[Openvpn-devel] [PATCH v2 26/28] Allow setting control channel packet size with tls-mtu

2022-05-10 Thread Arne Schwabe
Currently control packet size is controlled by tun-mtu in a very non-obvious way since the control overhead is not taken into account and control channel packet will end up with a different size than data channel packet. Instead we decouple this and introduce tls-mtu which defaults to 1250. Patch

[Openvpn-devel] [PATCH v2 25/28] Ensure that control channel packet are respecting tls-mtu

2022-05-10 Thread Arne Schwabe
This ensure that control packets are actually smaller than tls-mtu. Since OpenVPN will consider a control message packet complete when the TLS record is complete, we have to ensure that the SSL library will still write one record, so the receiving side will only be able to get/read the control mes

[Openvpn-devel] Community meetings in May 2022

2022-05-10 Thread Samuli Seppänen
Hi, Next community meetings have been scheduled to - Wed 11th May 2022 at 10:30 CEST - Wed 18th May 2022 at 10:30 CEST - Wed 25th May 2022 at 10:30 CEST The place is #openvpn-meeting IRC channel at libera.chat Meeting agendas and summaries are in here:

[Openvpn-devel] [PATCH] Implement ED448 and ED25519 support in xkey_provider

2022-05-10 Thread Arne Schwabe
OpenSSL's implementation of ED448 and ED25519 has a few idiosyncrasies. Instead of belonging to the eliptic curve type or to a common Edwards curve type, ED448 and ED25519 have each their own type. Also, OpenSSL excepts singatures using these curves to be done with the EVP_DigestSign API instead o

Re: [Openvpn-devel] [PATCH v2 4/7] ovpn-dco: introduce linux data-channel offload support

2022-05-10 Thread Frank Lichtenheld
> Antonio Quartulli hat am 09.05.2022 20:06 geschrieben: > On 12/04/2022 12:33, Frank Lichtenheld wrote: > > Honestly still not sure one would start reviewing the actual code but here > > are at least a few minor things I noticed while browsing through it: > > > >> Antonio Quartulli hat am 11.04