From mboxrd@z Thu Jan  1 00:00:00 1970
From: ummeegge <ummeegge@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: OpenVPN-2.5.0 update procedure and idea collector
Date: Sun, 29 Nov 2020 19:36:27 +0100
Message-ID: <c62bb0a2346a9f46e801cdf006fef95ab981a1d3.camel@ipfire.org>
In-Reply-To: <5053bf31-1471-28b6-d1aa-2d10897a855f@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8572525105143943045=="
List-Id: <development.lists.ipfire.org>

--===============8572525105143943045==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi Adolf,

Am Sonntag, den 29.11.2020, 14:12 +0100 schrieb Adolf Belka:
> Hi Erik,
>=20
> I have successfully installed OpenVPN-2.5.0 and the new ovpnmain.cgi
> and language files onto my system. Everything is working fine. I can
> see the new tab for encryption options. All my existing settings were
> maintained. All three of my clients are able to successfully connect
> with no problem and are connecting with the encryption options I have
> previously specified.
Great, good to hear.

>=20
> I have not had to modify anything for it to successfully work with
> the existing settings.
Very good am happy with this result too.

>=20
> Looks very nice. Congratulations on your work so far. Hopefully more
> testers will also not have any problems (fingers crossed).
Thanks a bunch for testing and your feedback, may some more people come
around. Wish you all a nice peaceful end of the first advent.

P.S. The Blake HMAC in RW section have had a wrong bit value, have
fixed this :-).

Best,

Erik

>=20
> Regards,
>=20
> Adolf.
>=20
>=20
> On 29/11/2020 12:15, ummeegge wrote:
> > Hi all,
> > another bug has been fixed -->
> >  =20
> > https://git.ipfire.org/?p=3Dpeople/ummeegge/ipfire-2.x.git;a=3Dcommit;h=
=3D211bce2dc6f9a3c0fcdee61f3afc0d3c2283f375
> > . If the save button in the global section is used, it deletes the
> > --auth parameter, this diff fixes it.
> > for manual changes:
> >=20
> > --- /srv/web/ipfire/cgi-
> > bin/ovpnmain.cgi_advanced_encryption=C2=A0=C2=A0=C2=A0=C2=A02020-
> > 11-27 10:37:47.405168037 +0100
> > +++ /srv/web/ipfire/cgi-bin/ovpnmain.cgi=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A02020-11-29
> > 11:59:02.846338304 +0100
> > @@ -1303,7 +1303,6 @@
> > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 $vpnsettings{'DDEST_PORT'} =3D $cgiparams{=
'DDEST_PORT'};
> > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 $vpnsettings{'DMTU'} =3D $cgiparams{'DMTU'=
};
> > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 $vpnsettings{'DCOMPLZO'} =3D $cgiparams{'D=
COMPLZO'};
> > -=C2=A0=C2=A0=C2=A0 $vpnsettings{'DAUTH'} =3D $cgiparams{'DAUTH'};
> > =C2=A0 #wrtie enable
> > =C2=A0=20
> > =C2=A0=C2=A0=C2=A0 if ( $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {system("t=
ouch
> > ${General::swroot}/ovpn/enable_blue
> > 2>/dev/null");}else{system("unlink
> > ${General::swroot}/ovpn/enable_blue 2>/dev/null");}
> >=20
> >=20
> > Am Samstag, den 28.11.2020, 06:52 +0100 schrieb ummeegge:
> > Hi all,
> > made some fixes
> >=20
> > - --tls-auth will now be displayed and saved correctly.
> > - de.pl needed other 'save-enc-options' name since it was a double.
> > =C2=A0=C2=A0=C2=A0=C2=A0 Fixes tls-crypt key generation.
> > - Fixed comments and changed box size to prevent line break.
> >=20
> > New version is here
> >=20
> >  =20
> > https://git.ipfire.org/?p=3Dpeople/ummeegge/ipfire-2.x.git;a=3Dcommit;h=
=3D7bd13546f3c5e28fd62e25b487e440690860339b
> >=20
> > located.
> >=20
> > Best,
> >=20
> > Erik
> >=20
> >=20
> > Am Donnerstag, den 26.11.2020, 19:47 +0100 schrieb ummeegge:
> > Hi all,
> > for the interested ones, have push the current state to my repo
> > which
> > can be found in here -->
> >  =20
> > https://git.ipfire.org/?p=3Dpeople/ummeegge/ipfire-2.x.git;a=3Dcommit;h=
=3D34af1d714178b2cd0c27e8c39052a8c7ce87d116
> > feel free to test and criticize it :-) .
> >=20
> > After integration and configuration, the 'save' button in the
> > global
> > section should also be pushed since --cipher will replaced by --
> > data-
> > channel-fallback. For the langs files, a update-lang-cache should
> > be
> > executed via console so the changes can take affect.
> >=20
> > Happy testing. Best,
> >=20
> > Erik
> >=20
> >=20
> >=20
> >=20
> >=20



--===============8572525105143943045==--