openvpn-devel Mailing List for OpenVPN

On 28/05/2019 15:30, Lorenz wrote: > Hi, > > has anyone already succeeded to compile the OpenVPN 3 Linux Client on an arm > architecture? > > I am trying to compile the project on a Raspberry Pi 3 Model B+ running > Raspbian (basically Debian Stretch). But make always fails (see attached log). > To check if there is a problem with Raspbian I also tried compiling inside a > LXC container running Ubuntu 18.04 however the same error occurred. > > GCC version: > gcc (Raspbian 6.3.0-18+rpi1+deb9u1) 6.3.0 20170516 > gcc (Ubuntu/Linaro 7.4.0-1ubuntu1~18.04) 7.4.0 > > uname: > Linux test 4.19.42-v7+ #1219 SMP Tue May 14 21:20:58 BST 2019 armv7l GNU/Linux > > > make finishes without problems on my amd64 machine (tested Debian Stretch and > Ubuntu 18.04). > > Do you have any ideas why the error only occurs on the Raspberry Pi? Hi, Thanks for testing openvpn3-linux! :) Yes, 32 bit is a known issue. It's related to some type deduction challenge C++ provides which is not an issue on 64 bit platforms. So far I've just been ignorant to 32 bit platforms (sorry!), as I didn't think it was that used that much any more - and especially not on ARM. But I also didn't think if RasperryPi ... so this needs to be fixed! If anyone is willing to dive into this issue and try to come up with a patch, I will happily review and merge it. Otherwise I'll have a look at it once I get a chance. It's probably not a big challenge, just need to fully grasp the C++ template complaint and find a fix which also doesn't break 64 bit. Btw ... (and I'm NOT pointing fingers) .. but these kind of questions are usually better suited for openvpn-devel mailing list (on Cc). -- kind regards, David Sommerseth OpenVPN Inc 

 Hi, The Debian 9 (stretch), Ubuntu 16.04 (xenial) and Ubuntu 18.04 (bionic) repositories for OpenVPN 3 Linux is now available! Installing the OpenVPN 3 Linux client ===================================== First ensure that your apt supports the https transport: # apt install apt-transport-https Install the OpenVPN repository key used by the OpenVPN 3 Linux packages # wget https://swupdate.openvpn.net/repos/openvpn-repo-pkg-key.pub # apt-key add openvpn-repo-pkg-key.pub Then you need to install the proper repository. Replace $DISTRO with stretch, xenial or bionic, depending on your Debian/Ubuntu distribution. # wget -O /etc/apt/sources.list.d/openvpn3.list https://swupdate.openvpn.net/community/openvpn3/repos/openvpn3-$DISTRO.list # apt update And finally the openvpn3 package can be installed # apt install openvpn3 Using the OpenVPN 3 Linux client ================================ With all this in place, you can now start VPN tunnels, even as an unprivileged user, using the openvpn2 and openvpn3 command line interfaces: # openvpn2 --config $MY_CONFIGURATION_FILE --verb 6 or # openvpn3 session-start --config $MY_CONFIGURATION_FILE If the configuration profile contains --daemon or you used the openvpn3 approach, you can stop the tunnel like this: # openvpn3 session-manage --config $MY_CONFIGURATION_FILE --disconnect For more information, see the man pages for openvpn2, openvpn3 and openvpn3-linux as starting points. Both openvpn2 and openvpn3 also provides --help screens, and openvpn3 also provides that for each "command" you give to it, like openvpn3 session-manage --help. If you have any questions, issues, comments, suggestions, etc ... please get in touch! -- kind regards, David Sommerseth OpenVPN Inc 

Hi, Here's the summary of the IRC meeting. --- COMMUNITY MEETING Place: #openvpn-meeting on irc.freenode.net Date: Wednesday 29th May 2019 Time: 11:30 CEST (9:30 UTC) Planned meeting topics for this meeting were here: <https://community.openvpn.net/openvpn/wiki/Topics-2019-05-29> Your local meeting time is easy to check from services such as <http://www.timeanddate.com/worldclock> SUMMARY cron2, dazo, lev, mattock, ordex and plaisthos participated in this meeting. --- Talked about the possible DoS attack that forums had a few days ago. Investigation of what happened is still ongoing. It is possible that it was just a misbehaving bot (happens occasionally on community/trac). This possible DoS attack was mitigated by turning on CloudFlare temporarily. This caused some bad blood in the community. We'll continue the discussion once we know exactly what happened. --- Discussed tap-windows6 HLK testing. Mattock will setup a physical HLK environment in his office. Developers can experiment with trying to make tap-windows6 appear as a virtual device, as described in last meeting summary: <https://www.mail-archive.com/ope...@li.../msg18476.html> These two approaches ("make it virtual", "build physical HLK environment") can and will go hand-in-hand. It is known that sgstair and jamallx made all the (mandatory) tests pass using a physical HLK environment, so that route is "guaranteed" to work, unlike the "make it virtual" route. --- Discussed dropping TAP support from Windows. Agreed that it can happen in 2.6 at earliest (if at all). Tons of people are probably using TAP. It was also agreed that if TAP support was ever dropped, it would be best to just migrate to wintun altogether. --- Talked about wintun. Agreed that having wintun support as an option in OpenVPN 2.5 makes perfect sense. Lev is adding wintun support to OpenVPN 2 right now. --- Next mini-hackathon will be arranged Friday next week (7th June) starting in European morning. As usual, it will focus on OpenVPN 2.5 work. --- Dazo is soon going to announce the public availability of openvpn3-linux client v6 apt repositories for Debian and Ubuntu. --- Full chatlog attached. -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc irc freenode net: mattock