Re: [Openvpn-devel] Easy-RSA v3 release planning

2013-12-23 Thread Josh Cepek
On 12/23/13 13:24, Mike Tancsa wrote: >> > the newer Safenet java etokens require the Safenet driver software (or >> > Aladdin eToken driver v5.0+). If you don't have access to this software >> > then you're out of luck. If you do have access then generating keys on >> > the token is doable (but no

Re: [Openvpn-devel] Easy-RSA v3 release planning

2013-12-23 Thread Mike Tancsa
On 12/23/2013 4:38 AM, Jan Just Keijser wrote: Hi, >> Its been a while since I tried / checked, but is there any support for >> generating keys on an actual hardware token in Windows ? >> Specifically, it would be great if I could do this with the >> Safenet/Aladin java etoken. >> >> I can do it o

Re: [Openvpn-devel] Easy-RSA v3 release planning

2013-12-23 Thread Josh Cepek
On 12/19/13 05:01, Samuli Seppänen wrote: > Do you think easy-rsa 3.0 would be a drop-in replacement for 2.0 by the > time we push out the OpenVPN 2.4 alpha(s)? I believe that'll happen in > Q1 next year. I can package easy-rsa 3.0 for deb/rpm distros as well as > add it to the NSIS installer for W

Re: [Openvpn-devel] [PATCH v3] Floating: Add support for floating in TLS mode

2013-12-23 Thread André Valentin
Hi! On 23.12.2013 12:32, Gert Doering wrote: > We've discussed the patch on the Munich Hackathon, and we intend to do > it in a different way. James wants to change the packet format for > data packets anyway (due to bad alignment in the current packet format), > and the new format would have the

Re: [Openvpn-devel] [PATCH v3] Floating: Add support for floating in TLS mode

2013-12-23 Thread Gert Doering
Hi, On Sun, Dec 22, 2013 at 11:15:48PM +0100, Andre Valentin wrote: > Just for reference, I got my throughput numbers from: > http://thread.gmane.org/gmane.network.openvpn.devel/7384/focus=7395 Just so that it has been said :-) We've discussed the patch on the Munich Hackathon, and we intend to

Re: [Openvpn-devel] Easy-RSA v3 release planning

2013-12-23 Thread Jan Just Keijser
Hi Mike, *, Mike Tancsa wrote: On 12/17/2013 9:05 PM, Josh Cepek wrote: Here's an update about Easy-RSA v3 in case there were any lingering contributions or ideas. At this point, the notable thing missing compared to the 2.x-series is PKCS#11 support. My thought here is that it should either

Re: [Openvpn-devel] Easy-RSA v3 release planning

2013-12-23 Thread Eric Crist
If you want specific hardware support, your best bet is to send a hardware token we can test to a developer. Contact me if you need help. > On Dec 22, 2013, at 7:34 PM, Mike Tancsa wrote: > >> On 12/17/2013 9:05 PM, Josh Cepek wrote: >> Here's an update about Easy-RSA v3 in case there were any

Re: [Openvpn-devel] Easy-RSA v3 release planning

2013-12-23 Thread Mike Tancsa
On 12/17/2013 9:05 PM, Josh Cepek wrote: > Here's an update about Easy-RSA v3 in case there were any > lingering contributions or ideas. At this point, the notable thing > missing compared to the 2.x-series is PKCS#11 support. My thought > here is that it should either have universal support for bo