[Openvpn-devel] Consider git tags for I60x

Hi just so this does not get forgotten about: @dazo | slypknot: https://github.com/OpenVPN/openvpn-build @dazo | I see that there are no tags with the I60x indicator ... that could probably be something mattock should consider to add @cron2 | true Regards -

Re: [Openvpn-devel] building HEAD + openssl 1.1 api fails @ "crypto.c:823:32: error: invalid application of ???sizeof??? to incomplete type ???cipher_ctx_t"

On 28/03/17 13:47, Gert Doering wrote: > We need to communicate better what might affect users in new versions, so > they can test and complain/adjust in time (like, the stricter CRL handling > in 2.4, and - obviously - the --tls-remote bit) Suggestion: A Wiki Page detailing deprecation plans w

Re: [Openvpn-devel] building HEAD + openssl 1.1 api fails @ "crypto.c:823:32: error: invalid application of ???sizeof??? to incomplete type ???cipher_ctx_t"

On 28/03/17 14:41, Steffan Karger wrote: > On 28-03-17 15:31, Samuli Seppänen wrote: >> On 28/03/2017 16:08, Steffan Karger wrote: >>> On 28-03-17 15:02, debbie10t wrote: >>>> On 28/03/17 13:47, Gert Doering wrote: >>>>> We need to communicate bette

Re: [Openvpn-devel] building HEAD + openssl 1.1 api fails @ "crypto.c:823:32: error: invalid application of ???sizeof??? to incomplete type ???cipher_ctx_t"

On 28/03/17 15:05, debbie10t wrote: > > > On 28/03/17 14:41, Steffan Karger wrote: >> On 28-03-17 15:31, Samuli Seppänen wrote: >>> On 28/03/2017 16:08, Steffan Karger wrote: >>>> On 28-03-17 15:02, debbie10t wrote: >>>>> On 28/03/17 13:47

[Openvpn-devel] Wik page drafti: DeprecationWarnings

Hi, Following on from: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14330.html For your consideration: https://community.openvpn.net/openvpn/wiki/DeprecationWarnings I do understand why duplicating work is not preferred, which is why the page is for priority Warnings .. it

Re: [Openvpn-devel] Wik page drafti: DeprecationWarnings

On 28/03/17 19:18, debbie10t wrote: > Hi, > > Following on from: > https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14330.html > > > For your consideration: > https://community.openvpn.net/openvpn/wiki/DeprecationWarnings > > I do understa

Re: [Openvpn-devel] Wik page drafti: DeprecationWarnings

Hi On 28/03/17 20:53, David Sommerseth wrote: > On 28/03/17 21:24, debbie10t wrote: >> >> >> On 28/03/17 19:18, debbie10t wrote: >>> Hi, >>> >>> Following on from: >>> https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/ms

[Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

Hi, sorry, I know this is slightly off-topic .. I understand this may be down to a gentoo maintainer but as I don't know I decided to document the problem. Thanks for your help The problem: On gentoo when building openvpn there is a difference depending on how openvpn is built: The first m

Re: [Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

On 02/04/17 00:57, debbie10t wrote: > me@gtoo-hyv-live-64 ~/openvpn $ 2.4/src/openvpn/openvpn > /etc/openvpn/tunc_xu_il.conf > > Sat Apr 1 23:37:57 2017 us=342905 OpenVPN 2.4.1 > [git:2.4/8731dfa7caaf8b6d] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] > [LZ4] [EPOLL] [MH/PKT

Re: [Openvpn-devel] Upgrading EasyRSA 2's defaults

On 03/04/17 15:12, Jan Just Keijser wrote: > Hi Samuli, > > On 03/04/17 15:53, Samuli Seppänen wrote: >> >> I tested these changes on Debian 8 which has OpenSSL-1.0.1. Key size was >> set to 4096-bits and signature algorithm to SHA256WithRSAEncryption. >> >> The only real issue was DH parameter

Re: [Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

On 02/04/17 00:57, debbie10t wrote: > Hi, > > sorry, I know this is slightly off-topic .. > I understand this may be down to a gentoo maintainer > but as I don't know I decided to document the problem. > > Thanks for your help > > > > > The problem: >

Re: [Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

On 03/04/17 21:15, Gert Doering wrote: > Hi, > > On Mon, Apr 03, 2017 at 08:51:23PM +0100, debbie10t wrote: >> Turns out to be: >> freenode#gentoo you need to disable the bindist use flag >> (preferably globally) to get EC support > > "why"? Som

Re: [Openvpn-devel] [PATCH] Add per session pseudo-random component to --reneg-sec intervals

On 04/04/17 08:30, Simon Matter wrote: >> Hi, >> >> On Tue, Apr 04, 2017 at 08:29:49AM +0200, Simon Matter wrote: >>> Interesting to see that there is zero interest in this patch here. >> >> This is a misinterpretation. >> > > Hi Gert, > > Thanks for the explanation, I'll be patient then :) As a

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 05:34, Simon Matter wrote: >>> Hi, >>> >>> On Tue, Apr 04, 2017 at 08:29:49AM +0200, Simon Matter wrote: Interesting to see that there is zero interest in this patch here. >>> >>> This is a misinterpretation. >>> >> >> Hi Gert, >> >> Thanks for the explanation, I'll be patient th

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 16:58, David Sommerseth wrote: > On 05/04/17 17:53, David Sommerseth wrote: >> On 05/04/17 16:42, debbie10t wrote: >>> >>> >>> A different approach could be like so: >>> >>> --reneg-sec 3600 >>> --reneg-sec-1sttime-ra

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 17:13, debbie10t wrote: > > > On 05/04/17 16:58, David Sommerseth wrote: >> On 05/04/17 17:53, David Sommerseth wrote: >>> On 05/04/17 16:42, debbie10t wrote: >>>> > >>>> >>>> A different approach could be like so: &g

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 18:13, Arne Schwabe wrote: > >>> >>> Where RAND indicates that the first-run timer should run from a random >>> integer from 1 upto the value of --reneg-sec. RAND does not require a >>> user to specify an amount. >> >> But then, why not just do it always and forget about the addition

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 21:42, Gert Doering wrote: > Hi, > > On Wed, Apr 05, 2017 at 07:00:54PM +0100, debbie10t wrote: >>> Optional option does not mean that it is disabled by default. If you >>> don't the randomness you would need to do: >>> >>> rene

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

Hi, On 05/04/17 22:39, David Sommerseth wrote: > On 05/04/17 23:13, debbie10t wrote: >> I don't believe there is any need to specify "max" because that would be >> --reneg-sec as is. Otherwise specify a smaller or larger --reneg-sec > > I think you, pro

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 22:57, debbie10t wrote: > Hi, > > On 05/04/17 22:39, David Sommerseth wrote: >> On 05/04/17 23:13, debbie10t wrote: >>> I don't believe there is any need to specify "max" because that would be >>> --reneg-sec as is. Otherwise specify a

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 05/04/17 23:01, debbie10t wrote: > > > On 05/04/17 22:57, debbie10t wrote: >> Hi, >> >> On 05/04/17 22:39, David Sommerseth wrote: >>> On 05/04/17 23:13, debbie10t wrote: >>>> I don't believe there is any need to specify "max&quo

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

One final clarification: As a user, I would prefer to see an early 2fa re-connect than one in the final few minutes, especially if I am already accustomed to a one hour cut off. Such that, I do 45 mins of work and get cut off is more annoying then doing 15 mins and get cut off. Regards ---

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 06/04/17 11:26, David Sommerseth wrote: > With the 1 hour default, not setting --reneg-sec gives a time window of > 6 minutes with 10%. That is a reasonable default unless explicitly > overridden by either --reneg-sec 3600 (no randomness) or --reneg-sec > 3000 4000 (with a 1000 seconds large

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 06/04/17 12:52, Steffan Karger wrote: > Hi, > > On 6 April 2017 at 12:26, David Sommerseth > wrote: >> On 06/04/17 11:45, Simon Matter wrote: >>> I like Arne's and David's suggestion - the existing option "as is" will enable X% jitter, while a second parameter can specify a more spe

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 06/04/17 14:05, Gert Doering wrote: > Hi, > > On Thu, Apr 06, 2017 at 01:49:04PM +0100, debbie10t wrote: >> As you can see, the current proposal does not allow for first random, >> followed by expected/normal/regular renegs. It is either *always* random >> or *neve

Re: [Openvpn-devel] [PATCH v2] Add per session pseudo-random component to --reneg-sec intervals

On 06/04/17 14:49, David Sommerseth wrote: > On 06/04/17 15:37, debbie10t wrote: >> Company A has 1,000 vpn users and (for what ever reason) they reboot >> the server every 24 hours. They experience the slow down because all >> their vpn users are permanently connected.

