-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Description
Describe the bug
OpenVPN 2.6.12 running on macOS 12 not sending IV_PLAT_VER if push-peer-info is set.
Neither Tunnelblick 4.0.1 stable nor the almost latest beta 6.0beta08 is doing that.
Windows seems to be the only platform sending this.
peer info on Server site:
Tunnelblick with push-peer-info:
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_VER=2.6.12
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_PLAT=mac
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_TCPNL=1
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_MTU=1600
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_NCP=2
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_PROTO=990
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_LZ4=1
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_LZ4v2=1
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_LZO=1
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_COMP_STUB=1
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_COMP_STUBv2=1
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_HWADDR=
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_SSL=OpenSSL_3.0.14_4_Jun_2024
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_GUI_VER="net.tunnelblick.tunnelblick_6120_6.0beta08__build_6120)"
Nov 03 13:35:41 ovpn-server[1482]: peer info: IV_SSO=webauth
Tunnelblick without push-peer-info:
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_VER=2.6.12
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_PLAT=mac
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_TCPNL=1
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_MTU=1600
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_NCP=2
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_PROTO=990
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_LZ4=1
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_LZ4v2=1
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_LZO=1
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_COMP_STUB=1
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_COMP_STUBv2=1
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_GUI_VER="net.tunnelblick.tunnelblick_6120_6.0beta08__build_6120)"
Nov 03 13:48:18 ovpn-server[1482]: peer info: IV_SSO=webauth
Windows with push-peer-info:
Nov 03 14:10:21 ovpn-server[1335]: peer info: iV_VER=2.6.12
Nov 03 14:10:21 ovpn-server[1335]: peer info: iV_PLAT=win
Nov 03 14:10:21 ovpn-server[1335]: peer info: iV_TCPNL=1
Nov 03 14:10:21 ovpn-server[1335]: peer info: iV_MTU=1600
Nov 03 14:10:21 ovpn-server[1335]: peer info: iV_NCP=2
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_PROTO=990
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_LZ4=1
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_LZ4v2=1
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_LZO=1
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_COMP_STUB=1
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_COMP_STUBv2=1
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_HWADDR=
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_SSL=OpenSSL_3.3.1_4_Jun_2024
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_PLAT_VER=10.0,_amd64_executable
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_GUI_VER=OpenVPN_GUI_11.50.0.0
Nov 03 14:10:21 ovpn-server[1335]: peer info: IV_SSO=openurl,webauth,crtext
To Reproduce
Set "push-peer-info" in a .ovpn client config with Tunnelblick on macOS.
Expected behavior
Also sending IV_PLAT_VER, maybe with kernel version or in the best case directly with the macOS version.
Version information (please complete the following information):
- OS: macOS 12
- OpenVPN version: 2.6.12
Additional context
Since commit 960524a it seems that it should be possible for other platforms than windows to send this since 2016:
In the reference manual its written that[0]:
The version of the operating system, e.g. 6.1 for Windows 7. This may be set by the client UI/GUI using --setenv. On Windows systems it is automatically determined by openvpn itself
[0]https://openvpn.net/community-resources/reference-manual-for-openvpn-2-6/