Re: [Openvpn-devel] [openvpn-devel] Forum upgrade problems

2017-09-15 Thread fragmentux
On 14/09/17 17:29, Eric Crist wrote: I will look into these. I'm surprised [oconf] is broken, since I wrote that myself and it is not a normal part of phpBB. Is the "[oconf=x]" source 'open' ? the "[code]" shit is particularly annoying for logs .. Eric Crist On Sep 14, 2017, at 6:36 A

[Openvpn-devel] [PATCH v2] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread selva . nair
From: Selva Nair In particular, this eliminates the message that says "explicit-exit-notify is ignored by previous blocks" when the option is pushed. Note: pull_mode is identified as "allowed & OPT_P_PULL_MODE" matching with the definition in add_options(). Reported by: Eike Lohmann e.lohm...@

Re: [Openvpn-devel] [PATCH] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread Selva
Hi, On Fri, Sep 15, 2017 at 12:14 PM, Gert Doering wrote: > Hi, > > On Fri, Sep 15, 2017 at 11:53:59AM -0400, Selva wrote: > > No it doesn't change any functionality. By not including OPT_P_CONNECTION > > in the mask sent to verify permission the previous connection blacks > check > > is disable

Re: [Openvpn-devel] Per client cipher

2017-09-15 Thread Gert Doering
Hi, On Fri, Sep 15, 2017 at 07:29:30PM +0300, Alex K wrote: > Sory, just found out from man openvpn and the option is --ncp-disable. sorry, my fault. Should have double-checked :-) but that's the option. gert -- USENET is *not* the non-clickable part of WWW!

Re: [Openvpn-devel] [Openvpn-users] OpenVPN per client cipher

2017-09-15 Thread Alex K
Thanx Gert. Just put --ncp-disable on client side and server seems to respect the cipher defined on ccd. I will be following up on devel for such type of issues. Thanx, Alex On Fri, Sep 15, 2017 at 6:35 PM, Gert Doering wrote: > Hi, > > (taking this over to openvpn-devel, as this is not so muc

Re: [Openvpn-devel] Per client cipher

2017-09-15 Thread Alex K
Sory, just found out from man openvpn and the option is --ncp-disable. Thanx, Alex On Fri, Sep 15, 2017 at 7:23 PM, Alex K wrote: > Hi All, > > I am testing per client cipher with 2.4.3-1 and patch from > https://community.openvpn.net/openvpn/ticket/845. > > As per Gert feedback, seems that wh

[Openvpn-devel] Per client cipher

2017-09-15 Thread Alex K
Hi All, I am testing per client cipher with 2.4.3-1 and patch from https://community.openvpn.net/openvpn/ticket/845. As per Gert feedback, seems that when the client has same openvpn version 2.4.3-1, I have to disable ncp (using --disable-ncp). Do I need to apply additional patch to support --di

Re: [Openvpn-devel] [Openvpn-users] OpenVPN per client cipher

2017-09-15 Thread Steffan Karger
On 15-09-17 17:35, Gert Doering wrote: > Thanks for testing the per-client ccd cipher patch - this is definitely > useful. Interaction with NCP needs a bit more thought, it seems. Yeah. Until now, we've always said "NCP trumps --cipher". I guess the question is whether 'cipher' in a CCD file sh

Re: [Openvpn-devel] [PATCH] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread Gert Doering
Hi, On Fri, Sep 15, 2017 at 11:53:59AM -0400, Selva wrote: > No it doesn't change any functionality. By not including OPT_P_CONNECTION > in the mask sent to verify permission the previous connection blacks check > is disabled. And this is done only when pull_mode is True. I was totally misreadin

Re: [Openvpn-devel] [PATCH] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread Selva
On Fri, Sep 15, 2017 at 11:44 AM, Arne Schwabe wrote: > On 9/15/17 6:41 AM, selva.n...@gmail.com wrote: > > From: Selva Nair > > > > Eliminate the confusing message that says "explicit-exit-notify is > ignored by > > previous blocks" when the option is pushed. > > Reported by: Eike Lohmann e.lo

Re: [Openvpn-devel] [PATCH] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread Selva
On Fri, Sep 15, 2017 at 11:40 AM, Gert Doering wrote: > Hi, > > On Fri, Sep 15, 2017 at 12:41:03AM -0400, selva.n...@gmail.com wrote: > > From: Selva Nair > > > > Eliminate the confusing message that says "explicit-exit-notify is > ignored by > > previous blocks" when the option is pushed. > >

Re: [Openvpn-devel] [PATCH] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread Arne Schwabe
On 9/15/17 6:41 AM, selva.n...@gmail.com wrote: > From: Selva Nair > > Eliminate the confusing message that says "explicit-exit-notify is ignored by > previous blocks" when the option is pushed. > Reported by: Eike Lohmann e.lohm...@ic3s.de > https://www.mail-archive.com/openvpn-users@lists.sourc

Re: [Openvpn-devel] [PATCH] Check whether in pull_mode before warning about previous connection blocks

2017-09-15 Thread Gert Doering
Hi, On Fri, Sep 15, 2017 at 12:41:03AM -0400, selva.n...@gmail.com wrote: > From: Selva Nair > > Eliminate the confusing message that says "explicit-exit-notify is ignored by > previous blocks" when the option is pushed. > Reported by: Eike Lohmann e.lohm...@ic3s.de > https://www.mail-archive.c

Re: [Openvpn-devel] [Openvpn-users] OpenVPN per client cipher

2017-09-15 Thread Gert Doering
Hi, (taking this over to openvpn-devel, as this is not so much a "user" question if it concerns ongoing development patches :) ) On Fri, Sep 15, 2017 at 06:04:27PM +0300, Alex K wrote: > I built openvpn 2.4.3-1 on server using patch also to allow for per client > cipher through ccd file. > I took