[Openvpn-devel] -devel version numbering

2010-02-18 Thread Eric F Crist
How is -devel being numbered, and how are we handling snapshots for propagation of -devel versions? I've spoken with Matthias Andree, the FreeBSD port maintainer, and he'll be handing maintainership to me for openvpn-devel (possibly openvpn, later) after the ports freeze. Should I be taking

Re: [Openvpn-devel] openvpn-testing tree available

2010-02-18 Thread JuanJo Ciarlante
On Wed, Feb 17, 2010 at 6:46 PM, JuanJo Ciarlante wrote: > Hi David, > > On Tue, Feb 16, 2010 at 7:49 PM, David Sommerseth > wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> >> Greetings all! >> >> I am now announcing the openvpn-testing.git tree as open.  Gert has >> already been

Re: [Openvpn-devel] [PATCH] Do not randomize resolving of IP addresses in getaddr()

2010-02-18 Thread Gert Doering
Hi, ACK for the idea, but this... On Thu, Feb 18, 2010 at 09:23:48PM +0100, David Sommerseth wrote: > - /* choose address randomly, for basic load-balancing capability */ > - ia.s_addr = *(in_addr_t *) (h->h_addr_list[get_random () % n]); > + ia.s_addr = *(in_addr_t

[Openvpn-devel] [PATCH] Do not randomize resolving of IP addresses in getaddr()

2010-02-18 Thread David Sommerseth
From: David Sommerseth Based on a discussion on the mailing list and in the IRC meeting Feb 18, it was decided to remove get_random() from the getaddr() function as that can conflict with round-robin/randomization done by DNS servers. This change must be documented in the release notes. Signed-

Re: [Openvpn-devel] [PATCH] Change verify-cn so cn is no longer hardcoded in openvpn's config file

2010-02-18 Thread Eric F Crist
ACK. On Feb 18, 2010, at 11:58:28, Karl O. Pinc wrote: > --- > sample-scripts/verify-cn | 42 +++--- > 1 files changed, 27 insertions(+), 15 deletions(-) > > diff --git a/sample-scripts/verify-cn b/sample-scripts/verify-cn > index 5d56d95..f9fea0f 100755 > -

Re: [Openvpn-devel] Make sample-scripts/verify-cn dynamic

2010-02-18 Thread Gert Doering
Hi, On Thu, Feb 18, 2010 at 11:58:27AM -0600, Karl O. Pinc wrote: > Re: [PATCH] Change verify-cn so cn is no longer hardcoded in openvpn's config > file ACK from my end. The code looks sane and I can see the usefulness. (Backwards compatibility would be very easy to add - "if the argument does

[Openvpn-devel] Testers for OpenVPN testing tree

2010-02-18 Thread Samuli Seppänen
Hi guys, If we have time in today's meeting, we could discuss how to organize testing for OpenVPN. For example, how to be (reasonably) sure that a new piece of code has been tested by enough people before it ends up in "stable". A couple of things come to mind... first, I think it would be benefic

Re: [Openvpn-devel] [PATCH] FQDN for routes should expand to all IPs

2010-02-18 Thread Karl O. Pinc
On 02/18/2010 12:26:37 PM, Karl O. Pinc wrote: > (I seem to recall that bind attempts to rotate the ordering > of the names, but I can't find any reference to this at a glance > and could be wrong.) Ah, here it is. Bind9 has a rrset-order directive. Results can be fixed, random, or cyclic but

Re: [Openvpn-devel] [PATCH] FQDN for routes should expand to all IPs

2010-02-18 Thread Karl O. Pinc
On 02/18/2010 08:12:17 AM, David Sommerseth wrote: > On 18/02/10 13:53, Gert Doering wrote: > >> * usage of get_random in getaddr() [socket.c:261] > >> > >> I admit I should have spotted this one on the first review. > Because > >> this code snippet below looks really odd to me. > >> > >> if (n

[Openvpn-devel] [PATCH] Change verify-cn so cn is no longer hardcoded in openvpn's config file

2010-02-18 Thread Karl O. Pinc
--- sample-scripts/verify-cn | 42 +++--- 1 files changed, 27 insertions(+), 15 deletions(-) diff --git a/sample-scripts/verify-cn b/sample-scripts/verify-cn index 5d56d95..f9fea0f 100755 --- a/sample-scripts/verify-cn +++ b/sample-scripts/verify-cn @@ -7,24

[Openvpn-devel] Make sample-scripts/verify-cn dynamic

2010-02-18 Thread Karl O. Pinc
Hi, Re: [PATCH] Change verify-cn so cn is no longer hardcoded in openvpn's config file This patch should be easy to process. A resubmission of the patch sent to this list on 04/23/2009. The patch changes the verify-cn script sample to be used with --tls-verify so that instead of having to hard

Re: [Openvpn-devel] [PATCH] FQDN for routes should expand to all IPs

2010-02-18 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/02/10 13:53, Gert Doering wrote: > Hi, > > On Thu, Feb 18, 2010 at 12:54:08PM +0100, David Sommerseth wrote: >> The average user might have hits between 1 and 5 IP addresses >> (guestimate) on such a hostname lookups. There are a few things I a

Re: [Openvpn-devel] [PATCH] FQDN for routes should expand to all IPs

2010-02-18 Thread Gert Doering
Hi, On Thu, Feb 18, 2010 at 12:54:08PM +0100, David Sommerseth wrote: > The average user might have hits between 1 and 5 IP addresses > (guestimate) on such a hostname lookups. There are a few things I am > concerned about in this regards. Even though on my platform in_addr_t > only needs 4 byte

Re: [Openvpn-devel] [PATCH] FQDN for routes should expand to all IPs

2010-02-18 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/02/10 20:27, Stefan Monnier wrote: >> Thanks a lot for you patch! In general, it very looks good. Can you >> elaborate a little bit on how you have tested this patch? > > I've been using it on my client machines for the last few months. > This