Re: When does "CC-EEN exit message received by peer" occur?

Gert Doering <[email protected]> Fri, 16 Aug 2024 18:52:34 +0200

Newsgroups	gmane.network.openvpn.user
Message-ID	<[email protected]>

Hi,

On Fri, Aug 16, 2024 at 09:57:32AM +0200, Ralf Hildebrandt via Openvpn-users wrote:
> Under which circumstances is such a "CC-EEN exit message" generated
> (and which side generated it)?

that's the "control channel explicit-exit notify" message.

It is triggered if you have --explicit-exit-notify configured on
either client or server, and that side terminates the tunnel (so,
client is ctrl-c'ed, or server terminates the client instance due
to a management command etc).

"CC" only happens for 2.6+<->2.6+ combinations - this is a new addition
in 2.6.0, sending the EEN message as proper control-channel message, not
as magic data packet (OCC).  The primary reason was to make the DCO kernel
level more straightforward - it already passes all control-channel packets
to userland, but for OCC EEN (old style) extra code would be needed in
kernel.

It turned out later that receiving and handly OCC EEN is not actually that
much code, and we might end up supporting that (for pre-2.6 peers) anyway,
but as far as I'm aware no kernel DCO has implemented it yet.

</historic note>

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

signature.asc (application/pgp-signature, 630 B)