similar to: [CVS] humbolt:/tinc/src net.c

Sending your passphrase encrypted is all fine, but tinc sends the key with which it was encrypted about a second later... Anyone being able to intercept these two requests is authorized on the VPN. We need asymmetric authentication _now_. -- Ivo Timmermans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size:

Guus Sliepen wrote: > Spanish translation removed. Nobody maintains it, and it is severely > outdated. Maybe it encourages people to update it if you leave it? Maybe place a comment somewhere visible saying that we would like to have it updated? -- Ivo Timmermans - Tinc: Discussion list about the tinc VPN daemon Archive: http://mail.nl.linux.org/lists/ Tinc site:

Hi Tinc Mailing-Group, Having set up the kernel correctly, and got tinc running successfully, I am now trying to get two VPNs running at once. Hence I need to have two ethertap devices ( /dev/tap0 and /dev/tap1 ). The first tap0 device was created thus: mknod -m 600 /dev/tap0 c 36 16 chown 0.0 /dev/tap0 The second tap1 device was created too: mknod -m 600 /dev/tap1 c 36 17 chown 0.0 /dev/tap1

> - Indirectdata finally REALLY REALLY works now! > - More precise debug messages Hmmm ... I can't prove that using the CVS code I checked out this morning. Everything works like yesterday: I can ping the peer but I canot go beyond: *** SERVER *** Jun 27 09:04:56 lemon tinc.9[10186]: tincd 1.0pre3 (Jun 27 2000 08:53:56) startin g, debug level 4 Jun 27 09:04:56 lemon tinc.9[10186]:

Hi, here's a small list of things that need to be done, and the version when it should be ready. smartcard support 1.1 LDAP support 1.1 public/private keys for authentication 1.1 don't store passphrases in files that are called after IP addresses 1.0 use names to identify

Can anyone tell me what the absolute minimally permissive ipchains rule would be to allow tinc to operate correctly between two hosts. If we were to presume each tinc host had a default-deny policy, what ipchains command(s) would allow tinc to do its thing? I've scanned the docs on the tinc site and not found the answer- sorry if I'm blind or dumb. Thanks, Patrick - Tinc:

Hi, I'm trying to set-up a VPN using Tinc 1.0pre3. When I start tincd I get the following in /var/log/messages. On the machine that listens for incomming connections: > Mar 16 17:23:24 vpn tinc[1168]: tincd 1.0pre3 starting > Mar 16 17:23:24 vpn tinc[1168]: Ready: listening on port 655 On the machine making the connection: > Mar 16 17:16:51 mail tinc[802]: tincd 1.0pre3 starting

I gave tinc1.0pre3 a test after the modifications you have done today. It insists that it is still 1.0pre2 but this is due to the fact the you used "1" as tag for configure.in rather than "CABAL". Anyway - results were not much more successful than yesterday: *** SERVER side log file from startup until sone seconds after connection was established *** Jun 25 21:14:30 lemon

On Thu, Mar 08, 2001 at 11:51:53AM +0100, Marcel Loesberg wrote: > I'm going to build a VPN and I want to use either Tinc or FreeS/WAN. > I've started building the VPN with FreeS/WAN and I find things are getting > rather complicated. > I looks like Tinc is much easier to configure but in the FAQ and in what I've > seen of the documentation so far there is no mention of

Although we (the authors of tinc) have done our best to make tinc as secure as possible, an unfortunate combination of encryption and key exchange techniques has created a hole in at least all versions of tinc >= 0.3, including the current CVS version. Exploit: If somebody can intercept the meta protocol to a host that is running a tinc daemon, it is possible to decrypt the passphrase, which

Although we (the authors of tinc) have done our best to make tinc as secure as possible, an unfortunate combination of encryption and key exchange techniques has created a hole in at least all versions of tinc >= 0.3, including the current CVS version. Exploit: If somebody can intercept the meta protocol to a host that is running a tinc daemon, it is possible to decrypt the passphrase, which

Was running 1.0pre2 just fine, but had to move machines, so I figgured I'd give 1.0pre3 a try. After getting everything to build and figguring out the new config files, here's where I'm stuck. Start the server process (remote machine). Start the client process (local machine). In remote machine, the following shows up in syslog: tinc[2659]: Got SEGV signal In local machine, the

Hi 'tinc users' I'm new whit tinc and this mail-list. I like to build a vpn over the internet between two sites in Holland and Germany. Are there some experience whit the performance (turn-a-round en bandwidth) of a link. I want to use it for a 1,5Mb connection. Greetings, Fred Krom. - Tinc: Discussion list about the tinc VPN daemon Archive:

Hi Ivo, --On Freitag, 23. Juni 2000 01:15 +0200 Ivo Timmermans <zarq@icicle.yi.org> wrote: > I'm not sure I fully understand your patch. This is not so important since I'm trying to get 1.0pre2 running. Although I had no luck so far, I'll point out what's going wrong at the end of this mail. > For instance, you force a > key exchange when the connection is made,

Hello all, I've been playing with tinc to setup a wan between two offices of the company that I work for. I'm partially there but having a slight problem. tinc comes up between the 2 machines (both 2.2.14 debian woody machines), and I can ping from the vpn machine at office a, and get a response from office b. However, if I ping any other machine across the wan I can't get a

Hi, when I try to iniate tinc connection between two machins i get the following at the syslogs: client machine: Mar 19 18:46:31 localhost tinc[733]: Ready: listening on port 655 Mar 19 18:46:31 localhost tinc[733]: Trying to connect to 192.168.1.180 Mar 19 18:46:31 localhost tinc[733]: Connected to 192.168.1.180 port 655 Mar 19 18:46:31 localhost tinc[733]: Metadata socket read error for

JitterBug notification ivo moved PR#9 from incoming to wishlist Message summary for PR#9 From: vdongen@hetisw.nl Subject: map Date: Sun, 2 Jul 2000 18:23:20 0200 (CEST) 0 replies 0 followups Notes: This is a nice idea on itself, but not really doable in tinc itself. What would be nice is the ability to control tinc realtime with some sort of GUI tool. This tool can then be used for much

Hello, I'm trying to set up a vpn using tinc, so I installed tinc with the rpm version on my firewall as a listener. Setting up the tap device is no problem. The file /etc/tinc/tinc.conf looks like: TapDevice = /dev/tap0 MyVirtualIP = 192.168.2.1/24 Vpnmask = 255.255.255.0 When I start the script /etc/rc.d/init.d/tinc start it says something about missing /etc/tinc/nets.boot

In my opinion there ought to be a configuration option that allows for those who have their whole OpenSSL distro located in /usr/local/ssl to configure without what now must be done: moving libraries and include files around, etc. I am reasonably certain that I built my version of OpenSSL (0.9.5a) with the default install paths and names, and it breaks horribly when I try to ./configure in your

Hi, I installed tinc as described in the documentation and started the tincd. It runs, all config files seem ok, but when I do a netstat -an, it isn't listening nor connected (to another tincd on another host). Is there a configfile error or something else? Getting the right info wasn't easy either. The info on the homepage seems old, since the manpages say other configuration issue.