Am 10.05.2016 um 12:06 schrieb Samuli Seppänen:
> The OpenVPN community project team is proud to release OpenVPN 2.3.11.
> It can be downloaded from here:
>
> <http://openvpn.net/index.php/open-source/downloads.html>
>
> This release fixes two vulnerabilities: a port-share bug with DoS
> potential and a buffer overflow by user supplied data when using pam
> authentication. In addition a number of small fixes and improvements are
> included. A full list of changes is available here:
>
> <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23>
Thanks.
Unfortunately, it appears that at least with PolarSSL 1.3.16, this
release introduces a crasher regression which easily shows up in a "make
check" on FreeBSD when no specific ciphers are selected. Backtrace
below. The OpenSSL-based build seems fine.
To me it appears as though the failure-inducing change were
> commit 8a399cd30ae19f521794f3dfe7ef194abd440d1b
> Author: Steffan Karger <stef...@karger.me>
> Date: Sun Apr 17 20:23:32 2016 +0200
>
> Restrict default TLS cipher list
[...]
which removes an if (options->cipher_list) ... check guarding
tls_ctx_restrict_ciphers(), and adds a "sane default TLS cipher list" in
an if (ciphers == NULL) block into the invoked *OpenSSL* implementation
tls_ctx_restrict_ciphers() of src/openvpn/ssl_openssl.c, but *not* into
the PolarSSL src/openvpn/ssl_polarssl.c.
A trivial attempt that I made at adding the list above to PolarSSL
doesn't work, the TLS client self-test balks that the client had no
cipher suites in common with the server, so apparently I know or oversee
too little and should not be the one writing such code.
Please someone write corresponding functionality (adding a limited set
of strong default cipher suites) also for PolarSSL, and we all see to a
quick 2.3.12 release?
Thanks.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0 0x0000000800eecd2b in strlen () from /lib/libc.so.7
> (gdb) bt f
> #0 0x0000000800eecd2b in strlen () from /lib/libc.so.7
> No symbol table info available.
> #1 0x0000000000495c09 in tls_ctx_restrict_ciphers (ctx=0x7fffffffd7c0,
> ciphers=0x0) at ssl_polarssl.c:179
> tmp_ciphers = 0x495fbb <tls_ctx_check_cert_time+203> "="
> tmp_ciphers_orig = 0x7fffffffcd10 "@\315\377\377\377\177"
> token = 0x0
> i = 8
> cipher_count = 18163184
> ciphers_len = 0
> #2 0x000000000048c931 in init_ssl (options=0x7fffffffd0e0,
> new_ctx=0x7fffffffd7c0) at ssl.c:564
> No locals.
> #3 0x000000000042710d in do_init_crypto_tls_c1 (c=0x7fffffffd0e0)
> at init.c:2138
> options = 0x7fffffffd0e0
> #4 0x00000000004269e4 in do_init_crypto_tls (c=0x7fffffffd0e0, flags=3)
> at init.c:2218
> options = 0x7fffffffd0e0
> to = {ssl_ctx = {initialised = 64, endpoint = 8,
> dhm_ctx = 0x7fff00000065, crt_chain = 0x80112c7b8, ca_chain =
> 0x0,
> priv_key = 0x4ba952, external_key = 0x4ba952,
> allowed_ciphers = 0x2ffffde88}, key_type = {
> hmac_length = 222 '\336', cipher = 0x801849a08, digest =
> 0x801849408}, server = 109, xmit_hold = 164, local_options = 0x0,
> remote_options = 0x7fffffffcfc0 "\340\320\377\377\377\177", key_method =
> 4869113, replay = false,
> single_session = false, disable_occ = false, push_peer_info_detail
> = 2, transition_window = 64, handshake_window = -12304, packet_timeout =
> 32767, renegotiate_bytes = 4266084, renegotiate_packets = 0,
> renegotiate_seconds = 4869113,
> verify_command = 0x298 <error: Cannot access memory at address
> 0x298>, verify_export_cert = 0x1 <error: Cannot access memory at address