Re: [Openvpn-devel] devel mailing list

On 15/04/17 21:08, Selva Nair wrote: > I did not get this mail > > https://sourceforge.net/p/openvpn/mailman/message/35789733/ > > Something up with the list or is it only me? > > Selva > It is not only you :( -- Chec

Re: [Openvpn-devel] 2.4 sees all client certificates as expired when using crl-verify

On 02/01/17 15:39, Steffan Karger wrote: > On 02-01-17 16:24, SviMik wrote: >> >>> On 02-01-17 15:26, Gert Doering wrote: On Mon, Jan 02, 2017 at 03:17:23PM +0100, Alberto Gonzalez Iniesta wrote: > I just got this [1] bug report on OpenVPN 2.4 threating all > certs as expired wh

Re: [Openvpn-devel] 2.4 sees all client certificates as expired when using crl-verify

On 24/04/17 08:58, Samuli Seppänen wrote: > On 23/04/2017 11:02, Steffan Karger wrote: >> >> On 22-04-17 20:24, debbie10t wrote: >>> >>> On 02/01/17 15:39, Steffan Karger wrote: >>>> On 02-01-17 16:24, SviMik wrote: >>>>> >>>&g

[Openvpn-devel] For Windows: DHCP Client dependency

Hi, generally, Openvpn on Windows is dependent on the "Windows DHCP Client service" .. if that Service is not started, is it possible for Openvpn to report a *specific* log message that: _DHCP_ has failed to assign an IP address to TAP Adapter ? thanks ---

Re: [Openvpn-devel] For Windows: DHCP Client dependency

On 25/04/17 01:18, debbie10t wrote: > Hi, > > generally, Openvpn on Windows is dependent on the "Windows DHCP Client > service" .. if that Service is not started, is it possible for Openvpn > to report a *specific* log message that: _DHCP_ has failed to assign an &g

Re: [Openvpn-devel] Question about easy-rsa

On 19/05/17 23:56, David Sommerseth wrote: > On 20/05/17 00:45, Mahawar, Sunil wrote: >> Hi, >> >> I loved easy-rsa tool and its user friendly interface. I am using >> this tool for one of my project for OpenHPC (http://openhpc.community ). >> However one my colleague pointed out that easy-r

[Openvpn-devel] Ubuntu 16.04.2 LTS --enable-systemd ./configure error

Hi This is just a heads up ! I cannot build openvpn on ubuntu 16.04.2 LTS (fresh install) because ./configure --enable-systemd fails to build with the following error: autoconf -ifv [done] ./configure --enable-system log checking for RSA_meth_set0_app_data... no checking for lzo1x_1_15_comp

Re: [Openvpn-devel] Ubuntu 16.04.2 LTS --enable-systemd ./configure error

On 28/05/17 22:09, David Sommerseth wrote: On 28/05/17 22:47, debbie10t wrote: Hi This is just a heads up ! I cannot build openvpn on ubuntu 16.04.2 LTS (fresh install) because ./configure --enable-systemd fails to build with the following error: [...snip...] checking for libsystemd

Re: [Openvpn-devel] Ubuntu 16.04.2 LTS --enable-systemd ./configure error

It turns out pkg-config is not installed After installing all worked as expected. Thanks :) -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdo

Re: [Openvpn-devel] Ubuntu 16.04.2 LTS --enable-systemd ./configure error

On 29/05/17 13:51, David Sommerseth wrote: On 29/05/17 14:26, debbie10t wrote: It turns out pkg-config is not installed After installing all worked as expected. Great! I was too lazy to check ... but do we have some documentation on build requirements anywhere? Should probably be checked

[Openvpn-devel] W10 Client assigns old AND new IPv6 address to TAP with GUI+Service but not with cmd prompt

Hi, I have a basic setup and discovered that my W10 client was assigning a second IPv6 address to TAP even though it is *not* being pushed by the server. The second address is an old address from a server that I sometimes connect to. The server is still running but the client is not connect

Re: [Openvpn-devel] W10 Client assigns old AND new IPv6 address to TAP with GUI+Service but not with cmd prompt

