Bug#1014376: OpenVPN 2.6 in Debian

2022-07-13 Thread Arne Schwabe
Upstream here: - Dropping of --cipher is not a sudden change in 2.6. OpenVPN 2.5 was already warning about this. Furthermore unless you have a OpenVPN 2.3 peer (quite old 2.4.0 come out 2016) or deliberately configured 2.4+ in a wacky way, server and client will negotiate AES-256-GCM. So

Bug#958296: openvpn 2.4.9 seems to fail loading/reading client certificates

2020-04-21 Thread Arne Schwabe
>> I am attaching my /etc/ssl/openssl.cnf (if for some reason it fails, I will >> paste the contents instead). As far as I know, this is the default >> /etc/ssl/ openssl.cnf file that comes with Debian, except the "MinProtocol" >> parameter, which I had to change for one specific VPN to work (it

Bug#958296: openvpn 2.4.9 seems to fail loading/reading client certificates

2020-04-20 Thread Arne Schwabe
Hey, OpenVPN developer here. >From this output in the original bug report: > Mon Apr 20 11:02:29 2020 OpenSSL: error:14187180:SSL routines:ssl_do_config:bad value > Mon Apr 20 11:02:29 2020 OpenSSL: error:0909006C:PEM routines:get_name:no start line it looks like there is still an error on the

Bug#353161: isc-dhcp-server: RX/TX checksum offloading for virtual causes ISC DHCP Server to fail

2012-08-17 Thread Arne Schwabe
Package: isc-dhcp-server Version: 4.1.ESV-R4-0ubuntu5.2 Followup-For: Bug #353161 Dear Maintainer, This also happens in a kvm setup if both server and client are kvm machines. The problem is very simple. To support NIC offloading and conserve CPU time the correct UDP check is only generated