> 0x1>, verify_x509_type = 1, verify_x509_name = 0x0,
> crl_file = 0x40ffffcf48 <error: Cannot access memory at address
> 0x40ffffcf48>, ns_cert_type = 480, remote_cert_ku = {0, 37, 0, 512, 0, 38, 0,
> 1, 0, 0, 0, 0, 0, 0, 0, 0}, remote_cert_eku = 0x0,
> verify_hash = 0x63b0370d1b8d876d <error: Cannot access memory at
> address 0x63b0370d1b8d876d>, x509_username_field = 0x0, pass_config_info =
> 109, crypto_flags_and = 1672492813, crypto_flags_or = 32, replay_window = 0,
> replay_time = -1, tcp_mode = false,
> tls_auth = {key_ctx_bi = 0x0, packet_id = 0x4, pid_persist = 0x8,
> flags = 4294954896}, tls_auth_key = {encrypt = {cipher = 0x412ceb
> <po_init+619>, hmac = 0x8018172c0}, decrypt = {cipher = 0x0, hmac = 0x8}},
> frame = {link_mtu = 25260704, link_mtu_dynamic = 8,
> extra_frame = 4274992, extra_buffer = 0, extra_tun = 4275744,
> extra_link = 0, align_flags = 4274896, align_adjust = 0},
> auth_user_pass_verify_script = 0x413a90 <po_free>
> "UH\211\345H\203\354\020H\211}\370H\213}\370H\211}\360H\213}\360H\213\177\060\350\203\020\377\377H\213}\360H\213\177\070\350v\020\377\377H\213}\360\350m\020\377\377H\203\304\020]\303\017\037",
>
> auth_user_pass_verify_script_via_file = 160, tmp_dir = 0x801809060
> "\220:A", auth_user_pass_file = 0x201806080 <error: Cannot access memory at
> address 0x201806080>, client_config_dir_exclusive = 0x7fffffffd8d0 "\004", es
> = 0x7fffffffcfc0,
> plugins = 0x4129c1 <event_set_init_simple+49>, ssl_flags =
> 462260077, mda_context = 0x0, sci = 0x7fffffffde00, gremlin = -8568}
> packet_id_long_form = false
> #5 0x00000000004240b3 in do_init_crypto (c=0x7fffffffd0e0, flags=3) at
> init.c:2391
> No locals.
> #6 0x0000000000422f12 in init_instance (c=0x7fffffffd0e0, env=0x801806040,
> flags=4) at init.c:3440
> crypto_flags = 3
> options = 0x7fffffffd0e0
> child = false
> link_socket_mode = 0
> #7 0x0000000000422a38 in init_instance_handle_signals (c=0x7fffffffd0e0,
> env=0x801806040, flags=4) at init.c:3301
> No locals.
> #8 0x000000000044cfdc in tunnel_point_to_point (c=0x7fffffffd0e0) at
> openvpn.c:70
> No locals.
> #9 0x000000000044ce1f in openvpn_main (argc=15, argv=0x7fffffffde08) at
> openvpn.c:270
> c = {options = {gc = {list = 0x8018171a0}, gc_owned = true, config =
> 0x7fffffffe2b9 "sample-config-files/loopback-server.test", mode = 0,
> forward_compatible = false, ignore_unknown_option = 0x0, persist_config =
> false, persist_mode = 0, key_pass_file = 0x0,
> show_ciphers = false, show_digests = false, show_engines = false,
> show_tls_ciphers = false, genkey = false, ce = {proto = 5, local_port =
> 16100, local_port_defined = true, remote_port = 16101, local = 0x801806108
> "::1", remote = 0x8018060c8 "::1",
> remote_float = false, bind_defined = false, bind_local = true,
> connect_retry_seconds = 5, connect_retry_defined = false, connect_retry_max =
> 0, connect_timeout = 10, connect_timeout_defined = false, http_proxy_options
> = 0x0, socks_proxy_server = 0x0,
> socks_proxy_port = 0, socks_proxy_authfile = 0x0,
> socks_proxy_retry = false, tun_mtu = 1500, tun_mtu_defined = true,
> tun_mtu_extra = 0, tun_mtu_extra_defined = false, link_mtu = 1500,
> link_mtu_defined = false, mtu_discover_type = -1, fragment = 0,
> mssfix = 1450, mssfix_default = false,
> explicit_exit_notification = 0, flags = 0}, remote_ip_hint = 0x0,
> connection_list = 0x0, remote_list = 0x801841088, force_connection_list =
> false, http_proxy_override = 0x0, rh_store = 0x0, remote_random = false,
> ipchange = 0x0, dev = 0x801806128 "null", dev_type = 0x0,
> dev_node = 0x0, lladdr = 0x0, topology = 1, ifconfig_local = 0x0,
> ifconfig_remote_netmask = 0x0, ifconfig_ipv6_local = 0x0,
> ifconfig_ipv6_netbits = 0, ifconfig_ipv6_remote = 0x0,
> ifconfig_noexec = false, ifconfig_nowarn = false, shaper = 0,
> proto_force = -1, mtu_test = false, mlock = false, keepalive_ping = 0,
> keepalive_timeout = 0, inactivity_timeout = 120, inactivity_minimum_bytes =
> 10000000, ping_send_timeout = 1,
> ping_rec_timeout = 180, ping_timer_remote = false, tun_ipv6 =
> false, ping_rec_timeout_action = 1, persist_tun = false, persist_local_ip =
> false, persist_remote_ip = false, persist_key = false, passtos = false,
> resolve_retry_seconds = 1000000000,
> tuntap_options = {dummy = 0}, username = 0x0, groupname = 0x0,
> chroot_dir = 0x0, cd_dir = 0x7fffffffe258 "../sample", writepid = 0x0,
> up_script = 0x0, down_script = 0x7fffffffe27b "../tests/t_cltsrv-down.sh",
> user_script_used = true, down_pre = false,
> up_delay = false, up_restart = false, daemon = false,
> remap_sigusr1 = 0, inetd = 0, log = false, suppress_timestamps = false, nice
> = 0, verbosity = 3, mute = 0, gremlin = 0, status_file = 0x0,
> status_file_version = 1, status_file_update_freq = 60,
> fast_io = false, lzo = 0, rcvbuf = 0, sndbuf = 0, mark = 0,
> sockflags = 0, route_script = 0x0, route_predown_script = 0x0,
> route_default_gateway = 0x0, route_default_metric = 0, route_noexec = false,
> route_delay = 0, route_delay_window = 30,
> route_delay_defined = false, max_routes = 100, routes = 0x0,
> routes_ipv6 = 0x0, route_nopull = false, route_gateway_via_dhcp = false,
> allow_pull_fqdn = false, client_nat = 0x0, occ = true, management_addr = 0x0,
> management_port = 0,
> management_user_pass = 0x0, management_log_history_cache = 250,
> management_echo_buffer_size = 100, management_state_buffer_size = 100,
> management_write_peer_info_file = 0x0, management_client_user = 0x0,
> management_client_group = 0x0, management_flags = 0,
> plugin_list = 0x0, tmp_dir = 0x4b1097 "/tmp", server_defined =
> false, server_network = 0, server_netmask = 0, server_ipv6_defined = false,
> server_network_ipv6 = {__u6_addr = {__u6_addr8 = '\000' <repeats 15 times>,
> __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0},
> __u6_addr32 = {0, 0, 0, 0}}}, server_netbits_ipv6 = 0,
> server_flags = 0, server_bridge_proxy_dhcp = false, server_bridge_defined =
> false, server_bridge_ip = 0, server_bridge_netmask = 0,
> server_bridge_pool_start = 0, server_bridge_pool_end = 0,
> push_list = {head = 0x0, tail = 0x0}, ifconfig_pool_defined =
> false, ifconfig_pool_start = 0, ifconfig_pool_end = 0, ifconfig_pool_netmask
> = 0, ifconfig_pool_persist_filename = 0x0, ifconfig_pool_persist_refresh_freq
> = 600,
> ifconfig_ipv6_pool_defined = false, ifconfig_ipv6_pool_base =
> {__u6_addr = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0,
> 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ifconfig_ipv6_pool_netbits = 0,
> real_hash_size = 256,
> virtual_hash_size = 256, client_connect_script = 0x0,
> client_disconnect_script = 0x0, learn_address_script = 0x0, client_config_dir
> = 0x0, ccd_exclusive = false, disable = false, n_bcast_buf = 256,
> tcp_queue_limit = 64, iroutes = 0x0, iroutes_ipv6 = 0x0,
> push_ifconfig_defined = false, push_ifconfig_local = 0,
> push_ifconfig_remote_netmask = 0, push_ifconfig_local_alias = 0,
> push_ifconfig_constraint_defined = false, push_ifconfig_constraint_network =
