Re: [Openvpn-devel] session-id implementation

Hi Steffan, Thanks for your comments. I have fixed (1) and (2) - well, reusing existing code in (2) has fixed also (1). Regarding (3) - I don't have much experience in crypto thing, so it would be nice if someone suggests if we should use another alignment. I'd be happy to join IRC meeting (nick

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Hi Samuli, Samuli Seppänen wrote: New Windows installers with OpenSSL 1.0.1j have been released: Two of the issues fixed in OpenSSL may impact OpenVPN. More details here:

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Hi, On Tue, Oct 21, 2014 at 10:53:52AM +0200, Jan Just Keijser wrote: > Running the gui with elevated privileges fixes this issue. Shouldn't the > installer have created this registry key? The GUI need to run with elevated privileges anyway, because otherwise OpenVPN cannot install routes... T

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Hi Samuli, > > Samuli Seppänen wrote: >> New Windows installers with OpenSSL 1.0.1j have been released: >> >> >> >> Two of the issues fixed in OpenSSL may impact OpenVPN. More details

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Hi, Gert Doering wrote: Hi, On Tue, Oct 21, 2014 at 10:53:52AM +0200, Jan Just Keijser wrote: Running the gui with elevated privileges fixes this issue. Shouldn't the installer have created this registry key? The GUI need to run with elevated privileges anyway, because otherwise Ope

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

On Tue, Oct 21, 2014 at 5:11 AM, Gert Doering wrote: > This will hopefully be fixed in 2.4 with the interactive service, we just > need to find time for Heiko to find the code and send it to us :-) (but > I've already seen it last year) Is there any documentation for the new "interactive service"

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Hi Jonathan, On Tue, Oct 21, 2014 at 05:45:11AM -0400, Jonathan K. Bullard wrote: > On Tue, Oct 21, 2014 at 5:11 AM, Gert Doering wrote: > > This will hopefully be fixed in 2.4 with the interactive service, we just > > need to find time for Heiko to find the code and send it to us :-) (but > > I'

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

On Tue, Oct 21, 2014 at 6:43 AM, Gert Doering wrote: > Yes, exactly. In essence, you have a windows service running with full > privileges, which is instructed by the GUI to run an openvpn.exe process > (with user privs, so OpenVPN can't do damage) and OpenVPN communicates > back to the service w

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Currently OpneVPN-MI-GUI does work without elevated privileges using openvpn service and the management interface. I have a small user-base who have been happily using it this way for more than a year now. In my view if OpenVPN distribution could bundle the MI-GUI, it would be of great help. Selva

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Hi, On Tue, Oct 21, 2014 at 09:55:09AM -0400, Selva Nair wrote: > Currently OpneVPN-MI-GUI does work without elevated privileges using > openvpn service and the management interface. I have a small user-base who > have been happily using it this way for more than a year now. In my view if > OpenVP

[Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

Hi, On Tue, Oct 21, 2014 at 10:26 AM, Gert Doering wrote: > On Tue, Oct 21, 2014 at 09:55:09AM -0400, Selva Nair wrote: >> Currently OpneVPN-MI-GUI does work without elevated privileges using >> openvpn service and the management interface. I have a small user-base who >> have been happily using

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

Correction: > Locally, I have patched it to pass the > certificate key as well although we don't normally use that option. I meant to say respond to RSA_SIGN requests so that the private key need not be in the config. Selva

Re: [Openvpn-devel] New OpenVPN Windows installers (I004 and I604) released

this is because Heiko rejected merge request: http://sourceforge.net/p/openvpn-gui/code/merge-requests/1/ it is easily fixed by openvpn-gui manifest I keep hearing from Heiko about some magic openvpn service for years. it is just couple of minutes to merge that request though... 2014-10-21 14

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

Hi, On Tue, Oct 21, 2014 at 12:08:27PM -0400, Selva Nair wrote: > Sure, the "log term" plan of having OpenVPN run as a normal user is great, > but the current situation of every windows user needing admin privilege > to run the UI is hard to meet in many installations. > > The MI-GUI solves that

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Hi, > > On Tue, Oct 21, 2014 at 12:08:27PM -0400, Selva Nair wrote: >> Sure, the "log term" plan of having OpenVPN run as a normal user is great, >> but the current situation of every windows user needing admin privilege >> to run the UI is hard to

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On 21-10-14 21:45, Samuli Seppänen wrote: >> True, this should have been integrated much sooner. We expected >> a 2.4 release early 2014, not "maybe q2 2015" or such, but things >> did not work out the way as planned due to lots of personal >> re

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

Hi, On Tue, Oct 21, 2014 at 3:28 PM, Gert Doering wrote: > > > The MI-GUI solves that problem right now as opposed to sometime in > future. > > True, this should have been integrated much sooner. We expected a 2.4 > release early 2014, not "maybe q2 2015" or such, but things did not work > out

Re: [Openvpn-devel] Fwd: New OpenVPN Windows installers (I004 and I604) released

Hi, On Tue, Oct 21, 2014 at 10:45:34PM +0300, Samuli Seppänen wrote: > Speaking of 2.4... besides the interactive service what is missing? redirect-gateway ipv6 (strictly speaking, any sort of "push route-ipv6" where the pushed route overlaps with the ipv6 address of the VPN server, while using