[Openvpn-devel] [PATCH] Increase control channel packet size for faster handshakes

Instead of limiting the control channel TCP/UDP packet payload size at '100 bytes + real control channel overhead' (~140 bytes ethernet payload), increase the max TCP/UDP payload size to '1250 bytes - calculated overhead' (~1210 bytes ethernet payload). This decreases the number of packets require

Re: [Openvpn-devel] Topics for today's (Monday, 29th June 2015) community meeting

Hi, Here's the summary of the previous IRC meeting. --- COMMUNITY MEETING Place: #openvpn-devel on irc.freenode.net List-Post: openvpn-devel@lists.sourceforge.net Date: Monday 29th June 2015 Time: 20:00 CET (18:00 UTC) Planned meeting topics for this meeting were on this page:

Re: [Openvpn-devel] [PATCH] Report missing endtags of inline files as warnings

Hi, On Mon, Jun 29, 2015 at 02:46:35PM +0200, Arne Schwabe wrote: > } >buf_printf (&buf, "%s", line); > } > + if (!endtagfound) > +msg (M_WARN, "WARNING: Endtag %s missing", close_tag); Generally speaking, ACK. I wonder whether this should be M_WARN or M_FATAL, though? T

[Openvpn-devel] New OpenVPN 2.3.7 installers released

Hello everyone, New OpenVPN Windows installers (2.3.7-I602) have been released and can be downloaded from the downloads page: The installers bundle the latest OpenSSL version (1.0.1o) which includes several security fixes. Bas

[Openvpn-devel] [PATCH] Report missing endtags of inline files as warnings

--- src/openvpn/options.c | 9 - 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/openvpn/options.c b/src/openvpn/options.c index 74276d4..24efb59 100644 --- a/src/openvpn/options.c +++ b/src/openvpn/options.c @@ -3703,10 +3703,15 @@ read_inline_file (struct in_src *is, con

[Openvpn-devel] Topics for today's (Monday, 29th June 2015) community meeting

Hi, We're going to have an IRC meeting today, 29th June, starting at 20:00 CEST (18:00 UTC) on #openvpn-devel irc.freenode.net. Current topic list along with basic information is here: If you have any other things you'd like to

Re: [Openvpn-devel] Windows build fix for CVE-2015-4000

Might an in-depth investigation on these issues take more time than building an updated installer? Indeed. I will produce new Windows installers later today. From now on I'll produce new installers for every OpenSSL release, whether OpenVPN is affected or not. -- Samuli Seppänen Community Ma

Re: [Openvpn-devel] Writing an OpenVPN-specific NSSM configuration frontend?

On Wed, Jun 24, 2015 at 07:00:56PM +0300, Samuli Seppänen wrote: Hi, There is a question at the end, so scroll down if you're impatient :). Anyways, some of you may know I've been looking into NSSM: The idea is to use NSSM to replace the OpenVPN Service Wrapper ("openvpnserv

[Openvpn-devel] verify-client-cert patch

From: Jan Just Keijser List-Post: openvpn-devel@lists.sourceforge.net Date: Mon, 29 Jun 2015 10:48:12 +0200 Subject: [PATCH] Author: Jan Just Keijser Add extended client certificate verification support. Replace --client-cert-not-required with a more flexible option, that allows for no, option

[Openvpn-devel] minor man page issue

hi all, whilst working on the --verify-client-cert patch I just noticed this in the man page: --compat-names [no-remapping] (DEPRECATED) [] Please note: This option is immediately deprecated. It is only implemented to make the tran- sition to the new formatti