SIG-VPN July 2012

sig-vpn@lists.ipfire.org

3 participants
2 discussions

Re: [SIG-VPN] OpenVPN Updates since IPFire 2.11 urgently tests and fixes needed!
by Erik K. 31 Jul '12

31 Jul '12

Hi all, i want to report a bug for index.cgi. If the Roadwarrior Server haven´t a hook on "OpenVPN on RED" the N2N connections are displayed but the OpenVPN header in the summary aren´t appear (bug report on Bugtracker --> https://bugzilla.ipfire.org/show_bug.cgi?id=10192 ). So a possible idea can be to make it like in the IPSec WUI with the "enable" button. In that case both connection types need a hook in the main .cgi otherwise there will be no connections authorised. So the name of "OpenVPN on RED" can possibly renamed to "Enable OpenVPN" or something like this. What do you think about this ? Greetings Erik P.S. Thanks to Daniel for reporting the bug Am 20.07.2012 um 21:15 schrieb Erik K.: > Ah O.K. i didn´t know that. Mentioned by the way the index.cgi looks pretty cool now, nice work Michael. What do you think about the label (host or net) in the OpenVPN listing ? > > Greetings > > Erik > > Am 20.07.2012 um 16:14 schrieb Michael Tremer: > >> Erik, you will need a new suid helper binary for the connections.cgi >> script. >> That will be shipped with the update package. >> >> Michael >> >> On Fri, 2012-07-20 at 12:32 +0200, Erik K. wrote: >>> Hello again, >>> i have tried now the actual fixed index.cgi and the connections.cgi . >>> >>> The results: >>> The index.cgi shows now the connections of OpenVPN in a similar way then the IPSec connections. Only difference, there is no label if it is a net or a host connection . >>> >>> The connections.cgi don´t work in my environment. So i can see the "Legend:" and the "Protocol:" lines but there are no connection listed. >>> >>> Greetings >>> >>> Erik >>> >>> Am 20.07.2012 um 09:47 schrieb Erik K.: >>> >>>> Hi all, >>>> so i want to enhance some informations about the fixes and extensions. >>>> >>>> 1) The "push route options" for the Roadwarrior works quiet round. It is possible to delete all additional routes now. >>>> 2) The translation for the "push route options" are done except for polish and spanish, but for both languages are english translations available. I have asked the forum to help there but sadly there was no resonance (for polish and spanish) until now. >>>> 2) The alphabetical listing of the connection names in the OpenVPN WUI works. >>>> 3) The "Valid til (days):" option by the creation of the Roadwarrior certificates are printed now to the certificates. >>>> 4) I have tested the client-config-dir option with "redirect-gateway", "ifconfig-push" and the iroute option for individual clients. Also i tested it without individual config for clients, and like expected OpenVPN uses then like before the "ifconfig-pool-persist /var/ipfire/ovpn/ovpn-leases.db" . >>>> 5) The colors for N2N and RW are now adjusted in index.cgi . >>>> 6) The changes from Michael with FRAGMENT and MSSFIX for the RW is now adapted to the N2N and works good for me. >>>> 7) The problems with the N2N state --> https://bugzilla.ipfire.org/show_bug.cgi?id=10137#c13 point 3, seems to be only on my system. Michael have checked that also and there the state was dislpayed correct. >>>> >>>> I need to check the new fixes from Michael (design of the index.cgi and the colors in connections.cgi) . So this should be done on this weekend. >>>> >>>> If the changes comes to the testing trunk i will announce them in the forum and also i´ll prepare the changes for the appropriate sections to the wiki. >>>> >>>> Erik >>>> >>>> P.S. My testing environment is still open, so let it me know if someone wants to step in. >>>> >>>> Am 19.07.2012 um 15:04 schrieb Michael Tremer: >>>> >>>>> Hey Arne, >>>>> >>>>> I just checked in my changes. There are: >>>>> >>>>> * index.cgi: Made the connections look like IPsec connections for >>>>> convenience. >>>>> >>>>> * connections.cgi: Show connections through the OpenVPN N2N tunnel in >>>>> the right colour. >>>>> >>>>> There have also been minor fixes in ovpnmain.cgi which set appropriate >>>>> defaults for FRAGMENT and MSSFIX. >>>>> >>>>> That's all from me. So #10162 is fixed. >>>>> >>>>> Michael >>>>> >>>>> P.S. Sad, that nobody else answered. >>>>> >>>>> On Tue, 2012-07-10 at 14:15 +0000, Arne Fitzenreiter wrote: >>>>>> core61 is nearly finnished. It only hangs on the OpenVPN updates >>>>>> again!!! >>>>>> >>>>>> http://people.ipfire.org/~arne_f/testing/i586/master/ >>>>>> >>>>>> Please test the prerelease and report the results and fixes. There is >>>>>> also a missing bash scriptlet for the updater that convert the n2n >>>>>> configuration files. >>>>>> >>>>>> Deadline is the 18.7.2012. If i does not have a working and tested >>>>>> version until that date i will revert the changes permanently. >>>>>> I'm not willing to cherry pick all other changes for core updates again >>>>>> and again. >>>>>> >>>>>> Arne >>>>>> >>>>>> _______________________________________________ >>>>>> SIG-VPN mailing list >>>>>> SIG-VPN(a)lists.ipfire.org >>>>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn >>>>> >>>>> _______________________________________________ >>>>> SIG-VPN mailing list >>>>> SIG-VPN(a)lists.ipfire.org >>>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn >>>> >>>> _______________________________________________ >>>> SIG-VPN mailing list >>>> SIG-VPN(a)lists.ipfire.org >>>> http://lists.ipfire.org/mailman/listinfo/sig-vpn >>> >>> _______________________________________________ >>> SIG-VPN mailing list >>> SIG-VPN(a)lists.ipfire.org >>> http://lists.ipfire.org/mailman/listinfo/sig-vpn >> >> _______________________________________________ >> SIG-VPN mailing list >> SIG-VPN(a)lists.ipfire.org >> http://lists.ipfire.org/mailman/listinfo/sig-vpn >

2 2

Re: [SIG-VPN] OpenVPN Updates since IPFire 2.11
by Erik K. 20 Jul '12

20 Jul '12

Am 17.02.2012 um 12:31 schrieb Erik K.: > Hi Arne, > we have found one bug in the actual .cgi so the push routes can´t be deleted at the last testing round, but the information about was transported and i think Alfred is working on that. > The language files are currently available in english and france (of course in german), spanish, russian and polish wasn´t translated until now. > > this are the new lines: > 'ovpn routes push options' => 'Route push options', > 'ovpn routes push' => 'Routes (one per line):', > 'ovpn errmsg invalid ip or mask' => 'Invalid network-address or subnetmask', > 'ovpn errmsg green already pushed' => 'Route for green network is always set', > > > The openvpnctrl works with the new features, after a reboot the VPN reconnect from both sites are functional. > > I have send the language files to Alfred so they are central, i think he will respond until sunday. > > Erik > > Am 17.02.2012 um 11:11 schrieb Arne Fitzenreiter: > >> Hi, >> >> wie sieht's aus? Kann ich die neue cgi ins core57 (welche genau, >> sprachfiles?) aufnehmen oder sind da noch Bugs drin? >> Passt das openvpnctrl noch dazu oder muss da auch noch was angepasst >> werden? >> >> Das core57 sollte spätestens Sonntag gebaut werden damit es ins testing >> kann. >> >> Arne >> >> >> _______________________________________________ >> SIG-VPN mailing list >> SIG-VPN(a)lists.ipfire.org >> http://lists.ipfire.org/mailman/listinfo/sig-vpn >

6 38

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

SIG-VPN July 2012