Project

General

Profile

Actions

Todo #13189

closed

Input validation should reject the combination of DCO and P2P mode

Added by Jim Pingle over 2 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
OpenVPN
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Release Notes:
Force Exclusion

Description

DCO has issues with OpenVPN's peer-to-peer mode (tunnel network /30-/32) and we should prevent that combination of settings.

It looked like it might work at first but as the DCO implementation in OpenVPN has evolved it's having issues because P2P mode can't negotiate the necessary parts for DCO.

It works fine with client/server mode (e.g. /24 tunnel network).

The only way to tell the difference is by the size of the tunnel network so we can't hide things automatically, but we can detect it on save and also note the limit in the GUI.

Actions

Also available in: Atom PDF