OpenVPN/openvpn

test environment: test --persist-tun with ping-timeout

Offen

#948 geöffnet am 30.12.2025

 (1 Kommentar) (1 Reaktion) (6 zugewiesene Personen)C (3.314 Forks)batch import
DCOenhancementfeaturehelp wanted

Repository-Metriken

Stars
 (13.839 Sterne)
PR-Merge-Metriken
 (Keine gemergten PRs in 30 T)

Beschreibung

So what we lack testing for is ping-timeout reconnects with DCO involved

  • --client side
  • connect
  • ping-timeout (30s) (triggerable via kill $CN on the server's management interface, or possibly via firewall rule in between - though timing is complicated if you want reconnect to succeed)
  • reconnect
  • ping-timeout again (30s)
  • eventually tls-renegotiate (300s)

and verify that pings through the tunnel are working all the time as one would expect this - fail while the server's instance is dead, but do not fail longer than 30-ish seconds.

Maybe also check the server's idea of "when did the client reconnect?" - which gives a good indication of "did ping-timeout actually work?".

The issue at hand is on FreeBSD, but I guess that having test coverage on Linux and Windows won't hurt either...

Contributor Guide