SoftEther VPN - Cross-platform multi-protocol VPN software.

Overview

SoftEther VPN

Badges
AppVeyor AppVeyor build status
GitLab CI GitLab CI build status
Coverity Scan Coverity Scan build status
Azure Pipelines Azure Pipelines build status for Nightly
Cirrus CI Cirrus CI build status

SoftEther VPN (Developer Edition Master Repository)

This repository has experimental codes. Pull requests are welcome.

Stable Edition is available on https://github.com/SoftEtherVPN/SoftEtherVPN_Stable which the non-developer user can stable use.

Source code packages (.zip and .tar.gz) and binary files of Stable Edition are also available:
https://www.softether-download.com/

Copyright (c) all contributors on SoftEther VPN project in GitHub. Copyright (c) Daiyuu Nobori, SoftEther Project at University of Tsukuba, and SoftEther Corporation.


The development of SoftEther VPN was supported by the MITOH Project, a research and development project by Japanese Government, subsidized by Ministry of Economy, Trade and Industry of Japan, administrated by Information Promotion Agency. https://www.ipa.go.jp/english/humandev/


https://icons8.com

Icons8 kindly supported the project by gifting a license which allows to edit and redistribute their icons.

Please note that you are not allowed to redistribute those icons outside of this repository.

The developers of SoftEther VPN love Icons8's work and kindly ask the users to support them as much as possible.


Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

SoftEther VPN ("SoftEther" means "Software Ethernet") is one of the world's most powerful and easy-to-use multi-protocol VPN software.

SoftEther VPN runs on Windows, Linux, Mac, FreeBSD and Solaris.

SoftEther VPN supports most of widely-used VPN protocols including SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP by the single SoftEther VPN Server program.

More details on https://www.softether.org/.

BOARD MEMBERS OF THIS REPOSITORY

Daiyuu Nobori (Since Jan 2, 2014) https://github.com/dnobori

Moataz Elmasry (Since Nov 6, 2017) https://github.com/moatazelmasry2

Zulyandri Zardi (Since Nov 6, 2017) https://github.com/zulzardi

Alex Maslakov (Since Nov 6, 2017) https://github.com/GildedHonour

Davide Beatrici (Since Jul 21, 2018) https://github.com/davidebeatrici

Ilya Shipitsin (Since Jul 21, 2018) https://github.com/chipitsine

Yihong Wu (Since Jul 16, 2021) https://github.com/domosekai

SOFTETHER VPN ADVANTAGES

  • Supporting all popular VPN protocols by the single VPN server: SSL-VPN (HTTPS) WireGuard OpenVPN IPsec L2TP MS-SSTP L2TPv3 EtherIP
  • Free and open-source software.
  • Easy to establish both remote-access and site-to-site VPN.
  • SSL-VPN Tunneling on HTTPS to pass through NATs and firewalls.
  • Revolutionary VPN over ICMP and VPN over DNS features.
  • Resistance to highly-restricted firewall.
  • Ethernet-bridging (L2) and IP-routing (L3) over VPN.
  • Embedded dynamic-DNS and NAT-traversal so that no static nor fixed IP address is required.
  • AES 256-bit and RSA 4096-bit encryptions.
  • Sufficient security features such as logging and firewall inner VPN tunnel.
  • User authentication with RADIUS and NT domain controllers.
  • User authentication with X.509 client certificate.
  • Packet logging.
  • 1Gbps-class high-speed throughput performance with low memory and CPU usage.
  • Windows, Linux, Mac, Android, iPhone, iPad and Windows Phone are supported.
  • The OpenVPN clone function supports legacy OpenVPN clients.
  • IPv4 / IPv6 dual-stack.
  • The VPN server runs on Windows, Linux, FreeBSD, Solaris and Mac OS X.
  • Configure All settings on GUI.
  • Multi-languages (English, Japanese and Simplified-Chinese).
  • No memory leaks. High quality stable codes, intended for long-term runs. We always verify that there are no memory or resource leaks before releasing the build.
  • More details at https://www.softether.org/.

Installation

For Ubuntu

Launchpad PPA maintained by Dmitry Verkhoturov:

Daily builds (latest released tag)

Nightly builds

For FreeBSD

SoftEther VPN in FreeBSD Ports Collection is maintained by Koichiro Iwao (@metalefty).

Binary package can be installed by pkg:

pkg install softether5

Alternatively, it can be built & installed by ports:

make install -C /usr/ports/security/softether5

To run SoftEther VPN Server:

service softether_server start

To configure SoftEther VPN Server startup on boot:

sysrc softether_server_enable=yes

Also SoftEther VPN Stable Edition and RTM version are available on FreeBSD.

From binary installers:

Those can be found under https://www.softether-download.com/ There you can also find SoftEtherVPN source code in zip and tar formats.

Build from Source code

see BUILD_UNIX or BUILD_WINDOWS

There are two flavours of SoftEtherVPN source code:

  1. Unstable. Found under https://github.com/SoftEtherVPN/SoftEtherVPN
  2. Stable. Found under https://github.com/SoftEtherVPN/SoftEtherVPN_Stable

About HTML5-based Modern Admin Console and JSON-RPC API Suite

Built-in SoftEther VPN Server HTML5 Ajax-based Web Administration Console

We are developing the HTML5 Ajax-based Web Administration Console (currently very limited, under construction) in the embedded HTTPS server on the SoftEther VPN Server.

Access to the following URL from your favorite web browser.

https://
   
    :
    
     /admin/

    
   

For example if your VPN Server is running as the port 5555 on the host at 192.168.0.1, you can access to the web console by:

https://192.168.0.1:5555/admin/

Note: Your HTML5 development contribution is very appreciated. The current HTML5 pages are written by Daiyuu Nobori (the core developer of SoftEther VPN). He is obviously lack of HTML5 development ability. Please kindly consider to contribute for SoftEther VPN's development on GitHub. Your code will help every people running SoftEther VPN Server.

Built-in SoftEther Server VPN JSON-RPC API Suite

The API Suite allows you to easily develop your original SoftEther VPN Server management application to control the VPN Server (e.g. creating users, adding Virtual Hubs, disconnecting a specified VPN sessions).

You can access to the latest SoftEther VPN Server JSON-RPC Document on GitHub.

  • Almost all control APIs, which the VPN Server provides, are available as JSON-RPC API. You can write your own VPN Server management application in your favorite languages (JavaScript, TypeScript, Java, Python, Ruby, C#, ... etc.)
  • If you are planning to develop your own VPN cloud service, the JSON-RPC API is the best choice to realize the automated operations for the VPN Server.
  • No need to use any specific API client library since all APIs are provided on the JSON-RPC 2.0 Specification. You can use your favorite JSON and HTTPS client library to call any of all APIs in your pure runtime environment.
  • Also, the SoftEther VPN Project provides high-quality JSON-RPC client stub libraries which define all of the API client stub codes. These libraries are written in C#, JavaScript and TypeScript. The Node.js Client Library for VPN Server RPC (vpnrpc) package is also available.

