From patchwork Fri Mar 13 10:37:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Frank Lichtenheld X-Patchwork-Id: 4820 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:2755:b0:83c:d90d:321 with SMTP id j21csp1130430maq; Fri, 13 Mar 2026 03:37:31 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCVOiEt115wbTAJ7LzXxz5ZUXqEHftk+TopLHA1dxYbBUmSP7whRYNwIhp2XiB/ck9RxQoPFS7enJic=@openvpn.net X-Received: by 2002:a05:7300:e208:b0:2ba:6723:5060 with SMTP id 5a478bee46e88-2bea55edf0emr1442503eec.31.1773398250967; Fri, 13 Mar 2026 03:37:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1773398250; cv=none; d=google.com; s=arc-20240605; b=au12jd8LwxZ46PRCgUKly0lADAUgH3HlkLMT1AGOHbwz1qqUQ2KBmQxKclemP8GyZs pnJ+OZ0MFQ8R/RvYEE9H1LBcAM8iKWbe3rcJ+jrAldp5Y7xFnT6eSgsVrH+WDQTuBlt7 UW4Bd8FYFzKkkE2kyylu49cyqMohlLbNaJZxE2ySHcRJrgDsJTUymkvfQe/r5EFnSIzA R4rvqk3e1Bam/8D9GjFP6ClKLi3xK1MHZgbpl48rtLiEjtn57ZZTq1eYun2o1lk3tj32 rRM1riFtZDMLHIUz9rHeRKoIl+OCwdVonCeApvjP403sJzGGE0nXEoxx83D5TNu5JVkX KvTw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature:dkim-signature; bh=Fi1i+xNYqFI6ZHCMtf8wLpKRiHg9oHPJjyhC55WDrAY=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=fR0BeoJFJWJ2zAT/Ue2vrxLwWmoGN8qM+3VvD9QKnErAl/3vCe2LTH6wFmg+TDSQWE lfE73vX4M5aI0AoptviatoZxtAtC3mW4tSp0jNmziKQvPSTN01jDZJiKsyZeSgyqLGkD OLmLxY+ladbUHwjQfVY56CHh/BbZq4EXgz5G+qLaJe2mjaU8gT/oWXO5RARuSFY5y4Eb +NfS9/ycop4IM1YNGtfr3+n6+PByqRwaSFEJ6cd3x6FRYV8DjjwR/M1Fj/WxYN0IYv85 VsfubbVkEKwauidp+mYClcQtewEKXcImYOqeRE/NOBygjvBk0t04pK3tew3VW7CnTmFp mpbA==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=fQEWn1h7; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=mkvwBEBY; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=haQp3MzI; dkim=neutral (body hash did not verify) header.i=@lichtenheld.com header.s=MBO0001 header.b=irzmYRLz; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 5a478bee46e88-2beab53ec15si4539570eec.40.2026.03.13.03.37.30 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 13 Mar 2026 03:37:30 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=fQEWn1h7; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=mkvwBEBY; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=haQp3MzI; dkim=neutral (body hash did not verify) header.i=@lichtenheld.com header.s=MBO0001 header.b=irzmYRLz; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:References:In-Reply-To:Message-ID:Date:To:From:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=Fi1i+xNYqFI6ZHCMtf8wLpKRiHg9oHPJjyhC55WDrAY=; b=fQEWn1h7quXT8ou+hS41//Omk+ FJHCY81ysDzgtloRWw1lZDpieTO3Z9SfZMttkuX4Rny80Y/LRtU6iwwzDhvcvFnWlHiMgZ4sx9Q0j fGQMHlmYhU72sfELHNyCXNO5MJ/oIRxjBi1jzqBVj2L0QCoKdRgCLCWzBk95edfqlgxE=; Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1w0ztW-0001Yw-2Y; Fri, 13 Mar 2026 10:37:26 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1w0ztT-0001Yl-GF for openvpn-devel@lists.sourceforge.net; Fri, 13 Mar 2026 10:37:24 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=o8wNtruHD+6wTLaen03SmDcs034z5H7WbiPKY++/SVU=; b=mkvwBEBY/YHWfAQhracNkvTjU7 xzKVQ/Uvr62LoLyfhp2jrbtraYuHHw1rOdMgy6nOI5zjlaH3CQB2YFBikJCLCOKOoJP2jlmC9CHSy 1NkqNIRZjhW1UH/h/o40uMgjfoZSThN5rDOxJELFCq/hElaqO7zZqVYYoNDKzSAEjOAo=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=o8wNtruHD+6wTLaen03SmDcs034z5H7WbiPKY++/SVU=; b=haQp3MzI4j2xGY7+ho2Jso6VRZ J+mcHvkKZ279IF2GyFnqy4tlmI+MM9UAUsgfTBMSli5qytEfs1/Ig6EPguiEykCVo7xRro8vuqzof jPIT0JiOuK8RckWqCp5HbtUyL+nR5/scIWW+lpZmNmc3wvkWIDv8rsRHhDPV4JWcGOYk=; Received: from mout-p-201.mailbox.org ([80.241.56.171]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1w0ztS-0003BB-Ev for openvpn-devel@lists.sourceforge.net; Fri, 13 