Re: [Openvpn-devel] Linux client cant connect through socks, proxy - any known workaround?

2013-10-23 Thread Thomas Murach
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, in my case, I had to add the following options: pull tls-client persist-tun comp-lzo I'm quite sure that tls-client is the one you need. The others are specific to your setup. I hope that this helps. Cheers, Thomas Hi, On Wed, Oct 23, 2013 at

[Openvpn-devel] [PATCH v2] depcache support for openvpn-build

2013-10-23 Thread Josh Cepek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The original patch supported the generic/build script only, and used a single depcache. As noted earlier in this thread, this is incompatible with build-complete that loops through both the 32 & 64-bit Windows builds as the cache would have stored only

Re: [Openvpn-devel] Linux client cant connect through socks proxy - any known workaround?

2013-10-23 Thread Gert Doering
Hi, On Wed, Oct 23, 2013 at 10:50:11PM +0800, Steve Cook wrote: > I can't get openvpn to connect through my socks proxy server, and searching > around seem to find other users with the same problem, but no known > solution. It "should" work. Does the Android client work? (I'm asking because it'

[Openvpn-devel] [PATCH applied] Re: Support non-ASCII TAP adapter names on Windows

2013-10-23 Thread Gert Doering
Thanks. Patch has been applied to the master and release/2.3 branch. commit f2e40082349098d3c22981bf1e6d305826f1173f (master) commit 8f5a4598662f4b2abe7acfe8f68c90a8b03f2dc8 (release/2.3) Author: Heiko Hund List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Oct 15 11:23:42 2013 +0200

Re: [Openvpn-devel] Does openvpn 2.3.2 has memory leak?

2013-10-23 Thread Gert Doering
Hi, On Wed, Oct 23, 2013 at 04:18:29PM +0200, Gert Doering wrote: > - each further renegotiation leaks "a few kbyte" of memory per client, >which should also be fully returned when the client disconnects - this >is the issue I discovered earlier, with the GC handling of the per-client >

[Openvpn-devel] Linux client cant connect through socks proxy - any known workaround?

2013-10-23 Thread Steve Cook
I can't get openvpn to connect through my socks proxy server, and searching around seem to find other users with the same problem, but no known solution. version: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb

Re: [Openvpn-devel] Does openvpn 2.3.2 has memory leak?

2013-10-23 Thread Gert Doering
Hi, On Sun, Oct 06, 2013 at 09:21:46PM +0800, Brad Zhang wrote: > Do you have some idea about this issue? Looking forward to your reply. Coming back to *this* thread, after some debugging in the other thread with Arno, I think what I can say so far is that we're observing two different things:

Re: [Openvpn-devel] Openvpn 2.3.2 potential memory-leak after 24hours (addendum3)

2013-10-23 Thread Gert Doering
Hi, On Tue, Oct 22, 2013 at 03:16:30PM +0200, arno.oderm...@ch.schindler.com wrote: > thank you so much. > Meanwhile, we can define the substantial memory growth for the phase of > the first renegotiation cycle. > Memory is growing by almost double. > Surely, if one had only 50 to 100 concurrent

Re: [Openvpn-devel] Openvpn 2.3.2 potential memory-leak after 24hours (addendum3)

2013-10-23 Thread Gert Doering
Hi, On Tue, Oct 22, 2013 at 02:13:36PM +0200, Gert Doering wrote: > On Tue, Oct 22, 2013 at 01:40:18PM +0200, Gert Doering wrote: (I seem to be talking to myself a lot, lately...) > > I could use some ideas on how to debug this further - if valgrind isn't > > complaining, normally our memory man

Re: [Openvpn-devel] [PATCH] Floating: Add support for floating in TLS mode (V2)

2013-10-23 Thread Andre Valentin
Hi, please take a look at multi_find_instance_udp(), I am unsure about gc usage there. André Am 23.10.2013 09:54, schrieb André Valentin: Add support for floating in tls mode using the HMAC of a packet. It costs a roundtrip through the clients. Its security comes from a secret key, both peers

[Openvpn-devel] [PATCH] Floating: Add support for floating in TLS mode (V2)

2013-10-23 Thread André Valentin
Add support for floating in tls mode using the HMAC of a packet. It costs a roundtrip through the clients. Its security comes from a secret key, both peers have. This key and the data form the signature used, which is then checked againts existing peer connections. Therefore a good auth algo is rec