TO CIRCUMVENT YOUR GOVERNMENT'S FIREWALL RESTRICTION

Because SoftEther VPN is overly strong tool to build a VPN tunnel, some censorship governments want to block your access to the source code of SoftEther VPN, by abusing their censorship firewalls.

To circumvent your censor's unjust restriction, SoftEther VPN Project distributes the up-to-date source code on all the following open-source repositories:

We hope that you can reach one of the above URLs at least!

SOURCE CODE CONTRIBUTION

Your contribution to SoftEther VPN Project is much appreciated. Please send patches to us through GitHub.

DEAR SECURITY EXPERTS

If you find a bug or a security vulnerability please kindly inform us about the problem immediately so that we can fix the security problem to protect a lot of users around the world as soon as possible.

Our e-mail address for security reports is: softether-vpn-security at softether.org

Please note that the above e-mail address is not a technical support inquiry address. If you need technical assistance, please visit https://www.softether.org/ and ask your question on the users forum.

Comments
  • Windows installer build/runtime error/crash

    Windows installer build/runtime error/crash

    Evening. I was trying to build the Windows installers on my machine, which I have done successfully in the past but it seems something in the past few weeks has changed and it now fails. Wondering if anyone could point me in a good direction for a fix. All the code compiles fine until the installers start to build:

    λ  .\src\BuildAll.cmd
    ..(Code building)...
    Executing 'X:\Softether\SoftEtherVPN\src\bin\BuildUtil.exe /CMD:ReleaseWin32 all /IGNOREERROR:no /SERIAL:no'...
    BuildUtil command - VPN Build Utility
    
    Copyright (c) SoftEther VPN Project. All Rights Reserved.
    
    ReleaseWin32 command - Builds Win32 installer package files.
    1 / 2: Executing for 'softether_open-vpnserver_vpnbridge-windows-x86_x64-intel'...
    2 / 2: Executing for 'softether_open-vpnclient-windows-x86_x64-intel'...
    Waiting child processes...
    1 / 2 (softether_open-vpnserver_vpnbridge-windows-x86_x64-intel):
           * Error *
    2 / 2 (softether_open-vpnclient-windows-x86_x64-intel):
           * Error *
    
    System.ApplicationException: 2 Errors.
       at BuildUtil.BuildUtilCommands.ReleaseWin32(ConsoleService c, String cmdName, String str)
    
    BuildUtil: fatal error C0001: 2 Errors.
    System.ApplicationException: Child process 'X:\Softether\SoftEtherVPN\src\bin\BuildUtil.exe' returned error code 1.
       at BuildUtil.Win32BuildUtil.ExecCommand(String exe, String arg, Boolean shell_execute)
       at BuildUtil.Win32BuildUtil.ExecCommand(String exe, String arg)
       at BuildUtil.BuildUtilCommands.All(ConsoleService c, String cmdName, String str)
    
    BuildUtil: fatal error C0001: Child process 'X:\Softether\SoftEtherVPN\src\bin\BuildUtil.exe' returned error code 1.
    
    X:\Softether\SoftEtherVPN\src\bin>if errorlevel 1 exit /b 1
    

    Thanks!

    build & release os/Windows 
    opened by BlackHoleFox 71
  • Is this project DEAD?

    Is this project DEAD?

    I don't see any activity happening around this project for more that a half of the year. There are also a bunch of pull requests, which are ready to be merged, but they are not. There are also numerous security issues, reported by users in issues and nobody looking into addressing those. Does all this project is dead?

    If someone know any fork, which is alive, please leave link here - GitHub reporting 1007 forks of the project, so there is a chance some of them are in better shape than original project is.

    opened by ava1ar 68
  • Please discuss: About switching the project license to Apache License from GPL.

    Please discuss: About switching the project license to Apache License from GPL.

    I'd like to hear opinions from contributors and users of the SoftEther VPN Project about the project license.

    Currently the license of SoftEther VPN is GPL. I am personally considering that if we change the project license from GPL License to Apache License (or any other BSD-like licenses). Then SoftEther VPN would be more suitable for various applications (e.g. hardware manufacturers). This idea would be beneficial for all people who are (and will be) using SoftEther VPN.

    However, ito realize this, we need ask to every existing code contributors to agree changing to Apache (or BSD) License from GPL.

    In this present time we have approximately 30 contributors. They have contributed Pull Requests in the assumption to adopt GPL license to these codes. Today it is still easy to obtain the general consensus from all existing contributors. In the future (e.g. a few years later) it must be very difficult to switch the license.

    Therefore I'd like to discuss about this topic.

    opened by dnobori 58
  • Implement EAP-MSCHAPv2

    Implement EAP-MSCHAPv2

    Currently Windows built-in SSTP and L2TP client cannot connect out of the box because our EAP implementation only supports certificates. This PR adds EAP-MSCHAPv2 password support and an ordinary user can connect without any hassle now.

    The only thing I am not sure is double MSCHAPv2, apparently used in RADIUS. Edited: I did it in the second commit but I have no RADIUS environment to test.

    Tested with Win 10, Android SSTP Client, and of course, iOS SSTP Connect. 😁

    Fix #1169 Fix #1253


    Changes proposed in this pull request:

    • Implement EAP-MSCHAPv2
    opened by domosekai 52
  • Stop rerouting internet

    Stop rerouting internet

    I successfully installed both the server and client and managed to link the two computers from the first try, super easy. However as soon as the VPN link is created, all internet traffic is rerouted trough it. How can I stop this, or at least to do that only for certain targets? I am using the client on Windows 10 x64 16299, and the main internet connection is Wifi.

    Thank you!

    opened by cdcseacave 50
  • New version (5.1) breaks older installations

    New version (5.1) breaks older installations

    Prerequisites

    • [ x ] Can you reproduce?
    • [ x] Are you running the latest version of SoftEtherVPN?

    SoftEther version: Component: Server Operating system: Ubuntu 16.04 Architecture: 64 bit

    [In case it's a computer with known specs, such as the Raspberry Pi, you can specify it omitting the details.] Processor: Intel Pentium D (not that it matters to this issue at all)

    Description

    Update broke current install.

    Expected behavior: Installed correctly and no error

    Actual behavior: The installation failed with the following:

    Jul 21 12:52:10 ubuntu systemd[1]: Starting LSB: SoftEther VPN service...
    -- Subject: Unit softether-vpnserver.service has begun start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit softether-vpnserver.service has begun starting up.
    Jul 21 12:52:10 ubuntu softether-vpnserver[16510]: Starting SoftEtherVPN Server: vpnserver/usr/bin/vpnserver: 2: /usr/bin/vpnserver: /opt/vpnserver/vpnserver: not found
    Jul 21 12:52:10 ubuntu systemd[1]: softether-vpnserver.service: Control process exited, code=exited status=2
    Jul 21 12:52:10 ubuntu systemd[1]: Failed to start LSB: SoftEther VPN service.
    -- Subject: Unit softether-vpnserver.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit softether-vpnserver.service has failed.
    --
    -- The result is failed. 
    

    Steps to reproduce

    1. Install version 5.1 over 4.23
    2. Watch the install and see it fail.

    I managed to recover my installation by a backup of the config file and grabbing a copy of an older version deb in the repository of paskal.

    build & release os/Linux 
    opened by DDGo 49
  • Call for development board members of this project

    Call for development board members of this project

    I'm sorry for my late response for the planning to fork this repository. Because of my lack of capacity, my response to pull requests for this repository has been delayed frequently.

    To solve this problem, I'd like to call three (or more) new development board members.

    I will grant GitHub permissions to the new members.

    Development board members have:

    1. Authority and responsibility to govern this project.
    2. Use the brand name "SoftEther VPN" on activities for this project.
    3. Commit new codes to this repository by the sole decision. (Applying new pull requests.)
    4. Add new members (or dismiss existing members) to / from the board, based on the discussion and the consent of all existing board members. In other words, after three (or more) initial board members will be designated, further board members designation process will be controlled to the board members.

    I'd like to designate initial three (or more) board members by self-nomination, by the end of July 2017. Please kindly email the following application form to softether-board@softether.org if you are interested in becoming a board member.

    a) Your account name on GitHub. b) The URL of your representative Pull Requests to this repository. c) Your comment (e.g. please describe your motivation to contribute to this project.)

    (For your reference) As I posted the plan on https://github.com/SoftEtherVPN/SoftEtherVPN/issues/268 seven months ago, I am considering to do the following things:

    1. Keep this current "SoftEtherVPN" repository without changing the repository name (to avoid confuse users by changing the URL.)
    • I will call this repository as the "Modern" repository, in contrast to the "LongTerm" repository.
    • I will add some board members to this repository.
    • I will also be one of the board members.
    • Some delegated board members will have authority to control the source code, including accepting Pull Requests.
    1. Create a new conservative repository named "SoftEtherVPN_LongTerm" .
    • I will be the sole maintainer of " SoftEtherVPN_LongTerm".
    • I will import new feature from "SoftEtherVPN" to " SoftEtherVPN_LongTerm" manually by my decision.
    • I will import bug fixes from "SoftEtherVPN" to " SoftEtherVPN_LongTerm" manually as soon as possible.
    • The "Issues" and the "Pull Requests" will be hidden on the " SoftEtherVPN_LongTerm" repository.
    • I took the hint from the Wireshark project. Wireshark has two branches: Wireshark (Modern) and Wireshark (Legacy). Wireshark Legacy is very conservative while the Modern is aggressive to improve its functionality.
    opened by dnobori 36
  • Use https to download binary files.

    Use https to download binary files.

    We can download binaries on the page http://www.softether-download.com/en.aspx. This page does not have HTTPS version... Is it possible to fix that? Or alternatively publish SHA-256 hashes on page https://www.softether.org/5-download (which is secured by COMODO certificate).

    feature vulnerability security 
    opened by hardhub 34
  • OpenVPN client certificate authentication (Individual Certificate Authentication)

    OpenVPN client certificate authentication (Individual Certificate Authentication)

    This pull request implements Individual Certificate Authentication for OpenVPN protocol. This pull request fixes #55.

    Client certificate's Common Name is used as username during authentication process. If auth-user-pass is enabled for OpenVPN client, the password is ignored by server, and username recieved from the client is used instead of the Common Name.

    Note: only self-signed certificates work presently. CA-signed certificates will not pass verification because OpenSSL library needs to be told where to look for trusted CA certificates, and this feature was not implemented in this pull request. It can be easily added in future, though.


    Example:

    1. Connect to SoftEther Server via command line client.
    2. Create a new user, let's name him steve:
    VPN Server/DEFAULT>UserCreate
    UserCreate command - Create User
    User Name: steve
    Assigned Group Name:
    User Full Name:
    User Description:
    The command completed successfully.
    VPN Server/DEFAULT>
    
    1. Generate a self-signed certificate for Common Name = steve:
    VPN Server/DEFAULT>MakeCert
    MakeCert command - Create New X.509 Certificate and Private Key (1024 bit)
    Name of Certificate to Create (CN): steve
    Organization of Certificate to Create (O):
    Organization Unit of Certificate to Create (OU):
    Country of Certificate to Create (C):
    State of Certificate to Create (ST):
    Locale of Certificate to Create (L):
    Serial Number of Certificate to Create (Hexadecimal):
    Expiration Date of Certificate to Create (Days):
    File Name to Save Certificate to Create: /tmp/steve.crt
    File Name to Save Private Key to Create: /tmp/steve.key
    The command completed successfully.
    VPN Server/DEFAULT>
    
    1. Switch Steve to Individual Certificate Authentication with newly-generated certificate:
    VPN Server/DEFAULT>UserCertSet
    UserCertSet command - Set Individual Certificate Authentication for User Auth Type and Set Certificate
    User Name: steve
    Read X.509 certificate from file name: /tmp/steve.crt
    The command completed successfully.
    VPN Server/DEFAULT>
    
    1. Dump the Server SSL certificate (ca.crt) to file, and pass this file to Steve, along with his steve.crt and steve.key files:
    VPN Server>ServerCertGet
    ServerCertGet command - Get SSL Certificate of VPN Server
    Save X.509 certificate to file name: /tmp/ca.crt
    
    The command completed successfully.
    
    VPN Server>
    
    1. Now Steve can use the following OpenVPN client config to connect to SoftEther server:
    dev tun
    proto udp
    remote myserver.com 1194
    cipher AES-128-CBC
    auth SHA1
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    client
    verb 3
    key steve.key
    cert steve.crt
    <ca>
    # include contents of ca.crt here
    </ca>
    

    Server log will contain the following lines:

    2017-05-26 20:47:38.834 OpenVPN Session 1 (10.10.195.127:59213 -> 192.168.56.247:1194): A new session is created. Protocol: UDP
    ...
    2017-05-26 20:47:38.864 OpenVPN Session 1 (10.10.195.127:59213 -> 192.168.56.247:1194) Channel 0: Client certificate received (subject: CN="steve"), will use certificate authentication.
    ...
    2017-05-26 20:47:40.153 [HUB "DEFAULT"] The connection "CID-3" (IP address: 10.10.195.127, Host name: 10.10.195.127, Port number: 59213, Client name: "OpenVPN Client", Version: 4.22, Build: 9634) is attempting to connect to the Virtual Hub. The auth type provided is "OpenVPN certificate authentication" and the user name is "steve".
    2017-05-26 20:47:40.153 [HUB "DEFAULT"] The Virtual Hub's Security Account Manager has received the following certificate from the VPN Client and accepted its contents as the certificate for when user "steve" logs in: CN=steve, SERIAL="00" (Digest: MD5="84EAC0F1521A13BF80C51F357A44679B", SHA1="5BB0C832DFA0C4FE043F8390850769CDE261E8F3")
    2017-05-26 20:47:40.153 [HUB "DEFAULT"] Connection "CID-3": Successfully authenticated as user "steve".
    
