SIG-VPN February 2012

sig-vpn@lists.ipfire.org

6 participants
9 discussions

Re: [SIG-VPN] OpenVPN Updates since IPFire 2.11
by Erik K. 20 Jul '12

20 Jul '12

Am 17.02.2012 um 12:31 schrieb Erik K.: > Hi Arne, > we have found one bug in the actual .cgi so the push routes can´t be deleted at the last testing round, but the information about was transported and i think Alfred is working on that. > The language files are currently available in english and france (of course in german), spanish, russian and polish wasn´t translated until now. > > this are the new lines: > 'ovpn routes push options' => 'Route push options', > 'ovpn routes push' => 'Routes (one per line):', > 'ovpn errmsg invalid ip or mask' => 'Invalid network-address or subnetmask', > 'ovpn errmsg green already pushed' => 'Route for green network is always set', > > > The openvpnctrl works with the new features, after a reboot the VPN reconnect from both sites are functional. > > I have send the language files to Alfred so they are central, i think he will respond until sunday. > > Erik > > Am 17.02.2012 um 11:11 schrieb Arne Fitzenreiter: > >> Hi, >> >> wie sieht's aus? Kann ich die neue cgi ins core57 (welche genau, >> sprachfiles?) aufnehmen oder sind da noch Bugs drin? >> Passt das openvpnctrl noch dazu oder muss da auch noch was angepasst >> werden? >> >> Das core57 sollte spätestens Sonntag gebaut werden damit es ins testing >> kann. >> >> Arne >> >> >> _______________________________________________ >> SIG-VPN mailing list >> SIG-VPN(a)lists.ipfire.org >> http://lists.ipfire.org/mailman/listinfo/sig-vpn >

6 38

Re: [SIG-VPN] Problems with files
by Florian Ortmann 22 Feb '12

22 Feb '12

---------- Weitergeleitete Nachricht ---------- Von: Florian Ortmann <t3ddyba3r(a)googlemail.com> Datum: 22. Februar 2012 20:51 Betreff: Re: [SIG-VPN] Problems with files An: sig-vpn(a)lists.ipfire.org Hi Alfred, thanks for you reply. I've checked the accesrights for the ovpnmain.cgi and it is like you said 755 root:root. I think that these mystery is the problem because some lines are missing. So I must find a solution how I will get the files in my IPFire :) Greets Florian Am 21. Februar 2012 21:01 schrieb Alfred Haas <alfred.haas(a)ipfire.org>: Hi Florian > > Please check the accessrights for the openvpnmain.cgi it should be 755 and > root/root. > For the Filesize - I also can see this with Winscp but i think this is one > of the Windows-Linux mysteries. > > greets > Alfred > > Am 21.02.2012 19:28, schrieb Florian Ortmann: > > Hi guys, > at the moment I try to configure my IPFire for using Net2Net. But I have > some problems with the new files. Every time I copy them I got a "500 - > Internal Server Error". > > Some days ago I had the same problem with Erik. We wanted to test the > new features but we must change some files at first. The problem is that > files that are 180KB big are only 150KB big on my IPFire. That means while > copying something cutted the files. > > Maybe someone of you can help me or give me a hint. > > Greets > > > _______________________________________________ > SIG-VPN mailing listSIG-VPN@lists.ipfire.orghttp://lists.ipfire.org/mailman/listinfo/sig-vpn > > > _______________________________________________ > SIG-VPN mailing list > SIG-VPN(a)lists.ipfire.org > http://lists.ipfire.org/mailman/listinfo/sig-vpn > >

1 0

[SIG-VPN] Problems with files
by Florian Ortmann 21 Feb '12

21 Feb '12

Hi guys, at the moment I try to configure my IPFire for using Net2Net. But I have some problems with the new files. Every time I copy them I got a "500 - Internal Server Error". Some days ago I had the same problem with Erik. We wanted to test the new features but we must change some files at first. The problem is that files that are 180KB big are only 150KB big on my IPFire. That means while copying something cutted the files. Maybe someone of you can help me or give me a hint. Greets

