Re: [Openvpn-devel] what is the best way of skipping tests when openvpn configured --disable-crypto ?

2016-06-23 Thread Илья Шипицин
I did tests. It does not run in case of --disable-crypto 23 июня 2016 г. 1:42 пользователь "Steffan Karger" написал: > On Wed, Jun 22, 2016 at 9:23 PM, Илья Шипицин > wrote: > > like that ? > > > > diff --git a/configure.ac b/configure.ac > > index d733023..dc95123 100644 > > --- a/configure.ac

[Openvpn-devel] [PATCH] Return process id of openvpn from interactive service to client

2016-06-23 Thread Selva Nair
- The process id is returned as a message formatted in the same manner as error messages from the service to the client: i.e., a three-line message with pid formatted as 0x%08x on line 1, "Process Id" on line 2 and a blank line 3. This provides a way for service clients to check the status o

Re: [Openvpn-devel] [PATCH] Return process id of openvpn from interactive service to client

2016-06-23 Thread Gert Doering
Hi, On Wed, Jun 22, 2016 at 10:42:42PM -0400, Selva Nair wrote: > - The process id is returned as a message formatted in the same manner > as error messages from the service to the client: i.e., a three-line > message with pid formatted as 0x%08x on line 1, "Process Id" on > line 2 and a bla

[Openvpn-devel] [PATCHv2] Clarify which Windows versions require which TUN/TAP driver

2016-06-23 Thread samuli
From: Samuli Seppänen Signed-off-by: Samuli Seppänen --- INSTALL | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/INSTALL b/INSTALL index 42f78d8..f0965c7 100644 --- a/INSTALL +++ b/INSTALL @@ -298,13 +298,13 @@ TUN/TAP Driver Configuration: http://www.whiteboa

Re: [Openvpn-devel] [PATCH 3/3] Clarify which Windows versions require which TUN/TAP driver

2016-06-23 Thread David Sommerseth
On 22/06/16 19:19, Илья Шипицин wrote: > we use ndis5 on windows 10. If the rumours I've heard are right, NDIS5 support will disappear in some Windows updates. The very first rumours was that it would disappear in Win 8.2 (whatever that version ended up as), but Microsoft might have delayed the d

Re: [Openvpn-devel] [PATCH 3/3] Clarify which Windows versions require which TUN/TAP driver

2016-06-23 Thread Илья Шипицин
we still use NDIS5, however we observe some issues with Windows 10. sometimes (currently just 3 users) see messages regarding "tap adapter not ready" in logs. And issue is resolved by upgrading to NDIS6. it is not clear evidence that NDIS5 does not work well on Win10 (it works for 800 users and do

[Openvpn-devel] [PATCH applied] Re: Mention tap-windows6 in INSTALL file

2016-06-23 Thread Gert Doering
ACK. Your patch has been applied to the master branch. commit ac341e6dc63273fc3864357c60a5c9939c8105ce Author: Samuli Seppänen List-Post: openvpn-devel@lists.sourceforge.net Date: Wed Jun 22 20:06:02 2016 +0300 Mention tap-windows6 in INSTALL file Signed-off-by: Samuli Seppänen

[Openvpn-devel] [PATCH applied] Re: Use an up-to-date easy-rsa URL on the man-page

2016-06-23 Thread Gert Doering
ACK. Your patch has been applied to the master branch. commit d16ea8ba5ab12b211ba7eb15ef8951ba1f9d4f19 Author: Samuli Seppänen List-Post: openvpn-devel@lists.sourceforge.net Date: Wed Jun 22 20:06:03 2016 +0300 Use an up-to-date easy-rsa URL on the man-page Signed-off-by: Samuli Sepp

[Openvpn-devel] [PATCH applied] Re: Clarify which Windows versions require which TUN/TAP driver

2016-06-23 Thread Gert Doering
ACK. Your patch has been applied to the master branch. commit 3f0edd8a5a51774775dcda88064ed99fd0bf51d8 Author: Samuli Seppänen List-Post: openvpn-devel@lists.sourceforge.net Date: Thu Jun 23 10:06:50 2016 +0300 Clarify which Windows versions require which TUN/TAP driver Signed-off-by

Re: [Openvpn-devel] what is the best way of skipping tests when openvpn configured --disable-crypto ?

