[Openvpn-devel] [PATCH applied] Re: Fixed autoconf script to properly detect missing pkcs11 with polarssl.

2013-03-22 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. commit 9a3f670248d6f519a399e65a7232e2196b5115db (master) commit 9a3f670248d6f519a399e65a7232e2196b5115db (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Mar 22 09:54:25 2013 +0100

[Openvpn-devel] [PATCH applied] Re: Switch to IANA names for TLS ciphers.

2013-03-22 Thread Gert Doering
Your patch has been applied to the master and release/2.30 branch. commit 3b23b18dddb8f8f4a6ac6959b844b63356b59e87 (master) commit 030c7b05d01b5a9a4db5bfc2169ce9e80737656a (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Mar 22 09:54:24 2013 +0100

[Openvpn-devel] [PATCH applied] Re: Config compatibility patch. Added translate_cipher_name.

2013-03-22 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. commit f499b921344272eec6405955b9bad2f162f7a2f9 (master) commit e659a8d04171583fecf9760fb73fd9031fe948be (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Mar 22 09:54:23 2013 +0100

[Openvpn-devel] [PATCH applied] Re: Improve verify_callback messages

2013-03-22 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. commit d572959d35e8920efb8d95d253ededee5d8a34bd (master) commit b3ac0bc2ad962b2968939e0e03e888c0d4193114 (master) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Mar 22 09:54:22 2013 +0100 Im

[Openvpn-devel] [PATCH applied] Re: Improve PolarSSL key_state_read_{cipher, plain}text messages

2013-03-22 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. commit 0219f115f3a2711d5c51457d6e97d6930916653b (master) commit bf71c15a2f3ccb0acc6360dfbe071f6bcbf71538 (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Mar 22 09:54:21 2013 +0100

[Openvpn-devel] [PATCH applied] Re: PolarSSL-1.2 support

2013-03-22 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. commit 4a56d19fc3aa59d0eebd99f102ecaaa3665c5088 (master) commit c5857cd49d17ec5ebe027ef94231312087a9c306 (master) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Fri Mar 22 09:54:20 2013 +0100 Po

Re: [Openvpn-devel] Updated PolarSSL 1.2 support patch set

2013-03-22 Thread Gert Doering
Hi, On Fri, Mar 22, 2013 at 09:54:19AM +0100, steffan.kar...@fox-it.com wrote: > This patch set replaces the earlier PolarSSL 1.2 support patches. It contains > all the changes in response to feedback on the previous versions, and should > be ready to be merged. Thanks. I did review the patche

Re: [Openvpn-devel] Updated PolarSSL 1.2 support patch set

2013-03-22 Thread Adriaan de Jong
Ack from my side on the patch set. I've looked at them and haven't found any issues. > -Original Message- > From: steffan.kar...@fox-it.com [mailto:steffan.kar...@fox-it.com] > Sent: vrijdag 22 maart 2013 9:54 > To: openvpn-devel@lists.sourceforge.net > Subject: [Openvpn-devel] Updated Po

[Openvpn-devel] [PATCH 5/6] Switch to IANA names for TLS ciphers.

2013-03-22 Thread steffan.karger
From: Steffan Karger Added translation table and functions to translate between TLS OpenSSL and IANA (IETF) cipher suite names. The previously used OpenSSL names are still accepted, but a deprecation warning is issued. Signed-off-by: Steffan Karger --- src/openvpn/ssl.c | 147 +++

[Openvpn-devel] [PATCH 6/6] Fixed autoconf script to properly detect missing pkcs11 with polarssl.

2013-03-22 Thread steffan.karger
From: Steffan Karger When polarssl is compiled without pkcs11 support, or a required pkcs11-helper library is missing, configure will now issue an error. Signed-off-by: Steffan Karger --- configure.ac | 54 +++--- 1 file changed, 43 insertions(

[Openvpn-devel] [PATCH 1/6] PolarSSL-1.2 support

2013-03-22 Thread steffan.karger
From: Steffan Karger Add support for PolarSSL-1.2, which has changed the API in several places. This is a minimal port, new features have not been enabled. Only PolarSSL 1.2.5 and newer are accepted, as earlier versions contain unresolved (security) issues. Signed-off-by: Joachim Schipper Signe

[Openvpn-devel] [PATCH 4/6] Config compatibility patch. Added translate_cipher_name.

2013-03-22 Thread steffan.karger
From: Steffan Karger Added translate_cipher name to crypto_openssl.c and crypto_polarssl.c to translate between OpenVPN(/OpenSSL) and PolarSSL data channel cipher algorithm names. OpenSSL does not require any translating, PolarSSL does for a small number of algorithms. This improves on config fil

[Openvpn-devel] [PATCH 3/6] Improve verify_callback messages

2013-03-22 Thread steffan.karger
From: Steffan Karger Print the *flags argument, which - for PolarSSL-1.2 - contains the reasons that the certificate failed (pre-)verification. Signed-off-by: Joachim Schipper --- src/openvpn/ssl_verify_polarssl.c |6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src

[Openvpn-devel] Updated PolarSSL 1.2 support patch set

2013-03-22 Thread steffan.karger
Hi, This patch set replaces the earlier PolarSSL 1.2 support patches. It contains all the changes in response to feedback on the previous versions, and should be ready to be merged. -Steffan

[Openvpn-devel] [PATCH 2/6] Improve PolarSSL key_state_read_{cipher, plain}text messages

2013-03-22 Thread steffan.karger
From: Steffan Karger Instead of logging the fact that an error occured, log the error code and description (when available in the PolarSSL build). Signed-off-by: Joachim Schipper --- src/openvpn/ssl_polarssl.c |8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/o