From: Antonio Quartulli <antonio@openvpn.net>
To: netdev@vger.kernel.org
Cc: ralf@mandelbit.com, Antonio Quartulli <antonio@openvpn.net>,
Sabrina Dubroca <sd@queasysnail.net>,
Jakub Kicinski <kuba@kernel.org>, Paolo Abeni <pabeni@redhat.com>,
Andrew Lunn <andrew+netdev@lunn.ch>,
"David S. Miller" <davem@davemloft.net>,
Eric Dumazet <edumazet@google.com>
Subject: [PATCH net-next 0/9] pull request: ovpn 2026-03-13
Date: Fri, 13 Mar 2026 21:51:30 +0100 [thread overview]
Message-ID: <20260313205139.2950-1-antonio@openvpn.net> (raw)
Hello netdev team!
This is (yet) another resend of the previous PR.
The selftest Makefile has been adjusted and we have also
addressed all AI's concerns (some were valid).
Thanks for pointing out the nipa URL, so that we could
double check the Makefile locally.
This batch includes the following changes:
* use correct constant when declaring nlattr array in ovpn_nl_key_swap_doit
* use bitops.h API when possible
* send netlink notification in case of client float event
* implement support for asymmetric peer IDs
* consolidate memory allocations during crypto operations
* add netlink notification check in selftests
* add asymmetric peer IDs check in selftest
* add FW mark check in selftest
Please pull or let me know of any issue!
Thanks a lot.
Antonio,
The following changes since commit 8f921f61005450589c0bc1a941a5ddde21d9aed9:
netlink: update outdated comment (2026-03-12 19:29:01 -0700)
are available in the Git repository at:
https://github.com/OpenVPN/ovpn-net-next.git tags/ovpn-net-next-20260313
for you to fetch changes up to d56ca0817a5fb97bd6f489f96bb63d410331f5ad:
ovpn: consolidate crypto allocations in one chunk (2026-03-13 21:36:40 +0100)
----------------------------------------------------------------
Included features:
* use bitops.h API when possible
* send netlink notification in case of client float event
* implement support for asymmetric peer IDs
* consolidate memory allocations during crypto operations
* add netlink notification check in selftests
* add FW mark check in selftest
----------------------------------------------------------------
Antonio Quartulli (1):
selftests: ovpn: allow compiling ovpn-cli.c with mbedtls3
Qingfang Deng (1):
ovpn: pktid: use bitops.h API
Ralf Lici (6):
ovpn: notify userspace on client float event
selftests: ovpn: add notification parsing and matching
ovpn: add support for asymmetric peer IDs
selftests: ovpn: check asymmetric peer-id
selftests: ovpn: add test for the FW mark feature
ovpn: consolidate crypto allocations in one chunk
Sabrina Dubroca (1):
ovpn: use correct array size to parse nested attributes in ovpn_nl_key_swap_doit
Documentation/netlink/specs/ovpn.yaml | 23 ++-
drivers/net/ovpn/crypto_aead.c | 162 ++++++++++++++++-----
drivers/net/ovpn/io.c | 8 +-
drivers/net/ovpn/netlink-gen.c | 13 +-
drivers/net/ovpn/netlink-gen.h | 6 +-
drivers/net/ovpn/netlink.c | 98 ++++++++++++-
drivers/net/ovpn/netlink.h | 2 +
drivers/net/ovpn/peer.c | 6 +
drivers/net/ovpn/peer.h | 4 +-
drivers/net/ovpn/pktid.c | 11 +-
drivers/net/ovpn/pktid.h | 2 +-
drivers/net/ovpn/skb.h | 13 +-
include/uapi/linux/ovpn.h | 2 +
tools/testing/selftests/net/ovpn/Makefile | 29 +++-
tools/testing/selftests/net/ovpn/common.sh | 101 +++++++++++--
tools/testing/selftests/net/ovpn/data64.key | 6 +-
.../selftests/net/ovpn/json/peer0-float.json | 9 ++
.../selftests/net/ovpn/json/peer0-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer0-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer0.json | 6 +
.../selftests/net/ovpn/json/peer1-float.json | 1 +
.../selftests/net/ovpn/json/peer1-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer1-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer1.json | 1 +
.../selftests/net/ovpn/json/peer2-float.json | 1 +
.../selftests/net/ovpn/json/peer2-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer2-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer2.json | 1 +
.../selftests/net/ovpn/json/peer3-float.json | 1 +
.../selftests/net/ovpn/json/peer3-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer3-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer3.json | 1 +
.../selftests/net/ovpn/json/peer4-float.json | 1 +
.../selftests/net/ovpn/json/peer4-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer4-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer4.json | 1 +
.../selftests/net/ovpn/json/peer5-float.json | 1 +
.../selftests/net/ovpn/json/peer5-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer5-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer5.json | 1 +
.../selftests/net/ovpn/json/peer6-float.json | 1 +
.../selftests/net/ovpn/json/peer6-symm-float.json | 1 +
.../selftests/net/ovpn/json/peer6-symm.json | 1 +
tools/testing/selftests/net/ovpn/json/peer6.json | 1 +
tools/testing/selftests/net/ovpn/ovpn-cli.c | 152 ++++++++++++++-----
tools/testing/selftests/net/ovpn/tcp_peers.txt | 11 +-
.../selftests/net/ovpn/test-close-socket.sh | 2 +-
tools/testing/selftests/net/ovpn/test-mark.sh | 96 ++++++++++++
.../selftests/net/ovpn/test-symmetric-id-float.sh | 11 ++
.../selftests/net/ovpn/test-symmetric-id-tcp.sh | 11 ++
.../selftests/net/ovpn/test-symmetric-id.sh | 10 ++
tools/testing/selftests/net/ovpn/test.sh | 76 ++++++++--
tools/testing/selftests/net/ovpn/udp_peers.txt | 12 +-
53 files changed, 756 insertions(+), 152 deletions(-)
create mode 100644 tools/testing/selftests/net/ovpn/json/peer0-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer0-symm-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer0-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer0.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer1-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer1-symm-float.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer1-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer1.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer2-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer2-symm-float.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer2-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer2.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer3-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer3-symm-float.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer3-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer3.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer4-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer4-symm-float.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer4-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer4.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer5-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer5-symm-float.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer5-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer5.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer6-float.json
create mode 120000 tools/testing/selftests/net/ovpn/json/peer6-symm-float.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer6-symm.json
create mode 100644 tools/testing/selftests/net/ovpn/json/peer6.json
create mode 100755 tools/testing/selftests/net/ovpn/test-mark.sh
create mode 100755 tools/testing/selftests/net/ovpn/test-symmetric-id-float.sh
create mode 100755 tools/testing/selftests/net/ovpn/test-symmetric-id-tcp.sh
create mode 100755 tools/testing/selftests/net/ovpn/test-symmetric-id.sh
next reply other threads:[~2026-03-13 20:51 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-03-13 20:51 Antonio Quartulli [this message]
2026-03-13 20:51 ` [PATCH net-next 1/9] selftests: ovpn: allow compiling ovpn-cli.c with mbedtls3 Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 2/9] ovpn: use correct array size to parse nested attributes in ovpn_nl_key_swap_doit Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 3/9] ovpn: pktid: use bitops.h API Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 4/9] ovpn: notify userspace on client float event Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 5/9] selftests: ovpn: add notification parsing and matching Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 6/9] ovpn: add support for asymmetric peer IDs Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 7/9] selftests: ovpn: check asymmetric peer-id Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 8/9] selftests: ovpn: add test for the FW mark feature Antonio Quartulli
2026-03-13 20:51 ` [PATCH net-next 9/9] ovpn: consolidate crypto allocations in one chunk Antonio Quartulli
2026-03-16 14:51 ` [PATCH net-next 0/9] pull request: ovpn 2026-03-13 Antonio Quartulli
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260313205139.2950-1-antonio@openvpn.net \
--to=antonio@openvpn.net \
--cc=andrew+netdev@lunn.ch \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=kuba@kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=ralf@mandelbit.com \
--cc=sd@queasysnail.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox