similar to: tinc and polarssl (openwrt)

I've tried my best searching for whether this question has already been posted to tinc listservs, so apologies if this is a repeat question. Is it possible to use tinc with SSL implementations besides OpenSSL, e.g. the PolarSSL or YaSSL/cyassl libraries used on embedded distros like OpenWRT? Thank you. -- Ben West http://gowasabi.net ben at gowasabi.net 314-246-9434 -------------- next

Hi, I compiled tinc 1.1pre14 for android 6, then i created the config for tinc. When i try to start tinc, it can not connect to /dev/tun I have looked for information on android/tinc and /dev/tun. The information i found is about system permissions, how can i start tinc on android whitout rooting my android tablet ? And set extra routing to the tinc interface. Greeting from Amsterdam,

I have some tinc nodes behind a nat router. Which ipaddress should i use in de host file for the tinc nodes behind a nat router. The internet ipaddress or the private ipaddress ? Perry

Hi, Can any one explain what the following can be used for ? I want to know , so that i can use it in the future :-) > Add support for VDE through libvdeplug. > > When compiled with vde/device.c, tinc will connect to a vde_switch instance > instead of using a tun/tap device. Perry

I am trying to compile tinc on a android tablet. When i do ./configure it does not run because the shell in not /bin/sh but /data/data/com.termux/files/usr/bin/sh. $ which sh /data/data/com.termux/files/usr/bin/sh What do i have to change to make this part of the compile work ? Greetings from Amsterdam, Perry

Hi, I am trying to install tinc on a mac. When starting tinc a /dev/tun0 is created, on linux a device is created with a custom name, something like 'ci00001'. How can i achieve the same result on a mac ? Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20130921/3acfb278/attachment.html>

Hi, I configured 2 vpn's between 2 servers. When starting the tinc on each server. De 2 vpns's look like 1 vpn. Can tinc be configure for multiple vpn's between 2 hosts or more. Lets say there are 3 servers A, B and C. I want a tinc vpn between host A en host B. And a second vpn between host B en C without is becoming one vpn. And for example a third vpn between host A en host

Hi, I want to use tinc for voip phones. How can i measure the overhead ? Compared to a direct connection ? How can i reduce overhead when tunneling voip over tinc ? Greeting from Amsterdam, Perry Couprie

Hi, Is it possible to use the chroot option during generation of the tinc keys. I want to use it like this. mkdir -p /tmp/chroot/etc/tinc/demo/hosts tincd --root /etc/chroot -K -n demo I am creating script to generate config files. And i want to create tmp files first before i copy them to /etc Greeting Perry

Hi, I have 3 tinc nodes. 2 nodes, A and B are behind a nat router. And node C with a public ipaddress. I don't now the private ipadress for node A en B. So i don't use a ipaddress adres in the host file for node A en B. For node C is use the public ipaddress. node A en B connect to node C. But node A en B don't connect to each other. What do i have to change to connect node A

Hi, I want a way to remove/deny a node from the vpn without restarting all nodes. What i did is to remove the hostfile and the ConnectTo but the node i removed is still connected. I did do a kill -HUP. How do i purge the node that i removed, without effecting the other nodes ? Greeting from Amsterdam. Perry

Hi, I use tinc with the option GraphDumpFile=/etc/tinc/ci00036/grapd.dot In the graph there is the label section: ci00036 [label = "ci00036"]; ci00037 [label = "ci00037"]; ci00038 [label = "ci00038"]; Is there an option to set the label in the tinc config file or host file to a custom text ? Something that is easy to read and has some meaning

Hey Timo, Just curious if you ever thought about supporting other than just OpenSSL? PolarSSL looks really interesting, has no major dependencies and is very lightweight compared to OpenSSL, GNUTLS or others... https://polarssl.org/ I guess it could be a lot of work, or not, anyway, I'm just curious... -- Best regards, */Charles/*

On Mon, Dec 22, 2014 at 9:30 PM, Guus Sliepen <guus at tinc-vpn.org> wrote: > Although the cryptography is now separated from the rest of the logic in > tinc, it is not really replaceable, since only OpenSSL is supported. > However, there is also a new protocol in tinc 1.1, which uses Ed25519 > and ChaCha-Poly1305. The code for those algorithms is included in tinc, > so the

Hi, I just tried to generate keys for tinc. /usr/sbin/tinc generate-keys When generating the key, the rsa key are generated. But ik get de following error, what does it means. Generating ECDSA keypair: Generating EC key failed: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown groupError during key generation! Perry

Hi, How long can the the tinc netname be ? -n, --net=NETNAME Connect to net NETNAME. Perry

Hi, I have a routing problem. When i start tinc it creates the following route in the main routing table. 192.168.2.0/24 dev nb003004 proto kernel scope link src 192.168.2.8 The problem is that i want to use extra routing tables for each tinc vpn. When i set the netmask for the tinc device to 255.255.255.255. The route is not created, how can i add it to a another route table. Setting a

Hi all, I'm wondering if the GPL-2.0 licensed mbedTLS (that's the version in OpenWrt) is 'compatible' with NUT binaries (not including the Python or Perl binaries which aren't used in OpenWrt) which is GPL 2.1+ AIUI. Because mbedTLS is the default library for OpenWrt and NSS is not yet in OpenWrt, and because OpenSSL is considered incompatible (I seem to recall reading that

Hi, When is start one vpn i get the following result: tinc10703003005 Link encap:Ethernet HWaddr C2:F7:7B:75:47:1A inet addr:192.168.3.20 Bcast:192.168.3.255 Mask:255.255.255.0 inet6 addr: fe80::c0f7:7bff:fe75:471a/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX

Hello! I am not using OpenWrt a lot anymore, and it is becoming difficult to me to test quickly the tinc package and update OpenWrt when a new tinc release is out. does anyone wants to step in as the new package Maintainer ? thanks ! Saverio