[Openvpn-devel] implement dynamic search for first-free tun/tap on Solaris

2012-06-07 Thread Gert Doering
Hi, Solaris buildslave failed to test, because "--dev tun" did not work if tun0 was already in use (didn't hunt to tun1). Fixed, tested on OpenSolaris 10 / i386 - but the code is straightforward, so it should work on "standard Solaris" and "sparc" as well. Managed to get it to hunt to tun2 just

[Openvpn-devel] another t_client.sh patch...

2012-06-07 Thread Gert Doering
From b5b301591ef0804084bd661d090d36aa44100101 Mon Sep 17 00:00:00 2001 From: Gert Doering List-Post: openvpn-devel@lists.sourceforge.net Date: Thu, 7 Jun 2012 17:35:53 +0200 Subject: [PATCH] t_client.sh - fix for iproute2, print summary line Yet another postprocess-output fix for iproute2 (somet

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/06/12 13:41, Samuli Seppänen wrote: > >> Hi, >> >> On Thu, Jun 07, 2012 at 11:48:37AM +0200, Paul Bakker wrote: >>> Agreed as well.. >> So what...? 1.1.4 or "1.1.0, and put the responsibility on the >> distro"? >> > I think this question is r

Re: [Openvpn-devel] [PATCH 4/8] Explain that route-nopull also causes the client to ignore dhcp options.

2012-06-07 Thread David Sommerseth
On 02/06/12 15:03, Arne Schwabe wrote: > > Signed-off-by: Arne Schwabe > --- > doc/openvpn.8 |3 ++- > src/openvpn/options.c |2 +- > 2 files changed, 3 insertions(+), 2 deletions(-) Applied to master. commit 97235cc7077630004e11d6d44862c3bb7e49a40e Author: Arne Schwabe List-

Re: [Openvpn-devel] [PATCH 2/8] Add the query to the error message. Makes the diagnose what went wrong from logs easier.

2012-06-07 Thread David Sommerseth
On 02/06/12 15:03, Arne Schwabe wrote: > > Signed-off-by: Arne Schwabe > --- > src/openvpn/console.c |2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > Applied to master. commit 803613de394a0b25374797d001d4a2cdea8b593e Author: Arne Schwabe List-Post: openvpn-devel@lists.sourcef

Re: [Openvpn-devel] [PATCH 5/8] Add the name of the context where option is not allowed to the error message.

2012-06-07 Thread David Sommerseth
On 02/06/12 15:03, Arne Schwabe wrote: > Changes > > Options error: option 'dhcp-option' cannot be used in this context > > to > > P:Options error: option 'dhcp-option' cannot be used in this context > ([PUSH-OPTIONS]) > > Signed-off-by: Arne Schwabe > --- > src/openvpn/options.c |5 +++-

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Samuli Seppänen
> Hi, > > On Thu, Jun 07, 2012 at 11:48:37AM +0200, Paul Bakker wrote: >> Agreed as well.. > So what...? 1.1.4 or "1.1.0, and put the responsibility on the distro"? > I think this question is related to our project policies, not just to PolarSSL support. Do we want to try to protect packagers and

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Gert Doering
Hi, On Thu, Jun 07, 2012 at 12:36:51PM +0200, Paul Bakker wrote: > On 7-6-2012 12:25, Gert Doering wrote: > > So what...? 1.1.4 or "1.1.0, and put the responsibility on the distro"? > 1.1.0 and put the respsonsibility on the distro! Ok - so I'll ACK the patch Alon has posted as well. Thanks. >

Re: [Openvpn-devel] [PATCH] build: support =polarssl-1.1.0

2012-06-07 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/06/12 11:37, Alon Bar-Lev wrote: > Repoted-by: Samuli Seppänen Signed-off-by: > Alon Bar-Lev --- configure.ac |2 +- 1 > files changed, 1 insertions(+), 1 deletions(-) > Applied to the master branch. I fixed a typo in the commit message a

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Paul Bakker
On 7-6-2012 12:25, Gert Doering wrote: > > So what...? 1.1.4 or "1.1.0, and put the responsibility on the distro"? 1.1.0 and put the respsonsibility on the distro! > > (How's the work on blowfish going? Only semi-joking, as I'd really like > to run cross-ssl-library client tests on the buildslav

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Gert Doering
Hi, On Thu, Jun 07, 2012 at 11:48:37AM +0200, Paul Bakker wrote: > Agreed as well.. So what...? 1.1.4 or "1.1.0, and put the responsibility on the distro"? (How's the work on blowfish going? Only semi-joking, as I'd really like to run cross-ssl-library client tests on the buildslaves, without

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Paul Bakker
Agreed as well.. On 7-6-2012 11:42, Adriaan de Jong wrote: >> -Original Message- >> From: Frank de Brabander [mailto:braban...@fox-it.com] >> Sent: donderdag 7 juni 2012 11:36 >> To: Samuli Seppänen; openvpn-devel@lists.sourceforge.net >> Subject: Re: [Openvpn-devel] PolarSSL 1.1.0 support

