From patchwork Mon Oct 6 14:42:47 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Christian Kujau X-Patchwork-Id: 4463 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:7505:b0:72f:f16c:e055 with SMTP id r5csp6883005mai; Mon, 6 Oct 2025 07:43:11 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCUgLPMp4mGf5jIyrZcOprzyDm/55T4P4TqTSyCKsb6+Y9UxvTe3lxTNU9zc2X77nlNGrIwvrdJJs5k=@openvpn.net X-Google-Smtp-Source: AGHT+IFyQsZAlPZFBqIjFnf5dyOZLsh6R1zCTJfEcWTa8HXw9q3g9+CWL2BUQ2Sq2nU5W5n7LqPY X-Received: by 2002:a05:6830:617:b0:7bc:31fe:57a9 with SMTP id 46e09a7af769-7bf7733d0acmr5657212a34.31.1759761791167; Mon, 06 Oct 2025 07:43:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1759761791; cv=none; d=google.com; s=arc-20240605; b=PU/9/i8fouhpOuSWoS4b61tKndqQLyGO8zfA3ssSdWCD2vK0KEvEN7RMjxpECCFlUB el2zYJZORKq/pkeaLyW/7BCyfzO3ut1GBSNnnjzfawvA4q2F4yH//4/CbfkKhj3rEYEb xzq4t5434EPgMBaCQ4bcwKWq4X6e4SG/DyfC8fKaAHJpAKvHj0qNxXwawitiC+t2Dypu 9XUtA3aVl8QRt4Lvja404r9RjvxrJjVetFJ9AVMP09nA+Fdwsp3x0XowiM1Xi8oAL3sp GBC4rAKeIVFf96j6Zraq+7ePaj6bHaURC7bJNmV5utzKlQ9CTkejRy4rU3EYw5VpPcB9 xPOQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:content-transfer-encoding:cc:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature; bh=2sdMWWTiFFgHg/FTtTu7Xl991nNa+2+Pgv9XSn5RDro=; fh=lqJ7oe2CYM4cKI7y1a6c/XFf9Ab/9G1kgu1qvczwDZs=; b=NEwePd6ZY6xG3O471aVNbQmdOnMncM5QQX0SaJ0Z9IeiXTsdr7K+iH/74jeKuTEXG5 7e126g3awmW5A8urKDEWBlS2ttMQM/orAcVgcL3sn9HumpXEHYIHX/3uMdVzqQwBa4KD /jMBSlMSccQiUDwaQouwTSHASd/SBlHVmbmvfyn94mC05T5Q8yuMiKzRDdl/9Xocodqm VYFcupmHinC98BHde1qcCgo4SuYKOxpywWKlIRB79dmFQRpzzY2MoYHeIz45ii5SQ9sy yk9/J4mEGgojAivucibtYVhcoSc8jY7WekWeRjZAXWrVQny5VXNzA+Pq+erQfb9hucOv Bv1Q==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b="D2UqaKo/"; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b="LUyq/rMi"; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=AgICu5Y5; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nerdbynature.de Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 46e09a7af769-7bf42a59cf4si3370427a34.235.2025.10.06.07.43.10 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 06 Oct 2025 07:43:10 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b="D2UqaKo/"; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b="LUyq/rMi"; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=AgICu5Y5; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nerdbynature.de DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type:Cc: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:References:In-Reply-To:Message-ID:Date:To:From:Sender: Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender :Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=2sdMWWTiFFgHg/FTtTu7Xl991nNa+2+Pgv9XSn5RDro=; b=D2UqaKo/EKL7gWEAdGvKeJGbym 2rmG7Lh9gIMOIMI9qyAoVYlcjUpvLzXwm/p6bpHlgH/rWHFefOsWkCZUXATA8xjkwjW8l6xSBxKtJ 4WYq/NGDOXvfWdZL+n8TtD8mrN7CoHJlG25xN+geACjDzGMsk80m76JlWHhMYL2mjaRU=; Received: from [127.0.0.1] (helo=sfs-ml-2.v29.lw.sourceforge.com) by sfs-ml-2.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1v5mQb-0003dX-IA; Mon, 06 Oct 2025 14:43:06 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-2.