[Openvpn-devel] [PATCH v1] improve float collision logging

2025-07-18 Thread Gert Doering
From: Ralf Lici Extend the log message printed when an instance floats to an address already taken by another instance with the same certificate. The updated message now includes the instance being closed, the reason it's being closed, and the new instance taking over that address. Change-Id: I2

[Openvpn-devel] [S] Change in openvpn[master]: add flag to print addresses in a consistent format during float

2025-07-18 Thread ralf_lici (Code Review)
Attention is currently required from: cron2, flichtenheld, plaisthos. Hello flichtenheld, plaisthos, I'd like you to reexamine a change. Please visit http://gerrit.openvpn.net/c/openvpn/+/1092?usp=email to look at the new patch set (#2). Change subject: add flag to print addresses in a co

[Openvpn-devel] [XS] Change in openvpn[master]: add flag to print mroute_addr address family

2025-07-18 Thread cron2 (Code Review)
Attention is currently required from: flichtenheld, plaisthos, ralf_lici. cron2 has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1092?usp=email ) Change subject: add flag to print mroute_addr address family ..

[Openvpn-devel] [XS] Change in openvpn[master]: improve float collision logging

2025-07-18 Thread cron2 (Code Review)
cron2 has submitted this change. ( http://gerrit.openvpn.net/c/openvpn/+/1091?usp=email ) Change subject: improve float collision logging .. improve float collision logging Extend the log message printed when an instance floats

[Openvpn-devel] [XS] Change in openvpn[master]: improve float collision logging

2025-07-18 Thread cron2 (Code Review)
cron2 has uploaded a new patch set (#2) to the change originally created by ralf_lici. ( http://gerrit.openvpn.net/c/openvpn/+/1091?usp=email ) The following approvals got outdated and were removed: Code-Review+2 by cron2 Change subject: improve float collision logging .

[Openvpn-devel] [PATCH applied] Re: improve float collision logging

2025-07-18 Thread Gert Doering
Just a small commit but would have saved us a few hours staring at logs today - due to a different bug, the floating code would try to "float to itself", find "that ip+port is already in use", kill 'that' instance (itself), and then crash on "where did my instance go?"... and we just got an ominou

[Openvpn-devel] [XS] Change in openvpn[master]: add flag to print mroute_addr address family

2025-07-18 Thread ralf_lici (Code Review)
Attention is currently required from: cron2, flichtenheld, plaisthos. ralf_lici has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1092?usp=email ) Change subject: add flag to print mroute_addr address family ..

[Openvpn-devel] [M] Change in openvpn[master]: dco: Add support for float notifications

2025-07-18 Thread cron2 (Code Review)
Attention is currently required from: flichtenheld, ordex, plaisthos, ralf_lici, stipa. cron2 has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email ) Change subject: dco: Add support for float notifications ...

[Openvpn-devel] [PATCH v6] dco: Add support for float notifications

2025-07-18 Thread Gert Doering
From: Ralf Lici When a peer changes its UDP endpoint, the DCO module emits a notification to userpace. The message is parsed and the relevant information are extracted in order to process the floating operation. Note that we preserve IPv4-mapped IPv6 addresses in userspace when receiving a pure

[Openvpn-devel] [XS] Change in openvpn[master]: improve float collision logging

2025-07-18 Thread ralf_lici (Code Review)
Attention is currently required from: flichtenheld, plaisthos. Hello plaisthos, flichtenheld, I'd like you to do a code review. Please visit http://gerrit.openvpn.net/c/openvpn/+/1091?usp=email to review the following change. Change subject: improve float collision logging ...

[Openvpn-devel] [XS] Change in openvpn[master]: add flag to print mroute_addr address family

2025-07-18 Thread ralf_lici (Code Review)
Attention is currently required from: flichtenheld, plaisthos. Hello plaisthos, flichtenheld, I'd like you to do a code review. Please visit http://gerrit.openvpn.net/c/openvpn/+/1092?usp=email to review the following change. Change subject: add flag to print mroute_addr address family ..

[Openvpn-devel] [S] Change in openvpn[master]: Fix broken DHCP options

2025-07-18 Thread stipa (Code Review)
Attention is currently required from: flichtenheld, plaisthos. Hello plaisthos, flichtenheld, I'd like you to do a code review. Please visit http://gerrit.openvpn.net/c/openvpn/+/1090?usp=email to review the following change. Change subject: Fix broken DHCP options ...

