Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-25 Thread Selva Nair
Hi Thanks for the comments. On Fri, Dec 25, 2020 at 3:03 PM Gert Doering wrote: > Hi, > > On Sun, Dec 20, 2020 at 07:31:42PM -0500, Selva Nair wrote: > > Here is the link again. > > https://github.com/selvanair/openvpn-gui/releases/tag/v11-echo-msg > > I got no feedback then nor now. > > I

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-25 Thread Gert Doering
Hi, On Sun, Dec 20, 2020 at 07:31:42PM -0500, Selva Nair wrote: > Here is the link again. > https://github.com/selvanair/openvpn-gui/releases/tag/v11-echo-msg > I got no feedback then nor now. I have stared at the code a bit, and it seems to make sense. The part "store a digest + timestamp, and

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-25 Thread Gert Doering
Hi, On Sun, Dec 20, 2020 at 07:06:57PM +, Greg Cox wrote: > So IMO, 1-2 are fundamental, 3-5 are > wishlist/consideration/extensions/ideas, use or ignore as you see fit: > * Make the ability for receiving messages on a client as described. > Enabled by default, maybe selectively disable-able

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-25 Thread Gert Doering
Hi, On Fri, Dec 25, 2020 at 12:08:16PM -0500, Selva Nair wrote: > I find it hard to imagine why everyone seems to be avoiding "echo" and > trying to find alternatives. Well, in the beginning of this thread, having all forgotten about the previous thread (still puzzling me) I only had the nagging

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-25 Thread Gert Doering
Hi, On Mon, Dec 21, 2020 at 12:22:20PM -0500, Selva Nair wrote: > > I'm sure the thread is still sitting in my mailbox... will go looking for > > it today. > > For those who have lost the original threads: > >

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-25 Thread Selva Nair
Hi, Merry Christmas! On Wed, Dec 23, 2020 at 6:15 AM Jan Just Keijser wrote: > On 21/12/20 18:22, Selva Nair wrote: > > > > On Mon, Dec 21, 2020 at 2:04 AM Gert Doering wrote: > >> Hi, >> >> On Sun, Dec 20, 2020 at 07:31:42PM -0500, Selva Nair wrote: >> > I thought we already went through

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-23 Thread Jan Just Keijser
On 21/12/20 18:22, Selva Nair wrote: On Mon, Dec 21, 2020 at 2:04 AM Gert Doering > wrote: Hi, On Sun, Dec 20, 2020 at 07:31:42PM -0500, Selva Nair wrote: > I thought we already went through this when we discussed the proposed "echo > msg" in

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-22 Thread Steffan Karger
Hi, On 21-12-2020 21:25, Arne Schwabe wrote: > Am 21.12.20 um 20:11 schrieb Gert Doering: >> On Mon, Dec 21, 2020 at 06:24:36PM +, Greg Cox wrote: >>> If the software were >>> to contain a mechanism to make certain failure cases automatically more >>> prominent, particularly for 'simple'

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-22 Thread Michael Kress
Hi, Am Sun, 20 Dec 2020 11:54:30 +0100 schrieb Gert Doering : > I find myself looking for a mechanism by which I could send > informational messages ("your cert expires in two weeks, go refresh!" > - "your openvpn client needs an upgrade") from the openvpn server to > incoming clients. I'm quite

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-21 Thread Илья Шипицин
пн, 21 дек. 2020 г. в 23:26, Greg Cox : > On Mon, Dec 21, 2020 at 7:57 AM Илья Шипицин wrote: > >> that's interesting point. >> being dependent on whether users logs or not does not look very good. >> > > We only go to their logs when they come to us with issues. When we can > head the users

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-21 Thread Selva Nair
Hi, On Mon, Dec 21, 2020 at 3:27 PM Arne Schwabe wrote: > Am 21.12.20 um 20:11 schrieb Gert Doering: > > Hi, > > > > On Mon, Dec 21, 2020 at 06:24:36PM +, Greg Cox wrote: > >> My contention is, a VPN client has enough information from its own > certs to > >> know when its certs are expired

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-21 Thread Arne Schwabe
Am 21.12.20 um 20:11 schrieb Gert Doering: > Hi, > > On Mon, Dec 21, 2020 at 06:24:36PM +, Greg Cox wrote: >> My contention is, a VPN client has enough information from its own certs to >> know when its certs are expired and thus not going to work (Yes, there's >> plenty of OTHER reasons a

