Your patch has been applied to the master branch.  Steffan says "it is
a bugfix so it should go to 2.4", but the underlying infrastructure 
does not seem to be there yet (git cherry-pick tries to bring in lots
of extra stuff).  So we can do that, but I need to be told which master
commits I need to bring to 2.4 first.


I have not even stared-at-code very much here, trusting the testers and
Steffan's code-staring abilities.

As a side note (rambling about comments today), this hunk makes the
comment above it slightly misleading:

     /* The hash OID is already in 'from'.  So set the hash algorithm
      * in the padding info struct to NULL.
      */
-    BCRYPT_PKCS1_PADDING_INFO padinfo = {NULL};
+    BCRYPT_PKCS1_PADDING_INFO padinfo = {hash_algo};

.. since we do not set it to NULL anymore...


commit 6b495dc4c5cfc118091ddc9c19330b3c9e3e3dff (master)
Author: Selva Nair 
Date:   Thu Apr 26 10:24:24 2018 -0400

     Pass the hash without the DigestInfo header to NCryptSignHash()

     Acked-by: Steffan Karger <steffan.kar...@fox-it.com>
     Message-Id: <1524752664-27946-1-git-send-email-selva.n...@gmail.com>
     URL: 
https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg16840.html
     Signed-off-by: Gert Doering <g...@greenie.muc.de>


--
kind regards,

Gert Doering



_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to