Re: [Documentation] [SIG-VPN] OpenVPN Updates since IPFire 2.11 urgently tests and fixes needed!

Re: [Documentation] [SIG-VPN] OpenVPN Updates since IPFire 2.11 urgently tests and fixes needed!

[Erik K.]

[-- Attachment #1: Type: text/plain, Size: 4937 bytes --]

Ah O.K. i didn´t know that. Mentioned by the way the index.cgi looks pretty cool now, nice work Michael. What do you think about the label (host or net) in the OpenVPN listing ?

Greetings 

Erik

Am 20.07.2012 um 16:14 schrieb Michael Tremer:

> Erik, you will need a new suid helper binary for the connections.cgi
> script.
> That will be shipped with the update package.
> 
> Michael
> 
> On Fri, 2012-07-20 at 12:32 +0200, Erik K. wrote:
>> Hello again,
>> i have tried now the actual fixed index.cgi and the connections.cgi . 
>> 
>> The results:
>> The index.cgi shows now the connections of OpenVPN in a similar way then the IPSec connections. Only difference, there is no label if it is a net or a host connection .
>> 
>> The connections.cgi don´t work in my environment. So i can see the "Legend:" and the "Protocol:" lines but there are no connection listed.
>> 
>> Greetings 
>> 
>> Erik
>> 
>> Am 20.07.2012 um 09:47 schrieb Erik K.:
>> 
>>> Hi all,
>>> so i want to enhance some informations about the fixes and extensions.
>>> 
>>> 1) The "push route options" for the Roadwarrior works quiet round. It is possible to delete all additional routes now.
>>> 2) The translation for the "push route options" are done except for polish and spanish, but for both languages are english translations available. I have asked the forum to help there but sadly there was no resonance (for polish and spanish) until now. 
>>> 2) The alphabetical listing of the connection names in the OpenVPN WUI works.
>>> 3) The "Valid til (days):" option by the creation of the Roadwarrior certificates are printed now to the certificates.
>>> 4) I have tested the client-config-dir option with "redirect-gateway", "ifconfig-push" and the iroute option for individual clients. Also i tested it without individual config for clients, and like expected OpenVPN uses then like before the "ifconfig-pool-persist /var/ipfire/ovpn/ovpn-leases.db" .
>>> 5) The colors for N2N and RW are now adjusted in index.cgi .
>>> 6) The changes from Michael with FRAGMENT and MSSFIX for the RW is now adapted to the N2N and works good for me.
>>> 7) The problems with the N2N state --> https://bugzilla.ipfire.org/show_bug.cgi?id=10137#c13 point 3, seems to be only on my system. Michael have checked that also and there the state was dislpayed correct. 
>>> 
>>> I need to check the new fixes from Michael (design of the index.cgi and the colors in connections.cgi) . So this should be done on this weekend.
>>> 
>>> If the changes comes to the testing trunk i will announce them in the forum and also i´ll prepare the changes for the appropriate sections to the wiki.
>>> 
>>> Erik
>>> 
>>> P.S. My testing environment is still open, so let it me know if someone wants to step in.
>>> 
>>> Am 19.07.2012 um 15:04 schrieb Michael Tremer:
>>> 
>>>> Hey Arne,
>>>> 
>>>> I just checked in my changes. There are:
>>>> 
>>>> * index.cgi: Made the connections look like IPsec connections for
>>>> convenience.
>>>> 
>>>> * connections.cgi: Show connections through the OpenVPN N2N tunnel in
>>>> the right colour.
>>>> 
>>>> There have also been minor fixes in ovpnmain.cgi which set appropriate
>>>> defaults for FRAGMENT and MSSFIX.
>>>> 
>>>> That's all from me. So #10162 is fixed.
>>>> 
>>>> Michael
>>>> 
>>>> P.S. Sad, that nobody else answered.
>>>> 
>>>> On Tue, 2012-07-10 at 14:15 +0000, Arne Fitzenreiter wrote:
>>>>> core61 is nearly finnished. It only hangs on the OpenVPN updates
>>>>> again!!!
>>>>> 
>>>>> http://people.ipfire.org/~arne_f/testing/i586/master/
>>>>> 
>>>>> Please test the prerelease and report the results and fixes. There is
>>>>> also a missing bash scriptlet for the updater that convert the n2n
>>>>> configuration files. 
>>>>> 
>>>>> Deadline is the 18.7.2012. If i does not have a working and tested
>>>>> version until that date i will revert the changes permanently.
>>>>> I'm not willing to cherry pick all other changes for core updates again
>>>>> and again. 
>>>>> 
>>>>> Arne
>>>>> 
>>>>> _______________________________________________
>>>>> SIG-VPN mailing list
>>>>> SIG-VPN(a)lists.ipfire.org
>>>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn
>>>> 
>>>> _______________________________________________
>>>> SIG-VPN mailing list
>>>> SIG-VPN(a)lists.ipfire.org
>>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn
>>> 
>>> _______________________________________________
>>> SIG-VPN mailing list
>>> SIG-VPN(a)lists.ipfire.org
>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn
>> 
>> _______________________________________________
>> SIG-VPN mailing list
>> SIG-VPN(a)lists.ipfire.org
>> http://lists.ipfire.org/mailman/listinfo/sig-vpn
> 
> _______________________________________________
> SIG-VPN mailing list
> SIG-VPN(a)lists.ipfire.org
> http://lists.ipfire.org/mailman/listinfo/sig-vpn