Bug#1014376: OpenVPN 2.6 in Debian

2022-07-13 Thread Arne Schwabe
Upstream here: - Dropping of --cipher is not a sudden change in 2.6. OpenVPN 2.5 was already warning about this. Furthermore unless you have a OpenVPN 2.3 peer (quite old 2.4.0 come out 2016) or deliberately configured 2.4+ in a wacky way, server and client will negotiate AES-256-GCM. So prope

Bug#958296: openvpn 2.4.9 seems to fail loading/reading client certificates

2020-04-21 Thread Arne Schwabe
>> I am attaching my /etc/ssl/openssl.cnf (if for some reason it fails, I will >> paste the contents instead). As far as I know, this is the default >> /etc/ssl/ openssl.cnf file that comes with Debian, except the "MinProtocol" >> parameter, which I had to change for one specific VPN to work (it w

Bug#958296: openvpn 2.4.9 seems to fail loading/reading client certificates

2020-04-20 Thread Arne Schwabe
Hey, OpenVPN developer here. >From this output in the original bug report: > Mon Apr 20 11:02:29 2020 OpenSSL: error:14187180:SSL routines:ssl_do_config:bad value > Mon Apr 20 11:02:29 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line it looks like there is still an error on the

Bug#353161: isc-dhcp-server: RX/TX checksum offloading for virtual causes ISC DHCP Server to fail

2012-08-17 Thread Arne Schwabe
Package: isc-dhcp-server Version: 4.1.ESV-R4-0ubuntu5.2 Followup-For: Bug #353161 Dear Maintainer, This also happens in a kvm setup if both server and client are kvm machines. The problem is very simple. To support NIC offloading and conserve CPU time the correct UDP check is only generated wh