[Bug 286263] ovpn(4) DCO module requires legacy IP support

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 21 Apr 2025 10:39:00 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263

            Bug ID: 286263
           Summary: ovpn(4) DCO module requires legacy IP support
           Product: Base System
           Version: 14.3-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: zarychtam@plan-b.pwste.edu.pl

Created attachment 259767
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=259767&action=edit
connection log

Afer runnung few tests on recent stable/14 (now it's 14.3-PRERELASE) I found
that ovpn(4) cannot work when world and kernel have no support for legacy IP
(WITHOUT_INET, nooptions INET).

The ovpn(4) is loaded, but the output from ifconfig tun0 for world and kernel
built without INET support reveals that tun(4) is used instead of ovpn(4):

tun0: flags=1008043<UP,BROADCAST,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 1400
        options=4080000<LINKSTATE,MEXTPG>
        inet6 2001:yyy:xxx:c2:2::1 prefixlen 64
        inet6 fe80::1265:30ff:fe7a:9509%tun0 prefixlen 64 scopeid 0x4
        groups: tun
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        Opened by PID 2262

Client config file is 100% compatible with DCO and while running the same
OpenVPN client config on system with dual-stack support enabled everything is
fine and tun0 belongs to group:ovpn. For the test OpenVPN 2.6.14 version was
used at both ends, installed from the same openvpn-2.6.14 package built in own
poudriere.

-- 
You are receiving this mail because:
You are the assignee for the bug.