Re: [Openvpn-devel] Repos for Debian Wheezy?

2013-05-30 Thread Wayne
Does that mean you will be building packages against libssl1.0.0? Sorry for the top posting. Dumb phone email client. On May 30, 2013, at 10:16 AM, Samuli Seppänen wrote: > Hi, > > My OpenVPN Debian packages[1] seem to depend on libssl0.9.8, which probably > means they won't work on Wheezy.

[Openvpn-devel] [Patch v2] Fix #ifdefs for P2MP_SERVER

2013-05-30 Thread Arne Schwabe
--- src/openvpn/ssl.c|2 +- src/openvpn/ssl_common.h |2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/openvpn/ssl.c b/src/openvpn/ssl.c index 12da365..088eea8 100644 --- a/src/openvpn/ssl.c +++ b/src/openvpn/ssl.c @@ -2043,7 +2043,7 @@ key_method_2_read (st

[Openvpn-devel] [PATCH] Fix #ifdefs for P2MP_SERVER

2013-05-30 Thread Arne Schwabe
--- src/openvpn/ssl.c|2 +- src/openvpn/ssl_common.h |2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/openvpn/ssl.c b/src/openvpn/ssl.c index 12da365..088eea8 100644 --- a/src/openvpn/ssl.c +++ b/src/openvpn/ssl.c @@ -2043,7 +2043,7 @@ key_method_2_read (st

[Openvpn-devel] [PATCH] Move checking of script file access into set_user_script

2013-05-30 Thread Arne Schwabe
At the moment script are only checked if P2MP_SERVER is defined. For CLIENT_ONLY openvpn script were never checked. --- src/openvpn/options.c | 33 +++-- 1 file changed, 11 insertions(+), 22 deletions(-) diff --git a/src/openvpn/options.c b/src/openvpn/options.c ind

[Openvpn-devel] [PATCH] Move settings of user script into set_user_script function

2013-05-30 Thread Arne Schwabe
This also fixes commit 567bfc06d051b60e9cdca1f5bb468631b899682a if not all script options are available by setting options->user_script_used --- src/openvpn/init.c|7 ++ src/openvpn/options.c | 59 - src/openvpn/options.h |1 + 3 f

Re: [Openvpn-devel] [PATCH] Only print script warnings when a script is used. Remove stray mention of script-security system.

2013-05-30 Thread Gert Doering
Hi, On Thu, May 30, 2013 at 03:27:08PM +0200, Arne Schwabe wrote: > + if (o->up_script || o->ipchange || o->down_script || o->route_script > + || o->route_predown_script || o->auth_user_pass_verify_script > + || o->client_disconnect_script || o->client_connect_script > + || o->learn_ad

[Openvpn-devel] [PATCH applied] Re: Provide more accurate warning message

2013-05-30 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branches. commit 3600996534c30978a7b0e9ddbe5e9743e6423d1a (master) commit 5957218690ceb9d70de63d048f86c241a44e8b48 (release/2.3) Author: Davide Brini List-Post: openvpn-devel@lists.sourceforge.net Date: Thu May 30 16:20:55 2013 +0200

[Openvpn-devel] [PATCH applied] Re: Only print script warnings when a script is used. Remove stray mention of script-security system.

2013-05-30 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branches. commit 8476edbb1748e11de0e4fda8989c9e470285926b (master) commit 567bfc06d051b60e9cdca1f5bb468631b899682a (release/2.3) Author: Arne Schwabe List-Post: openvpn-devel@lists.sourceforge.net Date: Thu May 30 15:27:08 2013 +0200

Re: [Openvpn-devel] Provide more accurate warning message

2013-05-30 Thread Gert Doering
Hi, On Thu, May 30, 2013 at 04:20:55PM +0200, Davide Brini wrote: > +msg (M_WARN, "NOTE: starting with " PACKAGE_NAME " 2.1, > '--script-security 2' or higher is required to call user-defined scripts or > executables"); ACK, this text is even clearer than what Arne proposed. I'll see how

[Openvpn-devel] Bugfix for #297

2013-05-30 Thread Gert Doering
Hi, just so it's in the list archives - the reporter for trac#297 attached a bugfix, which I'm going to commit to master and release/2.3 - that is "acked-by: g...@greenie.muc.de". Arne has also acked the patch on #openvpn-devel. Since the reporter has not come forward with a real name and e-mail

Re: [Openvpn-devel] [PATCH] Only print script warnings when a script is used. Remove stray mention of script-security system.

2013-05-30 Thread Jan Just Keijser
ACK! Arne Schwabe wrote: --- src/openvpn/common.h |2 +- src/openvpn/init.c | 19 +-- 2 files changed, 14 insertions(+), 7 deletions(-) diff --git a/src/openvpn/common.h b/src/openvpn/common.h index dd2c83f..2f85bec 100644 --- a/src/openvpn/common.h +++ b/src/openvpn/co

[Openvpn-devel] Provide more accurate warning message

2013-05-30 Thread Davide Brini
Very simple fix. --- src/openvpn/init.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/openvpn/init.c b/src/openvpn/init.c index 2a0ba85..9a9c49a 100644 --- a/src/openvpn/init.c +++ b/src/openvpn/init.c @@ -2547,7 +2547,7 @@ do_option_warnings (struct context *c) el

Re: [Openvpn-devel] Repos for Debian Wheezy?

2013-05-30 Thread Samuli Seppänen
Hi, My OpenVPN Debian packages[1] seem to depend on libssl0.9.8, which probably means they won't work on Wheezy. I'll be adding wheezy packages soonish, as I need a couple of wheezy VMs for Buildbot anyways. -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode net: mattoc

[Openvpn-devel] [PATCH] Only print script warnings when a script is used. Remove stray mention of script-security system.

2013-05-30 Thread Arne Schwabe
--- src/openvpn/common.h |2 +- src/openvpn/init.c | 19 +-- 2 files changed, 14 insertions(+), 7 deletions(-) diff --git a/src/openvpn/common.h b/src/openvpn/common.h index dd2c83f..2f85bec 100644 --- a/src/openvpn/common.h +++ b/src/openvpn/common.h @@ -100,6 +100,6 @@ t

Re: [Openvpn-devel] Repos for Debian Wheezy?

2013-05-30 Thread Alberto Gonzalez Iniesta
Well, 2.3 is in the Debian repos. Both in sid (unstable) and jessie (testing). Wheezy (Stable) was frozen (no more updates) way before OpenVPN 2.3.0 was released, so its inclusion was not possible. We'll have a backport of 2.3.x for wheezy. On Wed, May 29, 2013 at 02:37:12PM -0400, Praetorian wr

Re: [Openvpn-devel] Repos for Debian Wheezy?

2013-05-30 Thread Gert Doering
Hi, On Wed, May 29, 2013 at 09:37:00PM -0400, Praetorian wrote: > I tried using the snapshot branch of squeeze but ran into a dependency > problem with libssl0.9.8. The version installed in Wheezy is libssl1.0.0. Uh. Squeeze is *older* than wheezy...? Or am I misremembering? gert -- USENET i

Re: [Openvpn-devel] Repos for Debian Wheezy?

2013-05-30 Thread Praetorian
I tried using the snapshot branch of squeeze but ran into a dependency problem with libssl0.9.8. The version installed in Wheezy is libssl1.0.0. root@marlin:/etc/apt/sources.list.d# apt-get install openvpn Reading package lists... Done Building dependency tree Reading state information... Done S