[PATCH applied] Re: ssl: Ignore hard reset packets with a non-zero packet id

Applied this to my t_server testbed, and it nicely displays how the
server ignores the misbehaving client (patch in #1831)

Jul 31 20:02:56 gentoo tap-tcp-p2p[4964]: TLS Error: received P_CONTROL_HARD_RESET_CLIENT_V2 with packet id 1 from [AF_INET6]::ffff:194.97.140.21:14610 -- 0 was expected, ignoring packet
Jul 31 20:03:18 gentoo tap-tcp-p2p[4964]: TLS Error: received P_CONTROL_HARD_RESET_CLIENT_V2 with packet id 1 from [AF_INET6]2001:608:0:814::f000:21:33270 -- 0 was expected, ignoring packet

.. and all "9" instances (p2p tcp tls) are now succeeding.  Great :-)

Your patch has been applied to the master, release/2.7 and release/2.7
branch (bugfix).  Not backported to 2.5 as it's annoying but not very
critical.

commit d1e67f419f1ea9121d44fa4b91c59e7209785e57 (master)
commit 6d7685f41b0d3efad549543eae7081a1aa9e57f2 (release/2.7)
commit 6ad370fa03806a7bf73eda8384131bc6175e4e09 (release/2.6)
Author: Frank Lichtenheld
Date:   Fri Jul 31 13:45:54 2026 +0200

     ssl: Ignore hard reset packets with a non-zero packet id

     Signed-off-by: Frank Lichtenheld <[email protected]>
     Acked-by: Arne Schwabe <[email protected]>
     Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1832
     Message-Id: <[email protected]>
     URL: https://www.mail-archive.com/[email protected]/msg38098.html
     Signed-off-by: Gert Doering <[email protected]>


--
kind regards,

Gert Doering