Re: [Openvpn-devel] Minimum Linux Version for OpenVPN 2.4.x

2018-05-22 Thread Gert Doering
Hi,

On Tue, May 22, 2018 at 09:10:10PM +0200, David Sommerseth wrote:
> On 22/05/18 19:32, Marvin wrote:
> > Can someone tell me the minimum Linux version that OpenVPN 2.4.x will build
> > and run on?  We have an older appliance the runs on an older 2.4.31 kernel
> > (cannot be upgraded -- but it's very hardened so really doesn't need to be 
> > for
> > our use.)
> 
> First of all, kernel 2.4.31 is very old - hardened or not.  I might work if
> you don't attempt any IPv6 features at all.  

IPv6 has been there since waaay longer, like, "last century" :-) - so
in regards of "is IPv6 there?", 2.4 is fairly young.

Totally off-topic, though, so I shut up now :-)

> But I do know there has been some
> code changes over the years which is strictly 2.6 kernel and newer; but its
> quite a long time ago so I don't recall exactly what and when.

For OpenVPN 2.4, I think we kicked out some old method to set up Linux
tunnels.  OTOH, that was 2.2.x stuff, if I remember correctly...
(86e2fa5597fd1ad8e010)

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
 Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany g...@greenie.muc.de


signature.asc
Description: PGP signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


Re: [Openvpn-devel] Minimum Linux Version for OpenVPN 2.4.x

2018-05-22 Thread David Sommerseth
On 22/05/18 19:32, Marvin wrote:
> Can someone tell me the minimum Linux version that OpenVPN 2.4.x will build
> and run on?  We have an older appliance the runs on an older 2.4.31 kernel
> (cannot be upgraded -- but it's very hardened so really doesn't need to be for
> our use.)

First of all, kernel 2.4.31 is very old - hardened or not.  I might work if
you don't attempt any IPv6 features at all.  But I do know there has been some
code changes over the years which is strictly 2.6 kernel and newer; but its
quite a long time ago so I don't recall exactly what and when.

IIRC, since OpenVPN 2.2, we have had RHEL 5 as the oldest supported Linux
distribution, which was based on kernel 2.6.18.  With OpenVPN 2.4, that moved
up to RHEL 6 (kernel 2.6.32 baseline).


-- 
kind regards,

David Sommerseth
OpenVPN Inc




signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


Re: [Openvpn-devel] Minimum Linux Version for OpenVPN 2.4.x

2018-05-22 Thread Arne Schwabe
Am 22.05.18 um 19:32 schrieb Marvin:
> Can someone tell me the minimum Linux version that OpenVPN 2.4.x will
> build and run on?  We have an older appliance the runs on an older
> 2.4.31 kernel (cannot be upgraded -- but it's very hardened so really
> doesn't need to be for our use.)

Short answer: We are not sure but pretty old kernel should be okay. But
if it compiles it should run.

Arne

P.S.: Even hardended kernels contain the security problems that are found.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


[Openvpn-devel] Minimum Linux Version for OpenVPN 2.4.x

2018-05-22 Thread Marvin
Can someone tell me the minimum Linux version that OpenVPN 2.4.x will build
and run on?  We have an older appliance the runs on an older 2.4.31 kernel
(cannot be upgraded -- but it's very hardened so really doesn't need to be
for our use.)

Thank you,
Marvin
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel