Hi,
our setup needs openvpn UDP/TLS tunnels with dynamic client IP addresses, so I
implemented a fix for the bug #49 that has been open for over two years.
The patch is for version 2.2.2 as I had trouble compiling the 2.3.x tarball
from openvpn.net. As the solution is rather simple (just two sm
> Hi,
>
> our setup needs openvpn UDP/TLS tunnels with dynamic client IP addresses, so
> I implemented a fix for the bug #49 that has been open for over two years.
>
> The patch is for version 2.2.2 as I had trouble compiling the 2.3.x tarball
> from openvpn.net. As the solution is rather simple
Hi,
it is absolutely true that it is necessary to do HMAC hash per every existing
session, as far as I know there's no other way to tell reliably if the packet
really belongs to an existing session... I haven't measured the HMAC
performance myself, but I'd guess it would take a bit more than a