From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4c4cW36JVkz2yp6 for ; Sun, 17 Aug 2025 13:43:27 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4c4cW02Sjrz2xPP for ; Sun, 17 Aug 2025 13:43:24 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4c4cVy6Gflz8C for ; Sun, 17 Aug 2025 13:43:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1755438203; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=/HlNt3aZS/+091qXzAyBUSqFohpc8PwQdT77Rw142iI=; b=ZaHdnUnyAAYAFUh6dOcRrszlLnsJ41r+62BnlYfZaKpe8No6nR0bRj+/EIu70wB9qnesrK uur8qWyLclhAuTLw19wogLt5pve/iWz5GeeXJ5HSZ7l+YVj88Q9+7woA1ic4L8oZShrV3x eyjXQeeMg+DyXH0LHruUGKIOuAlAG4hBVEExhhPbYCSrPhdfeK7fgQyNadyo9OX2PJh+vS 8ZGVjbLLufWRm9kjJK8D2C3ZB8MWiJVE0xcwZBluh6iQEGNVMuqUzKsFhr5DW1QwHe/vsI 5o4ElpGaS2VAIhw9a51v12HLxHOCcPCP0ophvoEmpEvS91G/VQ+CQb7Ami1Juw== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1755438203; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=/HlNt3aZS/+091qXzAyBUSqFohpc8PwQdT77Rw142iI=; b=i8sJw2Fh0NlvUSbWR6C6KyDR/Aay5OtiavDoPbR4dOstLrXaDsRT4sPgITuGXKyzS3jx5T ZCQk2ZUdEmyPb7Cg== Message-ID: <63886579-ceeb-44a6-b24c-0bb72632a0b5@ipfire.org> Date: Sun, 17 Aug 2025 15:43:19 +0200 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Language: en-GB To: "IPFire: Development-List" From: Adolf Belka Subject: Testing out CU198 with OpenVPN-2.7_alpha3 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi All, I have built and done initial testing of CU198 with OpenVPN-2.7_alpha3. Here is my initial feedback. My N2N connection connected and I could ping between both ends. The status on the OpenVPN WUI page showed as Connected. Only item was that when rebooting the following message shows up in the boot log when the N2N connection is started DEPRECATED: --persist-key option ignored. Keys are now always persisted across restarts. I the tested out the old existing Android and Linux Laptop client connections. In both cases at the client ends they said they were connected. On the Linux Laptop I could ping to a PC on the green network. For both the Linux Laptop and Android phone I could access the WUI page of the IPFire system. The logs showed that the clients were connected. However in both cases the OpenVPN WUI page stayed showing the RW connections as disconnected. Accessing the OpenVPN Connection Statistics never showed any connection existing. So the status methodology for the RW's does not seem to be working with OpenVPN-2.7, even though the connections were successfully connected and the standard openvpn logs show the rw clients as connected. I will have another go with new client connections and see if that shows anything different with regard to the status. Also need to remember this is the alpha3 release so there might be bugs still and maybe that is what I am experiencing. So RW connections get made but stay showing as disconnected when they are actually connected. N2N connections show as connected and are connected. Regards Adolf