[Openvpn-devel] [PATCH v2 2/8] windows: properly configure TAP driver when no IPv4 is configured

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli Signed-off-by: Antonio Quartulli --- src/openvpn/forward.c | 4 +++- src/openvpn/tun.c | 24 +--- 2 files changed, 20 insertions(+), 8 deletions(-) diff --git a/src/openvpn/forward.c b/src/openvpn/forward.c index 7d9a338d..51e43c28 100644 --- a/

[Openvpn-devel] [PATCH v2 1/8] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli This change ensures that an interface is properly brought up even when only IPv6 settings are configured/pushed. Trac: #208 Cc: Gert Doering Signed-off-by: Antonio Quartulli --- src/openvpn/tun.c | 1118 - src/openvpn/tun.h |

[Openvpn-devel] [PATCH v2 6/8] pool: add support for ifconfig-pool-persist with IPv6 only

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli Without altering the pool logic, this patch enables using a persistent IP pool also when the server is configured with IPv6 only. Signed-off-by: Antonio Quartulli --- src/openvpn/options.c | 7 ++- src/openvpn/pool.c| 136 --

[Openvpn-devel] [PATCH v2 8/8] options: enable IPv4 redirection logic only if really required

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli If no IPv4 redirection flag is set, do not enable the IPv4 redireciton logic at all so that it won't bother adding any useless IPv4 route. At the same the warning message (for both IPv4 and IPv6) have been modified by removing the tunnel interface name, as routes being ad

[Openvpn-devel] [PATCH v2 7/8] route: warn on IPv4 routes installation when no IPv4 is configured

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli Signed-off-by: Antonio Quartulli --- src/openvpn/route.c | 10 +- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/src/openvpn/route.c b/src/openvpn/route.c index 8990a986..64fd08c0 100644 --- a/src/openvpn/route.c +++ b/src/openvpn/route.c @@ -981,7

[Openvpn-devel] [PATCH v2 5/8] make server capable of starting with an IPv6-only tunnel

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli Due to the current logic it is not possible for a server to create an IPv6-only tunnel, because OpenVPN mandates the existance of an IPv4 configuration (even if fake). This change relaxes this constraint and allows servers to bring up tunnels without any IPv4 setting at a

[Openvpn-devel] [PATCH v2 0/5] Allow IPv6-only tunnels

2018-06-07 Thread Antonio Quartulli
This patchset allows clients and servers to work with a tunnel configured with IPv6 only. Patch 3 is a mere cosmetic change and could be merged regardless of the rest. With this change a server can be configured by using only the '--server-ipv6' directive. This will result in clients receiving on

[Openvpn-devel] [PATCH v2 4/8] pool: allow to configure an IPv6-only ifconfig-pool

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli With this change a server is allowed to allocate an IPv6-only pool. This is required to make it capable of managing an IPv6-only tunnel. Trac: #208 Cc: Gert Doering Signed-off-by: Antonio Quartulli --- src/openvpn/multi.c | 7 ++- src/openvpn/pool.c | 139 ++

[Openvpn-devel] [PATCH v2 3/8] pool: convert pool 'type' to enum

2018-06-07 Thread Antonio Quartulli
From: Antonio Quartulli The pool 'type' member is actually an enumered type, therefore declare it as 'enum' to improve static code analisys and readability. Signed-off-by: Antonio Quartulli --- src/openvpn/pool.c | 2 +- src/openvpn/pool.h | 11 +++ 2 files changed, 8 insertions(+), 5

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Selva Nair
Hi, > > [*] Topology subnet uses ip, nework and netmask, while net30 passes in > the > > second IP of the /30 in network as "netmask". The two ioctls interprets > > their parameters differently such that in the end only valid ARP packets > > get a response from the driver ! > > Is ARP still to be