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1v5mQZ-0003dG-IS for openvpn-devel@lists.sourceforge.net; Mon, 06 Oct 2025 14:43:04 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=p88/h8rF4RLqwiIjyjeHnAFKQGcrfeVX6rCULiFL9UY=; b=LUyq/rMiyiMRx2yKLH3wT8cSNL dVA/aVQ2D8agXMxZhecUtfkpZ6bCZYu2yqwKjd5nuBQJaFFyyMJKDWQWPb7q45q16sNdWTVfC7sHn MG9LEcFFP04DYJ66zQyQ0ozdjl6yBqw8qEzO6NaPUK6wWEo0udgaMnMDfjXhN50Oe38w=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=p88/h8rF4RLqwiIjyjeHnAFKQGcrfeVX6rCULiFL9UY=; b=AgICu5Y5ypQ4dAYJGuEmQvyWof bafC4yzLutO1SztGpNOkXIp08ZcMI2utB28Y0aZcE8M65ct1SyOTaWLj41alM71qt5v8CstwMe8d4 A9OEHrtwPp+HZMnYjWgIk6nm6iBNNvsUETIJuOSWAadO47ddNItGYFRbQQVOy595W6KA=; Received: from trent.utfs.org ([94.185.90.103]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1v5mQZ-0007np-HH for openvpn-devel@lists.sourceforge.net; Mon, 06 Oct 2025 14:43:04 +0000 Authentication-Results: mail.nerdbynature.de; dmarc=fail (p=none dis=none) header.from=nerdbynature.de Received: from localhost (localhost [IPv6:::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by trent.utfs.org (Postfix) with UTF8SMTPS id 9153A602C3; Mon, 06 Oct 2025 16:42:54 +0200 (CEST) From: Christian Kujau To: openvpn-devel@lists.sourceforge.net Date: Mon, 6 Oct 2025 16:42:47 +0200 Message-ID: <20251006144249.23672-2-lists@nerdbynature.de> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20251006144249.23672-1-lists@nerdbynature.de> References: <20251006144249.23672-1-lists@nerdbynature.de> MIME-Version: 1.0 X-Spam-Score: 0.0 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-2.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Christian Kujau * http://www.cs.ucsd.edu/users/mihir/papers/hmac.html - 404, RFC104 basically * http://sites.inka.de/sites/bigred/devel/tcp-tcp.html - 404, unfortunately * http://www.ietf.org/rfc/rfc2246.txt - HTTPS [...] Content analysis details: (0.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- X-Headers-End: 1v5mQZ-0007np-HH Subject: [Openvpn-devel] [PATCH v2 1/2] doc: Fix hyperlinks in openvpn(8) X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Christian Kujau Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1845243979892169761?= X-GMAIL-MSGID: =?utf-8?q?1845243979892169761?= From: Christian Kujau * http://www.cs.ucsd.edu/users/mihir/papers/hmac.html - 404, RFC104 basically * http://sites.inka.de/sites/bigred/devel/tcp-tcp.html - 404, unfortunately * http://www.ietf.org/rfc/rfc2246.txt - HTTPS upgrade to the HTML version Signed-off-by: Christian Kujau --- doc/man-sections/link-options.rst | 2 +- doc/man-sections/protocol-options.rst | 2 +- doc/openvpn.8.rst | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/doc/man-sections/link-options.rst b/doc/man-sections/link-options.rst index 8334d16f..edda1ca2 100644 --- a/doc/man-sections/link-options.rst +++ b/doc/man-sections/link-options.rst @@ -338,7 +338,7 @@ the local and the remote host. used over unreliable or congested networks. This article outlines some of problems with tunneling IP over TCP: - http://sites.inka.de/sites/bigred/devel/tcp-tcp.html + https://web.archive.org/web/20141025181658/http://sites.inka.de/sites/bigred/devel/tcp-tcp.html There are certain cases, however, where using TCP may be advantageous from a security and robustness perspective, such as tunneling non-IP or diff --git a/doc/man-sections/protocol-options.rst b/doc/man-sections/protocol-options.rst index d04ace88..6eac14ce 100644 --- a/doc/man-sections/protocol-options.rst +++ b/doc/man-sections/protocol-options.rst @@ -52,7 +52,7 @@ configured in a compatible way between both the local and remote side. authentication. For more information on HMAC see - http://www.cs.ucsd.edu/users/mihir/papers/hmac.html + https://tools.ietf.org/html/rfc2104 --cipher alg This option should not be used any longer in TLS mode and still diff --git a/doc/openvpn.8.rst b/doc/openvpn.8.rst index dd9180ab..81cfe278 100644 --- a/doc/openvpn.8.rst +++ b/doc/openvpn.8.rst @@ -150,10 +150,10 @@ NOTES This product includes software developed by the OpenSSL Project (https://www.openssl.org/) -For more information on the TLS protocol, see -http://www.ietf.org/rfc/rfc2246.txt +For more information on the TLS protocol see: +https://tools.ietf.org/html/rfc2246 -For more information on the LZO real-time compression library see +For more information on the LZO real-time compression library see: https://www.oberhumer.com/opensource/lzo/ From patchwork Mon Oct 6 14:42:48 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Christian Kujau X-Patchwork-Id: 4464 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:7505:b0:72f:f16c:e055 with SMTP id r5csp6883057mai; Mon, 6 Oct 2025 07:43:15 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCXuwVtM03UbIlXXPkMLwHK3HbNqvzslHIbVWviXDdOQtBaOL659YQTcNFh5B7tx6xJ7foC24OO0c+0=@openvpn.net X-Google-Smtp-Source: AGHT+IHVOBDy69pNdx74MyVS2VslGAWMGrQ0mr7aIW6W1FXf0/zd0qXJT/kyuh4uWo1Rv7DjMcB+ X-Received: by 2002:a05:6808:211a:b0:43d:23b9:9ef5 with SMTP id 5614622812f47-43fc180eb5dmr7488165b6e.26.1759761794707; Mon, 06 Oct 2025 07:43:14 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1759761794; cv=none; d=google.com; s=arc-20240605; b=TxhFSO1DDqYOwjDUX9RFQx0NE0lhcavD/a6HzPkBYKGu/guX/B6hBDhQPZroA6ivNT ktLWl1tVRqQTllXQwOYuAo2DM9+YgJAjshNZ51nluT55l92VXuerdAN4+igaq2fm42ZT R0o1WRH/p5Iyt8uxxpWrIVdp9mkkTucmXUj+3N/kJJyhOaXKC+Q5PHLIj+J4g5YG+MLF XRIwKhsR8W3CfXiN0JOqb1JelxOE6EGWsHNhlo1QSU7tfCvdNpYJKCQUVTfWgalwQ3Va BhBTrJU+chmW4jgnGoK+MfcOmv3rTXnb2ChPBKIdN2xh6NLpo9YSm8QvUViEEiaqj2qw lgeg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:content-transfer-encoding:cc:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature; bh=QRUPNKC+s88F9HS9d01PHhuchn03rW+7weVSO5vsMyo=; fh=lqJ7oe2CYM4cKI7y1a6c/XFf9Ab/9G1kgu1qvczwDZs=; b=RH9FBsSc/9XouPCfZhGU/NgSlq1l1PfGGGyn7+4XThb5BO6ljmpvdt/veUO8QcVhg8 BgC7tvhrH6Cn1EpTDZ31ePOWUiYqQaLAoHD4O69bVoLM4MKfBAzZ7H7Gge/kK0Ea0tYU smaqSW1mzE69GwLZOsHkYEfkst8ocBkF6sEln+Q8/rZ3JSmv2KLalM4anb55pgAgFzct t29HDcdYsit0A/wkGNLZE6QPnx4z13mQO1rKduPz3d69UTy+jRGa/xQqGymXX4gTlfgR guSa9iVoDlP/aELDKX8JkC0lRAFTawsXIm4vXlsogKeQcKnHYcxG3+TT5B/useXDFb8U nSMQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=KvVpIHFv; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=FalYjD1j; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=bK6613cx; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nerdbynature.de Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 46e09a7af769-7bf3fecaf7dsi4031633a34.129.2025.10.06.07.43.14 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 06 Oct 2025 07:43:14 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=KvVpIHFv; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=FalYjD1j; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=bK6613cx; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nerdbynature.de DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type:Cc: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:References:In-Reply-To:Message-ID:Date:To:From:Sender: Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender :Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=QRUPNKC+s88F9HS9d01PHhuchn03rW+7weVSO5vsMyo=; b=KvVpIHFvXWFmqo4hSd8xFI97dx 1FrxfCshlPXxB+0pqsTjlZh8+aX4uaHgHnzAwlB+PtGFbAMuWE0Dg/hoGwWrOEYZKDaM8+xwocuMa gOjAgIWLMtdXy12vBjsnYGs3GE2TSt+M9uVtmwkgQN5WfYFiUPsCt6c1Mur0683/d4qY=; Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1v5mQg-0006CH-SM; Mon, 06 Oct 2025 14:43:10 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1v5mQd-0006C3-6i for openvpn-devel@lists.sourceforge.net; Mon, 06 Oct 2025 14:43:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=d6AcCeSJnRTX+luLKzvNozoJWpuOthwJkI29HodRYzg=; b=FalYjD1jzOFr0u4WdfehdNZvB1 G6SLu1AKKlAQfEnbxfYqkA3W/H96RdyJS3ftO5CNivvzPQ0Pgs+fm2+4OP7AaDM2dd1hf9zTQiK50 AXFuPZ8SB94QNxnuoNSavd1Cb7j67rBnePn719nZP/sQglB+l2GA7xabAjo2gFfSuBE8=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=d6AcCeSJnRTX+luLKzvNozoJWpuOthwJkI29HodRYzg=; b=bK6613cxAb96M8YPaTOz+FOCHF SSs0A+baDJnWbmrsjCpvPBb4t3GM3YDo/jrcumoR45ZzXF2D1O6zbExzt+uUwXYgOqliQ1SLgf0Ay T9TguMKQIZPLaD+vs3zsRnVl4D+RdbfAgu5YDN54sjd2f6pIb3wG38WFba2hbSFW43lA=; Received: from trent.utfs.org ([94.185.90.103]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1v5mQa-0007nr-4a for openvpn-devel@lists.sourceforge.net; Mon, 06 Oct 2025 14:43:06 +0000 Authentication-Results: mail.nerdbynature.de; dmarc=fail (p=none dis=none) header.from=nerdbynature.de Received: from localhost (localhost [IPv6:::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by trent.utfs.org (Postfix) with UTF8SMTPS id D54DF6034C; Mon, 06 Oct 2025 16:42:56 +0200 (CEST) From: Christian Kujau To: openvpn-devel@lists.sourceforge.net Date: Mon, 6 Oct 2025 16:42:48 +0200 Message-ID: <20251006144249.23672-3-lists@nerdbynature.de> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20251006144249.23672-1-lists@nerdbynature.de> References: <20251006144249.23672-1-lists@nerdbynature.de> MIME-Version: 1.0 X-Spam-Score: 0.0 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-1.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Christian Kujau * HTTPS upgrades * 404 fixes, with hopefully better helpful links to the relevant documentation * some trailing white space fixes * resurrect utun-demo.c from a different source * Don't touch openvpn. [...] Content analysis details: (0.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- X-Headers-End: 1v5mQa-0007nr-4a Subject: [Openvpn-devel] [PATCH v2 2/2] doc: HTTPS upgrades and URL fixes throughout the tree X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Christian Kujau Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1845243983765851556?= X-GMAIL-MSGID: =?utf-8?q?1845243983765851556?