ordex (Antonio)
User

Projects

User does not belong to any projects.

User Details

User Since: Oct 10 2022, 8:43 AM (209 w, 1 d)

Recent Activity
View All

Thu, Oct 1

ordex created T9386: openvpn: reject AEAD data-ciphers-fallback with shared-secret-key.

Thu, Oct 1, 7:18 PM · VyOS Rolling

ordex added a comment to T9370: openvpn: add support for cipher 'chacha-poly' in the CLI.

PR: https://github.com/vyos/vyos-1x/pull/5523
doc PR: https://github.com/vyos/vyos-documentation/pull/2324

Thu, Oct 1, 2:25 PM · VyOS Rolling

ordex created T9370: openvpn: add support for cipher 'chacha-poly' in the CLI.

Thu, Oct 1, 12:35 AM · VyOS Rolling

Wed, Sep 30

ordex added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

@mrpops2ko FYI the MTU problem I described was addressed in https://vyos.dev/T9364 . Can you give the latest rolling another try, if have a chance to?
In any case, please report any faulty findings in a new task, so we can take it from there.

Wed, Sep 30, 11:56 PM · VyOS Rolling

Tue, Sep 29

ordex added a comment to T9364: openvpn: set MTU to a reasonable default when enabling DCO.

documentation PR: https://github.com/vyos/vyos-documentation/pull/2260

Tue, Sep 29, 11:38 AM · VyOS Rolling

Mon, Sep 28

ordex added a comment to T9364: openvpn: set MTU to a reasonable default when enabling DCO.

PR: https://github.com/vyos/vyos-1x/pull/5515

Mon, Sep 28, 7:54 PM · VyOS Rolling

ordex created T9364: openvpn: set MTU to a reasonable default when enabling DCO.

Mon, Sep 28, 1:51 PM · VyOS Rolling

ordex added a comment to T9363: openvpn: site2site failure-count is not rendered properly.

PR: https://github.com/vyos/vyos-1x/pull/5512

Mon, Sep 28, 12:38 PM · VyOS Rolling

ordex created T9363: openvpn: site2site failure-count is not rendered properly.

Mon, Sep 28, 11:45 AM · VyOS Rolling

ordex added a comment to T9337: OpenVPN site-to-site: "keep-alive interval 0" leaves ping-restart armed and flaps an idle tunnel.

PR: https://github.com/vyos/vyos-1x/pull/5511

Mon, Sep 28, 9:35 AM · VyOS Rolling

Thu, Sep 24

ordex added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

Thanks for the report @mrpops2ko .
Please open a new task/bug report. This was only about the port and it's now closed.

Thu, Sep 24, 7:05 AM · VyOS Rolling

Fri, Sep 18

ordex added a comment to T9334: openvpn: server with "keep-alive interval 0" fails to start on OpenVPN 2.7.7.

This is a regression caused by the version bump we just merged (from 2.7.5 to 2.7.7).
The following commit

Fri, Sep 18, 9:54 AM · VyOS Rolling

Thu, Sep 17

ordex added a comment to T9330: bump OpenVPN to 2.7.7.

PR: https://github.com/vyos/vyos-build/pull/1307

Thu, Sep 17, 10:14 AM · VyOS Rolling

ordex created T9330: bump OpenVPN to 2.7.7.

Thu, Sep 17, 9:57 AM · VyOS Rolling

Tue, Sep 15

ordex added a comment to T9323: Fix spurious CI errors.

PR created: https://github.com/vyos/vyos-1x/pull/5476

Tue, Sep 15, 12:13 PM · VyOS Rolling

ordex created T9323: Fix spurious CI errors.

Tue, Sep 15, 12:00 PM · VyOS Rolling

Sep 12 2026

ordex added a comment to T9301: Testsuite: serial console GRUB check reads the wrong path on image installs.

PR created: https://github.com/vyos/vyos-build/pull/1302

Sep 12 2026, 8:48 PM · VyOS Rolling

Sep 11 2026

ordex created T9301: Testsuite: serial console GRUB check reads the wrong path on image installs.

Sep 11 2026, 1:08 PM · VyOS Rolling

Aug 30 2026

ordex added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

We don't need ovpn-backports (for now) since the shipped kernel already includes the ovpn module.

Aug 30 2026, 8:54 AM · VyOS Rolling

ordex added a comment to T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

Long due...PRs posted:

Aug 30 2026, 8:53 AM · VyOS Rolling

Feb 12 2026

ordex created T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module.

Feb 12 2026, 12:27 PM · VyOS Rolling

Feb 6 2025

ordex added a comment to T6545: OpenVPN CLI mistakenly has "none" as an ncp-cipher option.

Hi, I'd like to get back on this task and give it a shot, but I have troubles building and testing images from scratch.
What's the recommended procedure? Installing the latest rolling release and hacking that one?

Feb 6 2025, 8:08 PM · Restricted Project, VyOS Rolling, Bugs

Oct 29 2024

ordex added a comment to T6545: OpenVPN CLI mistakenly has "none" as an ncp-cipher option.

Thanks for the pointer. I am even surprised that this worked with --cipher. In any case, I presume that template needs an exception.

Oct 29 2024, 3:13 PM · Restricted Project, VyOS Rolling, Bugs

ordex added a comment to T6545: OpenVPN CLI mistakenly has "none" as an ncp-cipher option.

FTR --ncp-disable was only supposed to disable the cipher negotiation. It was not meant to disable encryption entirely. --data-ciphers none is the way to go, but it seems you've already figure this out.

Oct 29 2024, 12:55 PM · Restricted Project, VyOS Rolling, Bugs

Jul 10 2024

ordex created T6567: Allow passing attribute 'home' to IP address.

Jul 10 2024, 10:44 PM · VyOS Rolling

Dec 12 2023

ordex updated the task description for T5820: error on dhcpv6-server range prefix with trailing colon (:).

Dec 12 2023, 11:44 PM · VyOS Rolling, Bugs

ordex created T5820: error on dhcpv6-server range prefix with trailing colon (:).

Dec 12 2023, 11:17 PM · VyOS Rolling, Bugs

ordex created T5818: interface name mixup at boot (same PCI address).

Dec 12 2023, 2:51 PM

Sep 14 2023

ordex committed rVYOSONEX3072e507eb1c: openvpn: T3214: allow configuring server with v6 only.

Sep 14 2023, 2:37 PM

ordex committed rVYOSONEX7a0e40ce8df3: openvpn: T3214: warn when setting nopool and server-ipv6 is being used.

Sep 14 2023, 2:37 PM

ordex committed rVYOSONEX0ccbbca01b22: openvpn: T3214: specify nopool on --server line only if needed.

Sep 14 2023, 2:37 PM

Feb 23 2023

ordex added a comment to T4974: OpenVPN- Data Channel Offload(DCO).

Hey @fernando thanks for your comment.
Personally I haven't tried openvpn2.6.0 + ovpn-dco on Debian 12 yet. However, there should be no real difference as ovpn-dco can happily run up to linux-6.1/6.2 as well.

Feb 23 2023, 3:21 PM · VyOS 1.4 Sagitta

Feb 5 2023

ordex added a comment to T4974: OpenVPN- Data Channel Offload(DCO).

@Viacheslav unfortunately I am not too familiar with your build system, but basically you need to clone the ovpn-dco repository (https://github.com/OpenVPN/ovpn-dco.git) and compile it against your kernel, as you would normally do for any other out-of-tree kernel module.

Feb 5 2023, 9:42 PM · VyOS 1.4 Sagitta

Feb 4 2023

ordex added a comment to T4974: OpenVPN- Data Channel Offload(DCO).

when an incompatible option is found, OpenVPN will simply disable DCO and go back to tun (this info will be logged). Therefore the limitations should not be a reason for not including DCO in VyOS.

Feb 4 2023, 3:54 PM · VyOS 1.4 Sagitta

Nov 25 2022

ordex created T4841: add fan control.

Nov 25 2022, 9:26 PM · VyOS 1.4 Sagitta

Nov 1 2022

ordex added a comment to T3214: OpenVPN IPv6 fixes.

I created a PR to solve this specific issue (and some more related to this): https://github.com/vyos/vyos-1x/pull/1637

Nov 1 2022, 10:38 PM · VyOS 1.5 Circinus