[Openvpn-devel] Openvpn 2.3.3 (community edition) and "Socks V5 method selection"

2014-04-13 Thread Lisa Minogue
Hello I would like to know if the latest version of Openvpn 2.3.3 (community edition) has incorporated the fix for "Socks V5 method selection" flaw? If not, when does Openvpn plan to incorporate it? For more information please click the following links: https://lists.torproject.org/pipermail/t

[Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Kevin Cernekee
Sometimes it is desirable to establish VPN connections without setting up a kernel tun/tap device. Possible use cases include: - Routing traffic from different applications through different VPNs. - Connecting to multiple VPNs (clients, sites, ...) that have overlapping IP ranges. - Conne

[Openvpn-devel] [PATCH 3/3] Add "pipe to external program" device

2014-04-13 Thread Kevin Cernekee
Allow the tunneled traffic to be handled by an external program rather than by a real tun/tap kernel device. This allows non-root users to connect to a VPN through a userland TCP/IP stack. Signed-off-by: Kevin Cernekee --- doc/openvpn.8 | 29 +-- src/openvpn/init.c | 12 +++

[Openvpn-devel] [PATCH 1/3] Add S_NOWAIT and S_SETPGRP flags to openvpn_execve

2014-04-13 Thread Kevin Cernekee
This is to let openvpn_execve be used to create a process that runs in the background, and return its PID so that its process group can be nuked on exit. Signed-off-by: Kevin Cernekee --- src/openvpn/misc.c |9 - src/openvpn/misc.h |6 -- 2 files changed, 12 insertions(+), 3

[Openvpn-devel] [PATCH 2/3] Move MTU field into struct tuntap

2014-04-13 Thread Kevin Cernekee
open_tun() will need to access this value, so we'll store it alongside the IP/netmask addresses. Signed-off-by: Kevin Cernekee --- src/openvpn/init.c |5 +++-- src/openvpn/tun.c |2 +- src/openvpn/tun.h |2 +- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/src/openv

Re: [Openvpn-devel] Openvpn 2.3.3 (community edition) and "Socks V5 method selection"

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 05:42:17AM +0200, Lisa Minogue wrote: > I would like to know if the latest version of Openvpn 2.3.3 (community > edition) has incorporated the fix for "Socks V5 method selection" flaw? Does the release notes indicates so? > If not, when does Openvpn plan to incorpor

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Gert Doering
Hi, On Sat, Apr 12, 2014 at 10:16:53PM -0700, Kevin Cernekee wrote: > Sometimes it is desirable to establish VPN connections without setting > up a kernel tun/tap device. Possible use cases include: > > - Routing traffic from different applications through different VPNs. > > - Connecting to

[Openvpn-devel] github pull 15 / Fix typo in build script to use LDFLAGS

2014-04-13 Thread Gert Doering
From 553ca06af9e9c2daa8acfa36988aac0b8ed5dab4 Mon Sep 17 00:00:00 2001 From: kangsterizer List-Post: openvpn-devel@lists.sourceforge.net Date: Thu, 10 Apr 2014 11:23:24 -0700 Subject: [PATCH] Fix typo in build script to use LDFLAGS --- sample/sample-plugins/defer/build | 2 +- 1 file changed, 1

Re: [Openvpn-devel] github pull 15 / Fix typo in build script to use LDFLAGS

2014-04-13 Thread Arne Schwabe
Am 13.04.14 13:15, schrieb Gert Doering: > From 553ca06af9e9c2daa8acfa36988aac0b8ed5dab4 Mon Sep 17 00:00:00 2001 > From: kangsterizer > Date: Thu, 10 Apr 2014 11:23:24 -0700 > Subject: [PATCH] Fix typo in build script to use LDFLAGS > > --- > sample/sample-plugins/defer/build | 2 +- > 1 file ch

Re: [Openvpn-devel] github pull 15 / Fix typo in build script to use LDFLAGS

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 01:19:36PM +0200, Arne Schwabe wrote: > Am 13.04.14 13:15, schrieb Gert Doering: > > From 553ca06af9e9c2daa8acfa36988aac0b8ed5dab4 Mon Sep 17 00:00:00 2001 > > From: kangsterizer > > Date: Thu, 10 Apr 2014 11:23:24 -0700 > > Subject: [PATCH] Fix typo in build script to

