Toggle navigation
Patchwork
OpenVPN 2
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Submitter =
Arne Schwabe
| 1067 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Search
Archived
No
Yes
Both
Delegate
------
Nobody
samuli
ordex
dazo
selvanair
syzzer
cron2
arne
flichtenheld
d12fk
Apply
«
1
2
...
8
9
10
11
»
Patch
Series
A/R/T
S/W/F
Date
Submitter
Delegate
State
[Openvpn-devel,v2] Ensure only CBC, CFB, OFB and AEAD ciphers are considered valid data ciphers
[Openvpn-devel,v2] Ensure only CBC, CFB, OFB and AEAD ciphers are considered valid data ciphers
1 - -
-
-
-
2022-10-10
Arne Schwabe
Accepted
[Openvpn-devel] Change explicit exit notification to be a SIGUSR1 instead of a SIGTERM signal
[Openvpn-devel] Change explicit exit notification to be a SIGUSR1 instead of a SIGTERM signal
- - -
-
-
-
2022-10-11
Arne Schwabe
Superseded
[Openvpn-devel,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
[Openvpn-devel,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
- - -
-
-
-
2022-10-12
Arne Schwabe
Superseded
[Openvpn-devel,2/3] Use dedicated multi->dco_peer_id for DCO instead of multi->peer_id
[Openvpn-devel,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
- - -
-
-
-
2022-10-12
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Call dco_p2p_add_new_peer again if the peer id changes
[Openvpn-devel,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
- - -
-
-
-
2022-10-12
Arne Schwabe
Superseded
[Openvpn-devel,v3] Change exit signal in P2P to be a SIGUSR1 and delay CC exit in P2MP
[Openvpn-devel,v3] Change exit signal in P2P to be a SIGUSR1 and delay CC exit in P2MP
1 - -
-
-
-
2022-10-16
Arne Schwabe
Accepted
[Openvpn-devel,v2] Allow Authtoken lifetime to be short than renegotiation time
[Openvpn-devel,v2] Allow Authtoken lifetime to be short than renegotiation time
1 - -
-
-
-
2022-10-17
Arne Schwabe
Accepted
[Openvpn-devel,v2,3/3] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
Untitled series #1827
- - -
-
-
-
2022-10-18
Arne Schwabe
Superseded
[Openvpn-devel] Fix renewal spelling and actually allow external-auth with renewal time
[Openvpn-devel] Fix renewal spelling and actually allow external-auth with renewal time
1 - -
-
-
-
2022-10-18
Arne Schwabe
Accepted
[Openvpn-devel,v3] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
[Openvpn-devel,v3] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
- - -
-
-
-
2022-10-19
Arne Schwabe
Superseded
[Openvpn-devel] Fix regression of ignoring --user
[Openvpn-devel] Fix regression of ignoring --user
1 - -
-
-
-
2022-10-19
Arne Schwabe
Accepted
[Openvpn-devel,v5,2/3] Allow setting control channel packet size with max-packet-size
Untitled series #1832
1 - -
-
-
-
2022-10-20
Arne Schwabe
Superseded
[Openvpn-devel,v2,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
[Openvpn-devel,v2,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
1 - -
-
-
-
2022-10-26
Arne Schwabe
Changes Requested
[Openvpn-devel,v6,1/2] Refactor/optimise code sending TLS control channel messages
[Openvpn-devel,v6,1/2] Refactor/optimise code sending TLS control channel messages
1 - -
-
-
-
2022-11-04
Arne Schwabe
Accepted
[Openvpn-devel,v6,2/2] Allow setting control channel packet size with max-packet-size
[Openvpn-devel,v6,1/2] Refactor/optimise code sending TLS control channel messages
- - -
-
-
-
2022-11-04
Arne Schwabe
Accepted
[Openvpn-devel] Add packet type in accept/reject messages for HMAC packet
[Openvpn-devel] Add packet type in accept/reject messages for HMAC packet
1 - -
-
-
-
2022-11-08
Arne Schwabe
Accepted
[Openvpn-devel] Remove unused addr_inet4or6, addr_guess_family and inline addr_copy_sa
[Openvpn-devel] Remove unused addr_inet4or6, addr_guess_family and inline addr_copy_sa
1 - -
-
-
-
2022-11-09
Arne Schwabe
Accepted
[Openvpn-devel] Fix md_kt_size in mbed TLS when queried for size of "none"
[Openvpn-devel] Fix md_kt_size in mbed TLS when queried for size of "none"
1 - -
-
-
-
2022-11-09
Arne Schwabe
Accepted
[Openvpn-devel] Add algorithm and bits used in key_print2 method and refactor method
[Openvpn-devel] Add algorithm and bits used in key_print2 method and refactor method
1 - -
-
-
-
2022-11-09
Arne Schwabe
Accepted
[Openvpn-devel,v5,1/2] Allow tun-mtu to be pushed
[Openvpn-devel,v5,1/2] Allow tun-mtu to be pushed
1 - -
-
-
-
2022-11-09
Arne Schwabe
Accepted
[Openvpn-devel,v5,2/2] Push server mtu to client when supported and support occ mtu
[Openvpn-devel,v5,1/2] Allow tun-mtu to be pushed
1 - -
-
-
-
2022-11-09
Arne Schwabe
Accepted
[Openvpn-devel] Fix logic error in checking early negotiation support check
[Openvpn-devel] Fix logic error in checking early negotiation support check
1 - -
-
-
-
2022-11-15
Arne Schwabe
Accepted
[Openvpn-devel,v3,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
[Openvpn-devel,v3,1/3] Move dco_installed from sock->info to sock->info.lsa.actual
- - -
-
-
-
2022-11-24
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/3] Use dedicated multi->dco_peer_id for DCO instead of multi->peer_id
Untitled series #1857
- - -
-
-
-
2022-11-24
Arne Schwabe
Changes Requested
[Openvpn-devel,RFC] fix warning with gcc 12.2.0 (compiler bug?)
[Openvpn-devel,RFC] fix warning with gcc 12.2.0 (compiler bug?)
2 - -
-
-
-
2022-11-27
Arne Schwabe
Accepted
[Openvpn-devel,v3,1/3] Use dedicated multi->dco_peer_id for DCO instead of multi->peer_id
[Openvpn-devel,v3,1/3] Use dedicated multi->dco_peer_id for DCO instead of multi->peer_id
1 - -
-
-
-
2022-11-27
Arne Schwabe
Accepted
[Openvpn-devel] Add section about common error with OpenVPN 2.6 and OpenSSL 3.0
[Openvpn-devel] Add section about common error with OpenVPN 2.6 and OpenSSL 3.0
- - -
-
-
-
2022-11-27
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add section about common error with OpenVPN 2.6 and OpenSSL 3.0
[Openvpn-devel,v2] Add section about common error with OpenVPN 2.6 and OpenSSL 3.0
1 - -
-
-
-
2022-11-29
Arne Schwabe
Accepted
[Openvpn-devel] Introduce connection state for reconnecting peer in p2p
[Openvpn-devel] Introduce connection state for reconnecting peer in p2p
1 - -
-
-
-
2022-11-30
Arne Schwabe
Accepted
[Openvpn-devel] Signal USR1 when connection initialising fails
[Openvpn-devel] Signal USR1 when connection initialising fails
1 - -
-
-
-
2022-11-30
Arne Schwabe
Accepted
[Openvpn-devel] Allow reconnecting in p2p mode work under FreeBSD
[Openvpn-devel] Allow reconnecting in p2p mode work under FreeBSD
1 - -
-
-
-
2022-12-01
Arne Schwabe
Accepted
[Openvpn-devel] Fix connection cookie not including address and fix endianness in test
[Openvpn-devel] Fix connection cookie not including address and fix endianness in test
1 - -
-
-
-
2022-12-06
Arne Schwabe
Accepted
[Openvpn-devel] Fix unit test of test_pkt on little endian Linux
[Openvpn-devel] Fix unit test of test_pkt on little endian Linux
1 - -
-
-
-
2022-12-07
Arne Schwabe
Accepted
[Openvpn-devel] Ignore connection attempts while server is shutting down
[Openvpn-devel] Ignore connection attempts while server is shutting down
1 - -
-
-
-
2022-12-08
Arne Schwabe
Accepted
[Openvpn-devel] Disable DCO when TLS mode is not used
[Openvpn-devel] Disable DCO when TLS mode is not used
2 - -
-
-
-
2022-12-10
Arne Schwabe
Accepted
[Openvpn-devel,v4] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
[Openvpn-devel,v4] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
- - -
-
-
-
2022-12-12
Arne Schwabe
Superseded
[Openvpn-devel] Improve debug logging of DCO on Linux
[Openvpn-devel] Improve debug logging of DCO on Linux
- - -
-
-
-
2022-12-13
Arne Schwabe
Rejected
[Openvpn-devel,1/3] Improve debug logging of DCO swap key message and Linux dco_new_peer
[Openvpn-devel,1/3] Improve debug logging of DCO swap key message and Linux dco_new_peer
1 - -
-
-
-
2022-12-13
Arne Schwabe
Accepted
[Openvpn-devel,2/3] Trigger a USR1 if dco_update_keys fails
[Openvpn-devel,1/3] Improve debug logging of DCO swap key message and Linux dco_new_peer
1 - -
-
-
-
2022-12-13
Arne Schwabe
Accepted
[Openvpn-devel,3/3] Set DCO_NOT_INSTALLED also for keys not in the get_key_scan range
[Openvpn-devel,1/3] Improve debug logging of DCO swap key message and Linux dco_new_peer
1 - -
-
-
-
2022-12-13
Arne Schwabe
Accepted
[Openvpn-devel,1/8] Make management password check constant time
Improvement/fixes based on Trail of Bits audit
- - -
-
-
-
2022-12-15
Arne Schwabe
Rejected
[Openvpn-devel,2/8] ssl_verify: Fix memleak if creating deferred auth control files fails
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel,3/8] Ensure that argument to parse_line has always space for final sentinel
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel,4/8] Improve documentation on user/password requirement and unicodize function
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel,5/8] Eliminate or comment empty blocks and switch fallthrough
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel,6/8] Remove unused gc_arena
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel,7/8] Fix corner case that might lead to leaked file descriptor
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel,8/8] Deprecate NTLMv1 proxy auth method.
Improvement/fixes based on Trail of Bits audit
1 - -
-
-
-
2022-12-15
Arne Schwabe
Accepted
[Openvpn-devel] Use include "buffer.h" instead of include <buffer.h>
[Openvpn-devel] Use include "buffer.h" instead of include <buffer.h>
1 - -
-
-
-
2022-12-19
Arne Schwabe
Accepted
[Openvpn-devel] Ensure that dco keepalive and mssfix options are also set in pure p2p mode
[Openvpn-devel] Ensure that dco keepalive and mssfix options are also set in pure p2p mode
1 - -
-
-
-
2022-12-19
Arne Schwabe
Accepted
[Openvpn-devel,v2,1/8] Make management password check constant time
[Openvpn-devel,v2,1/8] Make management password check constant time
1 - -
-
-
-
2022-12-20
Arne Schwabe
Accepted
[Openvpn-devel,1/9] Rename TM_UNTRUSTED to TM_INITIAL
Various patches to improve DCO behaviour
1 - -
-
-
-
2022-12-24
Arne Schwabe
Accepted
[Openvpn-devel,2/9] Always start session in TM_INITIAL rather than TM_ACTIVE or TM_INITIAL
Various patches to improve DCO behaviour
1 - -
-
-
-
2022-12-24
Arne Schwabe
Accepted
[Openvpn-devel,3/9] Move dco_installed back to link_socket from link_socket.info.actual
Various patches to improve DCO behaviour
1 - -
-
-
-
2022-12-24
Arne Schwabe
Accepted
[Openvpn-devel,4/9] Ensure we do not promote a TA_TIMEOUT to a TA_WRITE/TA_READ event with dco
Various patches to improve DCO behaviour
- - -
-
-
-
2022-12-24
Arne Schwabe
Superseded
[Openvpn-devel,5/9] Also drop incoming dco packet content when dropping the packet
Various patches to improve DCO behaviour
1 - -
-
-
-
2022-12-24
Arne Schwabe
Accepted
[Openvpn-devel,6/9] Do not set nl socket buffer size
Various patches to improve DCO behaviour
1 - -
-
-
-
2022-12-24
Arne Schwabe
Accepted
[Openvpn-devel,7/9] Bail out when trying to install a TCP socket with residual data to DCO
Various patches to improve DCO behaviour
- - -
-
-
-
2022-12-24
Arne Schwabe
Superseded
[Openvpn-devel,8/9] Improve logging when seeing a message for an unkown peer
Various patches to improve DCO behaviour
1 - -
-
-
-
2022-12-24
Arne Schwabe
Accepted
[Openvpn-devel,9/9] Ignore OVPN_DEL_PEER_REASON_USERSPACE to avoid race conditions
Various patches to improve DCO behaviour
- - -
-
-
-
2022-12-24
Arne Schwabe
Superseded
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
- - -
-
-
-
2022-12-27
Arne Schwabe
Rejected
[Openvpn-devel,v2,2/4] Bail out when trying to install a TCP socket with residual data to DCO
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
- - -
-
-
-
2022-12-27
Arne Schwabe
Rejected
[Openvpn-devel,v2,3/4] Ignore OVPN_DEL_PEER_REASON_USERSPACE to avoid race conditions
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
1 - -
-
-
-
2022-12-27
Arne Schwabe
Accepted
[Openvpn-devel,v2,4/4] Log peer-id if loglevel is D_DCO_DEBUG and dco is enabled
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
- - -
-
-
-
2022-12-27
Arne Schwabe
Changes Requested
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
1 - -
-
-
-
2022-12-27
Arne Schwabe
Accepted
[Openvpn-devel,2/2] Replace realloc with new gc_realloc function
Untitled series #1926
1 - -
-
-
-
2022-12-27
Arne Schwabe
Accepted
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/4] Bail out when trying to install a TCP socket with residual data to DCO
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/4] Ignore OVPN_DEL_PEER_REASON_USERSPACE to avoid race conditions
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/4] Log peer-id if loglevel is D_DCO_DEBUG and dco is enabled
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel] Add connect-freq-initial option to limit initial connection responses
[Openvpn-devel] Add connect-freq-initial option to limit initial connection responses
- - -
-
-
-
2023-01-05
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add connect-freq-initial option to limit initial connection responses
[Openvpn-devel,v2] Add connect-freq-initial option to limit initial connection responses
- - -
-
-
-
2023-01-06
Arne Schwabe
Superseded
[Openvpn-devel,v3] Add connect-freq-initial option to limit initial connection responses
[Openvpn-devel,v3] Add connect-freq-initial option to limit initial connection responses
- - -
-
-
-
2023-01-09
Arne Schwabe
Superseded
[Openvpn-devel,v4] Add connect-freq-initial option to limit initial connection responses
[Openvpn-devel,v4] Add connect-freq-initial option to limit initial connection responses
- - -
-
-
-
2023-01-09
Arne Schwabe
Changes Requested
[Openvpn-devel,v5] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
[Openvpn-devel,v5] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
1 - -
-
-
-
2023-01-09
Arne Schwabe
Superseded
[Openvpn-devel,v5] Add connect-freq-initial option to limit initial connection responses
[Openvpn-devel,v5] Add connect-freq-initial option to limit initial connection responses
1 - -
-
-
-
2023-01-10
Arne Schwabe
Accepted
[Openvpn-devel,v2] Log peer-id if loglevel is D_DCO_DEBUG and dco is enabled
[Openvpn-devel,v2] Log peer-id if loglevel is D_DCO_DEBUG and dco is enabled
1 - -
-
-
-
2023-01-10
Arne Schwabe
Accepted
[Openvpn-devel] Deprecate OCC checking
[Openvpn-devel] Deprecate OCC checking
- - -
-
-
-
2023-01-11
Arne Schwabe
Superseded
[Openvpn-devel,v2] Deprecate OCC checking
[Openvpn-devel,v2] Deprecate OCC checking
1 - -
-
-
-
2023-01-11
Arne Schwabe
Accepted
[Openvpn-devel] Workaround: make ovpn-dco more reliable
[Openvpn-devel] Workaround: make ovpn-dco more reliable
1 - -
-
-
-
2023-01-12
Arne Schwabe
Accepted
[Openvpn-devel,v6] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
[Openvpn-devel,v6] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
- - -
-
-
-
2023-01-26
Arne Schwabe
Superseded
[Openvpn-devel,1/2] Fix unaligned access in macOS/Solaris hwaddr and auth-token
[Openvpn-devel,1/2] Fix unaligned access in macOS/Solaris hwaddr and auth-token
- - -
-
-
-
2023-01-30
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Add undefined and abort on error to clang sanaitize builds
[Openvpn-devel,1/2] Fix unaligned access in macOS/Solaris hwaddr and auth-token
- - -
-
-
-
2023-01-30
Arne Schwabe
Superseded
[Openvpn-devel,1/5] Fix unaligned access in auth-token
[Openvpn-devel,1/5] Fix unaligned access in auth-token
1 - -
-
-
-
2023-01-30
Arne Schwabe
Accepted
[Openvpn-devel,2/5] Fix unaligned access in macOS/Solaris hwaddr
[Openvpn-devel,1/5] Fix unaligned access in auth-token
1 - -
-
-
-
2023-01-30
Arne Schwabe
Superseded
[Openvpn-devel,3/5] Update LibreSSL to 3.7.0 in Github actions
[Openvpn-devel,1/5] Fix unaligned access in auth-token
1 - -
-
-
-
2023-01-30
Arne Schwabe
Accepted
[Openvpn-devel,4/5] Add printing USAN stack trace on github actions
[Openvpn-devel,1/5] Fix unaligned access in auth-token
1 - -
-
-
-
2023-01-30
Arne Schwabe
Accepted
[Openvpn-devel,5/5] Add undefined and abort on error to clang sanaitize builds
[Openvpn-devel,1/5] Fix unaligned access in auth-token
- - -
-
-
-
2023-01-30
Arne Schwabe
New
[Openvpn-devel,v7] Dynamic tls-crypt for secure soft_reset/session renegotiation
[Openvpn-devel,v7] Dynamic tls-crypt for secure soft_reset/session renegotiation
1 - -
-
-
-
2023-01-31
Arne Schwabe
Changes Requested
[Openvpn-devel,1/5] Conditionally add subdir-objects option to automake
Build and run unittests with mingw in Github actions
- - -
-
-
-
2023-02-08
Arne Schwabe
Not Applicable
[Openvpn-devel,v2,2/5] Build unit tests in mingw Windows build
Build and run unittests with mingw in Github actions
- - -
-
-
-
2023-02-08
Arne Schwabe
Superseded
[Openvpn-devel,3/5] Do not run check_engine test when crosscompiling
Build and run unittests with mingw in Github actions
- - -
-
-
-
2023-02-08
Arne Schwabe
Superseded
[Openvpn-devel,4/5] Add missing stdint.h includes in unit tests files
Build and run unittests with mingw in Github actions
1 - -
-
-
-
2023-02-08
Arne Schwabe
Accepted
[Openvpn-devel,5/5] Add building and running mingw unittests to github actions
Build and run unittests with mingw in Github actions
- - -
-
-
-
2023-02-08
Arne Schwabe
Superseded
[Openvpn-devel,1/2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
[Openvpn-devel,1/2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
- - -
-
-
-
2023-02-09
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Add debug output for sent IV variables in client mode with verb 7
[Openvpn-devel,1/2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
- - -
-
-
-
2023-02-09
Arne Schwabe
New
[Openvpn-devel] Fix LibreSSL not building in Github Actions
[Openvpn-devel] Fix LibreSSL not building in Github Actions
1 - -
-
-
-
2023-02-09
Arne Schwabe
Accepted
[Openvpn-devel,v2,5/5] Add building unit tests with mingw to github actions
Untitled series #2009
1 - -
-
-
-
2023-02-09
Arne Schwabe
Accepted
[Openvpn-devel,1/2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
[Openvpn-devel,1/2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
- - -
-
-
-
2023-02-10
Arne Schwabe
Rejected
[Openvpn-devel,1/4] Combine extra_tun/frame parameter of frame_calculate_payload_overhead
Collections of miscellenaous patches
1 - -
-
-
-
2023-02-10
Arne Schwabe
Accepted
«
1
2
...
8
9
10
11
»