From debbugs-submit-bounces@debbugs.gnu.org Fri Jul 31 19:45:11 2020 Received: (at submit) by debbugs.gnu.org; 31 Jul 2020 23:45:12 +0000 Received: from localhost ([127.0.0.1]:38815 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1k1ei7-0002AM-MN for submit@debbugs.gnu.org; Fri, 31 Jul 2020 19:45:11 -0400 Received: from lists.gnu.org ([209.51.188.17]:49018) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1k1ei4-0002AD-US for submit@debbugs.gnu.org; Fri, 31 Jul 2020 19:45:09 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:38114) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1k1ei4-0000ui-9u for guix-patches@gnu.org; Fri, 31 Jul 2020 19:45:08 -0400 Received: from server0.selfhosted.xyz ([217.64.149.7]:39294) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1k1ei2-00035U-2V for guix-patches@gnu.org; Fri, 31 Jul 2020 19:45:08 -0400 Received: from [127.0.0.1] (localhost [127.0.0.1]) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=selfhosted.xyz; s=dkim; t=1596239096; bh=7noIXKRg3U+PKIa/RegbMU4FolBGgF8hIrlxd6ljU30=; h=Date:From:To:Subject; b=lj3b/3ZwAxtzE1DXoDPHr28jY65y2qp1uHpfwKREtYqofe2CvHwU66UkENQrFl/wh CjHXh7vRAajEtf68DgWv1CFHj769IcroCihwIbUY/AOPc/HPlYF5DySaa9UYE6g6S1 urLV42F60eHVKdWTB/TlXrRtQMLhexT3jrU5JE/n4Ma0FU1qVlFHP65SQXKysjH4Ws IZRpEVIGDLagDjabpKa+RHKIKrwkzpellJNB1XcMxjP/yx0bqyufbCpOzg6wr5fMHV Kbl4/7bsec51XMw5o5qWb29AosWtjy6Xk2vTDT2uth/40m0LAdbC36m6f03k1aeZhe 2Bnv6JNqWdESw== X-Fuglu-Suspect: 92602d32d5ed4892b824583f3542c473 X-Fuglu-Spamstatus: NO Received: from [127.0.0.1] (localhost [127.0.0.1]) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Fri, 31 Jul 2020 23:44:51 +0000 From: david larsson To: guix-patches@gnu.org Subject: [bug#42544] [PATCH]: gnu: services: Make some openvpn options optional to include in the openvpn config file. Message-ID: X-Sender: david.larsson@selfhosted.xyz Received-SPF: pass client-ip=217.64.149.7; envelope-from=david.larsson@selfhosted.xyz; helo=server0.selfhosted.xyz X-detected-operating-system: by eggs.gnu.org: First seen = 2020/07/31 19:44:57 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] X-Spam_score_int: -13 X-Spam_score: -1.4 X-Spam_bar: - X-Spam_report: (-1.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_SUSPICIOUS_NTLD=1, FROM_SUSPICIOUS_NTLD_FP=1, PDS_OTHER_BAD_TLD=1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.1 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From 5014aa2f455b127deaa013f327dc1cc42d0e1772 Mon Sep 17 00:00:00 2001 From: David Larsson Date: Sat, 1 Aug 2020 00:16:02 +0200 Subject: [bug#42544] [PATCH]: gnu: servi [...] Content analysis details: (1.1 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom; id=david.larsson%40selfhosted.xyz; ip=209.51.188.17; r=debbugs.gnu.org] 0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: selfhosted.xyz (xyz)] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.51.188.17 listed in wl.mailspike.net] -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/, medium trust [209.51.188.17 listed in list.dnswl.org] 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.9 (-) From 5014aa2f455b127deaa013f327dc1cc42d0e1772 Mon Sep 17 00:00:00 2001 From: David Larsson Date: Sat, 1 Aug 2020 00:16:02 +0200 Subject: [bug#42544] [PATCH]: gnu: services: Make some openvpn options optional to include in the openvpn config file. * gnu/services/vpn.scm (openvpn-client-configuration) (openvpn-server-configuration): Change cert and key options to type maybe-string. --- gnu/services/vpn.scm | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gnu/services/vpn.scm b/gnu/services/vpn.scm index 658d5c3e88..6155fd7938 100644 --- a/gnu/services/vpn.scm +++ b/gnu/services/vpn.scm @@ -2,6 +2,7 @@ ;;; Copyright © 2017 Julien Lepiller ;;; Copyright © 2017 Clément Lassieur ;;; Copyright © 2017 Mathieu Othacehe +;;; Copyright © 2020 David Larsson ;;; ;;; This file is part of GNU Guix. ;;; @@ -277,12 +278,12 @@ servers.") "The certificate authority to check connections against.") (cert - (string "/etc/openvpn/client.crt") + (maybe-string 'disabled) "The certificate of the machine the daemon is running on. It should be signed by the authority given in @code{ca}.") (key - (string "/etc/openvpn/client.key") + (maybe-string 'disabled) "The key of the machine the daemon is running on. It must be the key whose certificate is @code{cert}.") -- 2.18.0