Re: [Openvpn-devel] OpenVPN 2.6.7 released

2023-11-12 Thread Gert Doering
Hi, On Sun, Nov 12, 2023 at 07:22:45PM +0100, Gert Doering wrote: > (If you feel like debugging a bit more - could you compile an instance > without optimization, run from gdb, and when it segfaults print all > local variables of interest? i, j, ks, *ks, ks->send_reliable? We > got one variable

Re: [Openvpn-devel] OpenVPN 2.6.7 released

2023-11-12 Thread Greg Cox
Segfaulting STR: Rocky9 host, used 2.6.7 from the copr repo. port 1194 proto tcp-server dev tun1 ca /etc/openvpn/server/keys/ca.crt cert /etc/openvpn/server/keys/server.crt key /etc/openvpn/server/keys/server.key dh none tls-groups secp521r1:secp384r1 topology subn

Re: [Openvpn-devel] OpenVPN 2.6.7 released

2023-11-12 Thread Gert Doering
Hi, On Sun, Nov 12, 2023 at 06:08:48PM +, Greg Cox wrote: > Spun this config up, then ran: > > iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dports 443,80 > -j REDIRECT --to-ports 1194 > > Within 5 minutes the random web scanners found and segfaulted me. This sounds promising.

[Openvpn-devel] OpenVPN3 thread safety

2023-11-12 Thread Savely Krasovsky
Hello! I am trying to use OpenVPN3 with Golang SWIG binding. It works pretty nice, but I have random segmentation faults without obvious reason. My current guess is that Golang calls OpenVPN3 from various threads and library is not ready for that sometime. Am I right? Documentation doesn't say