Re: [Openvpn-devel] [PATCH] Support for wolfSSL with OpenVPN master branch

2020-02-21 Thread Arne Schwabe
Am 09.02.20 um 12:08 schrieb Juliusz Sosinowicz: > Hi Antonio, > > Gert is correct, our compatibility layer is a set of functions in > wolfSSL which emulate the OpenSSL API. These functions are then macro > defined to have the same names as the OpenSSL functions. The configure > script needs to kn

[Openvpn-devel] [PATCH v5 4/5] Move NCP related function into a seperate file and add unit tests

2020-02-21 Thread Arne Schwabe
This allows unit test the NCP functions. The ssl.c file has too many dependencies to make unit testing of it viable. Patch V2: Removing the include "ssl_ncp.h" from options.c for V2 of implement dynamic NCP forces a new version of this patch to add the #include in this patch. M

[Openvpn-devel] [PATCH v5 5/5] Normalise ncp-ciphers option and restrict it to 127 bytes

2020-02-21 Thread Arne Schwabe
In scenarios of mbed TLS vs OpenSSL we already normalise the ciphers that are send via the wire protocol via OCC to not have a mismatch warning between server and client. This is done by translate_cipher_name_from_openvpn. The same applies also to the ncp-ciphers list. Specifying non normalised nam