= From: Christian Kujau * HTTPS upgrades * 404 fixes, with hopefully better helpful links to the relevant documentation * some trailing white space fixes * resurrect utun-demo.c from a different source * Don't touch openvpn.doxyfile.in though, as it was autogenerated * Don't touch COPYING as it's an external license file * The openvpn.net URLs will be addressed some other time Signed-off-by: Christian Kujau --- CONTRIBUTING.rst | 2 +- INSTALL | 8 ++++---- PORTS | 2 +- README | 3 --- dev-tools/git-pre-commit-format.sh | 2 +- doc/android.txt | 2 +- doc/doxygen/doc_compression.h | 2 +- doc/doxygen/doc_mainpage.h | 2 +- doc/keying-material-exporter.txt | 10 +++++----- m4/pkg.m4 | 2 +- src/openvpn/list.c | 2 +- src/openvpn/memdbg.h | 2 +- src/openvpn/ntlm.c | 4 ++-- src/openvpn/options.c | 2 +- src/openvpn/options.h | 2 +- src/openvpn/route.c | 4 ++-- src/openvpn/socks.c | 2 +- src/openvpn/socks.h | 2 +- src/openvpn/tun.c | 4 ++-- src/openvpn/win32-util.c | 3 +-- 20 files changed, 29 insertions(+), 33 deletions(-) diff --git a/CONTRIBUTING.rst b/CONTRIBUTING.rst index a848f899..67baa4ec 100644 --- a/CONTRIBUTING.rst +++ b/CONTRIBUTING.rst @@ -20,7 +20,7 @@ small, atomic pieces to make reviews easier. Please make sure that the source code formatting follows the guidelines at https://community.openvpn.net/openvpn/wiki/CodeStyle. Automated checking can be -done with uncrustify (http://uncrustify.sourceforge.net/) and the configuration +done with uncrustify (https://uncrustify.sourceforge.net/) and the configuration file which can be found in the git repository at dev-tools/uncrustify.conf. There is also a git pre-commit hook script, which runs uncrustify automatically each time you commit and lets you format your code conveniently, if needed. diff --git a/INSTALL b/INSTALL index 97392722..77656b2c 100644 --- a/INSTALL +++ b/INSTALL @@ -67,7 +67,7 @@ SYSTEM REQUIREMENTS: a virtual point-to-point IP or Ethernet device. See TUN/TAP Driver References section below for more info. (2a) OpenSSL library, necessary for encryption, version 1.1.0 or higher - required, available from http://www.openssl.org/ + required, available from https://www.openssl.org/ or (2b) mbed TLS library, an alternative for encryption, version 2.0 or higher required, available from https://tls.mbed.org/ @@ -76,7 +76,7 @@ SYSTEM REQUIREMENTS: OPTIONAL: (5) LZO real-time compression library, required for link compression, - available from http://www.oberhumer.com/opensource/lzo/ + available from https://www.oberhumer.com/opensource/lzo/ (most supported operating systems have LZO in their installable packages repository. It might be necessary to add LZO_CFLAGS= and LZO_LIBS= to the configure call to make it find the LZO pieces) @@ -87,7 +87,7 @@ OPTIONAL (for developers only): Automake 1.9 or higher Libtool Git - (2) cmocka test framework (http://cmocka.org) + (2) cmocka test framework (https://cmocka.org) (3) If using t_client.sh test framework, fping/fping6 is needed Note: t_client.sh needs an external configured OpenVPN server. See t_client.rc-sample for more info. @@ -261,7 +261,7 @@ TUN/TAP Driver References: You need a TUN/TAP kernel driver for OpenVPN to work: - http://www.whiteboard.ne.jp/~admin2/tuntap/ + https://web.archive.org/web/20250504214754/http://www.whiteboard.ne.jp/~admin2/tuntap/ * Haiku: diff --git a/PORTS b/PORTS index 6e682968..099ea1a5 100644 --- a/PORTS +++ b/PORTS @@ -41,7 +41,7 @@ PORTING GUIDELINE TO A NEW PLATFORM: platform. * Make sure that a tun or tap virtual device driver exists for your platform. See - http://vtun.sourceforge.net/tun/ for examples + https://vtun.sourceforge.net/tun/ for examples of tun and tap drivers that have been written for Linux, Solaris, and FreeBSD. * Make sure you have autoconf 2.50+ and diff --git a/README b/README index 8576dbaa..bee1b253 100644 --- a/README +++ b/README @@ -34,9 +34,6 @@ For a sample VPN configuration, see To report an issue, see https://github.com/OpenVPN/openvpn/issues/new - (Note: We recently switched to GitHub for reporting new issues, - old issues can be found at: - https://community.openvpn.net/openvpn/report) For a description of OpenVPN's underlying protocol, see the file ssl.h included in the source distribution. diff --git a/dev-tools/git-pre-commit-format.sh b/dev-tools/git-pre-commit-format.sh index 6e1ac718..9b2ecaf4 100755 --- a/dev-tools/git-pre-commit-format.sh +++ b/dev-tools/git-pre-commit-format.sh @@ -34,7 +34,7 @@ # - use clang-format or uncrustify depending on presence of .clang-format # config file # -# More info on Uncrustify: http://uncrustify.sourceforge.net/ +# More info on Uncrustify: https://uncrustify.sourceforge.net/ # This file was taken from a set of unofficial pre-commit hooks available # at https://github.com/ddddavidmartin/Pre-commit-hooks and modified to diff --git a/doc/android.txt b/doc/android.txt index 394baf44..b78987db 100644 --- a/doc/android.txt +++ b/doc/android.txt @@ -7,7 +7,7 @@ This support is primarily used in the "OpenVPN for Android" app README: https://github.com/schwabe/ics-openvpn/blob/master/doc/README.txt Android provides the VPNService API -(http://developer.android.com/reference/android/net/VpnService.html) +(https://developer.android.com/reference/android/net/VpnService) which allows establishing VPN connections without rooting the device. Unlike on other platforms, the tun device is openend by UI instead of diff --git a/doc/doxygen/doc_compression.h b/doc/doxygen/doc_compression.h index 51ad7c07..cc04ae6b 100644 --- a/doc/doxygen/doc_compression.h +++ b/doc/doxygen/doc_compression.h @@ -87,5 +87,5 @@ * * @par * For more information on the LZO library, see:\n - * http://www.oberhumer.com/opensource/lzo/ + * https://www.oberhumer.com/opensource/lzo/ */ diff --git a/doc/doxygen/doc_mainpage.h b/doc/doxygen/doc_mainpage.h index 1ff8f7a1..a78d31b3 100644 --- a/doc/doxygen/doc_mainpage.h +++ b/doc/doxygen/doc_mainpage.h @@ -32,7 +32,7 @@ * This documentation describes the internal structure of OpenVPN. It was * automatically generated from specially formatted comment blocks in * OpenVPN's source code using Doxygen. (See - * http://www.stack.nl/~dimitri/doxygen/ for more information on Doxygen) + * https://www.doxygen.nl/ for more information on Doxygen) * * The \ref mainpage_modules "Modules section" below gives an introduction * into the high-level module concepts used