[Bug 286263] ovpn(4) DCO module requires legacy IP support
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] ovpn(4) DCO module requires legacy IP support"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] ovpn(4) DCO module requires legacy IP support"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 286263] security/openvpn: requires legacy IP support for ovpn(4) DCO module to be operational"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 21 Apr 2025 10:39:00 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263
Bug ID: 286263
Summary: ovpn(4) DCO module requires legacy IP support
Product: Base System
Version: 14.3-STABLE
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: misc
Assignee: bugs@FreeBSD.org
Reporter: zarychtam@plan-b.pwste.edu.pl
Created attachment 259767
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=259767&action=edit
connection log
Afer runnung few tests on recent stable/14 (now it's 14.3-PRERELASE) I found
that ovpn(4) cannot work when world and kernel have no support for legacy IP
(WITHOUT_INET, nooptions INET).
The ovpn(4) is loaded, but the output from ifconfig tun0 for world and kernel
built without INET support reveals that tun(4) is used instead of ovpn(4):
tun0: flags=1008043<UP,BROADCAST,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 1400
options=4080000<LINKSTATE,MEXTPG>
inet6 2001:yyy:xxx:c2:2::1 prefixlen 64
inet6 fe80::1265:30ff:fe7a:9509%tun0 prefixlen 64 scopeid 0x4
groups: tun
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
Opened by PID 2262
Client config file is 100% compatible with DCO and while running the same
OpenVPN client config on system with dual-stack support enabled everything is
fine and tun0 belongs to group:ovpn. For the test OpenVPN 2.6.14 version was
used at both ends, installed from the same openvpn-2.6.14 package built in own
poudriere.
--
You are receiving this mail because:
You are the assignee for the bug.