[Openvpn-devel] [PATCH] Fix for bug #49 for openvpn 2.2.2

2013-03-08 Thread Mikko Vainikainen
Hi, our setup needs openvpn UDP/TLS tunnels with dynamic client IP addresses, so I implemented a fix for the bug #49 that has been open for over two years. The patch is for version 2.2.2 as I had trouble compiling the 2.3.x tarball from openvpn.net. As the solution is rather simple (just two sm

Re: [Openvpn-devel] [PATCH] Fix for bug #49 for openvpn 2.2.2

2013-03-08 Thread Joachim Schipper
> Hi, > > our setup needs openvpn UDP/TLS tunnels with dynamic client IP addresses, so > I implemented a fix for the bug #49 that has been open for over two years. > > The patch is for version 2.2.2 as I had trouble compiling the 2.3.x tarball > from openvpn.net. As the solution is rather simple

Re: [Openvpn-devel] [PATCH] Fix for bug #49 for openvpn 2.2.2

2013-03-08 Thread Mikko Vainikainen
Hi, it is absolutely true that it is necessary to do HMAC hash per every existing session, as far as I know there's no other way to tell reliably if the packet really belongs to an existing session... I haven't measured the HMAC performance myself, but I'd guess it would take a bit more than a