Re: [Openvpn-devel] NAK on Re: Drop recursively routed packets

2016-11-02 Thread Gert Doering
Hi, On Wed, Nov 02, 2016 at 08:41:12PM +0100, Gert Doering wrote: > ACK, thanks. Took us long enough. Bah. I wanted to do everything right, but missed one crucial test: that it "does what it says" in tap mode as well - well, it doesn't. Unlike v2, this will not break tap (or p2p server or --

[Openvpn-devel] [PATCH applied] Re: Drop recursively routed packets

2016-11-02 Thread Gert Doering
ACK, thanks. Took us long enough. Tested on Linux, does what it says (--verb 4 shows nice log messages, with --allow-recursive-routing (and UDP), you get the expected CPU explosion instead). Passes all my t_client tests on client AND server, including --inetd and p2p server. I had to apply t

Re: [Openvpn-devel] OpenVPN v2.4 release progress

2016-11-02 Thread Samuli Seppänen
Il 02/11/2016 12:55, David Sommerseth ha scritto: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 02/11/16 10:32, Steffan Karger wrote: >> Hi, >> >> On 2 November 2016 at 09:48, Alberto Gonzalez Iniesta >> wrote: >>> I don't know if 2.4 addresses building with openssl 1.1 [1], but >>> tha

Re: [Openvpn-devel] OpenVPN v2.4 release progress

2016-11-02 Thread Steffan Karger
Hi, On 01-11-16 23:47, David Sommerseth wrote: > > [...] > > * November 8th > If we agree to have 3 stages, alpha3 must be released. After this > date we start to be stricter about the patches for a while. > > Patches which should go into this or the next release: > - [PATCH] struct arg

Re: [Openvpn-devel] Help with bug report

2016-11-02 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/11/16 13:13, Arne Schwabe wrote: > > > Am 02.11.16 um 13:00 schrieb Alberto Gonzalez Iniesta: >> Hi, >> >> I got this bug report [1] on the Debian BTS a long time ago but >> I haven't been able to debug it. Due to its severity it would be >> n

Re: [Openvpn-devel] Help with bug report

2016-11-02 Thread Arne Schwabe
Am 02.11.16 um 13:00 schrieb Alberto Gonzalez Iniesta: > Hi, > > I got this bug report [1] on the Debian BTS a long time ago but I > haven't been able to debug it. Due to its severity it would be nice to > have it fixed for Stretch. Could anyone take a look at it? > > Any suggestions on the best

[Openvpn-devel] Help with bug report

2016-11-02 Thread Alberto Gonzalez Iniesta
Hi, I got this bug report [1] on the Debian BTS a long time ago but I haven't been able to debug it. Due to its severity it would be nice to have it fixed for Stretch. Could anyone take a look at it? Any suggestions on the best procedure to deal with bugs reported on the Debian BTS? Thanks, Alb

Re: [Openvpn-devel] Summary of today's (Monday, 10th Oct 2016) community meeting

2016-11-02 Thread Jonathan K. Bullard
On Wed, Nov 2, 2016 at 6:52 AM, Gert Doering wrote: > On Wed, Nov 02, 2016 at 06:19:26AM -0400, Jonathan K. Bullard wrote: >> Sorry to be a pest, but is there an update on when 2.3.13 might be released? > > Tomorrow ("noon-time-ish for Europe") > > (We decided this on IRC just now, so now we have

Re: [Openvpn-devel] OpenVPN v2.4 release progress

2016-11-02 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/11/16 10:32, Steffan Karger wrote: > Hi, > > On 2 November 2016 at 09:48, Alberto Gonzalez Iniesta > wrote: >> I don't know if 2.4 addresses building with openssl 1.1 [1], but >> that would be a plus. > > Not yet. The 1.1 API in considerably d

Re: [Openvpn-devel] Summary of today's (Monday, 10th Oct 2016) community meeting

2016-11-02 Thread Gert Doering
Hi, On Wed, Nov 02, 2016 at 06:19:26AM -0400, Jonathan K. Bullard wrote: > Sorry to be a pest, but is there an update on when 2.3.13 might be released? Tomorrow ("noon-time-ish for Europe") (We decided this on IRC just now, so now we have a fixed deadline to meet :)) gert -- USENET is *not*

Re: [Openvpn-devel] Summary of today's (Monday, 10th Oct 2016) community meeting

2016-11-02 Thread Jonathan K. Bullard
On Mon, Oct 10, 2016 at 4:26 PM, Samuli Seppänen wrote: > Discussed OpenVPN 2.3.13 release. Three things are missing: > > 1. recursive routing > 2. block-outside-dns v2 > 3. 64MB renegotiation for 64-bit block ciphers > > Cron2 will take care of 1-2, and syzzer will tackle 3. > > -- > > Preliminar

Re: [Openvpn-devel] OpenVPN v2.4 release progress

2016-11-02 Thread Steffan Karger
Hi, On 2 November 2016 at 09:48, Alberto Gonzalez Iniesta wrote: > I don't know if 2.4 addresses building with openssl 1.1 [1], but that > would be a plus. Not yet. The 1.1 API in considerably different from 1.0.x. Switching is not very hard, but supporting both 1.0.x and 1.1 needs some work. I

Re: [Openvpn-devel] OpenVPN v2.4 release progress

2016-11-02 Thread Alberto Gonzalez Iniesta
On Wed, Nov 02, 2016 at 10:12:59AM +0200, Samuli Seppänen wrote: > Il 02/11/2016 00:52, Arne Schwabe ha scritto: > > On 01.11.2016 23:47, David Sommerseth wrote: > >> > >> I'm splitting of the originating thread to a new one, to refocus the > >> discussion. > >> > >> On 01/11/16 15:56, Samuli Seppä

Re: [Openvpn-devel] OpenVPN v2.4 release progress

2016-11-02 Thread Samuli Seppänen
Il 02/11/2016 00:52, Arne Schwabe ha scritto: > On 01.11.2016 23:47, David Sommerseth wrote: >> >> I'm splitting of the originating thread to a new one, to refocus the >> discussion. >> >> On 01/11/16 15:56, Samuli Seppänen wrote: >>> Il 01/11/2016 16:05, David Sommerseth ha scritto: [...snip.