Re: [Openvpn-users] [Openvpn-devel] Segmentation Fault

2016-07-08 Thread pbarton
It seems to mostly replace all "md5_..." stuff with "sha1_..." functions (looks very much like find-and-replace to me...) *and* it adds a special fips function call that allows MD5 in certain circumstances... + /* FIPS 140-2 explicitly allows MD5 for the use in PRF although it is not + * to

Re: [Openvpn-users] [Openvpn-devel] Segmentation Fault

2016-07-08 Thread Gert Doering
Hi, On Fri, Jul 08, 2016 at 06:18:08PM +0200, Jan Just Keijser wrote: > https://build.opensuse.org/package/view_file/network:vpn/openvpn/openvpn-fips140-2.3.2.patch?expand=1 It seems to mostly replace all "md5_..." stuff with "sha1_..." functions (looks very much like find-and-replace to me...) *

Re: [Openvpn-users] Segmentation Fault

2016-07-08 Thread Jan Just Keijser
Hi, On 08/07/16 16:55, pbar...@netprotec.com wrote: Please run the OpenVPN instance which core dumps via gdb. When it segfaults, type the command 'bt' (backtrace) and provide us with the complete backtrace. Then we can have an idea where in the code it crashed. Another alte

Re: [Openvpn-users] Segmentation Fault

2016-07-08 Thread pbarton
Please run the OpenVPN instance which core dumps via gdb. When it segfaults, type the command 'bt' (backtrace) and provide us with the complete backtrace. Then we can have an idea where in the code it crashed. Another alternative is to enable core dump files (a global system configuration, no

Re: [Openvpn-users] ECDH / ECDSA support?

2016-07-08 Thread Jan Just Keijser
Hi, On 08/07/16 11:10, David Sommerseth wrote: > On 08/07/16 00:24, Jan Just Keijser wrote: >> Hi, >> >> On 07/07/16 09:15, Steffan Karger wrote: >>> Hi Scott, >>> >>> On Wed, Jul 6, 2016 at 9:18 PM, Scott Crooks wrote: I saw this file in the OpenVPN codebase: https://github.com/OpenVPN

Re: [Openvpn-users] Routing OpenVPN server

2016-07-08 Thread Josu Lazkano
Thanks both, Now I have a working system. This is the siteA configuration: # cat /etc/openvpn/vpn.conf remote siteB.domain.net float dev tun proto udp ifconfig 10.0.0.1 10.0.0.2 persist-tun persist-local-ip persist-remote-ip comp-lzo ping 15 secret /etc/openvpn/static.key script-security 2 route-

Re: [Openvpn-users] how to fix tun-ipv6 client address?

2016-07-08 Thread ??????
worked! thanks very much! -- Original -- From: "Sachin Garg" Date: Wed, Jul 6, 2016 08:32 PM To: "openvpn-users"; Subject: Re: [Openvpn-users] how to fix tun-ipv6 client address? On Wednesday 06 July 2016 07:35 AM, ?? wrote: > i install a openvpn on a dual sta

Re: [Openvpn-users] ECDH / ECDSA support?

2016-07-08 Thread David Sommerseth
On 08/07/16 00:24, Jan Just Keijser wrote: > Hi, > > On 07/07/16 09:15, Steffan Karger wrote: >> Hi Scott, >> >> On Wed, Jul 6, 2016 at 9:18 PM, Scott Crooks wrote: >>> I saw this file in the OpenVPN codebase: >>> https://github.com/OpenVPN/openvpn/blob/master/README.ec >>> >>> Which claims that

Re: [Openvpn-users] Segmentation Fault

2016-07-08 Thread David Sommerseth
On 08/07/16 05:59, pbar...@netprotec.com wrote: > There doesn't seem to be a lot of interest in this, but I figured I > would see if anyone has experienced this previously. > I have successfully compiled OpenSSL with the FIPs > module: openssl-1.0.2h & openssl-fips-2.0.12 > > No problem with thi