[Openvpn-devel] [PATCH] Fix SOCKSv5 method selection

2014-04-13 Thread Gert Doering
From: Yawning Angel So, RFC 1928 doesn't say anything about the METHODS field in the Method Selection message being ordered in terms of preference or anything, and the server is free to pick any of the METHODS offered by the client. Always sending a Method Selection message with NO AUTHENTICATIO

Re: [Openvpn-devel] [PATCH] Fix SOCKSv5 method selection

2014-04-13 Thread Gert Doering
Hi, this came in as github pull req #14, and fixes the socks problem that people are complaining about in about every list, except here and in trac... - there *is* also trac#377. The patch "as is" breaks windows compilation as... > + if (p->authfile[0]) > + method_sel[2] = 0x02; /* METHOD

Re: [Openvpn-devel] BUG: Windows netsh interface ipv6 delete address

2014-04-13 Thread Gert Doering
Hiya, On Thu, Apr 10, 2014 at 01:25:27AM +0200, Cedric wrote: > I get an error on latest release 2.3.3 (and previous ones), on windows 8.1. > > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address OPENVPN > 2a02:::::1000 So. here we go :-) Patch (for 2.3.3, but shoul

Re: [Openvpn-devel] [PATCH] Fix SOCKSv5 method selection

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 01:52:57PM +0200, Gert Doering wrote: > I'll amend that when committing. Here is the patch with the MSVC build change, plus some changes to the commit message to point to the pull request and trac. gert -- USENET is *not* the non-clickable part of WWW!

Re: [Openvpn-devel] BUG: Windows netsh interface ipv6 delete address

2014-04-13 Thread Cedric Tabary
Hi, Bug is still there in this build, I think you patched the route removal but not the ipv6 address removal on the interface itself. Cédric * Gert Doering [2014-04-13 14:56 +0200]: > Hiya, > > On Thu, Apr 10, 2014 at 01:25:27AM +0200, Cedric wrote: > > I get an error on latest release 2.3.3

Re: [Openvpn-devel] BUG: Windows netsh interface ipv6 delete address

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 03:39:20PM +0200, Cedric Tabary wrote: > Bug is still there in this build, > I think you patched the route removal but not the ipv6 address removal > on the interface itself. Oh. I need to learn to read... indeed, I patched route removal only. Will send a new patch

Re: [Openvpn-devel] [PATCH] Fix SOCKSv5 method selection

2014-04-13 Thread Arne Schwabe
Am 13.04.14 15:01, schrieb Gert Doering: > Hi, > > On Sun, Apr 13, 2014 at 01:52:57PM +0200, Gert Doering wrote: >> I'll amend that when committing. > Here is the patch with the MSVC build change, plus some changes to the > commit message to point to the pull request and trac. > > ACK from me for t

Re: [Openvpn-devel] Openvpn 2.3.3 (community edition) and "Socks V5 method selection"

2014-04-13 Thread Lisa Minogue
Hello Gert, I wish to clear up some misunderstanding. I am not the same person who posted the issue on Openvpn's forum. I am not related to that poster. As I am on Openvpn's mailing list, I thought I might just raise it up with you guys. > > From: Gert

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Kevin Cernekee
On Sun, Apr 13, 2014 at 3:47 AM, Gert Doering wrote: > I think the goal can in most cases be achieved using SSH port forwarding - > or OpenConnect, or a myriad of other "tunnel this file descriptor for me" > tools. OpenVPN will do tun/tap, and do that well. The problem with all of these alternat

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Arne Schwabe
On 13.04.2014 16:39, Kevin Cernekee wrote: On Sun, Apr 13, 2014 at 3:47 AM, Gert Doering wrote: I think the goal can in most cases be achieved using SSH port forwarding - or OpenConnect, or a myriad of other "tunnel this file descriptor for me" tools. OpenVPN will do tun/tap, and do that well.