*bump* Is there no explanation ? On 07/06/17 17:41, debbie10t wrote: Hi, I have a basic setup and discovered that my W10 client was assigning a second IPv6 address to TAP even though it is *not* being pushed by the server. The second address is an old address from a server that I

Re: [Openvpn-devel] W10 Client assigns old AND new IPv6 address to TAP with GUI+Service but not with cmd prompt

Hi Selva, thanks for your answer. On 12/06/17 20:23, Selva Nair wrote: On Wed, Jun 7, 2017 at 12:41 PM, debbie10t wrote: Hi, I have a basic setup and discovered that my W10 client was assigning a second IPv6 address to TAP even though it is *not* being pushed by the server. The second

Re: [Openvpn-devel] W10 Client assigns old AND new IPv6 address to TAP with GUI+Service but not with cmd prompt

any further details if required. Thanks On 07/06/17 17:41, debbie10t wrote: Hi, I have a basic setup and discovered that my W10 client was assigning a second IPv6 address to TAP even though it is *not* being pushed by the server. The second address is an old address from a server that I somet

Re: [Openvpn-devel] W10 Client assigns old AND new IPv6 address to TAP with GUI+Service but not with cmd prompt

On 13/06/17 20:50, Samuli Seppänen wrote: Hi, If I'm not mistaken, this is the same or related problem to the one I reported early on in 2.4.x release cycle. There might actually be a Trac ticket for it. I encountered the issue with the Powershell test suite (openvpn-windows-test) which ran

Re: [Openvpn-devel] W10 Client assigns old AND new IPv6 address to TAP with GUI+Service but not with cmd prompt

On 13/06/17 21:15, Selva Nair wrote: On Tue, Jun 13, 2017 at 3:37 PM, Gert Doering wrote: On Tue, Jun 13, 2017 at 03:33:35PM -0400, Selva Nair wrote: Right :) But we could probably do better using Set instead of Add while the address is set using the service. I'm not that familiar with ipa

Re: [Openvpn-devel] Plz remove my mail id

https://sourceforge.net/projects/openvpn/lists/openvpn-devel/unsubscribe On 26/07/17 18:40, sameer.s.athaley wrote: Hi could you help.me to remove my mail I'd from mailing list -- Check out the vibrant tech communit

[Openvpn-devel] [PATCH] doc/openvpn.8: Correct --verify-x509-name *type* example

From: Richard Bonhomme Signed-off-by: Richard Bonhomme --- doc/openvpn.8 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/openvpn.8 b/doc/openvpn.8 index 20bdd91..fdd5dde 100644 --- a/doc/openvpn.8 +++ b/doc/openvpn.8 @@ -5340,7 +5340,7 @@ subject DN "C=KG, ST=NA, L=Bishk

Re: [Openvpn-devel] [PATCH] doc/openvpn.8: Correct --verify-x509-name *type* example

On 03/08/17 17:46, David Sommerseth wrote: On 03/08/17 18:03, debbie...@gmail.com wrote: From: Richard Bonhomme Signed-off-by: Richard Bonhomme --- doc/openvpn.8 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/openvpn.8 b/doc/openvpn.8 index 20bdd91..fdd5dde 10064

[Openvpn-devel] Manpage Plus Alpha Directives Index

Hi, from what I could gather .. the developer mailing list appears to be the preferred method of submittal for this sort of change. https://community.openvpn.net/openvpn/wiki/Contributing#Writingdocumentation So, I offer this document for review as a new HTTP manual page. I have checked it thoro

[Openvpn-devel] Download 237 x64 i602 - 404 Not Found

It's been OFFLINE for a couple of days now ... https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.7-I602-x86_64.exe

[Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

On Wed, Jul 01, 2015 at 12:07:11PM +0100, debbie10t gmail.com wrote: It's been OFFLINE for a couple of days now ... https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.7-I602-x86_64.exe Please do not hijack other people's threads by just replying to anything that ju

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

- Original Message - From: "David Sommerseth" To: ; Cc: "Gert Doering" Sent: Wednesday, July 01, 2015 2:32 PM Subject: Re: OpenVPN 2.3.7-I602-x86_64.exe download 404 Error I have no issues ... try this service and see: ;

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

- Original Message - From: "David Sommerseth" To: Cc: ; "Samuli Seppänen" Sent: Wednesday, July 01, 2015 7:01 PM Subject: Re: OpenVPN 2.3.7-I602-x86_64.exe download 404 Error The *only* link which appears to be broken is - OpenVPN 2.3.7-I602-x86_64.exe https://swupdate.openvp