> 0, push_ifconfig_constraint_netmask = 0,
> push_ifconfig_ipv6_defined = false, push_ifconfig_ipv6_local =
> {__u6_addr = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0,
> 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, push_ifconfig_ipv6_netbits = 0,
> push_ifconfig_ipv6_remote = {
> __u6_addr = {__u6_addr8 = '\000' <repeats 15 times>,
> __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}},
> enable_c2c = false, duplicate_cn = false, cf_max = 0, cf_per = 0, max_clients
> = 1024, max_routes_per_client = 256,
> stale_routes_check_interval = 0, stale_routes_ageing_time = 0,
> auth_user_pass_verify_script = 0x0, auth_user_pass_verify_script_via_file =
> false, port_share_host = 0x0, port_share_port = 0, port_share_journal_dir =
> 0x0, client = false, pull = false,
> push_continuation = 0, push_option_types_found = 0,
> auth_user_pass_file = 0x0, pre_pull = 0x0, server_poll_timeout = 0,
> scheduled_exit_interval = 5, sc_info = {flags = 0, challenge_text = 0x0},
> shared_secret_file = 0x0, shared_secret_file_inline = 0x0,
> key_direction = 0, ciphername_defined = true, ciphername =
> 0x4a1b6d "BF-CBC", authname_defined = true, authname = 0x4b108b "SHA1",
> keysize = 0, prng_hash = 0x4b108b "SHA1", prng_nonce_secret_len = 16, engine
> = 0x0, replay = true,
> mute_replay_warnings = false, replay_window = 64, replay_time =
> 15, packet_id_file = 0x0, use_iv = true, test_crypto = false,
> use_prediction_resistance = false, tls_server = true, tls_client = false,
> ca_file = 0x801817128 "sample-keys/ca.crt", ca_path = 0x0,
> dh_file = 0x801817108 "sample-keys/dh2048.pem", cert_file =
> 0x801817168 "sample-keys/server.crt", extra_certs_file = 0x0, priv_key_file =
> 0x801817148 "sample-keys/server.key", pkcs12_file = 0x0, cipher_list = 0x0,
> tls_verify = 0x0, verify_x509_type = 0,
> verify_x509_name = 0x0, tls_export_cert = 0x0, crl_file = 0x0,
> ca_file_inline = 0x0, cert_file_inline = 0x0, extra_certs_file_inline = 0x0,
> priv_key_file_inline = 0x0, dh_file_inline = 0x0, pkcs12_file_inline = 0x0,
> ns_cert_type = 0, remote_cert_ku = {
> 0 <repeats 16 times>}, remote_cert_eku = 0x0, verify_hash =
> 0x0, ssl_flags = 0, key_method = 2, tls_timeout = 2, renegotiate_bytes = 0,
> renegotiate_packets = 0, renegotiate_seconds = 10, handshake_window = 60,
> transition_window = 3600, tls_auth_file = 0x0,
> tls_auth_file_inline = 0x0, single_session = false,
> push_peer_info = false, tls_exit = true, foreign_option_index = 0,
> use_peer_id = false, peer_id = 0}, first_time = true, mode = 0, gc = {list =
> 0x0}, es = 0x801806040, sig = 0x6da838 <siginfo_static>,
> plugins = 0x0, plugins_owned = false, did_we_daemonize = false,
> persist = {restart_sleep_seconds = 0}, c0 = 0x0, c1 = {link_socket_addr =
> {local = {addr = {sa = {sa_len = 0 '\000', sa_family = 0 '\000', sa_data =
> '\000' <repeats 13 times>}, in4 = {
> sin_len = 0 '\000', sin_family = 0 '\000', sin_port = 0,
> sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}, in6 =
> {sin6_len = 0 '\000', sin6_family = 0 '\000', sin6_port = 0, sin6_flowinfo =
> 0, sin6_addr = {__u6_addr = {
> __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 =
> {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}}},
> remote = {addr = {sa = {sa_len = 0 '\000', sa_family = 0 '\000', sa_data =
> '\000' <repeats 13 times>}, in4 = {
> sin_len = 0 '\000', sin_family = 0 '\000', sin_port = 0,
> sin_addr = {s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}, in6 =
> {sin6_len = 0 '\000', sin6_family = 0 '\000', sin6_port = 0, sin6_flowinfo =
> 0, sin6_addr = {__u6_addr = {
> __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 =
> {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id = 0}}},
> actual = {dest = {addr = {sa = {sa_len = 0 '\000', sa_family = 0 '\000',
> sa_data = '\000' <repeats 13 times>},
> in4 = {sin_len = 0 '\000', sin_family = 0 '\000',
> sin_port = 0, sin_addr = {s_addr = 0}, sin_zero =
> "\000\000\000\000\000\000\000"}, in6 = {sin6_len = 0 '\000', sin6_family = 0
> '\000', sin6_port = 0, sin6_flowinfo = 0, sin6_addr = {__u6_addr = {
> __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16
> = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, sin6_scope_id =
> 0}}}, pi = {in4 = {s_addr = 0}, in6 = {ipi6_addr = {__u6_addr = {__u6_addr8 =
> '\000' <repeats 15 times>,
> __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 =
> {0, 0, 0, 0}}}, ipi6_ifindex = 0}}}}, ks = {key_type = {cipher_length = 0
> '\000', hmac_length = 0 '\000', cipher = 0x0, digest = 0x0}, static_key =
> {encrypt = {cipher = 0x0, hmac = 0x0},
> decrypt = {cipher = 0x0, hmac = 0x0}}, ssl_ctx = {initialised
> = true, endpoint = 1, dhm_ctx = 0x801810100, crt_chain = 0x801841580,
> ca_chain = 0x801841300, priv_key = 0x8018063e0, external_key = 0x0,
> allowed_ciphers = 0x0}, tls_auth_key = {encrypt = {
> cipher = 0x0, hmac = 0x0}, decrypt = {cipher = 0x0, hmac =
> 0x0}}}, pid_persist = {filename = 0x0, fd = -1, time = 0, id = 0,
> time_last_written = 0, id_last_written = 0}, tuntap = 0x0, tuntap_owned =
> false, route_list = 0x0, route_ipv6_list = 0x0,
> status_output = 0x0, status_output_owned = true, http_proxy =
> 0x0, http_proxy_owned = false, socks_proxy = 0x0, socks_proxy_owned = false,
> ifconfig_pool_persist = 0x0, ifconfig_pool_persist_owned = false,
> pulled_options_digest_save = {
> digest = '\000' <repeats 15 times>}, auth_user_pass = 0x0}, c2
> = {gc = {list = 0x0}, event_set = 0x801809060, event_set_max = 4,
> event_set_owned = true, event_set_status = 0, link_socket = 0x80180a180,
> link_socket_owned = true, link_socket_info = 0x0,
> accept_from = 0x0, to_link_addr = 0x0, from = {dest = {addr = {sa
> = {sa_len = 0 '\000', sa_family = 0 '\000', sa_data = '\000' <repeats 13
> times>}, in4 = {sin_len = 0 '\000', sin_family = 0 '\000', sin_port = 0,
> sin_addr = {s_addr = 0},
> sin_zero = "\000\000\000\000\000\000\000"}, in6 =
> {sin6_len = 0 '\000', sin6_family = 0 '\000', sin6_port = 0, sin6_flowinfo =
> 0, sin6_addr = {__u6_addr = {__u6_addr8 = '\000' <repeats 15 times>,
> __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {
> 0, 0, 0, 0}}}, sin6_scope_id = 0}}}, pi = {in4 =
> {s_addr = 0}, in6 = {ipi6_addr = {__u6_addr = {__u6_addr8 = '\000' <repeats
> 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0,
> 0}}}, ipi6_ifindex = 0}}}, frame = {
> link_mtu = 0, link_mtu_dynamic = 0, extra_frame = 0,
> extra_buffer = 0, extra_tun = 0, extra_link = 0, align_flags = 0,
> align_adjust = 0}, fragment = 0x0, frame_fragment = {link_mtu = 0,
> link_mtu_dynamic = 0, extra_frame = 0, extra_buffer = 0,
> extra_tun = 0, extra_link = 0, align_flags = 0, align_adjust =
> 0}, frame_fragment_omit = {link_mtu = 0, link_mtu_dynamic = 0, extra_frame =
> 0, extra_buffer = 0, extra_tun = 0, extra_link = 0, align_flags = 0,
> align_adjust = 0}, shaper = {
> bytes_per_second = 0, wakeup = {tv_sec = 0, tv_usec = 0},
> factor = 0}, tun_read_bytes = 0, tun_write_bytes = 0, link_read_bytes = 0,
