Re: [Openvpn-devel] Topics for the community meeting (Wed, 26th Sep 2017)

2017-09-27 Thread Steven Haigh
ail-archive.com/openvpn-devel@lists.sourceforge.net/msg15132.html Happy to answer specifics about this - or revert on topic. -- Steven Haigh 📧 net...@crc.id.au 💻 http://www.crc.id.au 📞 +61 (3) 9001 6090📱 0412 935 897 signature.asc Description: This is a digitally signed message part. --

Re: [Openvpn-devel] [PATCH] systemd: Enable systemd's auto-restart feature for server profiles

2017-09-07 Thread Steven Haigh
ce:RestartSec=0 systemd-nspawn@.service:RestartForceExitStatus=133 systemd-udevd.service:Restart=always systemd-udevd.service:RestartSec=0 -- Steven Haigh ? net...@crc.id.au ? http://www.crc.id.au ? +61 (3) 9001 6090? 0412 935 897 --

Re: [Openvpn-devel] Please take a second look at "#2 Improve TCP-over-TCP performance"

2017-08-30 Thread Steven Haigh
/03/04/network-virtualization-encapsulation-an > d-stateless-tcp-transport-stt/ > > In sum and I think I speak for all us, we are not against such a FakeTCP > protocol but it should be > > a) implemented outside openvpn (the kernel) > b) nobody of the OpenVPN core team will impleme

[Openvpn-devel] RFCv4: Yubikey authentication for OpenVPN

2017-07-25 Thread Steven Haigh
for Yubikey API servers. * Added $debug variable (set to 1 to enable debug output) At this stage, I'm happy to submit this to the contrib area for v2.4.4 release to take advantage of the fixes in that build. -- Steven Haigh 📧 net...@crc.id.au 💻 http://www.crc.id.au 📞 +61 (3) 9001

Re: [Openvpn-devel] [PATCH] management: preserve wait_for_push field when asking for user/pass

2017-07-10 Thread Steven Haigh
alysis and debugging. Reported-by: Steven Haigh Signed-off-by: Antonio Quartulli Tested-by: Steven Haigh --- src/openvpn/manage.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/openvpn/manage.c b/src/openvpn/manage.c index c2e8dc72..e850e0a4 100644 --- a/src/openvp

[Openvpn-devel] RFCv3: Yubikey authentication for OpenVPN

2017-07-07 Thread Steven Haigh
conflicts losing tokens. Happy to receive feedback on the script, its operation, or implementation. -- Steven Haigh 📧 net...@crc.id.au 💻 http://www.crc.id.au 📞 +61 (3) 9001 6090📱 0412 935 897 yubikey-auth-tokens Description: Perl program signature.asc Description: This is a

[Openvpn-devel] RFCv2: Yubikey authentication for OpenVPN

2017-07-07 Thread Steven Haigh
client operation for auth tokens by ordex and dazo. Ticket details: https://community.openvpn.net/openvpn/ticket/904 Happy to receive feedback on the script, its operation, or implementation. -- Steven Haigh 📧 net...@crc.id.au 💻 http://www.crc.id.au 📞 +61 (3) 9001 6090📱 0412 935 897

Re: [Openvpn-devel] Bug or Feature? Username in environment in auth-user-pass-verify

2017-06-15 Thread Steven Haigh
On Thursday, 15 June 2017 5:47:39 PM AEST Gert Doering wrote: > Hi, > > On Thu, Jun 15, 2017 at 12:50:40PM +1000, Steven Haigh wrote: > > I'm just trying to figure out if its expected behaviour to have the > > 'username' set in the environment when using

[Openvpn-devel] Bug or Feature? Username in environment in auth-user-pass-verify

2017-06-14 Thread Steven Haigh
ld *not* be set in the environment - but it should be in the file. So - bug or feature? -- Steven Haigh ? net...@crc.id.au ? http://www.crc.id.au ? +61 (3) 9001 6090? 0412 935 897 -- Check out the vibrant tech c

Re: [Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
On Thursday, 15 June 2017 12:05:49 AM AEST David Sommerseth wrote: > On 14/06/17 15:32, Steven Haigh wrote: > > Hi all, > > > > No further comments or requests on the openvpn-users lists. > > Reposting here for further criticism / comments :) > > > > I di

Re: [Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
On Thursday, 15 June 2017 1:13:16 AM AEST Steven Haigh wrote: > On Thursday, 15 June 2017 12:42:53 AM AEST Selva Nair wrote: > > On Wed, Jun 14, 2017 at 9:32 AM, Steven Haigh wrote: > > > script-security 2 > > > client-connect /etc/openvpn/yubikey-auth-tokens

Re: [Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
On Thursday, 15 June 2017 12:42:53 AM AEST Selva Nair wrote: > On Wed, Jun 14, 2017 at 9:32 AM, Steven Haigh wrote: > > script-security 2 > > client-connect /etc/openvpn/yubikey-auth-tokens > > auth-user-pass-verify /etc/openvpn/yubikey-auth-tokens via-file > &g

[Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
e connection running with an auth-token after the initial authentication by OTP. Edit the yubikey-auth-tokens script and edit the %yubikeys hash with your list of usernames and associated yubikey IDs. Happy to receive feedback on the script, its operation, or implementation. -- Steven Haigh