Attention is currently required from: cron2, flichtenheld, its_Giaan.

plaisthos has posted comments on this change by its_Giaan. ( 
http://gerrit.openvpn.net/c/openvpn/+/1089?usp=email )

Change subject: multipeer: introduce asymmetric peer-id
......................................................................


Patch Set 7: Code-Review-2

(1 comment)

Patchset:

PS7: 
So this seem to not work correctly in P2p mode.

peer a: openvpn --port 1195 --tls-server --ifconfig 10.173.0.1 255.255.255.0 
--topology subnet  --topology subnet --cert ~/nemesis.pem  --key ~/nemesis.pem  
 --dev tun --verb 4  --tun-mtu 1400 --config ~/fp   --disable-dco

peer b: openvpn --verb 4  --dev tun  --remote nemesis.fritz.box 1195 --config 
~/ovpn/confs/fp  --tls-client --cert ~/ovpn/confs/styx-ed25519.pem --key 
~/ovpn/confs/styx-ed25519.pem --disable-dco --ifconfig  10.173.0.2 255.255.255.0


The fp config just has the fingerpints in it.

And the negotiated peer ids just don't make sense. It should be just the same 
ids with rx and tx swapped but this is is not really that.

2025-11-10 15:48:41 us=782130 Data Channel: cipher 'AES-256-GCM', rx_peer-id: 
7762030, tx_peer-id: 5695615

2025-11-10 14:48:41 us=533055 Data Channel: cipher 'AES-256-GCM', rx_peer-id: 
7762030, tx_peer-id: 14459670

Also it seems to *always* use 7762030 in my tests.



--
To view, visit http://gerrit.openvpn.net/c/openvpn/+/1089?usp=email
To unsubscribe, or for help writing mail filters, visit 
http://gerrit.openvpn.net/settings?usp=email

Gerrit-MessageType: comment
Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I0a13ee90b6706acf20eabcee3bab3f2dff639bf9
Gerrit-Change-Number: 1089
Gerrit-PatchSet: 7
Gerrit-Owner: its_Giaan <[email protected]>
Gerrit-Reviewer: cron2 <[email protected]>
Gerrit-Reviewer: flichtenheld <[email protected]>
Gerrit-Reviewer: plaisthos <[email protected]>
Gerrit-CC: openvpn-devel <[email protected]>
Gerrit-Attention: its_Giaan <[email protected]>
Gerrit-Attention: cron2 <[email protected]>
Gerrit-Attention: flichtenheld <[email protected]>
Gerrit-Comment-Date: Mon, 10 Nov 2025 14:49:46 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to