#1416 |
BSOD on Windows 10 with OpenVPN 2.5.x
|
reopened
|
Bug / Defect
|
critical
|
|
Generic / unclassified
|
#352 |
'keepalive' reconnect fails if 'remote' is specified with hostname from /etc/hosts file.
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#375 |
Improve MTU behavior
|
new
|
Feature Wish
|
major
|
|
Networking
|
#420 |
plugin API: allow for temporary failure
|
assigned
|
Feature Wish
|
major
|
|
Generic / unclassified
|
#482 |
Win64 client NDIS6 does not shut down TAP interface clearly upon disconnect
|
assigned
|
Bug / Defect
|
major
|
|
tap-windows6
|
#501 |
environment variables don't pass to windows up script
|
new
|
Feature Wish
|
major
|
|
Generic / unclassified
|
#536 |
"There are no TAP-Windows adapters on this system" after installing Windows 10 build 10049
|
new
|
Bug / Defect
|
major
|
|
tap-windows6
|
#543 |
Packets are sent in wrong order via TCP breaking HMAC verificytion
|
new
|
Bug / Defect
|
major
|
|
Networking
|
#549 |
Use vfork() instead of fork() where possible
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#558 |
problem after server restart - client doesn't accept new ip
|
new
|
Bug / Defect
|
major
|
|
Networking
|
#564 |
openvpn connection stops when network interface is removed
|
assigned
|
Bug / Defect
|
major
|
|
Management
|
#577 |
Provide a socks5 server port for user apps to use
|
new
|
Feature Wish
|
major
|
|
Generic / unclassified
|
#585 |
Authentication should be processed in parallel to avoid trafic disruption
|
new
|
Bug / Defect
|
major
|
|
plug-ins / plug-in API
|
#592 |
Tap-Windows Adapter not work Windows 10
|
accepted
|
Bug / Defect
|
major
|
|
tap-windows6
|
#595 |
Failed to auto startup in Win10
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#596 |
Add option to change the InterfaceMetric on the TAP32 adapter
|
new
|
Feature Wish
|
major
|
|
Generic / unclassified
|
#664 |
management interface missing source port for ipv6 addresses
|
new
|
Bug / Defect
|
major
|
|
Management
|
#665 |
Route: Waiting for TUN/TAP interface to come up...
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#668 |
route_vpn_gateway environment variable not set when no routes pushed
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#687 |
SIGTERM (soft) lost if followed by a SIGUSR1/SIGHUP restart during the exit-notify wait
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#712 |
connection issue with PKCS#11 support
|
reopened
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#721 |
tap-windows6: Implement option to disable source IP check of ARP requests
|
new
|
Patch submission
|
major
|
|
tap-windows6
|
#744 |
Automatic restarting the VPN connection fails, if smartcard authentication is used
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#753 |
OpenVPN should update systemd-resolved on systems running it
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#837 |
HKCU\Software\OpenVPN-GUI is deleted if "version" key is missing
|
new
|
Bug / Defect
|
major
|
|
Windows GUI
|
#838 |
Don't ignore HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN-GUI.
|
new
|
Bug / Defect
|
major
|
|
Windows GUI
|
#839 |
Inconsistencies about OpenVPNServiceInteractive
|
new
|
Bug / Defect
|
major
|
|
Windows GUI
|
#841 |
Tap-windows fails with Error = 0xe0000246 -
|
new
|
Bug / Defect
|
major
|
|
tap-windows
|
#843 |
Incorrect warning message when dropping packets because of "Recursive routing detected"
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#847 |
Long lived crypto "state" client lock-up
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#855 |
openvpn should check that there's a working TAP before even attempting to create a tunnel
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#856 |
Missing port in "status 2" management in "Real Address" field (under ipv6 config)
|
new
|
Bug / Defect
|
major
|
|
IPv6
|
#857 |
Connection attempt from Windows client causes server computer network lockup for SSH connections.
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#859 |
Client won't receive PUSH answer
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#878 |
Route: Waiting for TUN/TAP interface to come up...
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#881 |
OpenVPN v2.4 breaks --status formatting of client IP:port on FreeBSD
|
new
|
Bug / Defect
|
major
|
|
Networking
|
#885 |
Pressing reconnect fails to reconnect with auth failure
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#894 |
(v)s(n)printf hardening
|
new
|
Patch submission
|
major
|
|
Generic / unclassified
|
#895 |
Connection not restored after network change
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#910 |
Browsers' domain name resolution is not done through VPN if GUI wasn't started with "Run as adminitstator"
|
new
|
Bug / Defect
|
major
|
|
Windows GUI
|
#911 |
interface mtu calculation in 2.4 significantly different from 2.3
|
accepted
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#914 |
user flag does not kill root
|
new
|
Bug / Defect
|
major
|
|
Management
|
#925 |
Encrypted Backend Management Interface
|
new
|
Feature Wish
|
major
|
|
Management
|
#926 |
Invalid tun MTU if link-mtu is in use
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#929 |
remember password is nonfunctional
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#931 |
TAP mode can loop packets back to the originating client
|
accepted
|
Bug / Defect
|
major
|
|
Networking
|
#937 |
Socket option "IPV6_V6ONLY=0" not allowed on DragonFlyBSD and OpenBSD
|
new
|
Bug / Defect
|
major
|
|
IPv6
|
#945 |
systemd: LimitNPROC too low, wrong knob
|
accepted
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#949 |
Forward Error Correction for OpenVPN
|
new
|
TODO (General task list)
|
major
|
|
Generic / unclassified
|
#950 |
Long-running VPN session stops decrypting data
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#951 |
learn-address script should have dev env variable defined for delete too
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#952 |
"comp-lzo no" and "compress" options not compatible
|
new
|
Bug / Defect
|
major
|
|
Configuration
|
#953 |
Dual-Stack Server with tls-auth has errors when IPv6 clients connect
|
new
|
Bug / Defect
|
major
|
|
IPv6
|
#956 |
Management Interface does not query for PKCS#11 token password in daemon mode
|
new
|
Bug / Defect
|
major
|
|
Management
|
#961 |
[MacOS] OpenVPN fails to use crypto token when run daemonized
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#962 |
/etc/openvpn does not support symlinks anymore
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#964 |
connection fails when VirtualBox is installed
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#965 |
openvpn fails on reconnect when server is restarted
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#967 |
Server not initializing Encrypt/Decrypt keys
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#972 |
openvpn-gui does not show login/password window on "verb 30"
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#973 |
restart network adapter leads to "AUTH_FAILED"
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#978 |
HMAC authentication failed error message lacking IP address
|
new
|
Feature Wish
|
major
|
|
Generic / unclassified
|
#1004 |
VPN routes stay intact when changed local network but can't reconnect to VPN from that new local network
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1005 |
Chain CA fails with 1.2.6
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#1040 |
Same problem of #897 apollo lake cpu
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#1070 |
IPv6 packet received by L2 client breaks MAC mapping?
|
new
|
Bug / Defect
|
major
|
|
Networking
|
#1082 |
Not clear for how long does openVPN caches the resolved IP address of remote host
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1146 |
Error in add_block_dns_filters(): FwpEngineOpen: open fwp session failed : In der Endpunktzuordnung sind keine weiteren Endpunkte verfügbar. [status=0x6d9]
|
new
|
Bug / Defect
|
major
|
|
Networking
|
#1166 |
Key renotiation blocks openvpn server process
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#1189 |
regarding unpriv-ip command
|
reopened
|
Patch submission
|
major
|
|
Generic / unclassified
|
#1215 |
No PIN prompt for PKCS#11
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1216 |
Certificate via MI with OpenSSL 1.1.1 errors with "Unknown Padding Type"
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1234 |
TAP device creation fails under Windows7x64 for TAP v. > 9.21.2
|
assigned
|
Bug / Defect
|
major
|
|
tap-windows6
|
#1242 |
Dropped Packages on Windows Server 2012 with routing enabled
|
new
|
Bug / Defect
|
major
|
|
Networking
|
#1250 |
"Import file" fails to import critical files
|
new
|
Bug / Defect
|
major
|
|
Windows GUI
|
#1252 |
Unable to reconnect after Windows standby / hibernation
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1257 |
capath does not refresh CRL and also disable crl-verify
|
assigned
|
Bug / Defect
|
major
|
|
Crypto
|
#1269 |
tap-windows6: add an identifier to the inf file to make win7/win10 driver versions different
|
assigned
|
Bug / Defect
|
major
|
|
tap-windows6
|
#1289 |
Using x509-username-field
|
new
|
Bug / Defect
|
major
|
|
Crypto
|
#1295 |
Windows 10 2004 breaks wintun driver
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1329 |
starting a server instance a second time (failing) messes up routing for the first instance
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1331 |
wintun does not support dhcp-option DOMAIN
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1358 |
port-share origin file scrambles IPv6 address
|
new
|
Bug / Defect
|
major
|
|
IPv6
|
#1375 |
Applying dhcp-option DOMAIN fails for wintun if domain contains hyphens ("-")
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1391 |
Commas in commonName conflict with status_open files like --ifconfig-pool-persist and --status
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1398 |
wintun head/tail value is over capacity
|
assigned
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1437 |
Documentation for --client-nat is wrong
|
new
|
Bug / Defect
|
major
|
|
Documentation
|
#1440 |
Problem reconnecting when dynamic challenge and password file are used.
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1463 |
Script security warnings - Revisit code and decide WARN or Note ?
|
reopened
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1471 |
State stuck at AUTH after reneg failure and recovery
|
new
|
Bug / Defect
|
major
|
|
Generic / unclassified
|
#1478 |
Consider remove TLS 1.0/1.1, and recommend using TLS 1.3, if not possible for now, mark TLS 1.0/1.1 as insecure, remove TLS 1.0/1.1 in the future.
|
assigned
|
Feature Wish
|
major
|
|
Generic / unclassified
|
#1479 |
Add support of X448 and X25519 key exchange algorithm, and prefer using X448/X25519
|
assigned
|
Feature Wish
|
major
|
|
Crypto
|
#1485 |
Saving PIN for OpenVPN client
|
new
|
Feature Wish
|
major
|
|
Configuration
|
#23 |
Integrate code security analysis tools into Buildbot
|
accepted
|
TODO (General task list)
|
minor
|
|
Generic / unclassified
|
#131 |
client management interface user authentication abort inconsistency
|
new
|
Bug / Defect
|
minor
|
|
Management
|
#167 |
UNDEF user with big uptime
|
new
|
Bug / Defect
|
minor
|
|
Generic / unclassified
|
#245 |
Encoding problem when running openvpn on Windows Command Prompt
|
assigned
|
Bug / Defect
|
minor
|
|
Generic / unclassified
|
#345 |
management interface reports incorrect state after TLS handshake failure and renegotiation
|
new
|
Bug / Defect
|
minor
|
|
Management
|
#346 |
Set tap device link status based on openvpn connection state
|
new
|
Feature Wish
|
minor
|
|
Generic / unclassified
|
#386 |
Cryptoapicert SUBJ: selector doc
|
new
|
Bug / Defect
|
minor
|
|
Documentation
|