openvpn-devel — OpenVPN developers list

[Openvpn-devel] OBSD more tests done and failed.

[Janne J. <jan...@bi...>]

Either I failed before, or something happened during my tests.

My success-mail might have been a bit premature, since I can't
get it to work now at all. One of the machines is the def-gw of
the other usually, so I might have mis-configured it to not use
the tunnel somehow. 8-(

I was about to test ssl, and didn't get it to work. Then I thought
I'd go back to unencrypted tests and they didn't work either.

Side 1 (OBSD 1.2.3.4) goes like this:

./openvpn --dev tun1 --remote 1.2.3.5 --local 1.2.3.4 --verb 8=20

51: TUN/TAP device /dev/tun1 opened
52: ******* WARNING *******: all encryption and authentication features
disabled -- all data will be tunnelled as cleartext
53: Data Channel MTU parms: mtu=3D1450 extra_frame=3D0 extra_buffer=3D0
54: INTERVAL TRIGGER
55: select returned 1
56: read from tun returned 88
57: ENCRYPT FROM: 00000002 45000054 c85a0000 ff01df4b 0a000002 0a000001
080011cf da07000[more...]
58: ENCRYPT TO: 00000002 45000054 c85a0000 ff01df4b 0a000002 0a000001
080011cf da07000[more...]
59: select returned 1
60: write to udp returned 88
61: UDP WRITE to 1.2.3.5:5000:  DATA 00000002 45000054 c85a0000 ff01df4b
0a000002 0a000001 080011cf da07000[more...]

and side 2 (Linux 1.2.3.5) was set up like this:

./openvpn --dev tun0 --remote 1.2.3.4  --local 1.2.3.5 --verb 8

53: TUN/TAP device tun0 opened
54: ******* WARNING *******: all encryption and authentication features
disabled -- all data will be tunnelled as cleartext
55: Data Channel MTU parms: mtu=3D1450 extra_frame=3D0 extra_buffer=3D0
56: INTERVAL TRIGGER
57: select returned 1
58: read from udp returned 88
59: UDP READ from 1.2.3.4:5000:  DATA 00000002 45000054 c85a0000
ff01df4b 0a000002 0a000001 080011cf da07000[more...]
60: IP Address OK from 1.2.3.4:5000
61: Peer Connection Initiated with 1.2.3.4:5000
62: select returned 1
63: write to tun returned 88
64: select returned 1
65: read from udp returned 88
66: UDP READ from 1.2.3.4:5000:  DATA 00000002 45000054 f27a0000
ff01b52b 0a000002 0a000001 0800fba0 da07000[more...]
67: IP Address OK from 1.2.3.4:5000
68: select returned 1
69: write to tun returned 88
70: select returned 1
71: read from udp returned 88



--=20
Janne Johansson
jan...@bi...
BioMat Systems AB
Klarabergsg 37 3tr
111 21 Stockholm

[Openvpn-devel] Success with my OBSD diffs.

[Janne J. <jan...@bi...>]

I have now pinged between linux2.4 with openvpn1.0.3 and openbsd3.0
running the version that comes out of my diff.

There is need for a small readme, since ifconfig differs on bsd
but apart from that, everything went smoothly after some initial
mistesting on my part. =3D)
It was done on an unencrypted channel, but since --keygen worked
without problems, I can't see how ssl would pose a problem.

I'll get back to you when I have tested ssl.

--=20
Janne Johansson
jan...@bi...
BioMat Systems AB
Klarabergsg 37 3tr
111 21 Stockholm

[Openvpn-devel] OpenBSD diffs.

[Janne J. <jan...@bi...>]

I have made some diffs to make it compile under OpenBSD 3.0.

This does not mean that I have tested it remotely yet, since I'm still
at the "more README" stage on openvpn, but I know my way around
makefiles and includes. =)

In short, the diff fixes these things:

* NULL is already defined on my openbsd, #ifndef'ed it away.

* linux-specific include-files changed to fit obsd.
  These will need #ifdef's of course. I added and changed until it
  compiled, nothing more.

* the functions encrypt() and decrypt() are already defined by obsd-libc
  so they were renamed to openvpn_{en|de}crypt().


On the "I haven't tested" part, it does start and run if given
--dev tun0, and gives me 4 lines of output that says "ok so far",
so I guess it's at least close to working.


-- 
Janne Johansson
jan...@bi...
BioMat Systems AB
Klarabergsg 37 3tr
111 21 Stockholm