similar to: New Windows Build

My intention was to sign the content of export-all with the nodes' public key, which would require the corresponding private key to verify. Does this make sense ? @ > Le 26 janv. 2016 ? 20:19, Guus Sliepen <guus at tinc-vpn.org> a ?crit : > >> On Tue, Jan 26, 2016 at 07:35:10PM +0100, Anton Voyl wrote: >> >> Is it possible to sign/verify data with the ed25519

Hello, Is it possible to sign/verify data with the ed25519 keys of a tinc 1.1 host? More specifically, is it possible to sign a file with these keys using openssl? If so, how? If not, what program could be used, and how? Thanks and cheers, @

Hello list, I wonder why tinc tries to resolve host names before connection even with configured (socks5) proxy which fails behind restrictive firewalls. Is there any "workaround"? Thanks in advance! Regards Uwe -------------- n?chster Teil -------------- Ein Dateianhang mit HTML-Daten wurde abgetrennt... URL:

I mean exactly the same configuration, including the pub-pri key. Sent from iPhone

Hallo, trying to compile the current 1.1 git snapshot under Debian Wheezy gives me: configure.ac:7: option `info-in-builddir' not recognized autoreconf: automake failed with exit status: 1 Do I now need a specific newer version of automake? Seems to be the result of commit 13f9bc1ff199bea46 "Add support for out-of-tree ("VPATH") builds." Undoing the change to

Hello. I wonder if someone here performe such large scale tinc-vpn tests.. There are platforms like Imunes or CORE to do generic Ethernet and IP testing and routing, but I found that at least on Imunes it is problematic to start TAP iface on vimage on FreeBSD (at least 4.11 with I use). To fix that, I think about coding in BSD NetGraph support to tinc. But first I need to do testing if actualy

It would be nice if in a next tinc release you'll add some service variables tinc propagates to its scripts. So for example you can define in tinc.conf env variables like: SERVICE1= ... SERVICEn= and tinc will propagates all SERVICEx Variables found in tinc.conf to all scripts it calls. One can use theoretically infinite Env Var for custom behavior (like custom debug messages, conditional

Hi, Guus The use case the shared default gateway for multi-tenant, if that the case the node who own the default gateway will have problem to route with different tenant who has overlapped address scope? Is it true when no any other tools like the namespaces? (tenant1)\ (tenant2)——common node—— shared gw node—— Internet (tenant3)/ But if the each tenant have it’s dedicate default gateway, but

On Wed, Apr 27, 2016 at 05:15:57PM +0800, hshh wrote: > >Updated support for BSD tun/tap devices. > It is broken on FreeBSD tun. > > tcpdump on tun, > 09:05:07.458988 IP0 bad-hlen 0 Can you show me your tinc.conf and tinc-up script? Also, which version of FreeBSD are you using? -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org>

With pleasure we announce the release of tinc version 1.1pre13. Here is a summary of the changes: * Fix BSD tun device support that was broken in 1.1pre12. * Speed up AutoConnect when there are many host config files present without an Address. Please note that although tinc 1.1pre13 is backwards compatible with tinc 1.0.x, it is NOT compatible with tinc 1.1pre1 through 1.1pre10. -- Met

With pleasure we announce the release of tinc version 1.1pre13. Here is a summary of the changes: * Fix BSD tun device support that was broken in 1.1pre12. * Speed up AutoConnect when there are many host config files present without an Address. Please note that although tinc 1.1pre13 is backwards compatible with tinc 1.0.x, it is NOT compatible with tinc 1.1pre1 through 1.1pre10. -- Met

On Wed, Apr 27, 2016 at 05:26:36PM +0800, hshh wrote: > >> It is broken on FreeBSD tun. > >> > >> tcpdump on tun, > >> 09:05:07.458988 IP0 bad-hlen 0 It's indeed broken. As a workaround, can you try to change Device to /dev/tap10? You might have to run "kldload if_tap.ko" before starting tinc. -- Met vriendelijke groet / with kind regards,

So as best practice running tinc I should include it ? Regards Yazeed Fataar <yazeedfataar at hotmail.com> On Sun, Feb 14, 2016 at 1:08 PM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Sun, Feb 14, 2016 at 10:53:19AM +0300, Yazeed Fataar wrote: > > > Going through the options tinc has . Can someone explain exactly what the > > purpose is for -L option for the

yes, ip_forward was turned on. iptables is defaulted to ACCEPT policy on all the 3 chains. On Sat, May 14, 2016 at 1:24 AM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Sat, May 14, 2016 at 12:06:51AM +0800, Terry T wrote: > > > I have a Debian 8 64-bit machine set up as a server and apt-got the tinc > > package. I configured tinc as a bridge and everything seems

On Thu, Sep 24, 2015 at 05:45:36PM +0200, Guus Sliepen wrote: > On Thu, Sep 24, 2015 at 05:51:30PM +0300, R?zvan Sandu wrote: > > > IMHO, we need: > > > > 1. A proper tinc.service file, included by default (prepackaged) in the > > stock .deb and .rpm packages in Fedora, Debian, Ubuntu, CentOS, etc. > > > > By "proper" I mean it will start

Thank you, I will gladly try this. For your information I did do: sudo apt-get install autoconf-archive I got this from: http://stackoverflow.com/questions/30412576/autotools-syntax-error-with-ax-check-compile-flag That did not make any difference. -----Oorspronkelijk bericht----- Van: tinc-devel [mailto:tinc-devel-bounces at tinc-vpn.org] Namens Guus Sliepen Verzonden: dinsdag 27 september

I have been gradually moving more tinc servers over to ipv6 addresses on the tinc 1.1 branch. Tinc is inserting a default route for ipv6 for some reason... default via 2600:3c01:e030:f2::1 dev tinc6 proto static metric 950 pref medium In my case the default route supplied by ra is still the correct thing, but I don't see where in the code tinc is inserting this route from.... which, as

Hi everybody. I'm struggling with setting up an SPTPS connection between two of my machines. I attached the patch that I used to analyze this. Apparently different keys are derived depending on the crypto backend. Is this intentional? Linking to openssl results in char key[] = { 0xb2, 0x9d, 0x8d, 0x24, 0x91, 0x04, 0xaf, 0x25, 0x3f, 0x10, 0x34, 0x9d, 0xc7, 0x73, 0x8c, 0xe1, 0x24, 0x32,

Hello! I am not using OpenWrt a lot anymore, and it is becoming difficult to me to test quickly the tinc package and update OpenWrt when a new tinc release is out. does anyone wants to step in as the new package Maintainer ? thanks ! Saverio

Hi All Going through the options tinc has . Can someone explain exactly what the purpose is for -L option for the runtime command. So does this mean that tinc will run in RAM and will not be saved in swap (default) ? ================ -L, --mlock Lock tinc into main memory. This will prevent sensitive data like shared private keys to be written to the system swap