Re: OpenVPN-2.5.0 update procedure and idea collector

[ummeegge <ummeegge@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 3493 bytes --]

Hi Adolf,

Am Sonntag, den 29.11.2020, 14:12 +0100 schrieb Adolf Belka:
> Hi Erik,
> 
> I have successfully installed OpenVPN-2.5.0 and the new ovpnmain.cgi
> and language files onto my system. Everything is working fine. I can
> see the new tab for encryption options. All my existing settings were
> maintained. All three of my clients are able to successfully connect
> with no problem and are connecting with the encryption options I have
> previously specified.
Great, good to hear.

> 
> I have not had to modify anything for it to successfully work with
> the existing settings.
Very good am happy with this result too.

> 
> Looks very nice. Congratulations on your work so far. Hopefully more
> testers will also not have any problems (fingers crossed).
Thanks a bunch for testing and your feedback, may some more people come
around. Wish you all a nice peaceful end of the first advent.

P.S. The Blake HMAC in RW section have had a wrong bit value, have
fixed this :-).

Best,

Erik

> 
> Regards,
> 
> Adolf.
> 
> 
> On 29/11/2020 12:15, ummeegge wrote:
> > Hi all,
> > another bug has been fixed -->
> >   
> > https://git.ipfire.org/?p=people/ummeegge/ipfire-2.x.git;a=commit;h=211bce2dc6f9a3c0fcdee61f3afc0d3c2283f375
> > . If the save button in the global section is used, it deletes the
> > --auth parameter, this diff fixes it.
> > for manual changes:
> > 
> > --- /srv/web/ipfire/cgi-
> > bin/ovpnmain.cgi_advanced_encryption    2020-
> > 11-27 10:37:47.405168037 +0100
> > +++ /srv/web/ipfire/cgi-bin/ovpnmain.cgi        2020-11-29
> > 11:59:02.846338304 +0100
> > @@ -1303,7 +1303,6 @@
> >       $vpnsettings{'DDEST_PORT'} = $cgiparams{'DDEST_PORT'};
> >       $vpnsettings{'DMTU'} = $cgiparams{'DMTU'};
> >       $vpnsettings{'DCOMPLZO'} = $cgiparams{'DCOMPLZO'};
> > -    $vpnsettings{'DAUTH'} = $cgiparams{'DAUTH'};
> >   #wrtie enable
> >   
> >     if ( $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {system("touch
> > ${General::swroot}/ovpn/enable_blue
> > 2>/dev/null");}else{system("unlink
> > ${General::swroot}/ovpn/enable_blue 2>/dev/null");}
> > 
> > 
> > Am Samstag, den 28.11.2020, 06:52 +0100 schrieb ummeegge:
> > Hi all,
> > made some fixes
> > 
> > - --tls-auth will now be displayed and saved correctly.
> > - de.pl needed other 'save-enc-options' name since it was a double.
> >      Fixes tls-crypt key generation.
> > - Fixed comments and changed box size to prevent line break.
> > 
> > New version is here
> > 
> >   
> > https://git.ipfire.org/?p=people/ummeegge/ipfire-2.x.git;a=commit;h=7bd13546f3c5e28fd62e25b487e440690860339b
> > 
> > located.
> > 
> > Best,
> > 
> > Erik
> > 
> > 
> > Am Donnerstag, den 26.11.2020, 19:47 +0100 schrieb ummeegge:
> > Hi all,
> > for the interested ones, have push the current state to my repo
> > which
> > can be found in here -->
> >   
> > https://git.ipfire.org/?p=people/ummeegge/ipfire-2.x.git;a=commit;h=34af1d714178b2cd0c27e8c39052a8c7ce87d116
> > feel free to test and criticize it :-) .
> > 
> > After integration and configuration, the 'save' button in the
> > global
> > section should also be pushed since --cipher will replaced by --
> > data-
> > channel-fallback. For the langs files, a update-lang-cache should
> > be
> > executed via console so the changes can take affect.
> > 
> > Happy testing. Best,
> > 
> > Erik
> > 
> > 
> > 
> > 
> >