[Openvpn-devel] [PATCH] Fix overflow check in openvpn_decrypt()

From: Steffan Karger Sebastian Krahmer from the SuSE security team reported that the buffer overflow check in openvpn_decrypt() was too strict according to the cipher update function contract: "The amount of data written depends on the block alignment of the encrypted data: as a result the amoun

[Openvpn-devel] Download 237 x64 i602 - 404 Not Found

It's been OFFLINE for a couple of days now ... https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.7-I602-x86_64.exe

Re: [Openvpn-devel] Download 237 x64 i602 - 404 Not Found

hi, On Wed, Jul 01, 2015 at 12:07:11PM +0100, debbie...@gmail.com wrote: > It's been OFFLINE for a couple of days now ... > > https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.7-I602-x86_64.exe Please do not hijack other people's threads by just replying to anything that just h

[Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

On Wed, Jul 01, 2015 at 12:07:11PM +0100, debbie10t gmail.com wrote: It's been OFFLINE for a couple of days now ... https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.7-I602-x86_64.exe Please do not hijack other people's threads by just replying to anything that just happens

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

On 01/07/15 15:22, debbie...@gmail.com wrote: >> On Wed, Jul 01, 2015 at 12:07:11PM +0100, debbie10t gmail.com wrote: >>> It's been OFFLINE for a couple of days now ... >>> >>> https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.7-I602-x86_64.exe >>> >> >> Please do not hijack othe

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

- Original Message - From: "David Sommerseth" To: ; Cc: "Gert Doering" Sent: Wednesday, July 01, 2015 2:32 PM Subject: Re: OpenVPN 2.3.7-I602-x86_64.exe download 404 Error I have no issues ... try this service and see: ;

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

Hi, On Wed, Jul 01, 2015 at 03:05:44PM +0100, debbie...@gmail.com wrote: > Resolving swupdate.openvpn.org (swupdate.openvpn.org)... 104.28.1.12, > 104.28.0.12 > Connecting to swupdate.openvpn.org > (swupdate.openvpn.org)|104.28.1.12|:443... connected. Something interesting is going on. I thou

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

On 01/07/15 16:41, Gert Doering wrote: Hi, On Wed, Jul 01, 2015 at 03:05:44PM +0100, debbie...@gmail.com wrote: Resolving swupdate.openvpn.org (swupdate.openvpn.org)... 104.28.1.12, 104.28.0.12 Connecting to swupdate.openvpn.org (swupdate.openvpn.org)|104.28.1.12|:443... connected. Something

[Openvpn-devel] [PATCH applied] Re: Increase control channel packet size for faster handshakes

ACK. Your patch has been applied to the master branch. I intend to apply it to 2.3 as well, but want to give it a bit more beating - it looks good, but running in production for a few days should give us more data. Added "trac #545" to the commit message. (As you've noted, this is not yet perfe

[Openvpn-devel] RfD: speed up PUSH_REQUEST...

Hi, experimenting with the MTU patch, I discovered that we basically sit idle for two seconds on the client between "TLS is up!" and "PUSH_REQUEST". This is part due to the coarse granularity of, well, our coarse timers, but in part due to *two* timers having to fire... - TLS is done, we schedul

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

Hi, On Wed, Jul 01, 2015 at 04:49:18PM +0200, Jan Just Keijser wrote: > from EL5: > > Resolving swupdate.openvpn.org... 104.28.1.12, 104.28.0.12 > Connecting to swupdate.openvpn.org|104.28.1.12|:443... connected. > OpenSSL: error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert > interna

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

On Wed, Jul 1, 2015 at 10:49 AM, Jan Just Keijser wrote: > On 01/07/15 16:41, Gert Doering wrote: > > Hi, > > > > On Wed, Jul 01, 2015 at 03:05:44PM +0100, debbie...@gmail.com wrote: > >> Resolving swupdate.openvpn.org (swupdate.openvpn.org)... 104.28.1.12, > >> 104.28.0.12 > >> Connecting to swu

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

On 01/07/15 16:05, debbie...@gmail.com wrote: > > - Original Message - From: "David Sommerseth" > > To: ; > Cc: "Gert Doering" > Sent: Wednesday, July 01, 2015 2:32 PM > Subject: Re: OpenVPN 2.3.7-I602-x86_64.exe download 404 Error > >> >> I have no issues ... try this service and see:

[Openvpn-devel] Compiling issue on Visual Studio 2010

Hi, Visual Studio 2010 refuses to compile the latest code on branch release/2.3 because __func__ is not supported. Microsoft supports __FUNCTION__ instead of __func__ in their compiler. VS 2013 complains the same. The following patch resolves this issue. diff --git a/src/openvpn/crypto.c

Re: [Openvpn-devel] Compiling issue on Visual Studio 2010

Am 01.07.15 um 21:47 schrieb Fish Wang: > > Hi, > > > > Visual Studio 2010 refuses to compile the latest code on branch > release/2.3 because __func__ is not supported. Microsoft supports > __FUNCTION__ instead of __func__ in their compiler. VS 2013 complains > the same. > > > > The following p

Re: [Openvpn-devel] OpenVPN 2.3.7-I602-x86_64.exe download 404 Error

- Original Message - From: "David Sommerseth" To: Cc: ; "Samuli Seppänen" Sent: Wednesday, July 01, 2015 7:01 PM Subject: Re: OpenVPN 2.3.7-I602-x86_64.exe download 404 Error The *only* link which appears to be broken is - OpenVPN 2.3.7-I602-x86_64.exe https://swupdate.openvp

Re: [Openvpn-devel] Compiling issue on Visual Studio 2010

Hi, On Wed, Jul 1, 2015 at 9:47 PM, Fish Wang wrote: > Visual Studio 2010 refuses to compile the latest code on branch release/2.3 > because __func__ is not supported. Microsoft supports __FUNCTION__ instead > of __func__ in their compiler. VS 2013 complains the same. Thanks for reporting. That

Re: [Openvpn-devel] Compiling issue on Visual Studio 2010

On Wed, Jul 1, 2015 at 9:47 PM, Fish Wang wrote: > The following patch resolves this issue. I think we can do this more simple and robust. See the attached patch. Can you please report if that works for you? Thanks. -Steffan From 6e0073163dd3c13a957f8b1760a81a5ef16e65a9 Mon Sep 17 00:00:00 20

Re: [Openvpn-devel] Compiling issue on Visual Studio 2010

Hi, Thank you for the suggestion. I'm sticking with VS since I already have an entire automation environment set up for compiling OpenVPN with Visual Studio. Also I believe Visual Studio provides better security guarantees (like stack canaries, buffer checks etc.). Best, Fish -Original Me

Re: [Openvpn-devel] Compiling issue on Visual Studio 2010

Thank you Steffan, the patch works for me. Best, Fish -Original Message- From: Steffan Karger [mailto:stef...@karger.me] Sent: Wednesday, July 1, 2015 2:28 PM To: Fish Wang Cc: openvpn-devel Subject: Re: [Openvpn-devel] Compiling issue on Visual Studio 2010 On Wed, Jul 1, 2015 at 9:47 P

Re: [Openvpn-devel] Compiling issue on Visual Studio 2010

On Wed, Jul 1, 2015 at 11:29 PM, Fish Wang wrote: > Thank you for the suggestion. I'm sticking with VS since I already have an > entire automation environment set up for compiling OpenVPN with Visual Studio. Fair enough. > Also I believe Visual Studio provides better security guarantees (like s