openvpn.git/doc, branch release/2.3

Document --daemon changes and consequences (--askpass, --auth-nocache).

2015-07-14T08:13:58+00:00

Trac #574, #576

Signed-off-by: Gert Doering 
Acked-by: Steffan Karger 
Message-Id: <1436857794-29419-1-git-send-email-gert@greenie.muc.de>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9923
(cherry picked from commit b6ec7fbe96f4e200b8962ef6bb572bbb2228133e)

Improve documentation in --script-security section of the man-page

2015-06-02T08:05:51+00:00

Trac: #395

Signed-off-by: Samuli Seppänen 
Acked-by: Gert Doering 
Message-Id: <1433231982-24945-1-git-send-email-samuli@openvpn.net>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9777
Signed-off-by: Gert Doering 
(cherry picked from commit 001384e2952b54089e889edbda3196283b21641d)

slightly enhance documentation about --cipher

2015-05-27T07:10:13+00:00

point out that this is for "data channel" packets

trac #463

Signed-off-by: Gert Doering 
Acked-by: Steffan Karger 
Message-Id: <1432674063-15916-1-git-send-email-gert@greenie.muc.de>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9746
(cherry picked from commit 0fe2498ef9326e301869c9e8a9e622a3996ae579)

Disallow usage of --server-poll-timeout in --secret key mode.

2015-05-24T19:30:37+00:00

The internal machinery wants TLS for this to work, so just add this
to the (long) list of options not allowed unless either --tls-client
or --tls-server is active.  For added sanity, add an ASSERT() call
to the place where this combination caused a NULL ptr reference, and
document the restriction.

Fix trac #373

Signed-off-by: Gert Doering 
Acked-by: Steffan Karger 
Message-Id: <1432472554-24666-1-git-send-email-gert@greenie.muc.de>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9736
(cherry picked from commit 6478c1f359e6b0ea2046d9e2801830753e53c06a)

Clarify --capath option in manpage

2015-05-24T11:43:02+00:00

Prevent confusion as described in trac #422 by better explaining the
behaviour of --capath, and providing pointers to relevant openssl man
pages.

Attached are patches for the master and release/2.3 branches.  The only
difference is that in the master patch, a line referencing the
requirement for OpenSSL 0.9.7 is removed, since master already requires
OpenSSL >= 0.9.8.

-Steffan

>From 96e564e113cc26adf22e5d4b51d5754858610c3e Mon Sep 17 00:00:00 2001
From: Steffan Karger 
Date: Sun, 24 May 2015 11:20:11 +0200
Subject: [PATCH] Clarify --capath option in manpage

Prevent confusion as described in trac #422 by better explaining the
behaviour of --capath, and providing pointers to relevant openssl man
pages.

Signed-off-by: Steffan Karger 
Acked-by: Gert Doering 
Message-Id: <55619DC4.2020108@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9732
Signed-off-by: Gert Doering

Correct note about DNS randomization in openvpn.8

2015-05-24T07:08:38+00:00

Commit 4880739c17b502d00a removed DNS randomization, but this fact
never made it into the man page.

Trac #411

Signed-off-by: Gert Doering 
Acked-by: Arne Schwabe 
Message-Id: <1432414047-28674-1-git-send-email-gert@greenie.muc.de>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9726

Re-read auth-user-pass file on (re)connect if required

2015-05-23T19:21:33+00:00

Fixes trac #225 ('--auth-user-pass FILE' and '--auth-nocache' problem).

This patch is based on the changes suggested by ye_olde_iron in the trac
ticket.  Also added a note to the manpage to inform people to use
absolute paths when combining --auth-user-pass file and --auth-nocache.

Signed-off-by: Steffan Karger 
Acked-by: Gert Doering 
Message-Id: <1432386145-15045-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9717
Signed-off-by: Gert Doering 
(cherry picked from commit ac1cb5bfbb9e09e79fd737bc57999d968d77c5ad)

include ifconfig_ environment variables in --up-restart env set

2015-05-23T11:39:36+00:00

here's my patch for bug #93: missing ifconfig_* env vars after
up-restart. Tested with both IPv4, IPv6, topology subnet and topology net30

Document differences between --up-restart and --up in openvpn.8

See trac #93 and the discussion starting with <555BF270.3090706@nikhef.nl>
on the openvpn-devel mailing list.

fix trac #93

Acked-by: Gert Doering 
Message-Id: <555BF270.3090706@nikhef.nl>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9705
Signed-off-by: Gert Doering 
(cherry picked from commit db950be85d37eab40d8fffe0bc2060059f8a7e10)

Updated manpage for --rport and --lport

2015-05-18T19:30:14+00:00

[SK: v2, patch taken from trac #127 and updated to current master branch]

Signed-off-by: Robert Fischer 
Signed-off-by: Steffan Karger 
Acked-by: Gert Doering 
Message-Id: <1431976869-4948-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9701
Signed-off-by: Gert Doering 
(cherry picked from commit d3eacb2d6ebb8a42506343c54e00c72252d683f8)

Improve --tls-cipher and --show-tls man page description

2015-05-09T13:47:52+00:00

As reported in trac tickets #304, #358 and #359 (and possibly more), the
usage and interpretation of --tls-cipher (and --show-tls) is tricky.  This
patch extends the man page to explain those a bit better and point out
that --tls-cipher is an expert feature (i.e. easy to get wrong).  Also add
a notice to the --show-tls output, referring to the man page explanation.

Signed-off-by: Steffan Karger 
Acked-by: Arne Schwabe 
Message-Id: <1430840857-6123-1-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9651
Signed-off-by: Gert Doering 
(cherry picked from commit 5f66f907cfc57b89110c08e50c7aab228e090911)

Conflicts:
	doc/openvpn.8
	src/openvpn/ssl_polarssl.c