2 1

Re: [SIG-VPN] OpenVPN Updates since IPFire 2.11
by Erik K. 17 Feb '12

17 Feb '12

Am 06.02.2012 um 18:38 schrieb Erik K.: > Hello Alfred, > > Am 05.02.2012 um 22:11 schrieb Alfred Haas: > >> Hello Erik >> >> Am 05.02.2012 21:16, schrieb Erik K.: >>> >>> >>> Am 05.02.2012 um 17:00 schrieb Erik K.: >>> >>>> Hello to all, >>>> today i have tested the first time the new changes, good work Alfred thanks a lot for this. >>>> For a small report: >>>>> 1.) Rename Connection Name when Import the Client Package >>>> Everything works fine with this point, i can rename the connections without problems. >>>>> 2.) Adjustment to some Parameters in the Config Files. e.g. mssfix, fragment, mtu-size (reported and tested by user ummeegge). >>>> This one makes also a good round feeling for me. >>>>> 3.) Connection status is now read from the OpenVPN Management Interface via telnet.pm >>>> In here the connection is also o.k. >>>> but if i start the connection the OpenVPN WUI goes from "disconnected" to "Auth" when the TLS initial packet appears >>>> >>>> Feb 5 13:58:39 ipfire AzwoBn2n[22966]: TLS: Initial packet from 178.8.xx.xx:5317, sid=d1e9440f 158e3572 >>>> >>>> but "Connected" comes only if i refresh the side, It seems that the state delivery works only until "Auth". On index .cgi it is the same i need to refresh the site and then it gives me a connected back. >>>> Also if i´am on the OpenVPN WUI and i change to another site the OpenVPN log gives me this message back >> This is the same behaviour as the Roadwarrior. The OpenVPN cgi doen't have a autorefresh and for the index.cgi I think refresh can be enabled on the WebUI but is default disabled. > > O.K. this was only a little bit confusing cause the auto refresh works from "Disconnected" to "Auth" but the last sequence to "Connected" wasn´t reach per auto refresh. What do you think aren´t that possible to solve this, might be good for look and feel :-) ? The "Refresh index.cgi page while connected" was activated but nevertheless there was no auto supplement in the index.cgi. This isn´t a big thing but it was noticeable. > >>>> >>>> Feb 5 13:58:41 ipfire AzwoBn2n[22966]: MANAGEMENT: Client connected from 127.0.0.1:5317 >>>> Feb 5 13:58:41 ipfire AzwoBn2n[22966]: MANAGEMENT: CMD 'state' >>>> Feb 5 13:58:41 ipfire AzwoBn2n[22966]: MANAGEMENT: Client disconnected >>>> >>>> So it seems like there is a very short interruption of the connectivity if i change from/to the OpenVPN WUI or if i refresh the OpenVPN WUI. >> This are only logs from the management Interface. > > Meanwhile the tests i had Teamspeak on and there where (really only) very small interruptions in the voice as the above mentioned output appears (where made changes in the OpenVPN WUI) > >> If you refresh the cgi, the cgi login in the management IF on localhost, send the command "state" and logout. Client in this case is the cgi. > > Ah O.K. thanks for information > >>>> >>>> Alfred i wanted also to ask you how to use the management interface may you have a little experience for me in this theme. >> This looks in principal ok, but if had seen corrupt states 1 or 2 times (tunnel works but state was wait), i think this is little bug on the managemt IF. >> I had checked this with a manual telnet login to the management IF and had the same output as by the WebUI. >>>> >>>>> 4.) Integration for the Connection Status in index.cgi >>>> >>>> This works fine, but if the index.cgi is open before the connection is attempted, the status isn´t actual, so i need there also to refresh the site. >>>> >>>>> 5.) Import the Changes from User nico.prenzel to push more then one route on the Roadwarrior Server. >>>> >>>> In here i only checked for the server.conf and there it is quiet functional with CIDR and Dotted decimal notation, might be nice if this is also possible in the N2N WUI. The changes are made in the general-function.pl may this is only a small step to bring it also to the N2N. >>>> >>>> So this is all for the first, the test will still go on for my side >>>> >>>> Again thanks for this new and greetings to all >>>> >>>> Best regards >>>> >>>> Erik >>>> >> Alfred > > Best greetings > > Erik >>>> >>>> >>>> Am 02.02.2012 um 21:41 schrieb Alfred Haas: >>>> >>>>> Hello to all >>>>> >>>>> Here are all changes for the ovpnmain.cgi since IPFire 2.11 (Core53) >>>>> >>>>> 1.) Rename Connection Name when Import the Client Package >>>>> 2.) Adjustment to some Parameters in the Config Files. e.g. mssfix, fragment, mtu-size (reported and tested by user ummeegge). >>>>> 3.) Connection status is now read from the OpenVPN Management Interface via telnet.pm >>>>> 4.) Integration for the Connection Status in index.cgi >>>>> 5.) Import the Changes from User nico.prenzel to push more then one route on the Roadwarrior Server. >>>>> >>>>> Best wishes, kindly regards >>>>> Alfred >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> SIG-VPN mailing list >>>>> SIG-VPN(a)lists.ipfire.org >>>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn >>>> >>> >>> >>> >>> _______________________________________________ >>> SIG-VPN mailing list >>> SIG-VPN(a)lists.ipfire.org >>> http://lists.ipfire.org/mailman/listinfo/sig-vpn >> _______________________________________________ >> SIG-VPN mailing list >> SIG-VPN(a)lists.ipfire.org >> http://lists.ipfire.org/mailman/listinfo/sig-vpn >

