From patchwork Wed Oct 28 20:16:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gert Doering X-Patchwork-Id: 5522 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:6022:340f:b0:118:2077:975e with SMTP id by15csp2218372lab; Wed, 28 Oct 2026 13:16:25 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBykM1ComsSw9SrVmbNxTIjUtbsMC7O2TlmdranZNlOf1vgs5iP1HkNz6GUE/D0P38ZPDdBe5W9P6CQ=@openvpn.net X-Received: by 2002:a05:6830:4411:b0:83c:2a05:c65d with SMTP id 46e09a7af769-85ac05196a1mr2975518a34.18.1793218585347; Wed, 28 Oct 2026 13:16:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1793218585; cv=none; d=google.com; s=arc-20260327; b=Wn77+VM+6nuig+A5oldth+VdIHHpRryFKxX4tmnXCtDy875FyCAHiadmnWJTUWvfDM sHrJDby5eFO7NfeOGNCqhy9aGA2T79DfXmckqvc/SZ5g9lbVl1Uh80htiwxeIfFgD8Jj 5BDqeYG2SyHDA22QuNae6COZZCvdiHF0lHLTY1Qqn7JaohejVEwIZ9ctBEKfYIdGzv3F GS4SESQXkxPl51cWA/ssASYd0bZGuLOGmjWnoDRas/8Tfp31CrijpWPn9xQDzuZBsikz fWr4pXLbXJ0fhzws2CZNJWcfegzCilnstgt0fZBNi0JohvwPtFwtyQkfNCDs8h/RyofG Ch6A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=errors-to:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature; bh=THjVg8dsG1LzpX++SOK+EV4Y+6r1RosZaSUrqoUZKxY=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=hwLProW8b9nB9xoNAgLp38O2075/4c8vvSIXuPMibB7T2Cj9t+jVSLIMWlyI8kGjtG UIWzB63leELqI2JM85a9/MQ2o366Qa437XfUIBuRKxB6zvHTMX0/8XCzBGNGIOm57Tz9 lHK+2nK7woRCgvsdiU1anqqclmjomdH0OUdMHhwWCT7LAy7UtvFf4oREthhUTIMYPDQZ I/ImPb2X/0W7xs1Ml4czIhlK588JTQwdLJjj4tXqq0DWIbXEEo92GaNtyh+98oGh5rwz 3k5m2TG2GLxkFLHtSaNeKw6OrbHobCQhP0epo/jzpH3CzwbBf9JTz3YRASSNDG/IDq/O vnmw==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b="Je2uk1/n"; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b="mkJI/aha"; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=gPbiPH4X; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=muc.de Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 46e09a7af769-85b1f83c9d4si4530101a34.79.2026.10.28.13.16.24 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Oct 2026 13:16:24 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b="Je2uk1/n"; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b="mkJI/aha"; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=gPbiPH4X; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=muc.de DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:References:In-Reply-To:Message-ID:Date:To:From:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Unsubscribe-Post: List-Owner; bh=THjVg8dsG1LzpX++SOK+EV4Y+6r1RosZaSUrqoUZKxY=; b=Je2uk1/nmYM4qQ 1knY3LS9HcYBcUnWqTRFXRmhT52VE3K5ts4MZWpNxwMl0/jDmMX2wCGhAnndC+xAfKb704i287ZNB qZqtojwXf+S2zCxaWj4x0+cMuNTgGzvtuR1i1OJcu3Xpw/Tg2RMsvF50zQc0qIotRyAVlPIq79g7E cwg=; Received: from [127.0.0.1] (helo=sfs-ml-2.v29.lw.sourceforge.com) by sfs-ml-2.v29.lw.sourceforge.com with esmtp (Exim 4.100.1) (envelope-from ) id 1xMA4L-000000003lE-1EGC; Wed, 28 Oct 2026 20:16:21 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-2.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.100.1) (envelope-from ) id 1xMA4J-000000003kt-0goj for openvpn-devel@lists.sourceforge.net; Wed, 28 Oct 2026 20:16:19 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive; bh=tUU2kiEyTjhmM/0G8PjDplvyAf1ypoZVhFcm06Nbneo=; b=mkJI/aha8Rzecc5Ai6nm+KEf5u 75zplIHMwDD7F9WZ/uTcQb6Tc7zK1U0P2xs6FHhVh6eKDAV/bCp2sLPGql0e/D5qfs8DKT8xOZCAX +w3rzZzO/8zlryf2o3YUvqQG3X3A2r3tBFQlTIyA3QVpGnPsjs5ajcgnDpEImn3YsVfw=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID: Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post: List-Subscribe:List-Post:List-Owner:List-Archive; bh=tUU2kiEyTjhmM/0G8PjDplvyAf1ypoZVhFcm06Nbneo=; b=gPbiPH4XZnXGS6jJsMsPS6nbYc Dk6ubAMpQzl+dguKot3uHwrpVoWUPnBu0rsF0jhDKFVMR9z0bj9kFd6R5Gk0jPGIlzfHAHktJe5Hx juNS3NpXBf1CDX4oU/37EZC1R9ZeR/IGQluWuA4NEtJAusKUKc8ys57S+hDdoIZmiYQ0=; Received: from [193.149.48.129] (helo=blue.greenie.muc.de) by sfi-mx-1.