[PATCH net-next 0/6] pull request: ovpn 2026-10-12

[Antonio Quartulli <antonio@openvpn.net>]

Hi all!

Here is v4 of the ovpn batch for net-next.

It is all cleanup and selftest work this time: no functional change to
the driver. The selftests get TCP_NODELAY on ovpn-cli's TCP sockets and
proper synchronization against the server-side key setup. Ralf is added
to MAINTAINERS as ovpn reviewer.

Changes since v3:
* dropped "ovpn: send peer object along with PEER_DEL_NTF" (6/7 in v3).
  Sashiko pointed out that the peers multicast group carries no
  capability flag, so any process able to open a generic netlink socket
  can bind to it and would receive the full peer object. Putting that
  object on the group needs the matching policy change to go with it,
  and that deserves its own discussion, so both will be sent as a
  separate series.
* 4/6: ovpn-cli still sets TCP_NODELAY by default, matching what openvpn
  does since 2.7.6, but it can now be turned off with
  OVPN_TCP_NODELAY=0. The new test-tcp-nagle.sh runs the TCP suite that
  way, so peers running 2.7.0 to 2.7.5 do not lose coverage. Commit
  message reworded to say which userspace version this mirrors.
* 5/6: the background subshell that installs the server-side keys now
  writes to a log of its own, dumped when the wait fails or times out.
  It inherited a temporary file that ovpn_cmd_run() had already removed,
  so a failed new_key produced no output and only showed up later as a
  ping failure.

Patches 1 to 3 are unchanged from v3.

Please pull or let me know of any issue!

Thanks a lot,
	Antonio

Antonio Quartulli (2):
  selftests: ovpn: wait for the TCP server key setup before traffic
  MAINTAINERS: ovpn: add Ralf Lici as reviewer

Karl Mehltretter (1):
  ovpn: Fix the return value in ovpn_bind_from_sockaddr() kernel-doc

Marco Baffo (2):
  ovpn: remove redundant peer NULL checks in crypto post functions
  selftests: ovpn: enable TCP_NODELAY on TCP sockets

Ralf Lici (1):
  ovpn: remove unused work field from struct ovpn_socket

 MAINTAINERS                                   |  1 +
 drivers/net/ovpn/bind.c                       |  2 +-
 drivers/net/ovpn/io.c                         |  6 +-
 drivers/net/ovpn/socket.h                     |  2 -
 tools/testing/selftests/net/ovpn/Makefile     |  1 +
 tools/testing/selftests/net/ovpn/common.sh    | 81 +++++++++++++++----
 tools/testing/selftests/net/ovpn/ovpn-cli.c   | 39 +++++++++
 .../selftests/net/ovpn/test-close-socket.sh   |  2 +
 .../selftests/net/ovpn/test-tcp-nagle.sh      | 12 +++
 tools/testing/selftests/net/ovpn/test.sh      | 56 ++++++-------
 10 files changed, 153 insertions(+), 49 deletions(-)
 create mode 100755 tools/testing/selftests/net/ovpn/test-tcp-nagle.sh

-- 
2.55.0

The following changes since commit d8674294aefef02266c4d47ad10131f1bffbe534:

  Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2026-10-08 22:21:56 -0700)

are available in the Git repository at:

  https://github.com/OpenVPN/ovpn-net-next.git tags/ovpn-net-next-20261012

for you to fetch changes up to b2ed202907d654337d72825d743a833009010740:

  MAINTAINERS: ovpn: add Ralf Lici as reviewer (2026-10-12 15:16:49 +0200)

----------------------------------------------------------------
Included changes:
* add Ralf Lici as ovpn reviewer
* wait for the server-side key setup before generating TCP traffic in
  selftests
* enable TCP_NODELAY on TCP sockets in selftests
* drop redundant peer NULL checks in the crypto post functions
* remove the unused work field from struct ovpn_socket
* fix the documented return value of ovpn_bind_from_sockaddr()

----------------------------------------------------------------
Antonio Quartulli (2):
      selftests: ovpn: wait for the TCP server key setup before traffic
      MAINTAINERS: ovpn: add Ralf Lici as reviewer

Karl Mehltretter (1):
      ovpn: Fix the return value in ovpn_bind_from_sockaddr() kernel-doc

Marco Baffo (2):
      ovpn: remove redundant peer NULL checks in crypto post functions
      selftests: ovpn: enable TCP_NODELAY on TCP sockets

Ralf Lici (1):
      ovpn: remove unused work field from struct ovpn_socket

 MAINTAINERS                                        |  1 +
 drivers/net/ovpn/bind.c                            |  2 +-
 drivers/net/ovpn/io.c                              |  6 +-
 drivers/net/ovpn/socket.h                          |  2 -
 tools/testing/selftests/net/ovpn/Makefile          |  1 +
 tools/testing/selftests/net/ovpn/common.sh         | 81 ++++++++++++++++++----
 tools/testing/selftests/net/ovpn/ovpn-cli.c        | 39 +++++++++++
 .../selftests/net/ovpn/test-close-socket.sh        |  2 +
 tools/testing/selftests/net/ovpn/test-tcp-nagle.sh | 12 ++++
 tools/testing/selftests/net/ovpn/test.sh           | 56 +++++++--------
 10 files changed, 153 insertions(+), 49 deletions(-)
 create mode 100755 tools/testing/selftests/net/ovpn/test-tcp-nagle.sh