[Openvpn-devel] [PATCH v2] Restrict options/configs for startup through interactive service

2016-02-20 Thread Selva Nair
Windows only: - Allow only a set of whitelisted options in the command line options passed by interactive service clients unless (i) user is the local Adminsitrator group AND/OR (ii) in a predefined group (see below) Only the group membership is checked, the client process need not

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Shubham Chauhan
the --float option seems to be interesting! Help me understand one scenario. If I want to transfer a VPN session from one VPN server to another, keeping the same openvpn process running at the client side, then will the "--float" option help? If not float, then is there any other method? We'll sur

[Openvpn-devel] Disabling Encryption/Decryption ONLY at the server level

2016-02-20 Thread Shubham Chauhan
Is there a way to disable encryption/decryption functionality only at the server level. What kind of code changes are needed at the server level? This is just for analysis purposes. If the client sends encrypted and encapsulated packets to the VPN server gateway, it should forward only decapsulate

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Gert Doering
Hi, On Sat, Feb 20, 2016 at 11:40:28AM +0530, Shubham Chauhan wrote: > the --float option seems to be interesting! > > Help me understand one scenario. > If I want to transfer a VPN session from one VPN server to another, keeping > the same openvpn process running at the client side, then will th

Re: [Openvpn-devel] Disabling Encryption/Decryption ONLY at the server level

2016-02-20 Thread Gert Doering
Hi, On Sat, Feb 20, 2016 at 11:51:41AM +0530, Shubham Chauhan wrote: > Is there a way to disable encryption/decryption functionality only at the > server level. What kind of code changes are needed at the server level? > > This is just for analysis purposes. > If the client sends encrypted and en

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Shubham Chauhan
I read that Openvpn is a peer to peer application. The so called client server roles are only for the TLS negotiations and setting up the TLS channel. That's why my main focus was on TLS handshake. I need that roaming at the server end. The single client multi server (1 server at a time) kind of an

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Steffan Karger
On 20 Feb 2016 10:03 am, "Steffan Karger" wrote: > On 20 Feb 2016 9:19 am, "Gert Doering" wrote: > > On Sat, Feb 20, 2016 at 11:40:28AM +0530, Shubham Chauhan wrote: > > > the --float option seems to be interesting! > > > > > > Help me understand one scenario. > > > If I want to transfer a VPN se

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Steffan Karger
On 20 Feb 2016 9:19 am, "Gert Doering" wrote: > On Sat, Feb 20, 2016 at 11:40:28AM +0530, Shubham Chauhan wrote: > > the --float option seems to be interesting! > > > > Help me understand one scenario. > > If I want to transfer a VPN session from one VPN server to another, keeping > > the same ope