Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi, On Mon, Jul 21, 2014 at 07:17:30PM +0200, Lisa Minogue wrote: > Hi Samuli and friends: > > This is what I think. Don't think so much, use google first :) > Both of us don't know how long it will take for OpenSSL to fix the long list > of bugs -some of which are significant- that have accum

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi Samuli and friends: This is what I think. Both of us don't know how long it will take for OpenSSL to fix the long list of bugs -some of which are significant- that have accumulated over the years. One year or two years? OpenVPN is in the business of providing software that enables secure c

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

On 21/07/14 14:44, Samuli Seppänen wrote: > Although we probably can all agree > that the state of OpenSSL leaves a lot to be desired, it's now funded by > the Core Infratructure Initiative: > > > > I don't know if money (=f

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

On 21/07/14 14:02, Gert Doering wrote: > Hi, > > On Mon, Jul 21, 2014 at 01:24:53PM +0200, Steffan Karger wrote: >> LibreSSL has just been ported to Linux. > > I'd stay away from LibreSSL for a while. "We do OpenBSD, and do not care > for portability" seems to have side effects on things like "

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Hi, > > On Mon, Jul 21, 2014 at 11:35:48AM +0200, Lisa Minogue wrote: >> In the light of the above, do you have plans to replace OpenSSL with PolarSSL or LibreSSL? And how soon will new bundles of OpenVPN software be released that incorporate Open

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi, On Mon, Jul 21, 2014 at 11:35:48AM +0200, Lisa Minogue wrote: > In the light of the above, do you have plans to replace OpenSSL with PolarSSL > or LibreSSL? And how soon will new bundles of OpenVPN software be released > that incorporate OpenSSL alternatives? [..] > P.S.: I apologize if the

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi, On Mon, Jul 21, 2014 at 01:24:53PM +0200, Steffan Karger wrote: > LibreSSL has just been ported to Linux. I'd stay away from LibreSSL for a while. "We do OpenBSD, and do not care for portability" seems to have side effects on things like "seeding RNG" that should be fully understood before

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi Lisa, On Mon, Jul 21, 2014 at 11:35 AM, Lisa Minogue wrote: > do you have plans to replace OpenSSL with PolarSSL or LibreSSL? And how soon > will new bundles of OpenVPN software be released that incorporate OpenSSL > alternatives? OpenVPN is already capable of using PolarSSL instead of Open

[Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi guys, It's been universally acknowledged that you all have been doing a wonderful job by providing free, open-source OpenVPN software and free support for it over the past few years. However a few days ago OpenSSL, in a project roadmap last modified on July 16, stated [sic]"there are a very