Re: [Documentation] [SIG-VPN] OpenVPN Updates since IPFire 2.11 urgently tests and fixes needed!
Ah O.K. i didn´t know that. Mentioned by the way the index.cgi looks pretty cool now, nice work Michael. What do you think about the label (host or net) in the OpenVPN listing ?
Greetings
Erik
Am 20.07.2012 um 16:14 schrieb Michael Tremer:
Erik, you will need a new suid helper binary for the connections.cgi script. That will be shipped with the update package.
Michael
On Fri, 2012-07-20 at 12:32 +0200, Erik K. wrote:
Hello again, i have tried now the actual fixed index.cgi and the connections.cgi .
The results: The index.cgi shows now the connections of OpenVPN in a similar way then the IPSec connections. Only difference, there is no label if it is a net or a host connection .
The connections.cgi don´t work in my environment. So i can see the "Legend:" and the "Protocol:" lines but there are no connection listed.
Greetings
Erik
Am 20.07.2012 um 09:47 schrieb Erik K.:
Hi all, so i want to enhance some informations about the fixes and extensions.
- The "push route options" for the Roadwarrior works quiet round. It is possible to delete all additional routes now.
- The translation for the "push route options" are done except for polish and spanish, but for both languages are english translations available. I have asked the forum to help there but sadly there was no resonance (for polish and spanish) until now.
- The alphabetical listing of the connection names in the OpenVPN WUI works.
- The "Valid til (days):" option by the creation of the Roadwarrior certificates are printed now to the certificates.
- I have tested the client-config-dir option with "redirect-gateway", "ifconfig-push" and the iroute option for individual clients. Also i tested it without individual config for clients, and like expected OpenVPN uses then like before the "ifconfig-pool-persist /var/ipfire/ovpn/ovpn-leases.db" .
- The colors for N2N and RW are now adjusted in index.cgi .
- The changes from Michael with FRAGMENT and MSSFIX for the RW is now adapted to the N2N and works good for me.
- The problems with the N2N state --> https://bugzilla.ipfire.org/show_bug.cgi?id=10137#c13 point 3, seems to be only on my system. Michael have checked that also and there the state was dislpayed correct.
I need to check the new fixes from Michael (design of the index.cgi and the colors in connections.cgi) . So this should be done on this weekend.
If the changes comes to the testing trunk i will announce them in the forum and also i´ll prepare the changes for the appropriate sections to the wiki.
Erik
P.S. My testing environment is still open, so let it me know if someone wants to step in.
Am 19.07.2012 um 15:04 schrieb Michael Tremer:
Hey Arne,
I just checked in my changes. There are:
- index.cgi: Made the connections look like IPsec connections for
convenience.
- connections.cgi: Show connections through the OpenVPN N2N tunnel in
the right colour.
There have also been minor fixes in ovpnmain.cgi which set appropriate defaults for FRAGMENT and MSSFIX.
That's all from me. So #10162 is fixed.
Michael
P.S. Sad, that nobody else answered.
On Tue, 2012-07-10 at 14:15 +0000, Arne Fitzenreiter wrote:
core61 is nearly finnished. It only hangs on the OpenVPN updates again!!!
http://people.ipfire.org/~arne_f/testing/i586/master/
Please test the prerelease and report the results and fixes. There is also a missing bash scriptlet for the updater that convert the n2n configuration files.
Deadline is the 18.7.2012. If i does not have a working and tested version until that date i will revert the changes permanently. I'm not willing to cherry pick all other changes for core updates again and again.
Arne
SIG-VPN mailing list SIG-VPN@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/sig-vpn
SIG-VPN mailing list SIG-VPN@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/sig-vpn
SIG-VPN mailing list SIG-VPN@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/sig-vpn
SIG-VPN mailing list SIG-VPN@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/sig-vpn
SIG-VPN mailing list SIG-VPN@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/sig-vpn
documentation@lists.ipfire.org
-
Erik K.