Mar 2026 10:37:23 +0000 Received: from smtp2.mailbox.org (smtp2.mailbox.org [IPv6:2001:67c:2050:b231:465::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-201.mailbox.org (Postfix) with ESMTPS id 4fXLX50T6nz9v8L; Fri, 13 Mar 2026 11:37:09 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lichtenheld.com; s=MBO0001; t=1773398229; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=o8wNtruHD+6wTLaen03SmDcs034z5H7WbiPKY++/SVU=; b=irzmYRLzmqWR5UmAQeTr7R7F+JxfM/9yGJ+9NJBF/7uMP4pfwo2pYiBHVh5+jmv+aR0TyK llE1bmTtBx6HDRQ+4EkG34hfnE5qIOSRoCGOSs2WFOO2/7c3LRLpjCZSfauAdTCdpQk1GX 3f+rw/M6ZlpaMehcytf+G5GHVpnGx0HP9NSM3Ml2gwzrB31VSLWuzcTJOEU4mMHTWj7l89 Pz1/qEXgj4+CvNCwZtA2TzEiX2GspnP/oYbPVhblL1fxGcysRHp7RuezKk1UvlrHHij0F7 BmsqQ5lLJCWgxSKi/g27bgfBflKSiJGw2p5Dp0679W+sjEFsXdVL2eFl7v5PpQ== Authentication-Results: outgoing_mbo_mout; dkim=none; spf=pass (outgoing_mbo_mout: domain of frank@lichtenheld.com designates 2001:67c:2050:b231:465::2 as permitted sender) smtp.mailfrom=frank@lichtenheld.com From: Frank Lichtenheld To: openvpn-devel@lists.sourceforge.net Date: Fri, 13 Mar 2026 11:37:07 +0100 Message-ID: <20260313103707.14534-1-frank@lichtenheld.com> In-Reply-To: References: MIME-Version: 1.0 X-Rspamd-Queue-Id: 4fXLX50T6nz9v8L X-Spam-Score: -0.2 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-2.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Heiko Hund Change-Id: I29a33ac23f3c1a7cf16196aecc46ec3597a22175 Signed-off-by: Heiko Hund Acked-by: Frank Lichtenheld Gerrit URL: https://gerrit.openvpn.net/c/o [...] Content analysis details: (-0.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain X-Headers-End: 1w0ztS-0003BB-Ev Subject: [Openvpn-devel] [PATCH v1] doc: improve Windows-specific options section X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1859542843950119642?= X-GMAIL-MSGID: =?utf-8?q?1859542843950119642?= From: Heiko Hund Change-Id: I29a33ac23f3c1a7cf16196aecc46ec3597a22175 Signed-off-by: Heiko Hund Acked-by: Frank Lichtenheld Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1574 --- This change was reviewed on Gerrit and approved by at least one developer. I request to merge it to master. Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1574 This mail reflects revision 1 of this Change. Acked-by according to Gerrit (reflected above): Frank Lichtenheld diff --git a/doc/man-sections/windows-options.rst b/doc/man-sections/windows-options.rst index af2fb45..8d7dcbb 100644 --- a/doc/man-sections/windows-options.rst +++ b/doc/man-sections/windows-options.rst @@ -1,6 +1,12 @@ Windows-Specific Options ------------------------- +These options are considered unknown on non-Windows platforms, resulting +in fatal error (except ``--route-method``). You may want to use +``--setenv opt`` or ``--ignore-unknown-option`` to ignore said error. +Note that pushing unknown options from server does not trigger fatal +errors. + --allow-nonadmin TAP-adapter (Standalone) Set ``TAP-adapter`` to allow access from non-administrative accounts. If ``TAP-adapter`` is omitted, all TAP adapters on the system @@ -16,12 +22,6 @@ one inside the tunnel. It uses Windows Filtering Platform (WFP) and works on Windows Vista or later. - This option is considered unknown on non-Windows platforms and - unsupported on Windows XP, resulting in fatal error. You may want to use - ``--setenv opt`` or ``--ignore-unknown-option`` (not suitable for - Windows XP) to ignore said error. Note that pushing unknown options from - server does not trigger fatal errors. - --cryptoapicert select-string *(Windows/OpenSSL Only)* Load the certificate and private key from the Windows Certificate System Store.