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Paul Bakker
I'd go for >= 1.1.4 Since 1.1.2 does not handle empty packets correctly. On 7-6-2012 11:35, Frank de Brabander wrote: > Maybe this should actually be changed to >= 1.1.2, since there is a > security issue with versions from 0.99-pre4 up to and including PolarSSL > 1.1.1. > > On 07-06-12 11:24, "S

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Gert Doering
Hi, On Thu, Jun 07, 2012 at 11:35:58AM +0200, Frank de Brabander wrote: > Maybe this should actually be changed to >= 1.1.2, since there is a > security issue with versions from 0.99-pre4 up to and including PolarSSL > 1.1.1. If the PolarSSL author says so, we should follow :-) > >I noticed that

Re: [Openvpn-devel] [PATCH] build: support =polarssl-1.1.0

2012-06-07 Thread Adriaan de Jong
Ah, it was an off-by-one, that's why I missed it. Ack! Adriaan > -Original Message- > From: Samuli Seppänen [mailto:sam...@openvpn.net] > Sent: donderdag 7 juni 2012 11:54 > To: Alon Bar-Lev > Cc: openvpn-devel@lists.sourceforge.net > Subject: Re: [Openvpn-devel] [PATCH] build: support

Re: [Openvpn-devel] [PATCH] build: support =polarssl-1.1.0

2012-06-07 Thread Samuli Seppänen
Il 07.06.2012 12:37, Alon Bar-Lev ha scritto: > Repoted-by: Samuli Seppänen > Signed-off-by: Alon Bar-Lev > --- > configure.ac |2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/configure.ac b/configure.ac > index 339164f..9511317 100644 > --- a/configure.ac > +++ b/c

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Samuli Seppänen
>> -Original Message- >> From: Frank de Brabander [mailto:braban...@fox-it.com] >> Sent: donderdag 7 juni 2012 11:36 >> To: Samuli Seppänen; openvpn-devel@lists.sourceforge.net >> Subject: Re: [Openvpn-devel] PolarSSL 1.1.0 support? >> >> Maybe this should actually be changed to >= 1.1.2,

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Adriaan de Jong
> -Original Message- > From: Frank de Brabander [mailto:braban...@fox-it.com] > Sent: donderdag 7 juni 2012 11:36 > To: Samuli Seppänen; openvpn-devel@lists.sourceforge.net > Subject: Re: [Openvpn-devel] PolarSSL 1.1.0 support? > > Maybe this should actually be changed to >= 1.1.2, since t

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Alon Bar-Lev
Hello, Build system should only care about the interface, not the "quality" of the dependency. So if we are built OK with >=1.1.0 than this should be the boundary. Thanks, Alon. On Thu, Jun 7, 2012 at 12:35 PM, Frank de Brabander wrote: > Maybe this should actually be changed to >= 1.1.2, since t

[Openvpn-devel] [PATCH] build: support =polarssl-1.1.0

2012-06-07 Thread Alon Bar-Lev
Repoted-by: Samuli Seppänen Signed-off-by: Alon Bar-Lev --- configure.ac |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/configure.ac b/configure.ac index 339164f..9511317 100644 --- a/configure.ac +++ b/configure.ac @@ -755,7 +755,7 @@ if test "${with_crypto_library}"

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Adriaan de Jong
> -Original Message- > From: Alon Bar-Lev [mailto:alon.bar...@gmail.com] > Sent: donderdag 7 juni 2012 11:33 > To: Samuli Seppänen > Cc: openvpn-devel@lists.sourceforge.net > Subject: Re: [Openvpn-devel] PolarSSL 1.1.0 support? > > On Thu, Jun 7, 2012 at 12:24 PM, Samuli Seppänen > wrote:

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Frank de Brabander
Maybe this should actually be changed to >= 1.1.2, since there is a security issue with versions from 0.99-pre4 up to and including PolarSSL 1.1.1. On 07-06-12 11:24, "Samuli Seppänen" wrote: >Hi, > >I noticed that my Ubuntu 10.04 and 12.04 buildslaves which had PolarSSL >1.1.0 failed build duri

Re: [Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Alon Bar-Lev
On Thu, Jun 7, 2012 at 12:24 PM, Samuli Seppänen wrote: > Hi, > > I noticed that my Ubuntu 10.04 and 12.04 buildslaves which had PolarSSL > 1.1.0 failed build during the configure phase: > > checking polarssl version... configure: error: invalid polarssl version > > Updating to PolarSSL 1.1.1 or l

[Openvpn-devel] PolarSSL 1.1.0 support?

2012-06-07 Thread Samuli Seppänen
Hi, I noticed that my Ubuntu 10.04 and 12.04 buildslaves which had PolarSSL 1.1.0 failed build during the configure phase: checking polarssl version... configure: error: invalid polarssl version Updating to PolarSSL 1.1.1 or later solves this issue. However, commit 1d92d06dca5ac says "Removed su