robur-coop/miragevpn

Issues

• IV_PROTO tls-ekm does not work nicely with a debian server

  #181 opened a month ago by hannesm
  3

• Dead code in Config.a_single_param

  #238 opened 2 months ago by reynir
  0

• Qubes client support

  #95 opened 8 months ago by hannesm
  3

• Server: handle peerinfo

  #227 opened 2 months ago by reynir
  1

• IPv6 support over the tunnel

  #205 opened 5 months ago by hannesm
  1

• Download speeds vs OpenVPN tracking issue

  #206 opened 3 months ago by jwijenbergh
  19

• Handle the `key-direction` directive

  #207 opened 3 months ago by dinosaure
  1

• lwt & unix client: add routes when tunnel established (also teardown routes)

  #204 opened 5 months ago by hannesm
  0

• UDP failure behaviour of incoming packets

  #183 opened 5 months ago by hannesm
  1

• Tls-crypt key parsing issues

  #190 opened 6 months ago by reynir
  0

• Reset linger on connection failed

  #186 opened 6 months ago by reynir
  0

• Implement tls-crypt

  #166 opened 6 months ago by reynir
  0

• Make Miragevpn.handle return `action list` over `action option`

  #180 opened 6 months ago by reynir
  1

• Inline config issues

  #177 opened 6 months ago by reynir
  0

• Config: <connection> and <pkcs12> parser issues

  #175 opened 6 months ago by reynir
  0

• config: Support x509-username-field and avoid discrepancy to OpenVPN with verify-x509-name

  #91 opened 6 months ago by hannesm
  2

• (client) certificate chain verification - rooted in CA?

  #81 opened 6 months ago by hannesm
  1

• configuration parser: support "pkcs12" stanza

  #161 opened 6 months ago by hannesm
  1

• PKCS12 certificates and --ca/--extra-certs

  #173 opened 6 months ago by reynir
  3

• Replay window and replay packet id

  #148 opened 7 months ago by reynir
  4

• Inline ca, cert, key without `[inline]` forward declarations are not parsed

  #167 opened 6 months ago by reynir
  0

• tls-crypt-v2 hmac cookie: somewhat brittle

  #165 opened 7 months ago by reynir
  0

• tls-crypt-v2 hmac cookie support

  #151 opened 7 months ago by reynir
  1

• [NCP] "Modern" protocol key exchange (IV_PROTO bit 3)

  #103 opened 7 months ago by reynir
  4

• State.mtu needs refactoring

  #128 opened 7 months ago by hannesm
  0

• IV_NCP=2 and OpenVPN 2.4

  #152 opened 7 months ago by reynir
  2

• Refactor from Result.Infix to Result.Syntax

  #138 opened 7 months ago by reynir
  1

• Partial UDP packets are appended to the next packet

  #140 opened 7 months ago by reynir
  2

• Distinguish partial tcp from partial packets

  #141 opened 7 months ago by reynir
  1

• `retransmit` does not update the replay packet id

  #150 opened 7 months ago by reynir
  0

• `expected_packet` does not check the timestamp part of the replay packet id

  #149 opened 7 months ago by reynir
  0

• refactoring: connection establishment

  #146 opened 8 months ago by hannesm
  0

• Use constant-time comparison for hashes

  #142 opened 8 months ago by reynir
  0

• CI building unikernels should use correct branch

  #106 opened 8 months ago by hannesm
  0

• my_hmac, their_hmac in type session only used in tls-auth

  #131 opened 8 months ago by reynir
  1

• [NCP] send IV_MTU

  #135 opened 8 months ago by hannesm
  1

• avoid PUSH_REQUEST roundtrip (send IV_PROTO bit 2), also send IV_MTU

  #126 opened 8 months ago by hannesm
  2

• clarify handshake state in incoming_control_client

  #134 opened 8 months ago by hannesm
  0

• client and tls-client without pull

  #133 opened 8 months ago by hannesm
  1

• peer-info and cipher negotiation

  #102 opened 8 months ago by reynir
  2

• Support other cipher than AES-256-CBC

  #112 opened 8 months ago by hannesm
  0

• static key mode only partially implemented

  #116 opened 8 months ago by hannesm
  0

• config --auth not utilized

  #82 opened 8 months ago by hannesm
  3

• miragevpn-client-lwt privileged port / running as a regular user

  #96 opened 8 months ago by reynir
  2

• Omit the timestamp when we compute the hmac

  #104 opened 8 months ago by dinosaure
  1

• Config.is_valid_client_config needs additional checks for Client_static

  #99 opened 8 months ago by reynir
  2

• Config: support tls-cipher and tls-ciphersuite being empty and other woes

  #94 opened 8 months ago by hannesm
  0

• Config: Complete route-nopull support

  #92 opened 8 months ago by hannesm
  0

• `--dev tunmir` not accepted

  #85 opened 8 months ago by reynir
  3

• Nonsensical --tls-version-min, --tls-cipher and --tls-ciphersuite

  #84 opened 8 months ago by reynir
  0