[Bug 286263] ovpn(4) DCO module requires legacy IP support
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] ovpn(4) DCO module requires legacy IP support"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] ovpn(4) DCO module requires legacy IP support"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 21 Apr 2025 10:39:00 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263 Bug ID: 286263 Summary: ovpn(4) DCO module requires legacy IP support Product: Base System Version: 14.3-STABLE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: misc Assignee: bugs@FreeBSD.org Reporter: zarychtam@plan-b.pwste.edu.pl Created attachment 259767 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=259767&action=edit connection log Afer runnung few tests on recent stable/14 (now it's 14.3-PRERELASE) I found that ovpn(4) cannot work when world and kernel have no support for legacy IP (WITHOUT_INET, nooptions INET). The ovpn(4) is loaded, but the output from ifconfig tun0 for world and kernel built without INET support reveals that tun(4) is used instead of ovpn(4): tun0: flags=1008043<UP,BROADCAST,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 1400 options=4080000<LINKSTATE,MEXTPG> inet6 2001:yyy:xxx:c2:2::1 prefixlen 64 inet6 fe80::1265:30ff:fe7a:9509%tun0 prefixlen 64 scopeid 0x4 groups: tun nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL> Opened by PID 2262 Client config file is 100% compatible with DCO and while running the same OpenVPN client config on system with dual-stack support enabled everything is fine and tun0 belongs to group:ovpn. For the test OpenVPN 2.6.14 version was used at both ends, installed from the same openvpn-2.6.14 package built in own poudriere. -- You are receiving this mail because: You are the assignee for the bug.