CN gets mixed up with certificate name occasionally after disconnecting

[Samuli Seppänen]

This bug messes up iptables rulesets and status files. It was reported by two separate people to the OpenVPN mailinglists:

• ​http://article.gmane.org/gmane.network.openvpn.user/29181
• ​http://www.pubbs.net/openvpn/200906/31419/

It was also discussed in this IRC meeting:

• ​http://thread.gmane.org/gmane.network.openvpn.devel/3394

[Samuli Seppänen]

Quoting IRC meeting logs:

Agreed that this may indeed be a bug. Decided to do more research:

- check what happens if disconnect happens before connection has reached ACTIVE state
- check if this occurs when session is renegotiated (each hour)

Jan volunteered to do the testing.

Was this tested and fixed?

[Samuli Seppänen]

Janjust: ping?

[JJK]

now that I'm rereading it actually looks like a duplicate of ​https://community.openvpn.net/openvpn/ticket/160 (or vice versa).

If we cannot reproduce this error it will be very hard to find a proper fix. The work-around patch proposed in #160 would fix this bug also, but it still is an ugly hack.

[tct]

All these links no longer exist:

​​http://article.gmane.org/gmane.network.openvpn.user/29181
​​http://www.pubbs.net/openvpn/200906/31419/
​​http://thread.gmane.org/gmane.network.openvpn.devel/3394

[Gert Döring]

#160 was declared a duplicate of #1434, and *that* was fixed (2.4 and up) and closed.

So, closing this one as well.