openvpn-devel Mailing List for OpenVPN

Hi, Just an FYI, but if the first time you run the GUI you don't run it as administrator - you get an error message about registry access (failing), and then the program exiting. If the GUI has to be run as Administrator, it would be good to configure it that way. Thanks, ... Russell 

Hi, I have an issue running OpenVPN 2.3 (occurs with both Alpha 1 and 2, but likely earlier versions I'm guessing). I can connect to a Linux server just fine, but when I try to connect to OpenVPN embedded in my router (Tomato firmware, using OpenVPN 2.2.2), the client (on Windows) crashes (and the application exits) on connect. Here is what happens in the log right before the client aborts and crashes, Thu Jul 05 17:13:49 2012 MANAGEMENT: >STATE:1341526429,GET_CONFIG,,, Thu Jul 05 17:13:51 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Thu Jul 05 17:13:51 2012 PUSH: Received control message: 'PUSH_REPLY,route-gateway dhcp,ping 15,ping-restart 60' Thu Jul 05 17:13:51 2012 OPTIONS IMPORT: timers and/or timeouts modified Thu Jul 05 17:13:51 2012 OPTIONS IMPORT: route-related options modified Thu Jul 05 17:13:51 2012 open_tun, tt->ipv6=0 Thu Jul 05 17:13:51 2012 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{47E4A2F0-3A09-454C-A5A0-A5327B8D843E}.tap Thu Jul 05 17:13:51 2012 TAP-Windows Driver Version 9.9 Thu Jul 05 17:13:51 2012 Successful ARP Flush on interface [21] {47E4A2F0-3A09-454C-A5A0-A5327B8D843E} BTW, if I don't run the Windows GUI as Administrator, here is what happens, Thu Jul 05 17:19:19 2012 MANAGEMENT: >STATE:1341526759,GET_CONFIG,,, Thu Jul 05 17:19:20 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Thu Jul 05 17:19:20 2012 PUSH: Received control message: 'PUSH_REPLY,route-gateway dhcp,ping 15,ping-restart 60' Thu Jul 05 17:19:20 2012 OPTIONS IMPORT: timers and/or timeouts modified Thu Jul 05 17:19:20 2012 OPTIONS IMPORT: route-related options modified Thu Jul 05 17:19:20 2012 open_tun, tt->ipv6=0 Thu Jul 05 17:19:20 2012 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{47E4A2F0-3A09-454C-A5A0-A5327B8D843E}.tap Thu Jul 05 17:19:20 2012 TAP-Windows Driver Version 9.9 Thu Jul 05 17:19:20 2012 NOTE: FlushIpNetTable failed on interface [21] {47E4A2F0-3A09-454C-A5A0-A5327B8D843E} (status=5) : Access is denied. Thoughts? Thanks! ... Russell 

On 05/07/12 11:17, Arne Schwabe wrote: > Some of the MANAGEMENT_QUERY_REMOTE were actually needed. Put #ifdef ENABLE_MANAGMENT in their place > > Signed-off-by: Arne Schwabe <ar...@rf...> > --- > src/openvpn/init.c | 7 ++++++- > 1 files changed, 6 insertions(+), 1 deletions(-) ACK. Applied to master. commit cf93f0e0a65d66ed57f24efb7fbd96dc455b3732 Author: Arne Schwabe <ar...@rf...> Date: Thu Jul 5 11:17:15 2012 +0200 Fix compiling with --disable-management Signed-off-by: Arne Schwabe <ar...@rf...> Acked-by: David Sommerseth <da...@re...> Message-Id: 134...@rf... Signed-off-by: David Sommerseth <da...@us...> kind regards, David Sommerseth 

Some of the MANAGEMENT_QUERY_REMOTE were actually needed. Put #ifdef ENABLE_MANAGMENT in their place Signed-off-by: Arne Schwabe <ar...@rf...> --- src/openvpn/init.c | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) diff --git a/src/openvpn/init.c b/src/openvpn/init.c index f67745f..f86fc38 100644 --- a/src/openvpn/init.c +++ b/src/openvpn/init.c @@ -206,6 +206,7 @@ management_callback_http_proxy_fallback_cmd (void *arg, const char *server, cons #endif +#ifdef ENABLE_MANAGEMENT static bool management_callback_remote_cmd (void *arg, const char **p) { @@ -285,6 +286,7 @@ ce_management_query_remote (struct context *c, const char *remote_ip_hint) gc_free (&gc); return ret; } +#endif /* ENABLE_MANAGEMENT */ /* * Initialize and possibly randomize connection list. @@ -396,7 +398,7 @@ next_connection_entry (struct context *c) ce_defined = false;	c->options.ce = *ce; - +#ifdef ENABLE_MANAGEMENT	if (ce_defined && management && management_query_remote_enabled(management)) { /* allow management interface to override connection entry details */ @@ -404,6 +406,7 @@ next_connection_entry (struct context *c) if (IS_SIG (c)) break; } else +#endif	if (remote_ip_hint) c->options.ce.remote = remote_ip_hint; @@ -3168,7 +3171,9 @@ init_management_callback_p2p (struct context *c) #if HTTP_PROXY_FALLBACK cb.http_proxy_fallback_cmd = management_callback_http_proxy_fallback_cmd; #endif +#ifdef ENABLE_MANAGEMENT cb.remote_cmd = management_callback_remote_cmd; +#endif management_set_callback (management, &cb); } #endif -- 1.7.7.5 (Apple Git-26) 

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 04/07/12 15:06, Alon Bar-Lev wrote: [...snip...] > Please apply the patches for easy-rsa that were deleted by David, > as in current shape it cannot be installed nor packaged. This > should be done in the course of the alpha cycle so user may keep > functionality. - From what I can see, those patches should be in-place. I see Eric added 4 of your patches about a week ago, or are there more patches lacking? Anyhow, Eric is the upstream maintainer of easy-rsa now, so I'll let him be in charge of that if something is missing. > After doing so, please publish the tarball results of "make dist". Something wrong here with this one? (Except of the version string, if we're nit-picking) <https://github.com/OpenVPN/easy-rsa/downloads> kind regards, David Sommerseth > On Wed, Jul 4, 2012 at 3:58 PM, Samuli Seppänen > <sa...@op...> wrote: >> The OpenVPN community project team is proud to release OpenVPN >> 2.3_alpha2. It can be downloaded from here: >> >> <http://openvpn.net/index.php/open-source/downloads.html> >> >> The largest change in OpenVPN 2.3_alpha2 is the split into >> several subprojects (thanks go to Alon Bar-Lev): >> >> - openvpn (the core project) - tap-windows (Windows TAP-driver) - >> easy-rsa (PKI management package) - openvpn-build (external >> buildsystem) - "generic": cross-compile on *NIX platforms (e.g. >> Linux -> Windows) - "msvc": build using MSVC on Windows - >> "windows-nsis": generate Windows installers on *NIX >> >> These changes have resulted in a number of user-visible changes: >> >> - Separate 32- and 64-bit installers for Windows (see >> INSTALL-win32.txt) - Old "domake-win" and Python-based >> buildsystems have been removed - "easy-rsa" and "tap-windows" >> removed from the OpenVPN Git tree - All Windows executables and >> libraries cross-compiled with mingw_w64 and signed - Rewrite of >> the openvpn autotools buildsystem >> >> In addition, there a number of changes not related to the above: >> >> - Many bugfixes - Stabilized the PolarSSL support - Enabled IPv6 >> support on OSX - General code cleanup - Improved UTF-8 support in >> Windows >> >> Note that a few changes have been made which may affect existing >> installations. A list of new features and the changelog are >> available here: >> >> <https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23> >> >> The changelog is also attached to this email. >> >> For generic help use these support channels: >> >> - Official documentation: >> <http://openvpn.net/index.php/open-source/documentation/howto.html> >> >> - - Wiki: <https://community.openvpn.net> >> - Forums: <https://forums.openvpn.net> - User mailing list: >> <http://sourceforge.net/mail/?group_id=48978> - User IRC channel: >> #openvpn at irc.freenode.net >> >> Please report bugs and ask development questions here: >> >> - Bug tracker and Wiki: <https://community.openvpn.net> - >> Developer mailing list: >> <http://sourceforge.net/mail/?group_id=48978> - Developer IRC >> channel: #openvpn-devel at irc.freenode.net (requires Freenode >> registration) >> >> -- Samuli Seppänen Community Manager OpenVPN Technologies, Inc >> >> irc freenode net: mattock >> >> ------------------------------------------------------------------------------ >> >> Live Security Virtual Conference >> Exclusive live event will cover all the ways today's security >> and threat landscape has changed and how IT managers can respond. >> Discussions will include endpoint security, mobile security and >> the latest in malware threats. >> http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ >> _______________________________________________ Openvpn-users >> mailing list Ope...@li... >> https://lists.sourceforge.net/lists/listinfo/openvpn-users >> > > ------------------------------------------------------------------------------ > > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. > Discussions will include endpoint security, mobile security and the > latest in malware threats. > http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ Openvpn-devel > mailing list Ope...@li... > https://lists.sourceforge.net/lists/listinfo/openvpn-devel > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/1WPIACgkQDC186MBRfrpDpACfaGrTUdyvAQbYQ6LERNA+3ODt ujcAmwT1UHXC2OLStLxaFCYWGCcxQy3z =RDID -----END PGP SIGNATURE-----