HomeFreeBSD

security/openvpn: support DCO float notifications

Description

security/openvpn: support DCO float notifications

The FreeBSD kernel added "if_ovpn: support floating clients"
on main on 2025-07-28, and merged it to 14/stable on 2025-08-13.

https://reviews.freebsd.org/D51468
https://cgit.freebsd.org/src/commit/?id=9c52600a5a150117b4396df3b868cf2516e1674c&h=main
https://cgit.freebsd.org/src/commit/?h=stable/14&id=fc387ed68f3c7b0b8da9bab13492b7bbafecb5bf

This adds a new notification from the kernel module to user space
named OVPN_NOTIF_FLOAT, which OpenVPN 2.6.14 does not support.

Backport support into OpenVPN 2.6.

Reported by: Marek Zarychta <zarychtam@plan-b.pwste.edu.pl>
Obtained from: Kristof Provost <kp@FreeBSD.org>
Obtained from: Ralf Lici <ralf@mandelbit.com>

  • modified to avoid assert() in nvlist_to_sockaddr() in src/openvpn/dco_freebsd.c

Obtained from: Gert Doering <gert@greenie.muc.de>
Tested by: Marek Zarychta <zarychtam@plan-b.pwste.edu.pl>
PR: 289303
MFH: 2025Q3 (suggestion after 10 days)

Details

Provenance
mandreeAuthored on Sep 6 2025, 12:25 AM
Parents
R11:e380faf820b0: security/vuls: Update to 0.34.0
Branches
Unknown
Tags
Unknown