2 1

[SIG-VPN] Problem to delete additional added routes in roadwarrior
by Erik K. 13 Feb '12

13 Feb '12

Hi all, i have at this time problems to delete the additional routes over the "advanced sever options" . If i delete the line and hit the "Save advanced options" button the WUI goes back the the general OpenVPN WUI but the push "route " entry still exists. May someone have the same issue ? Greetings to all Erik

1 0

Re: [SIG-VPN] OpenVPN Updates since IPFire 2.11
by Erik K. 05 Feb '12

05 Feb '12

Am 05.02.2012 um 17:00 schrieb Erik K.: > Hello to all, > today i have tested the first time the new changes, good work Alfred thanks a lot for this. > For a small report: >> 1.) Rename Connection Name when Import the Client Package > Everything works fine with this point, i can rename the connections without problems. >> 2.) Adjustment to some Parameters in the Config Files. e.g. mssfix, fragment, mtu-size (reported and tested by user ummeegge). > This one makes also a good round feeling for me. >> 3.) Connection status is now read from the OpenVPN Management Interface via telnet.pm > In here the connection is also o.k. > but if i start the connection the OpenVPN WUI goes from "disconnected" to "Auth" when the TLS initial packet appears > > Feb 5 13:58:39 ipfire AzwoBn2n[22966]: TLS: Initial packet from 178.8.xx.xx:5317, sid=d1e9440f 158e3572 > > but "Connected" comes only if i refresh the side, It seems that the state delivery works only until "Auth". On index .cgi it is the same i need to refresh the site and then it gives me a connected back. > Also if i´am on the OpenVPN WUI and i change to another site the OpenVPN log gives me this message back > > Feb 5 13:58:41 ipfire AzwoBn2n[22966]: MANAGEMENT: Client connected from 127.0.0.1:5317 > Feb 5 13:58:41 ipfire AzwoBn2n[22966]: MANAGEMENT: CMD 'state' > Feb 5 13:58:41 ipfire AzwoBn2n[22966]: MANAGEMENT: Client disconnected > > So it seems like there is a very short interruption of the connectivity if i change from/to the OpenVPN WUI or if i refresh the OpenVPN WUI. > > Alfred i wanted also to ask you how to use the management interface may you have a little experience for me in this theme. > >> 4.) Integration for the Connection Status in index.cgi > > This works fine, but if the index.cgi is open before the connection is attempted, the status isn´t actual, so i need there also to refresh the site. > >> 5.) Import the Changes from User nico.prenzel to push more then one route on the Roadwarrior Server. > > In here i only checked for the server.conf and there it is quiet functional with CIDR and Dotted decimal notation, might be nice if this is also possible in the N2N WUI. The changes are made in the general-function.pl may this is only a small step to bring it also to the N2N. > > So this is all for the first, the test will still go on for my side > > Again thanks for this new and greetings to all > > Best regards > > Erik > > > > Am 02.02.2012 um 21:41 schrieb Alfred Haas: > >> Hello to all >> >> Here are all changes for the ovpnmain.cgi since IPFire 2.11 (Core53) >> >> 