[Openvpn-devel] [PATCH] Call init script helpers with explicit path (./)

2014-07-08 Thread Gert Doering
The provided OpenVPN init scripts scan /etc/openvpn for *.conf and run an OpenVPN process for each, and if a .sh script with the same base name exists, this is run before openvpn. Change from running "$name.sh" to "./$name.sh" - depending on the shell used, the script won't be found otherwise, and

Re: [Openvpn-devel] [PATCH] Do not upcase x509-username-field for mixed-case arguments.

2014-07-08 Thread Kalnozols, Andris
Thanks, Steffan, for the comments and code cleanup. Your method is definitely safer and has less clutter. I tested your version and it works as intended. Regarding the "ext:" argument prefix, I had submitted an enhanced version of extract_x509_extension() mainly for more helpful log messages. I

[Openvpn-devel] [Patch v3] Remove #ifdefs for client nat support.

2014-07-08 Thread Arne Schwabe
The client-nat feature was always unconditionally enabled --- src/openvpn/clinat.c | 4 src/openvpn/clinat.h | 2 +- src/openvpn/forward.c | 12 +++- src/openvpn/multi.c | 2 -- src/openvpn/openvpn.h | 2 -- src/openvpn/options.c | 18 +- src/openvpn/options.h

[Openvpn-devel] [PATCH] Fix t_lpback.sh platform-dependent failures

2014-07-08 Thread Gert Doering
commit e97aa06dc058 introduced "full openvpn cipher testing", but fails on OpenSSL 0.9.8 with DES-CFB1 (skip), on NetBSD for RC5-* (needs extra library, libcrypto_rc5.a) and on Solaris for POSIXly "tail" (rewrite). Signed-off-by: Gert Doering --- tests/t_lpback.sh |7 +-- 1 files changed

Re: [Openvpn-devel] [PATCH] Fix t_lpback.sh platform-dependent failures

2014-07-08 Thread Steffan Karger
ACK On 08-07-14 16:45, Gert Doering wrote: > commit e97aa06dc058 introduced "full openvpn cipher testing", but fails > on OpenSSL 0.9.8 with DES-CFB1 (skip), on NetBSD for RC5-* (needs extra > library, libcrypto_rc5.a) and on Solaris for POSIXly "tail" (rewrite). > > Signed-off-by: Gert Doering

[Openvpn-devel] [PATCH applied] Re: Fix t_lpback.sh platform-dependent failures

2014-07-08 Thread Gert Doering
Patch has been applied to the master and release/2.3 branch. commit bbae238d5084012525a61a0e3ab947c414a555ae (master) commit 9ce3670aee49d8c4407983af014663dc6185f166 (release/2.3) Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Jul 8 16:45:58 2014 +0200 Fix t

[Openvpn-devel] [PATCH applied] Re: Call init script helpers with explicit path (./)

2014-07-08 Thread Gert Doering
Patch has been applied to the master and release/2.3 branches. commit cf31d5f32197159691fa9e3e4afcfc35307702d6 (master) commit 75c3a82e8085233306107495d6b1e0b1ab19eccf (release/2.3) Author: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Tue Jul 8 09:20:54 2014 +0200 Cal

Re: [Openvpn-devel] [PATCH applied] Re: Extend t_lpback tests to test all ciphers reported by --show-ciphers

2014-07-08 Thread Gert Doering
Hi, On Mon, Jul 07, 2014 at 10:15:15PM +0200, Steffan Karger wrote: > On 07-07-14 22:09, Gert Doering wrote: > > Your patch has been applied to the master branch. > > Thanks. These are actually bugfixes for stuff that should just work in > 2.3 too, so I suggest to apply these patches, including t

[Openvpn-devel] RFD: building OpenVPN without socks and/or http proxy support

2014-07-08 Thread Gert Doering
Hi, we have a patch on the table to remove support for compile-time disabling of socks proxy and http proxy support in OpenVPN. Right now you can "./configure --disable-socks --disable-http-proxy" and save about 20kbyte executable size. The downside is that the code is more complex to maintain

[Openvpn-devel] jasmjasm1...@gmail.com

2014-07-08 Thread جاسم محمد
‏‫من جهاز الـ iPhone الخاص بي‬