    1. If Steve so wishes, he can use the same certificate and key with SoftEther Client instead of OpenVPN client.

    Regarding Patch Acceptance Policy: I choose option 1.

    protocol/OpenVPN 
    opened by a-kr 31
  • Help please with OpenVPN client + certificates authorization

    Help please with OpenVPN client + certificates authorization

    Hello. Came here to ask to solve my problem. System: FreeBSD 9.2 x64, CentOS 6.5 x64, Ubuntu 14.04 x64 (tried all of them) Client: Windows XP SP3 openvpn-install-2.3.4-I001-i686 SoftEther VPN Server 4.06 Build 9437

    I am trying to authorise users without password, just by certificates(with OpenVPN client). Made CA certificate, installed to SoftEther, made certificate for client, added to .ovpn file and to softether. But when I try to connect always getting error:

    Sun May 25 00:00:00 2014 us=15625 AUTH: Received control message: AUTH_FAILED Sun May 25 00:00:00 2014 us=15625 TCP/UDP: Closing socket

    Password auth works like a charm!

    So maybe somebody figured that problem? Or how to make it work.

    Logs: http://pastebin.com/crgs6PVa http://pastebin.com/n3qB06EH http://pastebin.com/rXURRVqW

    SE config http://pastebin.com/cFLYVub2 OVPN http://pastebin.com/AsY8H7tW

    feature 
    opened by avel9 31
  • Compiling and running in Docker

    Compiling and running in Docker

    Hello. Encountered a problem during assembly, please tell me what could be the problem? Also had to add "libsodium-dev" and change the system to latest.

    `Status: Downloaded newer image for alpine:latest
    ---> 28f6e2705743
    Step 2/10 : WORKDIR /usr/src
    ---> Running in a4a5a40b9b9c
    Removing intermediate container a4a5a40b9b9c
    ---> 5e77f5913996
    Step 3/10 : RUN apk add --no-cache binutils build-base readline-dev openssl-dev ncurses-dev libsodium-dev git cmake gnu-libico nv zlib-dev && git clone --recurse-submodules https://github.com/SoftEtherVPN/So ftEtherVPN.git && cd SoftEtherVPN && ./configure && make -C tmp && make -C tmp install && tar -czf /artifacts.tar.gz /usr/local
    ---> Running in c05a47791170
    fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/APKINDEX.tar.gz
    fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX.tar.gz
    (1/48) Installing libgcc (10.2.1_pre1-r3)
    (2/48) Installing libstdc++ (10.2.1_pre1-r3)
    (3/48) Installing binutils (2.35.1-r1)
    (4/48) Installing libmagic (5.39-r0)
    (5/48) Installing file (5.39-r0)
    (6/48) Installing libgomp (10.2.1_pre1-r3)
    (7/48) Installing libatomic (10.2.1_pre1-r3)
    (8/48) Installing libgphobos (10.2.1_pre1-r3)
    (9/48) Installing gmp (6.2.1-r0)
    (10/48) Installing isl22 (0.22-r0)
    (11/48) Installing mpfr4 (4.1.0-r0)
    (12/48) Installing mpc1 (1.2.0-r0)
    (13/48) Installing gcc (10.2.1_pre1-r3)
    (14/48) Installing musl-dev (1.2.2-r0)
    (15/48) Installing libc-dev (0.7.2-r3)
    (16/48) Installing g++ (10.2.1_pre1-r3)
    (17/48) Installing make (4.3-r0)
    (18/48) Installing fortify-headers (1.1-r0)
    (19/48) Installing patch (2.7.6-r6)
    (20/48) Installing build-base (0.5-r2)
    (21/48) Installing libacl (2.2.53-r0)
    (22/48) Installing libbz2 (1.0.8-r1)
    (23/48) Installing expat (2.2.10-r1)
    (24/48) Installing lz4-libs (1.9.2-r0)
    (25/48) Installing xz-libs (5.2.5-r0)
    (26/48) Installing zstd-libs (1.4.5-r3)
    (27/48) Installing libarchive (3.5.1-r0)
    (28/48) Installing ca-certificates (20191127-r5)
    (29/48) Installing brotli-libs (1.0.9-r3)
    (30/48) Installing nghttp2-libs (1.42.0-r1)
    (31/48) Installing libcurl (7.74.0-r1)
    (32/48) Installing ncurses-terminfo-base (6.2_p20210109-r0)
    (33/48) Installing ncurses-libs (6.2_p20210109-r0)
    (34/48) Installing rhash-libs (1.4.1-r0)
    (35/48) Installing libuv (1.40.0-r0)
    (36/48) Installing cmake (3.18.4-r1)
    (37/48) Installing pcre2 (10.36-r0)
    (38/48) Installing git (2.30.2-r0)
    (39/48) Installing gnu-libiconv (1.15-r3)
    (40/48) Installing libsodium (1.0.18-r0)
    (41/48) Installing pkgconf (1.7.3-r0)
    (42/48) Installing libsodium-dev (1.0.18-r0)
    (43/48) Installing ncurses-dev (6.2_p20210109-r0)
    (44/48) Installing openssl-dev (1.1.1j-r0)
    (45/48) Installing libhistory (8.1.0-r0)
    (46/48) Installing readline (8.1.0-r0)
    (47/48) Installing readline-dev (8.1.0-r0)
    (48/48) Installing zlib-dev (1.2.11-r3)
    Executing busybox-1.32.1-r3.trigger
    Executing ca-certificates-20191127-r5.trigger
    OK: 261 MiB in 62 packages
    Cloning into 'SoftEtherVPN'...
    Updating files: 100% (1768/1768), done.
    Submodule '3rdparty/BLAKE2' (https://github.com/BLAKE2/BLAKE2.git) registered for path '3rdparty/BLAKE2'
    Submodule '3rdparty/tinydir' (https://github.com/cxong/tinydir.git) registered for path '3rdparty/tinydir'
    Submodule 'src/Mayaqua/3rdparty/cpu_features' (https://github.com/google/cpu_features.git) registered for path 'src/Mayaqua/3rdparty/cpu_features'
    Submodule 'src/libhamcore' (https://github.com/SoftEtherVPN/libhamcore.git) registered for path 'src/libhamcore'
    Cloning into '/usr/src/SoftEtherVPN/3rdparty/BLAKE2'...
    Cloning into '/usr/src/SoftEtherVPN/3rdparty/tinydir'...
    Cloning into '/usr/src/SoftEtherVPN/src/Mayaqua/3rdparty/cpu_features'...
    Cloning into '/usr/src/SoftEtherVPN/src/libhamcore'...
    Submodule path '3rdparty/BLAKE2': checked out 'b52178a376ca85a8ffe50492263c2a5bc0fa4f46'
    Submodule path '3rdparty/tinydir': checked out 'ec6bff2043eaac3ad25423705e63a781762a0dfd'
    Submodule path 'src/Mayaqua/3rdparty/cpu_features': checked out '26133d3b620c2c27f31d571efd27371100f891e9'
    Submodule path 'src/libhamcore': checked out 'b7f5d8d735b280fc77673c4a29f0436a92ca6660'
    SoftEther VPN for Unix
    
    Copyright (c) all contributors on SoftEther VPN project in GitHub.
    Copyright (c) Daiyuu Nobori, SoftEther Project at University of Tsukuba, and SoftEther Corporation.
    
    Licensed under the Apache License, Version 2.0 (the License).
    
    Read and understand README, LICENSE and WARNING before use.
    Welcome to the corner-cutting configure script !
    
    'rpm' executable not found, CPack will generate DEB packages.
    
    -- The C compiler identification is GNU 10.2.1
    -- Detecting C compiler ABI info
    -- Detecting C compiler ABI info - done
    -- Check for working C compiler: /usr/bin/cc - skipped
    -- Detecting C compile features
    -- Detecting C compile features - done
    -- Looking for sys/auxv.h
    -- Looking for sys/auxv.h - found
    -- Build date: 14/03/2021
    -- Build time: 11:30:54
    -- Found PkgConfig: /usr/bin/pkg-config (found version "1.7.3")
    -- Checking for one of the modules 'libsodium'
    -- Found Curses: /usr/lib/libcurses.so
    -- Found OpenSSL: /usr/lib/libcrypto.so (found version "1.1.1j")
    -- Found ZLIB: /lib/libz.so (found version "1.2.11")
    -- Looking for pthread.h
    -- Looking for pthread.h - found
    -- Performing Test CMAKE_HAVE_LIBC_PTHREAD
    -- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Success
    -- Found Threads: TRUE
    -- The CXX compiler identification is GNU 10.2.1
    -- Detecting CXX compiler ABI info
    -- Detecting CXX compiler ABI info - done
    -- Check for working CXX compiler: /usr/bin/c++ - skipped
    -- Detecting CXX compile features
    -- Detecting CXX compile features - done
    -- Check if the system is big endian
    -- Searching 16 bit integer
    -- Looking for sys/types.h
    -- Looking for sys/types.h - found
    -- Looking for stdint.h
    -- Looking for stdint.h - found
    -- Looking for stddef.h
    -- Looking for stddef.h - found
    -- Check size of unsigned short
    -- Check size of unsigned short - done
    -- Searching 16 bit integer - Using unsigned short
    -- Check if the system is big endian - little endian
    -- Configuring done
    -- Generating done
    -- Build files have been written to: /usr/src/SoftEtherVPN/build
    
    The Makefile is generated. Run 'make -C build' to build SoftEther VPN.
    make: *** tmp: No such file or directory. Stop.
    The command '/bin/sh -c apk add --no-cache binutils build-base readline-dev openssl-dev ncurses-dev libsodium-dev git cmake gnu-libiconv zlib-dev && git clone --recurse-submodules https://github.com/SoftEtherVPN/SoftEtherVPN.git && cd SoftEtherVPN && ./configure && make -C tmp && make -C tmp install && tar -czf /artifacts.tar.gz /usr/local' returned a non-zero code: 2`
    
    opened by Armik2 29
  • Support adding custom VPN Azure service

    Support adding custom VPN Azure service

    A sample implementation of VPN Azure in Go is here.

    I will provide more description later.

    String resources for other languages will also be added.

    Changes proposed in this pull request:

    • Support custom VPN Azure service
    opened by domosekai 0
  • Adding new features to SoftEther software

    Adding new features to SoftEther software

    Greetings and courtesy

    Please add the following items to the software if possible The ability to set the charge, for example, 50 gig for each user (I went to the options and did not find an option to set the limit, for example, assign 50 gigs to the plan. The user gets 50 gigs, and when the limit is reached, it is cut off and requested again (charge) - Ability to add connection of any device with MAC address to Softher VPN Linux server and Softher Manager For Windows.

    Please update SofEther management software for new Mac operating systems with Apple Silicon architecture processor (M1-M2).

    Will these features be added in future updates? Please, if possible, tell me the date of adding these facilities, I would appreciate it

    Prerequisites

    • [yes] Can you reproduce?
    • [yes ] Are you running the latest version of SoftEtherVPN?

    **SoftEther version:*v4.41-9782-beta * Component: [Server, Client, Bridge, etc.] Operating system: [Windows, Linux(Server),macOS, ] **Architecture:Intel Laptop ,Laptop Apple Silicon(M1 ,M2) [64 bit, 32 bit] Thanks & Regards Amir Mahdavi Yousefi

    opened by mahdaviyousefiamir378 0
  • macOS 13.1 m1 can not create virtual network adapter

    macOS 13.1 m1 can not create virtual network adapter

    Apple M1 Pro Ventura 13.1 (22C65) vpn client version 5.02

    I started the vpnclient and vpncmd with root permission, and an error was reported when creating the virtual network adapter.please help!

    VPN Client>NicCreate VpnNetwork NicCreate command - Create New Virtual Network Adapter Error occurred. (Error code: 31) Installation of the Virtual Network Adapter device driver failed.

    opened by win434545299 0
  • SetUser RPC API resets params

    SetUser RPC API resets params

    Prerequisites

    • [X] Can you reproduce?
    • [X] Are you running the latest version of SoftEtherVPN?

    SoftEther version:

    SoftEther VPN Command Line Management Utility (vpncmd command)
    Version 4.41 Build 9782   (English)
    Compiled 2022/11/17 16:36:25 by buildsan at crosswin with OpenSSL 3.0.7
    Copyright (c) 2012-2022 SoftEther VPN Project. All Rights Reserved.
    

    Component: [Server, Client, Bridge, etc.] SE server

    Operating system: [Windows, Linux, BSD, macOS, etc.]

    >>> cat /etc/os-*
    NAME="Ubuntu"
    VERSION="20.04.1 LTS (Focal Fossa)"
    ID=ubuntu
    ID_LIKE=debian
    PRETTY_NAME="Ubuntu 20.04.1 LTS"
    VERSION_ID="20.04"
    HOME_URL="https://www.ubuntu.com/"
    SUPPORT_URL="https://help.ubuntu.com/"
    BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
    PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
    VERSION_CODENAME=focal
    UBUNTU_CODENAME=focal
    

    Architecture: [64 bit, 32 bit]

    >>> lscpu | head -n 14
    Architecture:                    x86_64
    CPU op-mode(s):                  32-bit, 64-bit
    Byte Order:                      Little Endian
    Address sizes:                   43 bits physical, 48 bits virtual
    CPU(s):                          2
    On-line CPU(s) list:             0,1
    Thread(s) per core:              1
    Core(s) per socket:              2
    Socket(s):                       1
    NUMA node(s):                    1
    Vendor ID:                       GenuineIntel
    CPU family:                      6
    Model:                           62
    Model name:                      Intel(R) Xeon(R) CPU E5-2697 v2 @ 2.70GHz
    

    Description

    "SetUser" RPC API - Change User Settings, will override, others params which have not requested for.