1.) Rename Connection Name when Import the Client Package >> 2.) Adjustment to some Parameters in the Config Files. e.g. mssfix, fragment, mtu-size (reported and tested by user ummeegge). >> 3.) Connection status is now read from the OpenVPN Management Interface via telnet.pm >> 4.) Integration for the Connection Status in index.cgi >> 5.) Import the Changes from User nico.prenzel to push more then one route on the Roadwarrior Server. >> >> Best wishes, kindly regards >> Alfred >> >> >> >> >> >> _______________________________________________ >> SIG-VPN mailing list >> SIG-VPN(a)lists.ipfire.org >> http://lists.ipfire.org/mailman/listinfo/sig-vpn >

2 1

Re: [SIG-VPN] Starting the discussion...
by Erik K. 05 Feb '12

05 Feb '12

Am 05.02.2012 um 21:26 schrieb Erik K.: > Hello to all out there, > > Am 02.02.2012 um 20:30 schrieb Michael Tremer: > >> Hello and welcome to the SIG-VPN list! >> >> To get things started over here, I would you Erik to invite all people >> who got in touch with the project about one of the included VPN >> components and have potential interesting in taking part in the >> development. Would you do that? > I will do that Michael no problem. >> >> For all you developers out there. Please abandon all threads on the >> forum and only use this list from now on. >> >> - Michael >> >> P.S. Alfred, could you start a thread with a short summary about the >> changes in your latest release? We need to get that into the git >> repository as soon as possible, as development for Core 57 has started. >> >> _______________________________________________ >> SIG-VPN mailing list >> SIG-VPN(a)lists.ipfire.org >> http://lists.ipfire.org/mailman/listinfo/sig-vpn >

1 0

[SIG-VPN] OpenVPN Updates since IPFire 2.11
by Alfred Haas 02 Feb '12

02 Feb '12

Hello to all Here are all changes for the ovpnmain.cgi since IPFire 2.11 (Core53) 1.) Rename Connection Name when Import the Client Package 2.) Adjustment to some Parameters in the Config Files. e.g. mssfix, fragment, mtu-size (reported and tested by user ummeegge). 3.) Connection status is now read from the OpenVPN Management Interface via telnet.pm 4.) Integration for the Connection Status in index.cgi 5.) Import the Changes from User nico.prenzel to push more then one route on the Roadwarrior Server. Best wishes, kindly regards Alfred

1 0

[SIG-VPN] Starting the discussion...
by Michael Tremer 02 Feb '12

02 Feb '12

Hello and welcome to the SIG-VPN list! To get things started over here, I would you Erik to invite all people who got in touch with the project about one of the included VPN components and have potential interesting in taking part in the development. Would you do that? For all you developers out there. Please abandon all threads on the forum and only use this list from now on. - Michael P.S. Alfred, could you start a thread with a short summary about the changes in your latest release? We need to get that into the git repository as soon as possible, as development for Core 57 has started.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

SIG-VPN February 2012