[Openvpn-devel] RFD: ssl library version numbers

2014-04-13 Thread Gert Doering
Hi, OpenVPN does not currently report the version of the SSL library it is using - which I'm not sure whether it's by design or just because nobody ever added it. Anyway, right now I think we need it, to help future cases. There are a few questions that go along with that, which I want to discus

Re: [Openvpn-devel] RFD: ssl library version numbers

2014-04-13 Thread Eric Crist
Love it. Report always > On Apr 13, 2014, at 10:26 AM, Gert Doering wrote: > > Hi, > > OpenVPN does not currently report the version of the SSL library it is > using - which I'm not sure whether it's by design or just because nobody > ever added it. Anyway, right now I think we need it, to he

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Kevin Cernekee
On Sun, Apr 13, 2014 at 8:19 AM, Arne Schwabe wrote: > You could look at the TARGET_ANDROID. That uses the management interface and > fds over unix socket to achieve something similar. Do you think it would be feasible to enable TARGET_ANDROID by default in the Linux OpenVPN builds, and change th

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Arne Schwabe
On 13.04.2014 18:31, Kevin Cernekee wrote: On Sun, Apr 13, 2014 at 8:19 AM, Arne Schwabe wrote: You could look at the TARGET_ANDROID. That uses the management interface and fds over unix socket to achieve something similar. Do you think it would be feasible to enable TARGET_ANDROID by default

Re: [Openvpn-devel] BUG: Windows netsh interface ipv6 delete address

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 03:39:20PM +0200, Cedric Tabary wrote: > Bug is still there in this build, > I think you patched the route removal but not the ipv6 address removal > on the interface itself. Next try. Thanks for your patience :-) - this patch + installer do the "store=active" both on

[Openvpn-devel] [PATCH] fixed typo in tray tooltip (polish language)

2014-04-13 Thread Piotr Zborowski
Signed-off-by: Piotr Zborowski --- res/openvpn-gui-res-pl.rc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/res/openvpn-gui-res-pl.rc b/res/openvpn-gui-res-pl.rc index 8a00dbf..943e967 100644 --- a/res/openvpn-gui-res-pl.rc +++ b/res/openvpn-gui-res-pl.rc @@ -158,7 +158,7 @@

Re: [Openvpn-devel] BUG: Windows netsh interface ipv6 delete address

2014-04-13 Thread Cedric Tabary
Hi, This works perfectly on win8.1, win7 sp1 and winXP sp3 :) Thank you Cédric * Gert Doering [2014-04-13 19:06 +0200]: > Hi, > > On Sun, Apr 13, 2014 at 03:39:20PM +0200, Cedric Tabary wrote: > > Bug is still there in this build, > > I think you patched the route removal but not the ipv6 a

Re: [Openvpn-devel] BUG: Windows netsh interface ipv6 delete address

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 08:19:49PM +0200, Cedric Tabary wrote: > This works perfectly on win8.1, win7 sp1 and winXP sp3 :) Cool. Thanks a lot for reporting and testing. I'll try to get a 2.3.4 release out "soonish" with this one and the socks5 fix (and possibly the ssl library version repor

Re: [Openvpn-devel] [PATCH] Fix SOCKSv5 method selection

2014-04-13 Thread Gert Doering
Hi, On Sun, Apr 13, 2014 at 03:50:45PM +0200, Arne Schwabe wrote: > Am 13.04.14 15:01, schrieb Gert Doering: > > On Sun, Apr 13, 2014 at 01:52:57PM +0200, Gert Doering wrote: > >> I'll amend that when committing. > > Here is the patch with the MSVC build change, plus some changes to the > > commit

[Openvpn-devel] [PATCH applied] Re: Fix SOCKSv5 method selection

2014-04-13 Thread Gert Doering
Patch has been applied to the master and release/2.3 branches (with some small amendments to fix MSVC compilation and "const" rules as pointed out by Arne Schwabe). commit 2903eba5dfe35c981329a833845e24de3882161a (master) commit 34df13fdb65242b81c9006ee8ac83be4cc3f9e09 (release/2.3) Author: Yawni

[Openvpn-devel] [PATCH applied] Re: IPv6 address/route delete fix for Win8

2014-04-13 Thread Gert Doering
Patch has been applied to the master and release/2.3 branches. commit 4b4fac9184fcea1eab4f4223309211780cee188a (master) commit 22e834bee82b046e753d74ee374299720d0ec0bb (release/2.3) Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Sun Apr 13 13:12:02 2014 +0200 IP