Re: [Openvpn-devel] [PATCH] Rewrite manpage section about --multihome

2014-04-28 Thread Samuli Seppänen
>> I'm happy to put your detailed text into the trac ticket, though, so >> someone finding "it does not work!" and looking into trac can find them. > Yeah, about that...I'm not sure your trac is completely healthy. Even > though I submitted issue #306, I get "Warning: No permissions to add a > co

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-28 Thread George Ross
> Any of the suggested patches should determine that. The quickest and > simplest is in > > src/openvpn/ssl_openssl.c > ... OK, with the attached patch it does appear to work for me. I'll give it some more exercise tomorrow morning, but in a quick test the tunnel does now appear to come up prope

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-28 Thread Gert Doering
Hi, On Mon, Apr 28, 2014 at 04:04:10PM +0100, George Ross wrote: > OK, with the attached patch it does appear to work for me. I'll give it > some more exercise tomorrow morning, but in a quick test the tunnel does > now appear to come up properly. Thanks. That confirms the theory "it's the TLS

Re: [Openvpn-devel] Topics for today's community meeting

2014-04-28 Thread Timothe Litt
"why is it breaking for you in particular, while it works for other Linux users just fine" (half of my testbed is Linux...) Indeed, that is the interesting question.This has to do with how the client certificate is signed by the client, which in TLS1.2 is negotiated between the client and

Re: [Openvpn-devel] [PATCH applied] Re: Make serial env exporting consistent amongst OpenSSL and PolarSSL builds.

2014-04-28 Thread Steffan Karger
Hi, On 27-04-14 15:22, Gert Doering wrote: > Your patch has been applied to the master branch ONLY, as it doesn't > work with PolarSSL 1.2 (no "x509_crt" type there) - so 2.3.x still has > inconsistency here. Right, different PolarSSL API. Attached a reworked patch for 2.3. Same functionality, sl

Re: [Openvpn-devel] [PATCH 4/4] When tls-version-min is unspecified, revert to original versioning approach.

2014-04-28 Thread Steffan Karger
Hi, On 27-04-14 22:10, Steffan Karger wrote: > On 27-04-14 19:53, Gert Doering wrote: >> On Mon, Apr 21, 2014 at 01:10:04AM -0600, James Yonan wrote: The >> attached patch is what I intend to commit to release/2.3 *only*, >> not to master - as agreed at the IRC meeting. "Please ACK" :-) > > Sorr

[Openvpn-devel] [PATCH] Add support for specifying the syslog facility, as requested in trac #188.

2014-04-28 Thread Timothe Litt
Users want this because it allows them to have syslog put all OpenVPN messages in specific file(s) by using syslog.conf. Adds --syslog-facility name option, which must precede --daemon and --syslog. Adds ability to specify facility as [name] in --daemon and --syslog's progname argument, whic

[Openvpn-devel] [PATCH] Remove validation hook in syslog facility patch.

2014-04-28 Thread Timothe Litt
Cosmetic issue. Apply this after the full patch. (Or just delete the 5 characters from the full patch before applying.) Sorry about the noise. From 0ec2da0e86dd39a474705e099a1b4085b9602590 Mon Sep 17 00:00:00 2001 From: Timothe Litt List-Post: openvpn-devel@lists.sourceforge.net Date: Mon, 2