> link_read_bytes_auth = 0, link_write_bytes = 0, wait_for_connect = {defined =
> false, n = 0, last = 0},
> ping_send_interval = {defined = false, n = 0, last = 0},
> ping_rec_interval = {defined = false, n = 0, last = 0}, inactivity_interval =
> {defined = false, n = 0, last = 0}, inactivity_bytes = 0,
> options_string_local = 0x0, options_string_remote = 0x0,
> occ_op = -1, occ_n_tries = 0, occ_interval = {defined = false, n
> = 0, last = 0}, original_recv_size = 0, max_recv_size_local = 0,
> max_recv_size_remote = 0, max_send_size_local = 0, max_send_size_remote = 0,
> occ_mtu_load_size = 0,
> occ_mtu_load_test_interval = {defined = false, n = 0, last = 0},
> occ_mtu_load_n_tries = 0, tls_multi = 0x0, tls_auth_standalone = 0x0, tmp_int
> = {refresh = 0, horizon = 0, future_trigger = 0, last_action = 0,
> last_test_true = 0}, tls_exit_signal = 15,
> crypto_options = {key_ctx_bi = 0x0, packet_id = 0x0, pid_persist
> = 0x0, flags = 2}, packet_id = {send = {id = 0, time = 0}, rec = {last_reap =
> 0, time = 0, id = 0, seq_backtrack = 0, time_backtrack = 0,
> max_backtrack_stat = 0, initialized = false,
> seq_list = 0x0, name = 0x0, unit = 0}},
> packet_id_persist_interval = {defined = false, n = 0, last = 0}, lzo_compwork
> = {defined = false, flags = 0, wmem = 0x0, wmem_size = 0, ac =
> {compress_state = false, next = 0, n_total = 0, n_comp = 0},
> pre_decompress = 0, post_decompress = 0, pre_compress = 0,
> post_compress = 0}, buffers = 0x0, buffers_owned = false, buf = {capacity =
> 0, offset = 0, len = 0, data = 0x0}, to_tun = {capacity = 0, offset = 0, len
> = 0, data = 0x0}, to_link = {capacity = 0,
> offset = 0, len = 0, data = 0x0}, ipv4_tun = false, log_rw =
> false, route_wakeup = {defined = false, n = 0, last = 0}, route_wakeup_expire
> = {defined = false, n = 0, last = 0}, did_open_tun = false, timeval = {tv_sec
> = 0, tv_usec = 0},
> coarse_timer_wakeup = 0, update_timeout_random_component = 0,
> timeout_random_component = {tv_sec = 0, tv_usec = 0}, do_up_ran = false,
> explicit_exit_notification_time_wait = 0, explicit_exit_notification_interval
> = {defined = false, n = 0, last = 0},
> es = 0x801806230, es_owned = true, fast_io = false,
> push_reply_deferred = false, push_ifconfig_defined = false,
> sent_push_reply_expiry = 0, push_ifconfig_local = 0,
> push_ifconfig_remote_netmask = 0, push_ifconfig_local_alias = 0,
> push_ifconfig_ipv6_defined = false, push_ifconfig_ipv6_local =
> {__u6_addr = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0,
> 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, push_ifconfig_ipv6_netbits = 0,
> push_ifconfig_ipv6_remote = {
> __u6_addr = {__u6_addr8 = '\000' <repeats 15 times>,
> __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}},
> context_auth = 0, push_request_interval = {defined = false, n = 0, last = 0},
> n_sent_push_requests = 0, did_pre_pull_restore = false,
> pulled_options_md5_init_done = false, pulled_options_state = {ctx
> = {md_info = 0x0, md_ctx = 0x0}}, pulled_options_digest = {digest = '\000'
> <repeats 15 times>}, server_poll_interval = {defined = false, n = 0, last =
> 0}, scheduled_exit = {defined = false,
> n = 0, last = 0}, scheduled_exit_signal = 0, pf = {enabled =
> false, pfs = 0x0, filename = 0x0, file_last_mod = 0, n_check_reload = 0,
> reload = {defined = false, n = 0, last = 0}}, mda_context = {cid = 0, flags =
> 0, mda_key_id_counter = 0,
> bytecount_last_update = 0}}}
> #10 0x000000000044cac2 in main (argc=15, argv=0x7fffffffde08) at openvpn.c:345
> No locals.
