[Openvpn-devel] [PATCH 1/2] Detect unusable ciphers on patched OpenSSL of RHEL/Centos

2021-08-18 Thread Arne Schwabe
OpenSSL on RHEL 8 and CentOS 8 system when these system are put into FIPS mode need extra code to figure out if a specific cipher algorithm is usable on these system. This is particularly problem in data-ciphers as the errors might occur much later when a client connects and as these cipher are not

[Openvpn-devel] [PATCH 2/2] Include Chacha20-Poly1305 into default --data-ciphers when available

2021-08-18 Thread Arne Schwabe
Most TLS 1.3 libraries inlcude the Chacha20-Poly1305 based cipher suite beside the AES-GCM based ones int he list of default ciphers suites. Chacha20-Poly1305 is accepted as good alternative AEAD algorithm to the AES-GCM algorithm by crypto community. Follow this and include Chacha20-Poly1305 by d

[Openvpn-devel] Summary of the community meeting (18th August 2021)

2021-08-18 Thread Samuli Seppänen
Hi, Here's the summary of the IRC meeting. --- COMMUNITY MEETING Place: #openvpn-meeting on libera.chat Date: Wed 18th August 2021 Time: 14:00 CET (12:00 UTC) Planned meeting topics for this meeting were here: Your local meeting