Re: [Openvpn-devel] [PATCH ovpn] net: ovpn: use correct array size to parse nested attributes in ovpn_nl_key_swap_doit

2025-07-18 Thread Antonio Quartulli
On 14/07/2025 16:20, Sabrina Dubroca wrote: In ovpn_nl_key_swap_doit, the attributes array used to parse the OVPN_A_KEYCONF uses OVPN_A_PEER_MAX instead of OVPN_A_KEYCONF_MAX. Note that this does not cause any bug, since currently OVPN_A_KEYCONF_MAX < OVPN_A_PEER_MAX. Fixes: 203e2bf55990 ("ovpn:

[Openvpn-devel] [M] Change in openvpn[master]: dco: Add support for float notifications

2025-07-18 Thread ordex (Code Review)
Attention is currently required from: flichtenheld, plaisthos, ralf_lici, stipa. ordex has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email ) Change subject: dco: Add support for float notifications ...

[Openvpn-devel] [M] Change in openvpn[master]: dco: Add support for float notifications

2025-07-18 Thread cron2 (Code Review)
Attention is currently required from: flichtenheld, ordex, plaisthos, ralf_lici, stipa. cron2 has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email ) Change subject: dco: Add support for float notifications ...

[Openvpn-devel] [M] Change in openvpn[master]: dco: Add support for float notifications

2025-07-18 Thread cron2 (Code Review)
cron2 has submitted this change. ( http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email ) Change subject: dco: Add support for float notifications .. dco: Add support for float notifications When a peer changes its UDP endpoint

[Openvpn-devel] [PATCH applied] Re: dco: Add support for float notifications

2025-07-18 Thread Gert Doering
So, this was quite a bit of work from the already-+2'ed v3 :-) The patch looks larger than it actually is, because it affects the two low level DCO modules implemented plus the "midlayer" having to update the peer address. Each individual change is fairly straightforward. I have stared at the cod

[Openvpn-devel] [M] Change in openvpn[master]: dco: Add support for float notifications

2025-07-18 Thread cron2 (Code Review)
cron2 has uploaded a new patch set (#7) to the change originally created by ralf_lici. ( http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email ) The following approvals got outdated and were removed: Code-Review+2 by cron2, Code-Review+2 by ordex Change subject: dco: Add support for float notifi

[Openvpn-devel] [M] Change in openvpn[master]: dco: Add support for float notifications

2025-07-18 Thread ralf_lici (Code Review)
Attention is currently required from: flichtenheld, ordex, plaisthos, ralf_lici, stipa. Hello cron2, flichtenheld, ordex, plaisthos, stipa, I'd like you to reexamine a change. Please visit http://gerrit.openvpn.net/c/openvpn/+/1084?usp=email to look at the new patch set (#6). Change subj

[Openvpn-devel] [PATCH v3] Multi-socket: Fix assert triggered by stale peer-id reuse

2025-07-18 Thread Gert Doering
From: Gianmarco De Gregori Fixed a bug where clients using different transport protocols (UDP, TCP) could interfere with each other after a server restart. The issue occurred when a client reused a previously assigned peer-id that was now associated with a different client using a different trans

[Openvpn-devel] [S] Change in openvpn[master]: Multi-socket: Fix assert triggered by stale peer-id reuse

2025-07-18 Thread cron2 (Code Review)
Attention is currently required from: flichtenheld, its_Giaan, plaisthos. cron2 has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1078?usp=email ) Change subject: Multi-socket: Fix assert triggered by stale peer-id reuse .

[Openvpn-devel] [PATCH applied] Re: Multi-socket: Fix assert triggered by stale peer-id reuse

2025-07-18 Thread Gert Doering
So, while I could not trigger the original ASSERT() (GH issue #773) I was able to trigger "server misbehaviour" (TCP client with peer-id #0 being kicked out when a leftover UDP client with (old) peer-id #0 sent data packets). With the patch, these are gone. The explanation makes sense - when chec

[Openvpn-devel] [S] Change in openvpn[master]: Multi-socket: Fix assert triggered by stale peer-id reuse

2025-07-18 Thread cron2 (Code Review)
cron2 has uploaded a new patch set (#4) to the change originally created by its_Giaan. ( http://gerrit.openvpn.net/c/openvpn/+/1078?usp=email ) The following approvals got outdated and were removed: Code-Review+2 by cron2 Change subject: Multi-socket: Fix assert triggered by stale peer-id reuse

[Openvpn-devel] [S] Change in openvpn[master]: Multi-socket: Fix assert triggered by stale peer-id reuse

2025-07-18 Thread cron2 (Code Review)
cron2 has submitted this change. ( http://gerrit.openvpn.net/c/openvpn/+/1078?usp=email ) Change subject: Multi-socket: Fix assert triggered by stale peer-id reuse .. Multi-socket: Fix assert triggered by stale peer-id reuse Fi

[Openvpn-devel] [XS] Change in openvpn[master]: improve float collision logging

2025-07-18 Thread cron2 (Code Review)
Attention is currently required from: flichtenheld, plaisthos, ralf_lici. cron2 has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/1091?usp=email ) Change subject: improve float collision logging .. Pa