Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Apr 2025 18:14:48 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 286263] ovpn(4) DCO module requires legacy IP support
Message-ID:  <bug-286263-227-Yzp0nB3R7q@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-286263-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286263

--- Comment #1 from Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> ---
It looks more like OpenVPN issue, not ovpn(4) module problem. For unknown
reasons, Opnvpn disables DCO for the connection. Here's the difference between
the sessions initiated from the dual-stack-capable kernel and an INET6-only
kernel:

50c50
<   tuntap_options.disable_dco = ENABLED
---
>   tuntap_options.disable_dco = DISABLED
107c107
<   comp.flags = 24
---
>   comp.flags = 152
298c298
< DCO version: FreeBSD 14.3-PRERELEASE #6 (...)MINTAKA6ONLY
---
> DCO version: FreeBSD 14.3-PRERELEASE #24 (...)MINTAKA
335c335
< TUN/TAP device /dev/tun0 opened
---
> DCO device tun0 opened
349,350d348
< Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
< Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
365c363
< Closing TUN/TAP interface
---
> Closing DCO interface

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-286263-227-Yzp0nB3R7q>