Your patch has been applied to the master branch. I have done a cursory stare-at code and it matches the grumblings given on the way to dinner ("check not only for GCM but accept all save ciphers using this API", IIRC). My current test rig is too old to do a full client-server test easily, but at least the mbedTLS and the OpenSSL 1.1.0 build both claim support...
CHACHA20-POLY1305 (256 bit key, 8 bit block, TLS client/server mode only) CHACHA20-POLY1305 (256 bit key, 8 bit block, TLS client/server mode only) .. and pass t_client tests both for OpenSSL and mbedTLS... commit 6d0d0af9883b9ae266c0468f2739557a53e94b68 Author: Steffan Karger Date: Mon Oct 8 00:30:34 2018 +0200 Add support for CHACHA20-POLY1305 in the data channel Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Antonio Quartulli <anto...@openvpn.net> Message-Id: <20181007223035.21179-1-stef...@karger.me> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg17629.html Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel