Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Gert Doering
Hi, On Tue, Nov 12, 2013 at 05:35:45PM +0100, Steffan Karger wrote: > It would be very nice to get full EC support in OpenVPN! :) Indeed! From my point of view, I'd ask for a favour - if at all possible, I'd like to get a consistent set of patches against a fairly recent "master", that should g

Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Steffan Karger
Hi, On 11/12/2013 04:12 PM, Jan Just Keijser wrote: > correct , although you can currently use EC certs with SHA1 signing - > just not with SHA2 signing. > > JJK Which means adding SHA2 hashing is at least a nice addition. I've taken a quick peak at the code, applied the patches to master (which

Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Jan Just Keijser
Alon Bar-Lev wrote: On Tue, Nov 12, 2013 at 3:51 PM, Jan Just Keijser wrote: Alon Bar-Lev wrote: On Tue, Nov 12, 2013 at 1:37 PM, Jan Just Keijser wrote: there was actually a follow-up to this patch, which was sent to the openvpn-devel list on Feb 7th 2012: Added support for Elliptic c

Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Alon Bar-Lev
On Tue, Nov 12, 2013 at 3:51 PM, Jan Just Keijser wrote: > Alon Bar-Lev wrote: > > On Tue, Nov 12, 2013 at 1:37 PM, Jan Just Keijser wrote: > > > there was actually a follow-up to this patch, which was sent to the > openvpn-devel list on Feb 7th 2012: > > > Added support for Elliptic curves (ECDS

Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Jan Just Keijser
Alon Bar-Lev wrote: On Tue, Nov 12, 2013 at 1:37 PM, Jan Just Keijser wrote: there was actually a follow-up to this patch, which was sent to the openvpn-devel list on Feb 7th 2012: Added support for Elliptic curves (ECDSA) + SHA2 family signed certificates. Great! And what is the s

Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Alon Bar-Lev
On Tue, Nov 12, 2013 at 1:37 PM, Jan Just Keijser wrote: > there was actually a follow-up to this patch, which was sent to the > openvpn-devel list on Feb 7th 2012: > > > Added support for Elliptic curves (ECDSA) + SHA2 family signed > certificates. Great! And what is the status?

Re: [Openvpn-devel] [PATCH] ssl: enable basic ecdsa

2013-11-12 Thread Jan Just Keijser
there was actually a follow-up to this patch, which was sent to the openvpn-devel list on Feb 7th 2012: Added support for Elliptic curves (ECDSA) + SHA2 family signed certificates. --- init.c |7 options.c | 15 ++ options.h |6 ssl.c |3 +