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Antonio Quartulli
Hi, On 08/06/18 09:00, Selva Nair wrote: > It works now though not thoroghly tested. > > I just noticed this change: > > diff --git a/src/openvpn/tun.c b/src/openvpn/tun.c > index 8509d48..d183aea 100644 > --- a/src/openvpn/tun.c > +++ b/src/openvpn/tun.c > @@ -5718,7 +5718,10 @@ open_tun(const

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Selva Nair
Hi, On Thu, Jun 7, 2018 at 1:29 PM Antonio Quartulli wrote: > On 08/06/18 01:05, Selva Nair wrote: > > Hi, > > > > On Thu, Jun 7, 2018 at 12:57 PM, Gert Doering > wrote: > >> Hi, > >> > >> On Thu, Jun 07, 2018 at 12:14:51PM -0400, Selva Nair wrote: > >>> Note: All that said, I can't seem to conn

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Gert Doering
Hi, On Thu, Jun 07, 2018 at 01:05:19PM -0400, Selva Nair wrote: > It happens because the patch skips CONFIG_TUN ioctl when v4 address is > not set. I think that skips some initialization steps. I had expected > the patch to setup the driver using 0/0/0 as the addres/mask/net as we > discussed earl

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Antonio Quartulli
On 08/06/18 01:05, Selva Nair wrote: > Hi, > > On Thu, Jun 7, 2018 at 12:57 PM, Gert Doering wrote: >> Hi, >> >> On Thu, Jun 07, 2018 at 12:14:51PM -0400, Selva Nair wrote: >>> Note: All that said, I can't seem to connect to the server via ipv6 >>> when there is no v4 address. tracert fails befor

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Selva Nair
Hi, On Thu, Jun 7, 2018 at 12:57 PM, Gert Doering wrote: > Hi, > > On Thu, Jun 07, 2018 at 12:14:51PM -0400, Selva Nair wrote: >> Note: All that said, I can't seem to connect to the server via ipv6 >> when there is no v4 address. tracert fails before the first hop. >> v6 does work when ifconfig i

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Selva Nair
Hi, Failed to respond to some other points in the last reply: >> >> Did some quick tests and this seems to work quite well (but see the >> note at the bottom): >> >> - v4 routes via tun just fail with a warning which is good (our route >> errors not being FATAL pays off here) >> - v4 routes via n

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Gert Doering
Hi, On Thu, Jun 07, 2018 at 12:14:51PM -0400, Selva Nair wrote: > Note: All that said, I can't seem to connect to the server via ipv6 > when there is no v4 address. tracert fails before the first hop. > v6 does work when ifconfig is not filtered out. This "should not happen". v6 should work no

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Selva Nair
Hi, > >> Note: All that said, I can't seem to connect to the server via ipv6 >> when there is no v4 address. tracert fails before the first hop. >> v6 does work when ifconfig is not filtered out. >> >> One difference from my earlier test using your previous >> version with the minor change to allo

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Antonio Quartulli
Hi Selva, thanks for testing this branch again! See below: On 08/06/18 00:14, Selva Nair wrote: > Hi, > > On Thu, Jun 7, 2018 at 1:51 AM, Antonio Quartulli wrote: >> >> Hi Selva, >> >> I have tried to account most of your comments, but something might still >> be off. Building openvpn for Wind

Re: [Openvpn-devel] [PATCH 1/5] tun: ensure interface can be configured with IPv6 only

2018-06-07 Thread Selva Nair
Hi, On Thu, Jun 7, 2018 at 1:51 AM, Antonio Quartulli wrote: > > Hi Selva, > > I have tried to account most of your comments, but something might still > be off. Building openvpn for Windows might need some time here as I > don't have the entire environment ready yet. > > Would you mind giving my

[Openvpn-devel] TAP-Windows MSI packages

2018-06-07 Thread Simon Rozman
Hi! Finally, I have some MSI material to share with community. My playground is at https://github.com/rozmansi/tap-windows6. It proved a lot more work than I estimated back in Karlsruhe. The core problem was driver install and TAP interface creation within the MSI package. Well actually, th