[Openvpn-devel] autoreconf: Unescaped left brace in regex is deprecated

Hi Openvpn still compiles without noticable errors and functions correctly under my variety of test but I was wondering if this is important ? [root@home openvpn]# pacman -Syu :: Synchronising package databases... core is up to date extra is up to date community

Re: [Openvpn-devel] autoreconf: Unescaped left brace in regex is deprecated

Hi as the title states the question was with regard to: [root@home 20150723]# autoreconf -i -v -f autoreconf: Entering directory `.' autoreconf: configure.ac: not using Gettext autoreconf: running: aclocal --force -I m4 Unescaped left brace in regex is deprecated, passed through in regex; marked

Re: [Openvpn-devel] autoreconf: Unescaped left brace in regex is deprecated

OK .. thanks for clearing that up. - Original Message - From: "Gert Doering" To: Cc: "Gert Doering" ; Sent: Friday, July 24, 2015 12:34 PM Subject: Re: [Openvpn-devel] autoreconf: Unescaped left brace in regex is deprecated Hi, On Fri, Jul 24, 2015 at 11:31:41AM +0100, debbie..

[Openvpn-devel] Docs or Bug: --push options no longer require double quotes

Hi As the title states --push no longer requires options to be double quoted. First tests: https://forums.openvpn.net/topic19323.html#p53583 Sebsequent tests Windows 2.3.7 i686-w64-mingw32 as either server or client Linux 2.3.7 i486-pc-linux-gnu as either server or client Linux git master as ei

Re: [Openvpn-devel] Docs or Bug: --push options no longer require double quotes

- Original Message - From: "Gert Doering" To: Cc: Sent: Saturday, July 25, 2015 8:45 PM Subject: Re: [Openvpn-devel] Docs or Bug: --push options no longer require double quotes Hi, On Sat, Jul 25, 2015 at 01:34:46PM +0100, debbie...@gmail.com wrote: As the title states --push no l

Re: [Openvpn-devel] [PATCH] Added two features to Network AddressTranslator

On Thu, Aug 27, 2015 at 5:58 AM, Gert Doering wrote: (and I'd totally not run important service stuff on windows). In the UK, Tesco run their self-service checkouts on Windows. regarrds

[Openvpn-devel] Easy-RSA3.0.0 Windows Version batch file missing

Source: https://github.com/OpenVPN/easy-rsa/releases Version: https://github.com/OpenVPN/easy-rsa/releases/download/3.0.0/EasyRSA-3.0.0.zip * Downloaded today * EasyRSA-Readme.md: Running Easy-RSA Invoking Easy-RSA is done through your preferred shell. Under Windows, you will use the `E

[Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing

See also: https://forums.openvpn.net/topic19770.html#p54980 The Windows .zip file is missing the entire /bin directory as well. Windows zip file download size v3.0.0 = 42kb Windows zip file download size v3.0.0-rc2 = 606kb - Original Message - From: To: Sent: Monday, September 21,

Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing

This is still outstanding. - Original Message - From: "Eric Crist" To: Cc: Sent: Tuesday, September 22, 2015 1:05 PM Subject: Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing I’ll publish corrected zip files today.

Re: [Openvpn-devel] Topics for today's (Monday, 5th Oct 2015) community meeting (note: 30 mins early)

Can we have an answer regarding easy-rsa-3 please. - Original Message - From: "Samuli Seppänen" To: Sent: Monday, October 05, 2015 11:52 AM Subject: [Openvpn-devel] Topics for today's (Monday, 5th Oct 2015) community meeting (note: 30 mins early) Hi, We're going to have an IRC m

Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing

Any news ? - Original Message - From: "Eric Crist" To: Cc: Sent: Tuesday, September 22, 2015 1:05 PM Subject: Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing I’ll publish corrected zip files today.

