Differential D8813

OpenVPN 2.4 preview
AbandonedPublic
Actions

Authored by mandree on Dec 15 2016, 11:14 PM.

Details

Reviewers: None

Diff Detail

Repository

rP FreeBSD ports repository

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

mandree updated this revision to Diff 22969.Dec 15 2016, 11:14 PM

mandree retitled this revision from to OpenVPN 2.4 preview.

mandree updated this object.

mandree edited the test plan for this revision. (Show Details)

mandree set the repository for this revision to rP FreeBSD ports repository.

Herald added a subscriber: mat. · View Herald TranscriptDec 15 2016, 11:14 PM

the plain port directories can be downloaded from https://people.freebsd.org/~mandree/openvpn-2.4.r1-v1.tar.xz

I tried it (by unpacking the tarball referenced in the message to the ports list as security/openvpn-test, then running

portmaster -o security/openvpn-test openvpn-2.3.14

on my laptop running FreeBSD/amd64 stable/11@r310109.

I then tried using the result to login to work (which is my usual use of openvpn); it worked.

me_cschwarz.com added a subscriber: me_cschwarz.com.Dec 16 2016, 9:53 AM

There is a test that is part of the check-TESTS target that takes a long time when building in poudriere:

Testing cipher RC2-CBC... OK
Testing cipher RC2-CFB... OK
Testing cipher RC2-OFB... OK
Testing cipher none... OK
PASS: t_lpback.sh
The following test will take about two minutes.
If the addresses are in use, this test will retry up to two times.

It really takes about two minutes. Whatever this test is testing, does it work in a jail? Otherwise it's only wasting build time...

Using the same options as for the 2.3 version of the port, I have no problems running it on my server.

In D8813#182483, @me_cschwarz.com wrote:
There is a test that is part of the check-TESTS target that takes a long time when building in poudriere:
Testing cipher RC2-CBC... OK
Testing cipher RC2-CFB... OK
Testing cipher RC2-OFB... OK
Testing cipher none... OK
PASS: t_lpback.sh
The following test will take about two minutes.
If the addresses are in use, this test will retry up to two times.
It really takes about two minutes. Whatever this test is testing, does it work in a jail? Otherwise it's only wasting build time...

Thanks. It is running a client-server test on the loopback interface and also runs smoke tests against timeouts, hence it's indeed mostly sitting there waiting for timers to expire, but I am not aware that the tests were said to be ineffective in jails. If that's something of concern, it should be taken to the upstream's openvpn-devel@ mailing list for discussion, it's not an artifact of FreeBSD packaging (there isn't a difference if you build in a jail vs. a live system as far as I can tell).