Am 23.01.19 um 18:48 schrieb selva.n...@gmail.com: > From: Selva Nair <selva.n...@gmail.com> > > For PSS padding, CNG requires the digest to be signed > and the digest algorithm in use, which are not accessible > via the rsa_sign and rsa_priv_enc callbacks of OpenSSL. > This patch uses the EVP_KEY interface to hook to > evp_pkey_sign callback if OpenSSL version is > 1.1.0. > > To test this code path, both the server and client should > be built with OpenSSL 1.1.1 and use TLS version >= 1.2 > > Tested on Windows 7 client against a Linux server. >
Normally, I not always expect patches to always cleanly apply but in this case I cannot get git to apply this thing. git am <~/dl/Openvpn-devel-2-2-v2-Handle-PSS-padding-in-cryptoapicert.patch Applying: Handle PSS padding in cryptoapicert error: patch failed: src/openvpn/cryptoapi.c:320 error: src/openvpn/cryptoapi.c: patch does not apply Patch failed at 0001 Handle PSS padding in cryptoapicert hint: Use 'git am --show-current-patch' to see the failed patch When you have resolved this problem, run "git am --continue". If you prefer to skip this patch, run "git am --skip" instead. To restore the original branch and stop patching, run "git am --abort". git am --3way Applying: Handle PSS padding in cryptoapicert error: sha1 information is lacking or useless (src/openvpn/cryptoapi.c). error: could not build fake ancestor Patch failed at 0001 Handle PSS padding in cryptoapicert hint: Use 'git am --show-current-patch' to see the failed patch When you have resolved this problem, run "git am --continue". If you prefer to skip this patch, run "git am --skip" instead. To restore the original branch and stop patching, run "git am --abort". Since Gert/David will also face the same problems later it might be easier to resend this patch in a form that applies to master without manually resolving conflicts. Arne
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