throughout this documentation. diff --git a/doc/keying-material-exporter.txt b/doc/keying-material-exporter.txt index 4c1addc8..b158fbc1 100644 --- a/doc/keying-material-exporter.txt +++ b/doc/keying-material-exporter.txt @@ -117,21 +117,21 @@ Reference [RFC5705] "Keying Material Exporters for TLS" E. Rescorla, RFC 5705 March 2010 - http://tools.ietf.org/html/rfc5705 + https://tools.ietf.org/html/rfc5705 [RFC5929] "Channel Bindings for TLS" J. Altman, N. Williams, L. Zhu, RFC 5929, July 2010 - http://tools.ietf.org/html/rfc5929 + https://tools.ietf.org/html/rfc5929 [RFC4680] "TLS Handshake Message for Supplemental Data" S. Santesson, RFC 4680, September 2006 - http://tools.ietf.org/html/rfc4680 + https://tools.ietf.org/html/rfc4680 [RFC5878] "TLS Authorization Extension" M. Brown, R. Housley, RFC 5878, May 2010 - http://tools.ietf.org/html/rfc5878 + https://tools.ietf.org/html/rfc5878 [RFC5746] "TLS Renegotiation Indication Extension" E. Rescorla, M. Raym, S. Dispensa, N. Oskov RFC 5746, February 2010 - http://tools.ietf.org/html/rfc5746 + https://tools.ietf.org/html/rfc5746 diff --git a/m4/pkg.m4 b/m4/pkg.m4 index 13a88901..01628d8a 100644 --- a/m4/pkg.m4 +++ b/m4/pkg.m4 @@ -181,7 +181,7 @@ path to pkg-config. _PKG_TEXT -To get pkg-config, see .])[]dnl +To get pkg-config, see .])[]dnl ]) else $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS diff --git a/src/openvpn/list.c b/src/openvpn/list.c index 1b90d821..00156745 100644 --- a/src/openvpn/list.c +++ b/src/openvpn/list.c @@ -338,7 +338,7 @@ hash_iterator_delete_element(struct hash_iterator *hi) * By Bob Jenkins, 1996. bob_jenkins@burtleburtle.net. You may use this * code any way you wish, private, educational, or commercial. It's free. * - * See http://burlteburtle.net/bob/hash/evahash.html + * See https://burtleburtle.net/bob/hash/evahash.html * Use for hash table lookup, or anything where one collision in 2^32 is * acceptable. Do NOT use for cryptographic purposes. * diff --git a/src/openvpn/memdbg.h b/src/openvpn/memdbg.h index 738a775d..b92b971e 100644 --- a/src/openvpn/memdbg.h +++ b/src/openvpn/memdbg.h @@ -62,7 +62,7 @@ * * The dmalloc package can be downloaded from: * - * http://dmalloc.com/ + * https://dmalloc.com/ * * When dmalloc is installed and enabled, * use this command prior to running openvpn: diff --git a/src/openvpn/ntlm.c b/src/openvpn/ntlm.c index 521677b8..8e913dce 100644 --- a/src/openvpn/ntlm.c +++ b/src/openvpn/ntlm.c @@ -179,7 +179,7 @@ ntlm_phase_1(const struct http_proxy_info *p, struct gc_arena *gc) struct buffer out = alloc_buf_gc(96, gc); /* try a minimal NTLM handshake * - * http://davenport.sourceforge.net/ntlm.html + * https://davenport.sourceforge.net/ntlm.html * * This message contains only the NTLMSSP signature, * the NTLM message type, @@ -195,7 +195,7 @@ ntlm_phase_3(const struct http_proxy_info *p, const char *phase_2, struct gc_are { /* NTLM handshake * - * http://davenport.sourceforge.net/ntlm.html + * https://davenport.sourceforge.net/ntlm.html * */ diff --git a/src/openvpn/options.c b/src/openvpn/options.c index f35738d8..9a5e6231 100644 --- a/src/openvpn/options.c +++ b/src/openvpn/options.c @@ -23,7 +23,7 @@ /* * 2004-01-28: Added Socks5 proxy support - * (Christof Meerwald, http://cmeerw.org) + * (Christof Meerwald, https://cmeerw.org) */ #ifdef HAVE_CONFIG_H diff --git a/src/openvpn/options.h b/src/openvpn/options.h index b0330681..d306bcfe 100644 --- a/src/openvpn/options.h +++ b/src/openvpn/options.h @@ -22,7 +22,7 @@ /* * 2004-01-28: Added Socks5 proxy support - * (Christof Meerwald, http://cmeerw.org) + * (Christof Meerwald, https://cmeerw.org) */ #ifndef OPTIONS_H diff --git a/src/openvpn/route.c b/src/openvpn/route.c index 05a0c8f4..c8f28add 100644 --- a/src/openvpn/route.c +++ b/src/openvpn/route.c @@ -3259,9 +3259,9 @@ done: } /* IPv6 implementation using netlink - * http://www.linuxjournal.com/article/7356 + * https://www.linuxjournal.com/article/7356 - "Kernel Korner - Why and How to Use Netlink Socket" * netlink(3), netlink(7), rtnetlink(7) - * http://www.virtualbox.org/svn/vbox/trunk/src/VBox/NetworkServices/NAT/rtmon_linux.c + * https://www.virtualbox.org/svn/vbox/trunk/src/VBox/NetworkServices/NAT/ */ struct rtreq { diff --git a/src/openvpn/socks.c b/src/openvpn/socks.c index 85bbde5e..2c3a1f92 100644 --- a/src/openvpn/socks.c +++ b/src/openvpn/socks.c @@ -22,7 +22,7 @@ /* * 2004-01-30: Added Socks5 proxy support, see RFC 1928 - * (Christof Meerwald, http://cmeerw.org) + * (Christof Meerwald, https://cmeerw.org) * * 2010-10-10: Added Socks5 plain text authentication support (RFC 1929) * (Pierre Bourdon ) diff --git a/src/openvpn/socks.h b/src/openvpn/socks.h index b5a69b9e..4f1f0940 100644 --- a/src/openvpn/socks.h +++ b/src/openvpn/socks.h @@ -22,7 +22,7 @@ /* * 2004-01-30: Added Socks5 proxy support - * (Christof Meerwald, http://cmeerw.org) + * (Christof Meerwald, https://cmeerw.org) */ #ifndef SOCKS_H diff --git a/src/openvpn/tun.c b/src/openvpn/tun.c index e35f8893..a198a3eb 100644 --- a/src/openvpn/tun.c +++ b/src/openvpn/tun.c @@ -2294,7 +2294,7 @@ open_tun(const char *dev, const char *dev_type, const char *dev_node, struct tun struct strioctl strioc_if, strioc_ppa; /* improved generic TUN/TAP driver from - * http://www.whiteboard.ne.jp/~admin2/tuntap/ + * https://web.archive.org/web/20250504214754/http://www.whiteboard.ne.jp/~admin2/tuntap/ * has IPv6 support */ CLEAR(ifr); @@ -3125,7 +3125,7 @@ read_tun(struct tuntap *tt, uint8_t *buf, int len) /* * utun is the native Darwin tun driver present since at least 10.7 * Thanks goes to Jonathan Levin for providing an example how to utun - * (http://newosxbook.com/src.jl?tree=listings&file=17-15-utun.c) + * (https://www.cs.dartmouth.edu/~sergey/netreads/utun/utun-demo.c) */ /* Helper functions that tries to open utun device diff --git a/src/openvpn/win32-util.c b/src/openvpn/win32-util.c index 0d6d0290..305a4dc5 100644 --- a/src/openvpn/win32-util.c +++ b/src/openvpn/win32-util.c @@ -68,8 +68,7 @@ utf16to8(const wchar_t *utf16, struct gc_arena *gc) * CON, PRN, AUX, NUL, COM1, COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, * LPT1, LPT2, LPT3, LPT4, LPT5, LPT6, LPT7, LPT8, LPT9, and CLOCK$ * - * See: http://msdn.microsoft.com/en-us/library/aa365247.aspx - * and http://msdn.microsoft.com/en-us/library/86k9f82k(VS.80).aspx + * See: https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file */ static bool