2016-06-23 Thread Gert Doering
Hi, On Wed, Jun 22, 2016 at 10:41:48PM +0200, Steffan Karger wrote: > > -test_scripts = t_client.sh t_lpback.sh t_cltsrv.sh > > +test_scripts = t_client.sh > > +if ENABLE_CRYPTO > > +test_scripts += t_lpback.sh t_cltsrv.sh > > +endif > > > > TESTS_ENVIRONMENT = top_srcdir="$(top_srcdir)" > > TES

[Openvpn-devel] [PATCH applied] Re: Fix management-external-cert option parsing error

2016-06-23 Thread Gert Doering
ACK. I wonder when this got broken, or whether it was never fully implemented... (I feel comfortable ACKing something "crypto-related" because it effectively isn't - it's option parsing, and validating combinations of options that need to be "both there" or "both not there") Your patch has been

[Openvpn-devel] windows installer: choosing x86/x64 and NDIS5/NDIS6

2016-06-23 Thread Илья Шипицин
Hello, we used to enroll our own installer, and we bundled both x86 and x64 into single installer it was easy, several blocks ${If} ${RunningX64} ${Else} ... ${EndIf} we are going to pack NDIS5/NDIS6 the same way. in order to choose proper installer automatically, not to put that decision

Re: [Openvpn-devel] what is the best way of skipping tests when openvpn configured --disable-crypto ?

2016-06-23 Thread Илья Шипицин
I'm afraid people do not pay attention to output. if build doesn't fail, why should they ? I can add that message, even make it any colour. 2016-06-23 16:32 GMT+05:00 Gert Doering : > Hi, > > On Wed, Jun 22, 2016 at 10:41:48PM +0200, Steffan Karger wrote: > > > -test_scripts = t_client.sh t_lpba

Re: [Openvpn-devel] [PATCH] Return process id of openvpn from interactive service to client

2016-06-23 Thread Selva Nair
On Thu, Jun 23, 2016 at 2:20 AM, Gert Doering wrote: > On Wed, Jun 22, 2016 at 10:42:42PM -0400, Selva Nair wrote: > > - The process id is returned as a message formatted in the same manner > > as error messages from the service to the client: i.e., a three-line > > message with pid formatted

Re: [Openvpn-devel] [PATCH] Return process id of openvpn from interactive service to client

2016-06-23 Thread Gert Doering
Hi, On Thu, Jun 23, 2016 at 10:39:15AM -0400, Selva Nair wrote: > > How does the GUI currently handle return messages? As in, does this > > need GUI changes, or is the GUI prepared to handle anything that comes > > along? > > Currently the GUI interpretes two custom error codes (0x200 and >

Re: [Openvpn-devel] windows installer: choosing x86/x64 and NDIS5/NDIS6

2016-06-23 Thread Gert Doering
Hi, On Thu, Jun 23, 2016 at 06:07:51PM +0500, ?? wrote: > we used to enroll our own installer, and we bundled both x86 and x64 into > single installer > > it was easy, several blocks > > ${If} ${RunningX64} > > ${Else} > ... > ${EndIf} > > > we are going to pack NDIS5

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-23 Thread Gert Doering
HI, On Sat, Jun 18, 2016 at 03:41:22PM -0400, Selva Nair wrote: > > > This is possible, but the case for progressively increasing the restart > > > pause is not very strong. Can we get some feedback from people who serve > > > 1000's of users? > > > > I would generally consider it polite behaviour

Re: [Openvpn-devel] [PATCHv3 5/5] Add server-side support for cipher negotiation

2016-06-23 Thread Gert Doering
Hi, On Mon, Jun 13, 2016 at 11:17:49PM +0200, Steffan Karger wrote: > Pushes AES-256-GCM when a connecting client advertises IV_NCP=2, and > supports serving connections to clients with different data channel > cipher configuration simultaneously. > > v2: > * Update manpage > * Add Changes.rst

Re: [Openvpn-devel] [PATCHv3 4/5] Add options to restrict cipher negotiation

2016-06-23 Thread Gert Doering
Hi, On Mon, Jun 13, 2016 at 11:17:12PM +0200, Steffan Karger wrote: > Add --ncp-disable to completely disable cipher negotiation, and > --ncp-ciphers to specify which ciphers to accept from the server. > > v2: > * fix --disable-crypto builds > * use register_signal() instead of operating direct

Re: [Openvpn-devel] [PATCHv3 3/5] Add client-side support for cipher negotiation

2016-06-23 Thread Gert Doering
Hi, On Mon, Jun 13, 2016 at 11:16:08PM +0200, Steffan Karger wrote: > Based on the 'IV_NCP=2' mechanism described in > http://permalink.gmane.org/gmane.network.openvpn.devel/9385. > > This is the first patch of a set that adds support for cipher negotiation. > Follow-up patches will add ways to r

Re: [Openvpn-devel] pull-filter reject = server hammering !

2016-06-23 Thread Selva Nair
On Thu, Jun 23, 2016 at 1:52 PM, Gert Doering wrote: > On Sat, Jun 18, 2016 at 03:41:22PM -0400, Selva Nair wrote: > > > > This is possible, but the case for progressively increasing the > restart > > > > pause is not very strong. Can we get some feedback from people who > serve > > > > 1000's of