[Openvpn-devel] [PATCH] Fix temporary file leak

2014-10-09 Thread Samuel Thibault
Hello, Our openvpn server got out of free inodes in /tmp, making it quite completely nonworking. This is due to some codepath in multi.c which does not remove its temporary file (when a plugin callback returns an error, or a client-connect script returns an error). Please see the attached patch

Re: [Openvpn-devel] Paid Engagement

2014-10-09 Thread Steffan Karger
Hi, On 09-10-14 18:17, Arne Schwabe wrote: >> So, it looks like running rsa_sign with a cert/key pair coming out of >> the cryptostore store is causing some low level openssl problems. >> Don't know how easy it is fix, but most likely it's not inside the >> OpenVPN code... >> > Pretty easy (for Op

Re: [Openvpn-devel] session-id implementation

2014-10-09 Thread Steffan Karger
Hi Lev, On 02-10-14 13:47, Lev Stipakov wrote: > Apologize for the delay. Patch with review suggestions attached. Thanks for providing the patch, and following up on comments on the list. I've been deferring a reply to your first version, because I wanted to take a thorough look at the code befor

Re: [Openvpn-devel] Paid Engagement

2014-10-09 Thread Arne Schwabe
> > So, it looks like running rsa_sign with a cert/key pair coming out of > the cryptostore store is causing some low level openssl problems. > Don't know how easy it is fix, but most likely it's not inside the > OpenVPN code... > Pretty easy (for OpenSSL standards...). You have to use the lowleve

Re: [Openvpn-devel] Paid Engagement

2014-10-09 Thread Jan Just Keijser
Hi *, Arne Schwabe wrote: Am 07.10.14 16:32, schrieb Sio Poh Tan: > Hi Samuli, > > Thanks for your reply. I've checked on the link that you provided. However, it does not mention whether the Windows Crypto API integration supports TLS 1.2 implementation. I understand that it does support TLS 1