Re: [Openvpn-users] IPv6 exclusively

2016-05-04 Thread Ryan Whelan
Is the IPv4 requirement something thats planned to be removed in future releases? I don't assume many people have adopted IPv6 yet. ryan On Wed, May 4, 2016 at 3:39 PM, Gert Doering <g...@greenie.muc.de> wrote: > Hi, > > On Wed, May 04, 2016 at 03:30:44PM -0400, Ry

Re: [Openvpn-users] Detecting client certificate CN during connection

2016-04-28 Thread Ryan Whelan
To make sure i'm not completely confused; the current state of this functionality as it exists in OpenVPN, it is possible to get keying info out of a server connected to a client (via a shared object plugin). However, there currently exists no way to use this information to move a clients

Re: [Openvpn-users] Detecting client certificate CN during connection

2016-04-28 Thread Ryan Whelan
another? (management interface?) Or will it require a custom plugin to access? I will defiantly look into this, thank you much! ryan > > JJK > > > > *From:* Ryan Whelan [mailto:rcwhe...@gmail.com <rcwhe...@gmail.com>] > *Sent:* donderdag 28 april 2016 16:10 >

Re: [Openvpn-users] Detecting client certificate CN during connection

2016-04-28 Thread Ryan Whelan
On Thu, Apr 28, 2016 at 3:10 AM, Jan Just Keijser <janj...@nikhef.nl> wrote: > Hi, > > On 27/04/16 20:02, Ryan Whelan wrote: > >> I may have a need to design a load balancer / demultiplexer that can >> route in-bound OpenVPN client connections to a specific

Re: [Openvpn-users] Seamless rekeying of static keys

2015-09-01 Thread Ryan Whelan
service interruption? On Tue, Sep 1, 2015 at 10:37 AM, Steffan Karger <stef...@karger.me> wrote: > > On 1 Sep 2015 07:33, "Ryan Whelan" <rcwhe...@gmail.com> wrote: >> >> Is there a way to rekey a static key connection without interrupting >> traffic? >&

[Openvpn-users] Seamless rekeying of static keys

2015-09-01 Thread Ryan Whelan
Is there a way to rekey a static key connection without interrupting traffic? If I can generate and securely distribute new static keys (out of band) on regular intervals, is there a way to make openvpn start using the new keys without dropping traffic?

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-17 Thread Ryan Whelan
a script run on the server at connection time would be huge. Thanks for all your help! You've been very helpful! ryan On Sun, Nov 17, 2013 at 3:18 AM, Gert Doering g...@greenie.muc.de wrote: Hi, On Sun, Nov 17, 2013 at 02:31:33AM -0500, Ryan Whelan wrote: The reason I'd been using tap

[Openvpn-users] IPv6 client-to-client communication

2013-11-16 Thread Ryan Whelan
I have a (tap) server setup with `topology subnet` and an IPv6 pool configured `server-ipv6 fdda:ba64:dcdc:1::1/64' Clients can connect, get IPv6 addresses and ping the server on the address it assigns its tap interface (fdda:ba64:dcdc:1::2). The clients can not communicate with one another-

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-16 Thread Ryan Whelan
the clients? I will be using multiple servers and OSPF for routing. On Sun, Nov 17, 2013 at 2:03 AM, Gert Doering g...@greenie.muc.de wrote: Hi, On Sat, Nov 16, 2013 at 11:45:37PM -0500, Ryan Whelan wrote: With 2 clients connected with the addresses fdda:ba64:dcdc:1::1002 and fdda:ba64:dcdc:1