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-21 Thread Gert Doering
Hi, On Mon, Dec 21, 2020 at 06:24:36PM +, Greg Cox wrote: > My contention is, a VPN client has enough information from its own certs to > know when its certs are expired and thus not going to work (Yes, there's > plenty of OTHER reasons a connection can fail, but in a well designed > setup,

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-21 Thread Greg Cox
On Mon, Dec 21, 2020 at 7:57 AM Илья Шипицин wrote: > that's interesting point. > being dependent on whether users logs or not does not look very good. > We only go to their logs when they come to us with issues. When we can head the users off ahead of time, it's easier. > I'd say it is

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-21 Thread Selva Nair
On Mon, Dec 21, 2020 at 2:04 AM Gert Doering wrote: > Hi, > > On Sun, Dec 20, 2020 at 07:31:42PM -0500, Selva Nair wrote: > > I thought we already went through this when we discussed the proposed > "echo > > msg" in considerable detail 3 years ago. > > Yeah, sorry. Seems I got distracted and

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Илья Шипицин
пн, 21 дек. 2020 г. в 03:37, Greg Cox : > tl;dr - anything that lets me selectively put a message in front of my > users is great. Yes please. > > > The number one problem my users come across is expired certs. Nobody > reads logs until they're forced to. > that's interesting point. being

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Gert Doering
Hi, On Sun, Dec 20, 2020 at 07:31:42PM -0500, Selva Nair wrote: > I thought we already went through this when we discussed the proposed "echo > msg" in considerable detail 3 years ago. Yeah, sorry. Seems I got distracted and forgot all about the discussed "solution space", and just remembered

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread tincanteksup
Gert, using server side scripting, I can push *literally* anything I want to the server via --push-peer-info and setenv UV_* Example: setenv UV_PING 10 setenv UV_PINGRESTART 60 My server side script allows the client to effectively configure --keepalive (and a LOT more) My guess would be

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Maximilian Wilhelm
Anno domini 2020 Greg Cox scripsit: Hi, [...] > So IMO, 1-2 are fundamental, 3-5 are > wishlist/consideration/extensions/ideas, use or ignore as you see fit: > * Make the ability for receiving messages on a client as described. > Enabled by default, maybe selectively disable-able because someone

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Selva Nair
Hi, On Sun, Dec 20, 2020 at 5:38 PM Gert Doering wrote: > Hi, > > On Sun, Dec 20, 2020 at 04:00:13PM +0100, Arne Schwabe wrote: > > > ... and the client would then either print this on the console > > > (if !management) or dump it to management, where the GUI/Tunnelblick > > > could pick it up

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Gert Doering
Hi, On Sun, Dec 20, 2020 at 04:00:13PM +0100, Arne Schwabe wrote: > > ... and the client would then either print this on the console > > (if !management) or dump it to management, where the GUI/Tunnelblick > > could pick it up and create a popup window. > > > See --echo.  That is basically what

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Greg Cox
tl;dr - anything that lets me selectively put a message in front of my users is great. Yes please. The number one problem my users come across is expired certs. Nobody reads logs until they're forced to. A notif mechanism like you're describing would be great. With that I can set up scripts

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Arne Schwabe
Am 20.12.2020 um 11:54 schrieb Gert Doering: Hi, I find myself looking for a mechanism by which I could send informational messages ("your cert expires in two weeks, go refresh!" - "your openvpn client needs an upgrade") from the openvpn server to incoming clients. Of course this should work

Re: [Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Selva Nair
Hi, On Sun, Dec 20, 2020 at 5:55 AM Gert Doering wrote: > Hi, > > I find myself looking for a mechanism by which I could send informational > messages ("your cert expires in two weeks, go refresh!" - "your openvpn > client needs an upgrade") from the openvpn server to incoming clients. > > Of

[Openvpn-devel] wanted: mechanism to send text messages to client

2020-12-20 Thread Gert Doering
Hi, I find myself looking for a mechanism by which I could send informational messages ("your cert expires in two weeks, go refresh!" - "your openvpn client needs an upgrade") from the openvpn server to incoming clients. Of course this should work with all connecting clients, that is, "text