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.100.1) id 1xMA4H-0000000028w-06Bt for openvpn-devel@lists.sourceforge.net; Wed, 28 Oct 2026 20:16:19 +0000 Received: from blue.greenie.muc.de (localhost [127.0.0.1]) by blue.greenie.muc.de (8.18.1/8.18.1) with ESMTP id 69SKGAt9013703 for ; Wed, 28 Oct 2026 21:16:10 +0100 Received: (from gert@localhost) by blue.greenie.muc.de (8.18.2/8.18.1/Submit) id 69SKG9Ui013702 for openvpn-devel@lists.sourceforge.net; Wed, 28 Oct 2026 21:16:09 +0100 From: Gert Doering To: openvpn-devel@lists.sourceforge.net Date: Wed, 28 Oct 2026 21:16:04 +0100 Message-ID: <20261028201609.13684-1-gert@greenie.muc.de> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-1.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Selva Nair Change-Id: I464672facb34de83930eddc4e86826d3b1cd3edd Signed-off-by: Selva Nair Acked-by: Arne Schwabe Gerrit URL: https://gerrit.openvpn.net/c/openvpn [...] Content analysis details: (1.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Headers-End: 1xMA4H-0000000028w-06Bt Subject: [Openvpn-devel] [PATCH v1] Fix numbering of examples in management-notes.txt X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: 1880325971312652284 X-GMAIL-MSGID: 1880325971312652284 From: Selva Nair Change-Id: I464672facb34de83930eddc4e86826d3b1cd3edd Signed-off-by: Selva Nair Acked-by: Arne Schwabe Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/2068 --- This change was reviewed on Gerrit and approved by at least one developer. I request to merge it to master. Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/2068 This mail reflects revision 1 of this Change. Acked-by according to Gerrit (reflected above): Arne Schwabe diff --git a/doc/management-notes.txt b/doc/management-notes.txt index a28a1a8..eac91a4 100644 --- a/doc/management-notes.txt +++ b/doc/management-notes.txt @@ -345,29 +345,29 @@ The PASSWORD real-time message type can also be used to indicate password or other types of authentication failure: - Example 3: The private key password is incorrect and OpenVPN + Example 4: The private key password is incorrect and OpenVPN is exiting: >PASSWORD:Verification Failed: 'Private Key' - Example 4: The --auth-user-pass username/password failed, + Example 5: The --auth-user-pass username/password failed, and OpenVPN will exit with a fatal error if '--auth-retry none' (which is the default) is in effect: >PASSWORD:Verification Failed: 'Auth' - Example 5: The --auth-user-pass username/password failed, + Example 6: The --auth-user-pass username/password failed, and the server provided a custom client-reason-text string using the client-deny server-side management interface command. >PASSWORD:Verification Failed: 'custom server-generated string' - Example 6: If server pushes --auth-token to the client, the OpenVPN + Example 7: If server pushes --auth-token to the client, the OpenVPN will produce a real-time PASSWORD message: >PASSWORD:Auth-Token:foobar - Example 7: Static challenge/response: + Example 8: Static challenge/response: >PASSWORD:Need 'Auth' username/password SC:1,Please enter token PIN @@ -378,7 +378,7 @@ formatted as described in the Challenge/Response Protocol section below. - Example 8: Dynamic challenge/response: + Example 9: Dynamic challenge/response: >PASSWORD:Verification Failed: ['CRV1:R,E:Om01u7Fh4LrGBS7uh0SWmzwabUiGiW6l:Y3Ix:Please enter token PIN'] @@ -395,7 +395,7 @@ in the Challenge/Response Protocol section below See the "Challenge/Response Protocol" section below for more details -about examples 7 and 8, including how the management interface client +about examples 8 and 9, including how the management interface client should respond. COMMAND -- forget-passwords