From mboxrd@z Thu Jan  1 00:00:00 1970
From: ummeegge <ummeegge@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH v2] OpenVPN: Calculate CIDR to DDN notation for RW
Date: Tue, 11 Dec 2018 09:40:34 +0100
Message-ID: <bda629162ef6a3010f9cae579dc08925086fc967.camel@ipfire.org>
In-Reply-To: <20181205071403.22330-1-erik.kapfer@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7874323784973009598=="
List-Id: <development.lists.ipfire.org>

--===============7874323784973009598==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Hi dev´s,
have found an unexpected error with this patch. Need to investigate it
further. PLEASE DO NOT MERGE THIS.

Best,

Erik

Am Mittwoch, den 05.12.2018, 08:14 +0100 schrieb Erik Kapfer:
> Fixes #11823
> 
> Patches enables CIDR and dotted-decimal notation for "OpenVPN
> subnet:" entries in "Global settings".
> network-functions.pl has been introduced.
> 
> Signed-off-by: Erik Kapfer <erik.kapfer(a)ipfire.org>
> ---
>  html/cgi-bin/ovpnmain.cgi | 14 ++++++++++++--
>  1 file changed, 12 insertions(+), 2 deletions(-)
> 
> diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi
> index 976300fc7..6e57a4991 100644
> --- a/html/cgi-bin/ovpnmain.cgi
> +++ b/html/cgi-bin/ovpnmain.cgi
> @@ -32,6 +32,7 @@ use strict;
>  use Archive::Zip qw(:ERROR_CODES :CONSTANTS);
>  use Sort::Naturally;
>  require '/var/ipfire/general-functions.pl';
> +require '/var/ipfire/network-functions.pl';
>  require "${General::swroot}/lang.pl";
>  require "${General::swroot}/header.pl";
>  require "${General::swroot}/countries.pl";
> @@ -245,6 +246,7 @@ sub pkiconfigcheck
>  sub writeserverconf {
>      my %sovpnsettings = ();  
>      my @temp = ();  
> +    my @tempovpnsubnet = ();
>      &General::readhash("${General::swroot}/ovpn/settings",
> \%sovpnsettings);
>      &read_routepushfile;
>      
> @@ -267,8 +269,16 @@ sub writeserverconf {
>      print CONF "cert
> ${General::swroot}/ovpn/certs/servercert.pem\n";
>      print CONF "key ${General::swroot}/ovpn/certs/serverkey.pem\n";
>      print CONF "dh
> ${General::swroot}/ovpn/ca/$cgiparams{'DH_NAME'}\n";
> -    my @tempovpnsubnet = split("\/",$sovpnsettings{'DOVPN_SUBNET'});
> -    print CONF "server $tempovpnsubnet[0] $tempovpnsubnet[1]\n";
> +    # ovpn subnet calculate prefix to netmask if needed
> +    if ($sovpnsettings{'DOVPN_SUBNET'} ne '') {
> +        my ($ip,$subnet) =
> split(/\//,"$vpnsettings{'DOVPN_SUBNET'}");
> +        if (&Network::check_prefix($subnet)) {
> +            $subnet = &Network::convert_prefix2netmask($subnet);
> +            print CONF "server $ip $subnet\n";
> +        } else {
> +            print CONF "server $ip $subnet\n";
> +        }
> +    }
>      #print CONF "push \"route $netsettings{'GREEN_NETADDRESS'}
> $netsettings{'GREEN_NETMASK'}\"\n";
>  
>      # Check if we are using mssfix, fragment and set the corretct
> mtu of 1500.


--===============7874323784973009598==--