Dear Maintainer,

When the PasswordIsCR option is enabled (to support OpenVPN Challenge/Response), OpenVPN crashes when I tried to connect with OpenVPN GUI.
In the OpenVPN, there is an error message "*** buffer overflow detected ***: terminated".

I fixed the issue by compiling from source like this :

git clone https://github.com/threerings/openvpn-auth-ldap.git
apt install autoconf re2c libtool libldap2-dev libssl-dev gobjc make
./regen.sh
./configure --prefix=/usr/local --with-openldap=/usr/local --with-openvpn=/usr/include/openvpn OBJCFLAGS="-std=gnu11"
make
make install

Tested with the above bug and package as we want to use this functionality .

The debian package for Trixie (2.0.4-4) was used as a base for testing as it does contain another important bugfix. The problem with openvpn crashing looks to come from the debian hardening options.

in /debian/rules I made adjustments to the hardening settings, basically (as far as I know) disabling them. Rebuilding the package after gave me a working version. The base OS here is a fully updated bookworm, the package as mentioned coming from trixie. build with 'debuild -b -us -uc'

#export DEB_BUILD_MAINT_OPTIONS = hardening=+all reproducible=+fixfilepath
#export DEB_CFLAGS_MAINT_APPEND = -D_FORTIFY_SOURCE=2
export DEB_BUILD_MAINT_OPTIONS = reproducible=+fixfilepath
export DEB_OBJCFLAGS_MAINT_APPEND = -std=gnu11



Met vriendelijke groet,
Michiel van den Berg

[cid:5c751cb2-5376-45ce-81fa-a7ecead86a65]



1A First Alternative
Elektronicaweg 14
2628 XG Delft

Algemeen: +31 (0) 88 00 164 01 / info@1afa.com<mailto:info@1afa.com>
Support: +31 (0) 88 00 164 05 / support@1afa.com<mailto:support@1afa.com>
www.1afa.com<http://www.1afa.com/>