > wrote: >> Thank you very much, Selva. >> >> On Wed, Jul 18, 2018 at 10:48 PM, Selva Nair wrote:

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Selva Nair
Hi, On Thu, Jul 19, 2018 at 10:48 AM, Jonathan K. Bullard wrote: > Thank you very much, Selva. > > On Wed, Jul 18, 2018 at 10:48 PM, Selva Nair wrote: > >> There are two messages involved: >> >> 1. First comes the fake auth failure message which contains the >> challenge string. The format of

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-19 Thread Jonathan K. Bullard
Thank you very much, Selva. On Wed, Jul 18, 2018 at 10:48 PM, Selva Nair wrote: > There are two messages involved: > > 1. First comes the fake auth failure message which contains the > challenge string. The format of this is as you have quoted above. The > single quoted string between the

Re: [Openvpn-devel] Dynamic challenge/response questions

2018-07-18 Thread Selva Nair
Hi, On Wed, Jul 18, 2018 at 7:46 PM, Jonathan K. Bullard wrote: > I'm trying to implement dynamic challenge/response in Tunnelblick and > have some questions. I've been using the management-interface > documentation [1] as my guide. > > 1. Is what the management interface sends something like

[Openvpn-devel] Dynamic challenge/response questions

2018-07-18 Thread Jonathan K. Bullard
I'm trying to implement dynamic challenge/response in Tunnelblick and have some questions. I've been using the management-interface documentation [1] as my guide. 1. Is what the management interface sends something like (all on one line): >PASSWORD:Verification Failed: 'Auth'