[Openvpn-devel] [PATCH v2 1/4] Implement exit notification via control channel

2022-05-20 Thread Arne Schwabe
Current exit notification relies on data channel messages with specific prefix. Adding these to new data channel modules (DCO) adds unncessary complexity for the data for messages that from their idea belong to the control channel anyway. This patch adds announcing support for control channel and

[Openvpn-devel] [PATCH v2 3/4] Implement AUTH_FAIL, TEMP message support

2022-05-20 Thread Arne Schwabe
This allows a server to indicate a temporary problem on the server and allows the server to indicate how to proceed (i.e. move to the next server, retry the same server, wait a certain time,...) This adds options_utils.c/h to be able to unit test the new function. Patch v2: Improve documentation,

[Openvpn-devel] [PATCH v2 4/4] Allow scripts and plugins to set a custom AUTH_FAILED message

2022-05-20 Thread Arne Schwabe
This is currently only possible when using the management interface and the client-deny functionality. --- src/openvpn/ssl_common.h | 1 + src/openvpn/ssl_verify.c | 74 ++-- 2 files changed, 73 insertions(+), 2 deletions(-) diff --git a/src/openvpn/ssl_common

[Openvpn-devel] [PATCH v2 0/4] Implement exit notifcation via control channel and temporary AUTH_FAIL

2022-05-20 Thread Arne Schwabe
This patchset consts of three patches and one small clean up patches. The first patch deals with exit notification via control channel instead of using OCC data message if both peers support it. This is need to avoid implementing OCC exit messages in DCO implementation. In p2p mode this is also imp

[Openvpn-devel] [PATCH v2 2/4] Cleanup receive_auth_failed and simplify method

2022-05-20 Thread Arne Schwabe
This simplifies the buffer handling in the method and adds a quick return instead of wrapping the whole method in a if (pull) block Patch V2: remove uncessary ifdef/endif and unnecassary block --- src/openvpn/push.c | 99 -- 1 file changed, 51 insertion