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

ho hum -Original Message- From: David Sommerseth [mailto:openvpn.l...@topphemmelig.net] Sent: Monday, October 19, 2015 3:01 PM To: Morris, Russell ; Heiko Hund ; sam...@openvpn.net Cc: openvpn-devel@lists.sourceforge.net Subject: Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing

Hi // You must be - Original Message - From: "Eric Crist" To: Cc: Sent: Tuesday, September 22, 2015 1:05 PM Subject: Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing http://sourceforge.net/p/openvpn/mailman/message/34480727/ https://forums.openvpn.net/topi

Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing

Apologies for the "You must be" comment .. - Original Message - From: To: "Eric Crist" Cc: Sent: Wednesday, October 21, 2015 11:31 PM Subject: Re: [Openvpn-devel] Fw: Easy-RSA3.0.0 Windows Version batch file missing Hi // You must be - Original Message - From: "Eric Cr

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

- Original Message - From: "Morris, Russell" To: "Selva Nair" Cc: Sent: Friday, October 23, 2015 9:22 PM Subject: Re: [Openvpn-devel] Creating a Windows team for OpenVPN? Hi, Just a bit more on this. I initiated an OpenVPN connection – it connects, says all is happy, except the

Re: [Openvpn-devel] Creating a Windows team for OpenVPN?

Hi - Original Message - From: "Pasi Kärkkäinen" To: "Samuli Seppänen" Cc: Sent: Monday, October 26, 2015 11:12 AM Subject: Re: [Openvpn-devel] Creating a Windows team for OpenVPN? - Windows OpenVPN-GUI needs to be able to read config files from under user's profile directory, not on

Re: [Openvpn-devel] Topics for today's (Monday, 26th Oct 2015) community meeting

I would like to help on this I run a W7 PC which goes into standby 10 or more times per day and it *Never* has an issue on resume. I will post full details soon (when I can remember what I did to solve it).. Regards - Original Message - From: "Morris, Russell" To: ; "Gmail" ; "Selva

Re: [Openvpn-devel] OpenVPN-GUI now on GitHub + other Windows team things

Today - I _finally_ managed to cross-compile openvpn for windows (including GUI+service) I strongly recommend, *if* you try this, use Ubuntu 14.04 64bit ! I tried and failed with other *nix. https://community.openvpn.net/openvpn/wiki/BuildingUsingGenericBuildsystem Building for Linux with Linu

Re: [Openvpn-devel] [PATCH v4-master] Add Windows DNS Leak fix using WFP ('block-outside-dns')

Now that I can build OpenVPN-Windows I will help, although it will take me a while to work out how .. I only have access to W7 but from what I have read that is the only Windows you do *not* have. BTW: Many thanks for your exceptional efforts on this problem :) Regards - Original Messag

[Openvpn-devel] Opttion "client-nat" not recognised

Hi, today, I was working with an old config which uses --client-nat I upgraded that particular client to git-master for testing and discovered that git-master currently does not support --client-nat This config works perfectly with older versions, details follow: GIT-master versions which --cli

Re: [Openvpn-devel] Opttion "client-nat" not recognised

- Original Message - From: "Gert Doering" To: Cc: Sent: Friday, December 11, 2015 7:38 PM Subject: Re: [Openvpn-devel] Opttion "client-nat" not recognised According to the (slightly confusing, admittedly) man page entry, the way you are calling the option is not correct, and as suc

Re: [Openvpn-devel] Opttion "client-nat" not recognised

- Original Message - From: "Gert Doering" To: Cc: "Gert Doering" ; Sent: Friday, December 11, 2015 8:08 PM Subject: Re: [Openvpn-devel] Opttion "client-nat" not recognised the code says "four arguments have to be there" and the git master code says "four arguments have to be ther

Re: [Openvpn-devel] [PATCH] Updates to Changes.rst

Hi - Original Message - From: To: Sent: Tuesday, December 15, 2015 3:00 PM Subject: [Openvpn-devel] [PATCH] Updates to Changes.rst From: Samuli Seppänen This patch is for the release/2.3 branch +Overview of changes in 2.3 +== New features -P

Re: [Openvpn-devel] [PATCH] Updates to Changes.rst

- Original Message - From: "Gert Doering" To: Cc: Sent: Tuesday, December 15, 2015 5:10 PM Subject: Re: [Openvpn-devel] [PATCH] Updates to Changes.rst This is a bug in the mingw header files. You need a patch for it (or upgrade to a newer version than contained in ubuntu). Annoyi

Re: [Openvpn-devel] Summary of today's (28th Dec 2015) IRC meeting

- Original Message - From: "Samuli Seppänen" To: "Samuli Seppänen" Cc: Sent: Monday, December 28, 2015 9:33 PM Subject: [Openvpn-devel] Summary of today's (28th Dec 2015) IRC meeting Hi, Here's the summary of today's IRC meeting. Discussed the OpenVPN 2.3.10 release. IPv6 supp

[Openvpn-devel] man openvpn(8): --block-outside-dns

Is this considered to be sufficient documentation: https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage --block-outside-dns Block DNS servers on other network adapters to prevent DNS leaks. This option prevents any application from accessing TCP or UDP port 53 except one inside the tun

Re: [Openvpn-devel] man openvpn(8): --block-outside-dns

- Original Message - From: "Arne Schwabe" To: ; Sent: Tuesday, December 29, 2015 12:36 PM Subject: Re: [Openvpn-devel] man openvpn(8): --block-outside-dns On 29.12.2015 13:31, debbie...@gmail.com wrote: Is this considered to be sufficient documentation: https://community.openvpn.

[Openvpn-devel] ics-openvpn - route not added ?

Hi having read this about ics-openvpn : https://github.com/schwabe/ics-openvpn/blob/master/doc/README.txt I decided I was not in a position to add any further comments to this: https://forums.openvpn.net/topic20654.html#p57367 So I thought to ask if Arne could add any thing The gist is that:

Re: [Openvpn-devel] ics-openvpn - route not added ?

Hi Arne Thanks for your answer .. I think I see the issue :) The reason I asked the question here is because I could not understand why the route was not showing and I have never seen you post to users list. I will not be making a habit of it .. and I am not expecting anything. Regards - Ori

Re: [Openvpn-devel] ics-openvpn - route not added ?

- Original Message - From: "Arne Schwabe" To: ; Sent: Tuesday, January 05, 2016 1:55 PM Subject: Re: [Openvpn-devel] ics-openvpn - route not added ? Am 05.01.16 um 14:37 schrieb debbie...@gmail.com: Hi Arne Thanks for your answer .. I think I see the issue :) The reason I asked t

Re: [Openvpn-devel] ics-openvpn - route not added ?

- Original Message - From: "Arne Schwabe" To: ; Sent: Tuesday, January 05, 2016 2:45 PM Subject: Re: [Openvpn-devel] ics-openvpn - route not added ? Am 05.01.16 um 15:15 schrieb debbie...@gmail.com: - Original Message - From: "Arne Schwabe" To: ; Sent: Tuesday, January

[Openvpn-devel] Just a thought - config hashing

Hi I sat in on the meeting today 2016-02-01 as manhaton Watching the discussion about elevated privileges regarding a non-admin user interacting with the iservice, a subject to which I am ignorant with regard to programming .. Anyway, an idea struck me ... It is a *little* off-piste so .. n

Re: [Openvpn-devel] Just a thought - config hashing

Hi David, thankyou for your detailed reply ..I looked up eurephia :-) nice and did a little more research and discovered anonyproz.com The idea has some merit but it is not for the core openvpn team. I see that now .. I am, as ever, still learning and, on this occasion, maybe seeing things a litt

[Openvpn-devel] Micro-sha-ft

I presume you are aware but just in case microsoft no more SHA1 authenticode https://forums.openvpn.net/topic20987.html

[Openvpn-devel] generic-build: Install openvpnxxx.tarbz2

Hi I have successfully managed to use the generic-build system to compile fully upto date version of openvpn/openssl .. I now have the file: openvpn-x86_64-linux-gnu-001-bin.tar.bz2 I have run the built openvpn(bin) as a "stand alone binary" quite happily LOG: OpenVPN 2.3_git [git:master/5f522

Re: [Openvpn-devel] generic-build: Install openvpnxxx.tarbz2

Never mind I worked it out :-) - Original Message - From: To: Cc: "debbie10t" Sent: Saturday, February 13, 2016 10:35 PM Subject: generic-build: Install openvpnxxx.tarbz2 Hi I have successfully managed to use the generic-build system to compile fully upto date

Re: [Openvpn-devel] Always including tap-windows6, openvpn-gui and easy-rsa in openvpn-build -generated Windows installers?

