Re: [Openvpn-devel] [PATCH] Setting adapter mtu on windows systems

2019-03-29 Thread Gert Doering
Hi, On Fri, Mar 29, 2019 at 03:33:24PM -0400, Selva Nair wrote: > > +else if (family == AF_INET6) > > +{ > > +if (ack.error_number != NO_ERROR) > > +{ > > +msg(M_NONFATAL, "TUN: setting IPv6 mtu using service > > failed: %s [status=%u if_index=%d]", > > +

[Openvpn-devel] [PATCH applied] Re: docs: Update INSTALL

2019-03-29 Thread Gert Doering
Acked-by: Gert Doering Thanks. Changes look reasonable. I have *not* applied this to release/2.4 as I assume that stuff like "openssl version" and "configure output" will look different, so it would bring in incorrect "improvements". (Can you do a 2.4 version as well, please? :) ) Your patch

Re: [Openvpn-devel] [PATCH] Setting adapter mtu on windows systems

2019-03-29 Thread Selva Nair
Hi, On Fri, Mar 29, 2019 at 6:25 AM Christopher Schenk wrote: > > Hi, > > On 28/03/2019 16:00, Selva Nair wrote: > > I would go a step further to say we should not add new features that > > do not work when started using the interactive service. > > > > Secondly, we should avoid the old style

[Openvpn-devel] [PATCH] Warn about insecure ciphers also in init_key_type

2019-03-29 Thread Arne Schwabe
With modern Clients and server initialising the crypto cipher later and not when reading in the config, most users never the warning when having selected BF-CBC in the configuration. This patch adds the logic to print out warning to init_key_type. Main reason for this patch is a personal

[Openvpn-devel] Summary of the community meeting (27th Mar 2019)

2019-03-29 Thread Samuli Seppänen
...resending as I apparently tried to send this from my personal email account. --- Hi, Here's the summary of the IRC meeting. --- COMMUNITY MEETING Place: #openvpn-meeting on irc.freenode.net Date: Wednesday 27th March 2019 Time: 11:30 CET (10:30 UTC) Planned meeting topics for this

Re: [Openvpn-devel] [PATCH] Setting adapter mtu on windows systems

2019-03-29 Thread Christopher Schenk
Hi, On 28/03/2019 16:00, Selva Nair wrote: I would go a step further to say we should not add new features that do not work when started using the interactive service. Secondly, we should avoid the old style use of netsh and instead use the iphelper API as far as possible. It should be