We had some discussions on "which routes to tag, which routes to default,
and which tags to use for what" but in the end that's a matter of taste,
not functionality, so Arne gave up and +2'ed this "because it works".

This is considered a bugfix because the current behaviour just makes
--stale-routes-check break non-dynamic routes, thus, the feature can not
be used.

Your patch has been applied to the master and release/2.7 branch (bugfix).

Arguably the bug is in all older releases as well (from the looks it's 
"from day one" with p2mp server and --iroute support), but it's not a
critical security bug, and affects an option not many people use - so
upgrade your server to 2.7+ instead if this hits you :-)

commit 01c8c4c624a7a1405c9afba8ad8d296dee595ee5 (master)
commit a2070e0b170ec8b953bf48236a5e8cb65a5d0921 (release/2.7)
Author: Antonio Quartulli
Date:   Fri Jul 31 22:22:36 2026 +0200

     multi: don't let stale-routes-check delete permanent routes

     Signed-off-by: Antonio Quartulli <[email protected]>
     Acked-by: Arne Schwabe <[email protected]>
     Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1729
     Message-Id: <[email protected]>
     URL: 
https://www.mail-archive.com/[email protected]/msg38102.html
     Signed-off-by: Gert Doering <[email protected]>


--
kind regards,

Gert Doering



_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to