https://wireless.subsignal.org/index.php?action=history&feed=atom&title=OpenVPN_SSL_obfuscation 2026-10-17T02:59:44Z Versionsgeschichte dieser Seite in Weimarnetz Wiki MediaWiki 1.35.2 https://wireless.subsignal.org/index.php?title=OpenVPN_SSL_obfuscation&diff=20020&oldid=prev 2015-12-12T16:03:06Z

<p>minor</p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 12. Dezember 2015, 16:03 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Zeile 1:</td> <td colspan="2" class="diff-lineno">Zeile 1:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Ziel: eine ordentliche Patchdatei bauen, die man fuer OpenWrt verwenden kann.</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Ziel: eine ordentliche Patchdatei bauen, die man fuer OpenWrt verwenden kann.</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Wir <del class="diffchange diffchange-inline">ueber </del>mal mit folgendem commit den ich gefunden habe:</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Wir <ins class="diffchange diffchange-inline">üben </ins>mal mit folgendem commit den ich gefunden habe:</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>https://github.com/hizukiayaka/openvpn/commit/2eb2234f28d176a74d949f8563eb11ac2ad70bb8</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>https://github.com/hizukiayaka/openvpn/commit/2eb2234f28d176a74d949f8563eb11ac2ad70bb8</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l29" >Zeile 29:</td> <td colspan="2" class="diff-lineno">Zeile 29:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software$ mkdir openvpn</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software$ mkdir openvpn</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software$ cd openvpn/</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software$ cd openvpn/</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">bastian@X301:~/software/openvpn$ git init</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">Initialized empty Git repository in /home/bastian/software/openvpn/.git/</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software/openvpn$ wget http://swupdate.openvpn.net/community/releases/openvpn-2.3.7.tar.gz</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software/openvpn$ wget http://swupdate.openvpn.net/community/releases/openvpn-2.3.7.tar.gz</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software/openvpn$ tar xzf openvpn-2.3.7.tar.gz  </div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>bastian@X301:~/software/openvpn$ tar xzf openvpn-2.3.7.tar.gz  </div></td></tr> <!-- diff cache key subsignal_wireless:diff::1.12:old-20019:rev-20020 --> </table>

Fries43 https://wireless.subsignal.org/index.php?title=OpenVPN_SSL_obfuscation&diff=20019&oldid=prev 2015-12-12T16:01:12Z

<p>initial</p> <p><b>Neue Seite</b></p><div>Ziel: eine ordentliche Patchdatei bauen, die man fuer OpenWrt verwenden kann.<br /> Wir ueber mal mit folgendem commit den ich gefunden habe:<br /> &lt;pre&gt;<br /> https://github.com/hizukiayaka/openvpn/commit/2eb2234f28d176a74d949f8563eb11ac2ad70bb8<br /> &lt;/pre&gt;<br /> <br /> erstmal OpenWrt holen und schauen wo &#039;openvpn&#039; liegt:<br /> &lt;pre&gt;<br /> bastian@X301:~/software$ git clone git://git.openwrt.org/openwrt.git<br /> bastian@X301:~/software$ cd openwrt<br /> bastian@X301:~/software/openwrt$ find . -type d -name openvpn<br /> ./package/network/services/openvpn<br /> &lt;/pre&gt;<br /> <br /> OK, wir schauen uns das Makefile an und den Downloadlink/Version:<br /> &lt;pre&gt;<br /> bastian@X301:~/software/openwrt$ grep -m6 ^[A-Z] ./package/network/services/openvpn/Makefile<br /> PKG_NAME:=openvpn<br /> PKG_VERSION:=2.3.7<br /> PKG_RELEASE:=1<br /> PKG_SOURCE_URL:=http://swupdate.openvpn.net/community/releases<br /> PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz<br /> PKG_MD5SUM:=070bca95e478f88dff9ec6a221e2c3f7<br /> &lt;/pre&gt;<br /> <br /> OK, wir machen uns ein lokales git und holen den tarball:<br /> &lt;pre&gt;<br /> bastian@X301:~/software/openwrt$ cd ..<br /> bastian@X301:~/software$ mkdir openvpn<br /> bastian@X301:~/software$ cd openvpn/<br /> bastian@X301:~/software/openvpn$ git init<br /> Initialized empty Git repository in /home/bastian/software/openvpn/.git/<br /> <br /> bastian@X301:~/software/openvpn$ wget http://swupdate.openvpn.net/community/releases/openvpn-2.3.7.tar.gz<br /> bastian@X301:~/software/openvpn$ tar xzf openvpn-2.3.7.tar.gz <br /> bastian@X301:~/software/openvpn$ cd openvpn-2.3.7/<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git init<br /> Initialized empty Git repository in /home/bastian/software/openvpn/openvpn-2.3.7/.git/<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git add .<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git commit -m &quot;extracted openvpn-2.3.7.tar.gz&quot;<br /> [master (root-commit) e97a8c6] extracted openvpn-2.3.7.tar.gz<br /> 306 files changed, 112266 insertions(+)<br /> &lt;/pre&gt;<br /> <br /> Nun laden wir uns von dem github-commit das patchfile herunter:<br /> &lt;pre&gt;<br /> # https://github.com/hizukiayaka/openvpn/commit/2eb2234f28d176a74d949f8563eb11ac2ad70bb8<br /> # .patch anhängen:<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ wget -O /tmp/mypatch https://github.com/hizukiayaka/openvpn/commit/2eb2234f28d176a74d949f8563eb11ac2ad70bb8.patch<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git apply --check &lt;/tmp/mypatch<br /> error: patch failed: src/openvpn/options.c:6593<br /> error: src/openvpn/options.c: patch does not apply<br /> error: patch failed: src/openvpn/options.h:522<br /> error: src/openvpn/options.h: patch does not apply<br /> &lt;/pre&gt;<br /> <br /> ok, das geht nicht so einfach, wir holen uns also option.c und option.h vom commit davor (&quot;parent&quot;)<br /> &lt;pre&gt;<br /> parent=&#039;3ec9eb8ee402ea977805eaac6a8caa38f5800bbd&#039;<br /> wget -O src/openvpn/options.c &quot;https://raw.githubusercontent.com/hizukiayaka/openvpn/$parent/src/openvpn/options.c&quot;<br /> wget -O src/openvpn/options.h &quot;https://raw.githubusercontent.com/hizukiayaka/openvpn/$parent/src/openvpn/options.h&quot;<br /> git add .<br /> git commit -m &quot;sync options.* of parent&quot;<br /> &lt;/pre&gt;<br /> <br /> nun nochmal testen ob es geht:<br /> &lt;pre&gt;<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git apply --check /tmp/mypatch<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git am --ignore-whitespace --signoff &lt;/tmp/mypatch<br /> &lt;/pre&gt;<br /> <br /> &lt;pre&gt;<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git log<br /> commit dc3103e7fef1afb1c7c76bc83d1d6d78079284da<br /> Author: ayaka &lt;ayaka@soulik.info&gt;<br /> Date: Fri Aug 28 18:00:58 2015 +0800<br /> <br /> obfuscation: apply xor in SSL layer<br /> <br /> NOTE: It only work with OpenSSL library not PolarSSL library.<br /> The xor patch before only worked with IP tunnel package.<br /> <br /> Signed-off-by: ayaka &lt;ayaka@soulik.info&gt;<br /> Signed-off-by: Bastian Bittorf &lt;bittorf@bluebottle.com&gt;<br /> <br /> commit 6d764b72d92594b478c73f2a843abafd8ce02f52<br /> Author: Bastian Bittorf &lt;bittorf@bluebottle.com&gt;<br /> Date: Sat Dec 12 16:21:33 2015 +0100<br /> <br /> options.* from parent<br /> <br /> wunderbar! nun machen wir daraus 2 normale patchdateien:<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ git format-patch -s -2<br /> 0001-options.-from-parent.patch<br /> 0002-obfuscation-apply-xor-in-SSL-layer.patch<br /> &lt;/pre&gt;<br /> <br /> ...und kopieren die uns OpenWrt-buildsystem:<br /> &lt;pre&gt;<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ find ../../openwrt -type d -name openvpn<br /> ../../openwrt/package/network/services/openvpn<br /> bastian@X301:~/software/openvpn/openvpn-2.3.7$ mv 000* ../../openwrt/package/network/services/openvpn/patches/<br /> &lt;/pre&gt;<br /> <br /> die patches habe ich mal hochgeladen:<br /> https://github.com/bittorf/kalua/tree/master/openwrt-patches/interesting/openvpn-ssl-obfuscation<br /> <br /> via &#039;make menuconfig&#039; muss unter network-&gt;VPN-&gt;openvpn-openssl gewaehlt werden:<br /> &lt;pre&gt;<br /> make package/openvpn/clean<br /> make package/openvpn/compile<br /> make package/openvpn/install<br /> &lt;/pre&gt;<br /> <br /> fertig!</div>

Fries43