    Expected behavior: For SetUser API call just specified params, should be changed, while others are rested to default

    Actual behavior:

    Request:

    {
      "jsonrpc": "2.0",
      "id": "rpc_call_id",
      "method": "SetUser",
      "params": {
        "HubName_str": "VPN",
        "Name_str": "someone",
        "Note_utf": "45G"
      }
    }
    

    Response

    {
        "result": {
            "AuthType_u32": 0,
            "CreatedTime_dt": "1970-01-01T09:00:00.000Z",
            "ExpireTime_dt": "1970-01-01T09:00:00.000Z",
            "GroupName_str": "",
            "HubName_str": "VPN",
            "Name_str": "one",
            "Note_utf": "34000000",
            "NumLogin_u32": 0,
            "Realname_utf": "",
            "Recv.BroadcastBytes_u64": 0,
            "Recv.BroadcastCount_u64": 0,
            "Recv.UnicastBytes_u64": 0,
            "Recv.UnicastCount_u64": 0,
            "Send.BroadcastBytes_u64": 0,
            "Send.BroadcastCount_u64": 0,
            "Send.UnicastBytes_u64": 0,
            "Send.UnicastCount_u64": 0,
            "UpdatedTime_dt": "1970-01-01T09:00:00.000Z"
        },
        "jsonrpc": "2.0",
        "id": "rpc_call_id"
    
    • real name was cleared
    • policy was disabled
    • etc

    Steps to reproduce

    1. [First step] - create a new named two

    request:

    {
      "jsonrpc": "2.0",
      "id": "rpc_call_id",
      "method": "CreateUser",
      "params": {
        "HubName_str": "VPN",
        "Name_str": "two",
        "Realname_utf": "Two Two",
        "Note_utf": "45G",
        "ExpireTime_dt": "",
        "AuthType_u32": 1,
        "Auth_Password_str": "two",
        "UsePolicy_bool": true,
        "policy:Access_bool": true,
        "policy:MaxConnection_u32": 32,
        "policy:TimeOut_u32": 20,
        "policy:FixPassword_bool": true,
        "policy:MultiLogins_u32": 1
      }
    }
    

    response:

    {
        "result": {
            "AuthType_u32": 1,
            "CreatedTime_dt": "1970-01-01T09:00:00.000Z",
            "ExpireTime_dt": "1970-01-01T09:00:00.000Z",
            "GroupName_str": "",
            "HashedKey_bin": "GAgL\/IS5AcymshyiyMPj0Am6ifY=",
            "HubName_str": "VPN",
            "Name_str": "two",
            "Note_utf": "45G",
            "NtLmSecureHash_bin": "osWrhSGw4CZ2T+L3OwSd7w==",
            "NumLogin_u32": 0,
            "policy:Access_bool": true,
            "policy:ArpDhcpOnly_bool": false,
            "policy:AutoDisconnect_u32": 0,
            "policy:CheckIP_bool": false,
            "policy:CheckIPv6_bool": false,
            "policy:CheckMac_bool": false,
            "policy:DHCPFilter_bool": false,
            "policy:DHCPForce_bool": false,
            "policy:DHCPNoServer_bool": false,
            "policy:DHCPv6Filter_bool": false,
            "policy:DHCPv6NoServer_bool": false,
            "policy:FilterIPv4_bool": false,
            "policy:FilterIPv6_bool": false,
            "policy:FilterNonIP_bool": false,
            "policy:FixPassword_bool": true,
            "policy:MaxConnection_u32": 32,
            "policy:MaxDownload_u32": 0,
            "policy:MaxIP_u32": 0,
            "policy:MaxIPv6_u32": 0,
            "policy:MaxMac_u32": 0,
            "policy:MaxUpload_u32": 0,
            "policy:MonitorPort_bool": false,
            "policy:MultiLogins_u32": 1,
            "policy:NoBridge_bool": false,
            "policy:NoBroadcastLimiter_bool": false,
            "policy:NoIPv6DefaultRouterInRA_bool": false,
            "policy:NoIPv6DefaultRouterInRAWhenIPv6_bool": false,
            "policy:NoQoS_bool": false,
            "policy:NoRouting_bool": false,
            "policy:NoRoutingV6_bool": false,
            "policy:NoSavePassword_bool": false,
            "policy:NoServer_bool": false,
            "policy:NoServerV6_bool": false,
            "policy:PrivacyFilter_bool": false,
            "policy:RAFilter_bool": false,
            "policy:RSandRAFilter_bool": false,
            "policy:TimeOut_u32": 20,
            "policy:Ver3_bool": true,
            "policy:VLanId_u32": 0,
            "Realname_utf": "Two Two",
            "Recv.BroadcastBytes_u64": 0,
            "Recv.BroadcastCount_u64": 0,
            "Recv.UnicastBytes_u64": 0,
            "Recv.UnicastCount_u64": 0,
            "Send.BroadcastBytes_u64": 0,
            "Send.BroadcastCount_u64": 0,
            "Send.UnicastBytes_u64": 0,
            "Send.UnicastCount_u64": 0,
            "UpdatedTime_dt": "1970-01-01T09:00:00.000Z",
            "UsePolicy_bool": true
        },
        "jsonrpc": "2.0",
        "id": "rpc_call_id"
    }
    

    Notice this part:

            "HubName_str": "VPN",
            "Name_str": "two",
            "Note_utf": "45G",
            "NtLmSecureHash_bin": "osWrhSGw4CZ2T+L3OwSd7w==",
            "NumLogin_u32": 0,
            "policy:Access_bool": true,
             ....
           "Realname_utf": "Two Two",
    
    1. [Second step] -- try to update note (just note)

    request

    {
      "jsonrpc": "2.0",
      "id": "rpc_call_id",
      "method": "SetUser",
      "params": {
        "HubName_str": "VPN",
        "Name_str": "two",
        "Note_utf": "45G"
      }
    }
    

    response

    {
        "result": {
            "AuthType_u32": 0,
            "CreatedTime_dt": "1970-01-01T09:00:00.000Z",
            "ExpireTime_dt": "1970-01-01T09:00:00.000Z",
            "GroupName_str": "",
            "HubName_str": "VPN",
            "Name_str": "two",
            "Note_utf": "45G",
            "NumLogin_u32": 0,
            "Realname_utf": "",
            "Recv.BroadcastBytes_u64": 0,
            "Recv.BroadcastCount_u64": 0,
            "Recv.UnicastBytes_u64": 0,
            "Recv.UnicastCount_u64": 0,
            "Send.BroadcastBytes_u64": 0,
            "Send.BroadcastCount_u64": 0,
            "Send.UnicastBytes_u64": 0,
            "Send.UnicastCount_u64": 0,
            "UpdatedTime_dt": "1970-01-01T09:00:00.000Z"
        },
        "jsonrpc": "2.0",
        "id": "rpc_call_id"
    }
    
    • Realname_utf was set to ""
    • other params when I check with GUI have been set to default
    opened by shakibamoshiri 1
  • upgrade from 4.38-9670 to 5.02.5180, no l2tp/ipsec connection

    upgrade from 4.38-9670 to 5.02.5180, no l2tp/ipsec connection

    Prerequisites

    • [ yes] Can you reproduce?
    • [ yes] Are you running the latest version of SoftEtherVPN?

    SoftEther version: 5.02.5180 Component: [ubuntu 22.04, Android 12] Operating system: [ubuntu 22.04, Android 12] Architecture: [64 bit]

    [In case it's a computer with known specs, such as the Raspberry Pi, you can specify it omitting the details.] Processor: [ amd 3400g]

    Description

    [Description of the bug]

    Expected behavior: connecting -> connected ;-)

    Actual behavior: I just tried to update my vpn server to 5.02.

    It also starts and the openvpn clients have automatically reconnected.

    unfortunately there are problems with l2tp/ipsec, i can't connect either with ubuntu 22.04 or with android. There is no reasonable error message on the client side either

    ubuntu client:

    Dez 12 15:53:21 XPS-13-9360 NetworkManager[7008]: <info>  [1670856801.6619] manager: NetworkManager state is now CONNECTED_SITE
    Dez 12 15:53:21 XPS-13-9360 NetworkManager[7008]: <info>  [1670856801.9376] manager: NetworkManager state is now CONNECTED_GLOBAL
    Dez 12 15:54:57 XPS-13-9360 NetworkManager[7008]: <info>  [1670856897.1237] agent-manager: agent[bb6a35deaa4029f4,:1.100/org.gnome.Shell.NetworkAgent/1000]: agent registered
    Dez 12 16:02:13 XPS-13-9360 NetworkManager[7008]: <info>  [1670857333.6805] vpn[0x55c5b8dea9e0,e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9,"badcloud"]: starting l2tp
    Dez 12 16:02:13 XPS-13-9360 NetworkManager[7008]: <info>  [1670857333.6821] audit: op="connection-activate" uuid="e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9" name="badcloud" pid=10847 uid=1000 result="success"
    Dez 12 16:02:13 XPS-13-9360 nm-l2tp-service[86443]: Check port 1701
    Dez 12 16:02:13 XPS-13-9360 nm-l2tp-service[86443]: Can't bind to port 1701
    Dez 12 16:02:13 XPS-13-9360 NetworkManager[86490]: Stopping strongSwan IPsec failed: starter is not running
    Dez 12 16:02:15 XPS-13-9360 NetworkManager[86487]: Starting strongSwan 5.9.5 IPsec [starter]...
    Dez 12 16:02:15 XPS-13-9360 NetworkManager[86487]: Loading config setup
    Dez 12 16:02:15 XPS-13-9360 NetworkManager[86487]: Loading conn 'e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9'
    Dez 12 16:02:15 XPS-13-9360 ipsec_starter[86487]: Starting strongSwan 5.9.5 IPsec [starter]...
    Dez 12 16:02:15 XPS-13-9360 ipsec_starter[86487]: Loading config setup
    Dez 12 16:02:15 XPS-13-9360 ipsec_starter[86487]: Loading conn 'e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9'
    Dez 12 16:02:15 XPS-13-9360 ipsec_starter[86502]: Attempting to start charon...
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[DMN] Starting IKE charon daemon (strongSwan 5.9.5, Linux 5.15.0-56-generic, x86_64)
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[LIB] providers loaded by OpenSSL: legacy default
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading crls from '/etc/ipsec.d/crls'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading secrets from '/etc/ipsec.secrets'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG] loading secrets from '/etc/ipsec.d/ipsec.nm-l2tp.secrets'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[CFG]   loaded IKE secret for %any
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[LIB] loaded plugins: charon aesni aes rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm drbg attr kernel-netlink resolve socket-default connmark stroke updown eap-mschapv2 xauth-generic counters
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[LIB] dropped capabilities, running as uid 0, gid 0
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 00[JOB] spawning 16 worker threads
    Dez 12 16:02:15 XPS-13-9360 ipsec_starter[86502]: charon (86503) started after 20 ms
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 06[CFG] received stroke: add connection 'e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9'
    Dez 12 16:02:15 XPS-13-9360 charon[86503]: 06[CFG] added configuration 'e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9'
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 07[CFG] rereading secrets
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 07[CFG] loading secrets from '/etc/ipsec.secrets'
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 07[CFG] loading secrets from '/etc/ipsec.d/ipsec.nm-l2tp.secrets'
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 07[CFG]   loaded IKE secret for %any
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 09[CFG] received stroke: initiate 'e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9'
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 11[IKE] initiating Main Mode IKE_SA e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9[1] to 192.168.0.60
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 11[IKE] initiating Main Mode IKE_SA e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9[1] to 192.168.0.60
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 11[ENC] generating ID_PROT request 0 [ SA V V V V V ]
    Dez 12 16:02:16 XPS-13-9360 charon[86503]: 11[NET] sending packet: from 192.168.0.27[500] to 192.168.0.60[500] (532 bytes)
    Dez 12 16:02:20 XPS-13-9360 charon[86503]: 13[IKE] sending retransmit 1 of request message ID 0, seq 1
    Dez 12 16:02:20 XPS-13-9360 charon[86503]: 13[NET] sending packet: from 192.168.0.27[500] to 192.168.0.60[500] (532 bytes)
    Dez 12 16:02:23 XPS-13-9360 NetworkManager[7008]: <warn>  [1670857343.8002] vpn[0x55c5b8dea9e0,e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9,"badcloud"]: failed to connect: 'Zeitüberschreitung wurde erreicht'
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86624]: Stopping strongSwan IPsec...
    Dez 12 16:02:26 XPS-13-9360 charon[86503]: 00[DMN] SIGINT received, shutting down
    Dez 12 16:02:26 XPS-13-9360 charon[86503]: 00[IKE] destroying IKE_SA in state CONNECTING without notification
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: initiating Main Mode IKE_SA e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9[1] to 192.168.0.60
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: generating ID_PROT request 0 [ SA V V V V V ]
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: sending packet: from 192.168.0.27[500] to 192.168.0.60[500] (532 bytes)
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: sending retransmit 1 of request message ID 0, seq 1
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: sending packet: from 192.168.0.27[500] to 192.168.0.60[500] (532 bytes)
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: destroying IKE_SA in state CONNECTING without notification
    Dez 12 16:02:26 XPS-13-9360 NetworkManager[86533]: establishing connection 'e5814a0d-d5b8-4d8b-8994-3b87b6faa1e9' failed
    Dez 12 16:02:26 XPS-13-9360 ipsec_starter[86502]: child 86503 (charon) has quit (exit code 0)
    Dez 12 16:02:26 XPS-13-9360 ipsec_starter[86502]: 
    Dez 12 16:02:26 XPS-13-9360 ipsec_starter[86502]: charon stopped after 200 ms
    Dez 12 16:02:26 XPS-13-9360 ipsec_starter[86502]: ipsec starter stopped
    Dez 12 16:02:26 XPS-13-9360 nm-l2tp-service[86443]: g_dbus_method_invocation_take_error: assertion 'error != NULL' failed
    

    server logs:

    2022-12-12 15:02:16.921 IPsec Client 5 (192.168.0.27:500 -> :::500): A new IPsec client is created.
    2022-12-12 15:02:16.921 IPsec IKE Session (IKE SA) 5 (Client: 5) (192.168.0.27:500 -> :::500): A new IKE SA (Main Mode) is created. Initiator Cookie: 0xC9A389C8E397698, Responder Cookie: 0x8CA034A0586F9CCB, DH Group: MODP 2048 (Group 14), Hash Algorithm: SHA-2-256, Cipher Algorithm: AES-CBC, Cipher Key Size: 256 bits, Lifetime: 4294967295 Kbytes or 10800 seconds
    2022-12-12 15:02:20.912 IPsec Client 6 (192.168.0.27:500 -> :::500): A new IPsec client is created.
    2022-12-12 15:02:20.912 IPsec IKE Session (IKE SA) 6 (Client: 6) (192.168.0.27:500 -> :::500): A new IKE SA (Main Mode) is created. Initiator Cookie: 0xC9A389C8E397698, Responder Cookie: 0xD2732EC36673F89C, DH Group: MODP 2048 (Group 14), Hash Algorithm: SHA-2-256, Cipher Algorithm: AES-CBC, Cipher Key Size: 256 bits, Lifetime: 4294967295 Kbytes or 10800 seconds
    2022-12-12 15:02:26.921 IPsec IKE Session (IKE SA) 5 (Client: 5) (192.168.0.27:500 -> :::500): This IKE SA is deleted.
    2022-12-12 15:02:26.921 IPsec Client 5 (192.168.0.27:500 -> :::500): This IPsec Client is deleted.
    2022-12-12 15:02:30.914 IPsec IKE Session (IKE SA) 6 (Client: 6) (192.168.0.27:500 -> :::500): This IKE SA is deleted.
    2022-12-12 15:02:30.914 IPsec Client 6 (192.168.0.27:500 -> :::500): This IPsec Client is deleted.
    
    

    Steps to reproduce

    i only updated softether, same config file

    thanks for your help

    opened by badsmoke 4
  • In app use

    In app use

    Hello to dear Softether Developers Can I use Softether as an in-app VPN in my C# program? I want to run Softether in my app for my app users. I will very much appreciate it if you guide me.

    opened by amirhossinD 1
Releases(5.02.5180)
Owner
SoftEther
SoftEther
Lightway Core is a modern VPN protocol by ExpressVPN, to deliver a VPN experience that’s faster, more secure, and more reliable.

Lightway Core is a modern VPN protocol by ExpressVPN, to deliver a VPN experience that’s faster, more secure, and more reliable.

ExpressVPN 390 Dec 28, 2022
aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line.

aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line. It supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink.

aria2 28.7k Jan 7, 2023
LAN Party VPN - Run VPN on top of Discord. No installation required.

LAN Party VPN - VPN for Virtual LAN Parties Have you ever wanted to play a classic game with your friends but not able to because you or your friends

Yifan Gu 283 Dec 14, 2022
XQUIC Library released by Alibaba is a cross-platform implementation of QUIC and HTTP/3 protocol.

XQUIC 简体中文文档 README-zh-CN Introduction XQUIC Library released by Alibaba is … … a client and server implementation of QUIC and HTTP/3 as specified by

Alibaba 1.4k Dec 29, 2022
Husarnet is a Peer-to-Peer VPN to connect your laptops, servers and microcontrollers over the Internet with zero configuration.

Husarnet Client Husarnet is a Peer-to-Peer VPN to connect your laptops, servers and microcontrollers over the Internet with zero configuration. Key fe

Husarnet 180 Jan 1, 2023
A VPN client for Android based on OpenVPN made with Jetpack Compose.

Gear VPN - Free, Secure & Open sourced VPN Tech Stack Jetpack Compose - Google's new UI toolkit for developing native Android apps. Navigator-Compose

Kaustubh Patange 86 Dec 23, 2022
A GlobalProtect VPN client (GUI) for Linux based on OpenConnect and built with Qt5, supports SAML auth mode.

A GlobalProtect VPN client (GUI) for Linux based on OpenConnect and built with Qt5, supports SAML auth mode.

Kevin Yue 603 Jan 2, 2023
Mongoose Embedded Web Server Library - a multi-protocol embedded networking library with TCP/UDP, HTTP, WebSocket, MQTT built-in protocols, async DNS resolver, and non-blocking API.

Mongoose - Embedded Web Server / Embedded Networking Library Mongoose is a networking library for C/C++. It implements event-driven non-blocking APIs

Cesanta Software 9k Jan 1, 2023
Multi-protocol Port Mapping client library

libplum - Multi-protocol Port Mapping client library libplum (Port Lightweight and Universal Mapping) is a library allowing to forward ports on Networ

Paul-Louis Ageneau 18 Dec 26, 2022
an easy implementation of a multi-process tcp server and a multi-thread tcp client

一个TCP多进程服务器-多线程客户端的简单实现。 客户端类似Apache ab的测试功能,能够通过向某一个ip端口发送指定并发量和总数量的tcp短连接;服务端处理tcp短连接,每来一条消息就打印一条log。 使用cmake编译,建议在vscode里编译,或者命令行 # 终端进入目录 mkdir bu

adin 1 Nov 28, 2021
WARFOX is a software-based HTTPS beaconing Windows implant that uses a multi-layered proxy network for C2 communications.

An HTTPS beaconing Windows implant and multi-layered proxy C2 network designed for covert APT emulation focused offensive operations

null 85 Nov 25, 2022
Open source SDR 4G/5G software suite from Software Radio Systems (SRS)

Open source SDR 4G/5G software suite from Software Radio Systems (SRS)

srsRAN 2.9k Dec 31, 2022
WAFer is a C language-based software platform for scalable server-side and networking applications. Think node.js for C programmers.

WAFer WAFer is a C language-based ultra-light scalable server-side web applications framework. Think node.js for C programmers. Because it's written i

Riolet Corporation 693 Dec 6, 2022
Cross-platform, efficient, customizable, and robust asynchronous HTTP/WebSocket server C++14 library with the right balance between performance and ease of use

What Is RESTinio? RESTinio is a header-only C++14 library that gives you an embedded HTTP/Websocket server. It is based on standalone version of ASIO

Stiffstream 924 Jan 6, 2023
RakNet is a cross platform, open source, C++ networking engine for game programmers.

RakNet 4.081 Copyright (c) 2014, Oculus VR, Inc. Package notes The Help directory contains index.html, which is full help documentation in HTML format

Facebook Archive 3.1k Dec 30, 2022
LibVNCServer/LibVNCClient are cross-platform C libraries that allow you to easily implement VNC server or client functionality in your program.

LibVNCServer: A library for easy implementation of a VNC server. Copyright (C) 2001-2003 Johannes E. Schindelin If you already used LibVNCServer, you

null 888 Dec 30, 2022
RakNet is a cross platform, open source, C++ networking engine for game programmers.

RakNet 4.081 Copyright (c) 2014, Oculus VR, Inc. Package notes The Help directory contains index.html, which is full help documentation in HTML format

Facebook Archive 3.1k Dec 30, 2022
An extensible, cross-platform, single-header C/C++ OpenGL loader library.

Simple OpenGL Loader An extensible, cross-platform, single-header C/C++ OpenGL loader library. Usage For Windows Win32 or Linux X11 applications, the

Tarek Sherif 77 Dec 12, 2022
Mars is a cross-platform network component developed by WeChat.

Mars is a cross-platform infrastructure component developed by WeChat Mobile Team

Tencent 16.6k Jan 3, 2023