Re: [Openvpn-devel] Topics for today's community meeting

2014-04-28 Thread Timothe Litt
"why is it breaking for you in particular, while it works for other Linux users just fine" (half of my testbed is Linux...) Indeed, that is the interesting question.This has to do with how the client certificate is signed by the client, which in TLS1.2 is negotiated between the client and

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-28 Thread Gert Doering
Hi, On Mon, Apr 28, 2014 at 04:04:10PM +0100, George Ross wrote: > OK, with the attached patch it does appear to work for me. I'll give it > some more exercise tomorrow morning, but in a quick test the tunnel does > now appear to come up properly. Thanks. That confirms the theory "it's the TLS

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-28 Thread George Ross
> Any of the suggested patches should determine that. The quickest and > simplest is in > > src/openvpn/ssl_openssl.c > ... OK, with the attached patch it does appear to work for me. I'll give it some more exercise tomorrow morning, but in a quick test the tunnel does now appear to come up prope

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-24 Thread Timothe Litt
On 24-Apr-14 10:52, George Ross wrote: On our server side the certificate chain goes: University CA -> School CA -> service-signing CA -> service cert. The first two of these are kept off-line. On the client side it goes: University CA -> School CA -> KCA -> kx509-cert. I wonder if that's just

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-24 Thread George Ross
Sorry, I'm in meeting mode at the moment. Just time to fire in a quick comment here... > George's is not known - but the best guess is that he may be using > another external key loader (such as pkcs11, or maybe an android/ios > client. Nope. Just the following: # TLS parameters dh /etc/ope

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-24 Thread Timothe Litt
The tls_read_plaintext error discussion continued past the e-mail chains pointed to on the meeting topic. I don't know if I'll be able to make the IRC meeting (and I'm just a user, not a developer), so here are a couple of notes: Both the read_plaintext error (mine) and the george ross report

[Openvpn-devel] Topics for today's community meeting

2014-04-24 Thread Samuli Seppänen
Hi, We're having an IRC meeting on Thursday, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to this mail, send me mail privately or a

Re: [Openvpn-devel] Topics for today's community meeting

2013-08-22 Thread David Sommerseth
On 22/08/13 13:51, Gert Doering wrote: > Hi, > > On Thu, Aug 22, 2013 at 12:34:45PM +0200, David Sommerseth wrote: >> * openvpn-build issues + snappy topic. >> >>"The problem is that snappy pulls in a 8MB library as a dependency, >> increasing installer size considerably " >> >> Is this re

Re: [Openvpn-devel] Topics for today's community meeting

2013-08-22 Thread Gert Doering
Hi, On Thu, Aug 22, 2013 at 12:34:45PM +0200, David Sommerseth wrote: > * openvpn-build issues + snappy topic. > >"The problem is that snappy pulls in a 8MB library as a dependency, > increasing installer size considerably " > > Is this really a problem? It's not a small library, but it

Re: [Openvpn-devel] Topics for today's community meeting

2013-08-22 Thread David Sommerseth
On 22/08/13 10:50, Samuli Seppänen wrote: > Hi, > > We're having an IRC meeting today, starting at 18:00 UTC on > #openvpn-de...@irc.freenode.net. Current topic list is here: > > I'm not able to attend the meeting today, but just wan

[Openvpn-devel] Topics for today's community meeting

2013-08-22 Thread Samuli Seppänen
Hi, We're having an IRC meeting today, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to this mail, send me mail privately or add the

[Openvpn-devel] Topics for today's community meeting

2013-08-08 Thread Samuli Seppänen
(Sorry for the last minute announcement...) Hi, We're having an IRC meeting today, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to

[Openvpn-devel] Topics for today's community meeting

2013-07-11 Thread Samuli Seppänen
Hi, We're having an IRC meeting today, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to this mail, send me mail privately or add the

[Openvpn-devel] Topics for today's community meeting

2013-06-20 Thread Samuli Seppänen
Hi, We're having an IRC meeting today, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to this mail, send me mail privately or add the

[Openvpn-devel] Topics for today's community meeting

2013-04-25 Thread Samuli Seppänen
Hi, We're having an IRC meeting today, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to this mail, send me mail privately or add the

[Openvpn-devel] Topics for today's community meeting

2013-04-18 Thread Samuli Seppänen
Hi, We're having an IRC meeting today, starting at 18:00 UTC on #openvpn-de...@irc.freenode.net. Current topic list is here: If you have any other things you'd like to bring up, respond to this mail, send me mail privately or add the