Hi I am not particularly looking forward to the flood of confused windows users. Perhaps a new Windows Forum/board could be considered for such a change .. my2c :-) - Original Message - From: "Samuli Seppänen" To: Sent: Tuesday, February 16, 2016 1:12 PM Subject: [Openvpn-devel] Al

Re: [Openvpn-devel] Always including tap-windows6, openvpn-gui and easy-rsa in openvpn-build -generated Windows installers?

ahh .. ok .. fair enough. thanks - Original Message - From: "Arne Schwabe" To: ; "Samuli Seppänen" ; Sent: Tuesday, February 16, 2016 10:51 PM Subject: Re: [Openvpn-devel] Always including tap-windows6, openvpn-gui and easy-rsa in openvpn-build -generated Windows installers? On

Re: [Openvpn-devel] Handling bitness (32/64) for OpenVPN Windowsinstallers

I would say option 3 is better .. doubling the installer size for 32bit seems like bloat! to me plus .. why do all that extra work for something that will have diminishing value ? my2c - Original Message - From: "Samuli Seppänen" To: Sent: Tuesday, February 16, 2016 2:01 PM Subject:

Re: [Openvpn-devel] Handling bitness (32/64) for OpenVPN Windowsinstallers

- Original Message - From: "Arne Schwabe" To: ; ; "Samuli Seppänen" Sent: Wednesday, February 17, 2016 1:44 PM Subject: Re: [Openvpn-devel] Handling bitness (32/64) for OpenVPN Windowsinstallers Am 17.02.16 um 14:37 schrieb debbie...@gmail.com: I would say option 3 is better ..

[Openvpn-devel] Samsung Galaxy S6 to android 6.0.1 powersave

FYI: An interesting tid-bit about Samsung Galaxy S6 to android 6.0.1 and OpenVPN Connect https://forums.openvpn.net/post59478.html#p59478 regards

Re: [Openvpn-devel] Samsung Galaxy S6 to android 6.0.1 powersave

- Original Message - From: "Arne Schwabe" To: "Selva Nair" ; "Debbie Tent" Cc: ; Sent: Monday, March 07, 2016 3:40 PM Subject: Re: [Openvpn-devel] Samsung Galaxy S6 to android 6.0.1 powersave Am 07.03.16 um 16:28 schrieb Selva Nair: Hi, On Mon, Mar 7, 2016 at 9:55 AM, mailto:deb

[Openvpn-devel] IOS custom URL scheme for 3rd party launching

Just thought Arne might be interested: https://forums.openvpn.net/topic21272.html Regards

[Openvpn-devel] Downloads page still not quite right

This particular link returns 404 https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.10-I603-x86_64.exe Notified here https://forums.openvpn.net/topic21280.html Regards

Re: [Openvpn-devel] Downloads page still not quite right

All links on the downloads page are now working Thanks On 15/03/16 11:55, debbie10t wrote: This particular link returns 404 https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.10-I603-x86_64.exe Notified here https://forums.openvpn.net/topic21280.html Regards

[Openvpn-devel] Consideration for new Forum Rank - Protagonist

Hi currently the Forum Rank are like so: RANK TITLE MINIMUM POSTS OpenVpn Newbie 0 - OpenVPN User 10 - OpenVPN Power User 50 - OpenVPN Expert 200 - I should be on th

Re: [Openvpn-devel] Consideration for new Forum Rank - Protagonist

Hi Having received no negative feedback (10 working days) I am prepared to make this change like so: Rank: Protagonist - Posts: 2000 This leaves plenty of room for intermediate ranks, should the need arise. Regards -- On 22/03/16 22:28, debbie10t wrote: Hi currently the Forum Rank are like

Re: [Openvpn-devel] [openvpn-devel] route_net/vpn_gateway not set if server is manually expanded and topology is subnet

Hi, On 14/04/16 18:06, Jan Just Keijser wrote: > Hi, > > On 14/04/16 00:12, debbie10t wrote: >> Hi, >> >> *On the server* >> >> When --topology subnet is used *only* $redirect_gateway is held in env. >> >> When --topology ne

[Openvpn-devel] SPAM on trac

We have a spammer :( https://community.openvpn.net/openvpn/wiki/TitleIndex Lots of it .. Regards

Re: [Openvpn-devel] SPAM on trac

Last change of the page was 3 minutes ago when I first noticed it .. On 29/04/16 14:41, Jens Neuhalfen wrote: *very* bad, because apparently this happened 3 years ago, or trac is broken (Last change of the page: 3 years ago) On 29 Apr 2016, at 15:32, debbie10t wrote: We have a spammer

  1   2   >