On Tue, Jun 13, 2017 at 3:37 PM, Gert Doering <g...@greenie.muc.de> wrote:
> On Tue, Jun 13, 2017 at 03:33:35PM -0400, Selva Nair wrote:
> > Right :) But we could probably do better using Set instead of Add while
> > the address is set using the service. I'm not that familiar with ipapi,
> but
> > looks like SetUnicastIpAddressEnrty instead of AddUnicastIpAddressEntry
> > may be the right thing.
> >
> > The netsh command used when service is not in use does correctly do a set
> > not add.
>
> Good point. Wouldn't solve the first problem, but at least a subsequent
> run would "magically fix it", provided the same tap interface is used
> (which, I think, is the case in the great majority of windows
> installations)
Okay, I can say that the issue is indeed the service effectively doing an
"add address" instead
of "set address". Reproduced this without using an admin run:
1. Connect to server 1 using GUI/iservice
2. Kill iservice using taskmanager or taskkill (do not do sc stop
service-name.. as that will do a graceful stop)
3. Start the service again
4. Disconnect from server 1
At this point "netsh int ipv6 show addr" will show that v6 addres is
retained although the connection is down
4. connect to server 2 using GUI/iservice
Now the adapter will have two ipv6 addresses.
On Tue, Jun 13, 2017 at 3:50 PM, Samuli Seppänen <sam...@openvpn.net> wrote:
> I encountered the issue with the Powershell test suite
> (openvpn-windows-test) which ran through a bunch of t_client test
> configs and forcibly killed the OpenVPN process at the end of each test.
> All ping6 tests except the first one would then fail, because adding a
> default IPv6 route failed as one existed already.
Probably the same issue. The real culprit here is force-killing without
impunity. I'll be posting a PR to the GUI that allows sending connect,
disconnect and exit commands to the running GUI, so we could use that in
the script. That said using "set address" in the service will mitigate this
to some extent -- looks easy to do a patch..
Selva
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
