summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2023-06-26 15:21:58 +0200
committerDavid Lönnhager <david.l@mullvad.net>2023-06-28 12:07:48 +0200
commitd933bfd7bcce68bd043f6fdcbfa61267845176d8 (patch)
tree6ace8e693945a4b2012d2142ec121c0e29dc81b9
parent501d13293562a99e60c8ba93cc54227762456d97 (diff)
downloadmullvadvpn-d933bfd7bcce68bd043f6fdcbfa61267845176d8.tar.xz
mullvadvpn-d933bfd7bcce68bd043f6fdcbfa61267845176d8.zip
Silence OpenVPN 'replay attack' warnings.
Make the logs less verbose and easier to read by silencing 'replay attack' warnings. There are lots of false positives showing up in regular UDP connections, and since we don’t act on potential replays or warn our users (it’s pretty hidden in the logs) they don’t really serve much purpose to be there. The warning should not pose any threat to the user.
-rw-r--r--CHANGELOG.md1
-rw-r--r--talpid-openvpn/src/process/openvpn.rs1
2 files changed, 2 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 91e2b81ee2..9b90861814 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -44,6 +44,7 @@ Line wrap the file at 100 chars. Th
hostname as sole argument, inheriting the behavior of `mullvad relay set
hostname`. This is in addition to accepting a geographical location as basis
for filtering relays.
+- Silence OpenVPN "replay attack" warnings.
#### Windows
- In the CLI, add a unified `mullvad split-tunnel get` command to replace the old commands
diff --git a/talpid-openvpn/src/process/openvpn.rs b/talpid-openvpn/src/process/openvpn.rs
index bdce415756..1ca2cb3958 100644
--- a/talpid-openvpn/src/process/openvpn.rs
+++ b/talpid-openvpn/src/process/openvpn.rs
@@ -15,6 +15,7 @@ static BASE_ARGUMENTS: &[&[&str]] = &[
&["--client"],
&["--tls-client"],
&["--nobind"],
+ &["--mute-replay-warnings"],
#[cfg(not(windows))]
&["--dev", "tun"],
#[cfg(windows)]