fix(openvpn): survive server-initiated soft reset / rekey - #3107

Closed

Lanlan13-14 wants to merge 25 commits into

MetaCubeX:Alphafrom

Lanlan13-14:Alpha

Commits on Aug 13, 2026

fix(openvpn): survive server-initiated soft reset / rekey
Lanlan13-14
committed
cede0b8
fix(openvpn): clear rekey deadline, renew auth-token, inherit peer-id
Lanlan13-14
committed
bee4126
fix(openvpn): validate parked reset key, keep split token, merge reset ACK
Lanlan13-14
committed
aadc60a

Commits on Aug 14, 2026

fix(openvpn): surface EOF/AUTH_FAILED in token read, add ACK MRU
Lanlan13-14
committed
8e9b728
fix(openvpn): move-to-front ACK MRU matches copy_acks_to_mru
Lanlan13-14
committed
55744f6
fix(openvpn): per-packet ACK caps match CONTROL_SEND_ACK_MAX
Lanlan13-14
committed
a14e01d
fix(openvpn): propagate EOF when a complete token reply was read
Lanlan13-14
committed
28c2622
fix(openvpn): retain uncapped pending ACKs, accept complete reply with EOF
Lanlan13-14
committed
7db3d19
fix(openvpn): consume parked TLS immediately, expire lame-duck data key
Lanlan13-14
committed
a209399
fix(openvpn): require reset msg 0 and NUL-terminated push reply
Lanlan13-14
committed
4cbff69
fix(openvpn): clear token-read deadline, order parked TLS, enforce expiry
Lanlan13-14
committed
8842c18
fix(openvpn): deferred-auth outbound key selection + NUL-delimited control parse
Lanlan13-14
committed
a7113c3
fix(openvpn): per-epoch peer-activation evidence, explicit CBC HMAC write
Lanlan13-14
committed
9e48a28
fix(openvpn): control-channel replay protection, push-continuation merge, read-lock writes
Lanlan13-14
committed
371c89e
fix(openvpn): bound out-of-order control receive buffer
Lanlan13-14
committed
9f3546f
fix(openvpn): correct outbound-key selection semantics + shortened-KM2 boundary
Lanlan13-14
committed
1ae007f
fix(openvpn): honor AUTH_PENDING timeout, complete push-continuation, don't ACK dropped packets
Lanlan13-14
committed
9a0bf14
fix(openvpn): close deferred push and reliable ACK state gaps
Lanlan13-14
committed
c3c0f93
fix(openvpn): advertise and dynamically honor AUTH_PENDING
Lanlan13-14
committed
c24f336
fix(openvpn): preserve deferred-auth deadline semantics
Lanlan13-14
committed
eaa06d9
fix(openvpn): finalize deferred-auth deadline lifecycle
Lanlan13-14
committed
04a624f
fix(openvpn): retain reader-discovered push continuation
Lanlan13-14
committed
05cea9b
fix(openvpn): allow deferred rekey without token push
Lanlan13-14
committed
f20d6f5

Commits on Aug 15, 2026

fix(openvpn): install deferred receive epoch promptly
Lanlan13-14
committed
36a01ed
fix(openvpn): bound outbound use of retiring key
Lanlan13-14
committed
5f2f57f