From: Selva Nair <selva.n...@gmail.com> Hi,
I am not sure how receptive the crypto maintaineres are to the idea of adding more code into cryptoapi.c, but here goes: I've been wanting to add TLS 1.2 support for certs in the Windows cert store using management external key. But that's a lot more work than extending cryptoapicert support. And, rather surprsingly, it turns out that the CNG API for signing is easy to use (well after some groping in the dark..) and doesn't take much to implement. So these patches.. The first patch is not really related and to make the existing code "openssl-1.1 ready" (missed by past patches as no one probably builds Windows binary with 1.1..). The second patch is not dependent on this, but close-by code paths are touched by both. Selva Selva Nair (2): Bring cryptoapi.c upto speed with openssl 1.1 TLS v1.2 support for cryptoapicert -- RSA only configure.ac | 1 + src/openvpn/Makefile.am | 2 +- src/openvpn/cryptoapi.c | 155 ++++++++++++++++++++++++++++++++++--------- src/openvpn/openssl_compat.h | 14 ++++ src/openvpn/options.c | 18 ----- 5 files changed, 140 insertions(+), 50 deletions(-) -- 2.1.4 ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel