[Openvpn-devel] a replacement for --tls-remote and verify-cn

2003-10-27 Thread Teemu Kiviniemi
Hi, I ran into problems in using --tls-verify to verify the remote host with --chroot enabled. --tls-verify runs the verify script with system() command, so it assumes that /bin/sh is available. Usually, in a chroot environment, that's not true. I implemented a new config option: --tls-remote x50

Re: [Openvpn-devel] a replacement for --tls-remote and verify-cn

2003-10-27 Thread Teemu Kiviniemi
Mon, 27-10-2003 at 22:49, James Yonan wrote: > One thing that would help me to merge it more easily, is if you could recode > against the current CVS which has advanced since beta12 and includes the Hi, I rewrote the patch against the EXP15 branch in CVS. I tested it briefly and it worked just f

[Openvpn-devel] --tls-cipher documentation bug

2003-10-28 Thread Teemu Kiviniemi
Hi, I think I found a bug in the openvpn(8) man page: > --tls-cipher l > A list l of allowable TLS ciphers separated by | When I use the character '|' to separate the ciphers, OpenSSL complains. The correct format is described in the ciphers(1) man page: > CIPHER LIST FORMAT > The cipher

[Openvpn-devel] OpenVPN --resolv-retry and --chroot problem

2003-10-29 Thread Teemu Kiviniemi
Hi, OpenVPN 1.5beta12 and the CVS version have a problem when --resolv-retry and --chroot are used at the same time. In chroot environment, gethostbyname() can't resolve the remote IP address: Wed Oct 29 17:19:17 2003 13: RESOLVE: Cannot resolve host address: somehost.somedomain: [unknown h_errno

Re: [Openvpn-devel] Re: OpenVPN --resolv-retry and --chroot problem

2003-10-29 Thread Teemu Kiviniemi
Wed, 29-10-2003 at 23:38, James Yonan wrote: > I would rather see this fix accomplished by adding some kind of dummy call > early on in the initialization sequence to trigger the dynamic load of the DNS > library -- but which doesn't touch the functionality of the current DNS name > resolution cod

[Openvpn-devel] TINC and OpenVPN tunnel performance on a Windows client

2003-11-06 Thread Teemu Kiviniemi
Hi, I had some performance problems with TINC running on Windows XP. I had a VPN tunnel running over a wireless network to a Linux VPN server. Web browsing through the tunnel was a pain. Big web pages with lots of pictures loaded very slow compared to a plain network connection. When the VPN cli