[Openvpn-devel] [M] Change in openvpn[master]: Make dh none behaviour default if not specified and add dh auto

2025-04-29 Thread plaisthos (Code Review)
plaisthos has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/945?usp=email ) Change subject: Make dh none behaviour default if not specified and add dh auto .. Patch Set 2: Code-Review-2 (1 comment) P

[Openvpn-devel] [M] Change in openvpn[release/2.6]: Fix MBEDTLS_DEPRECATED_REMOVED build errors

2025-04-29 Thread cron2 (Code Review)
Attention is currently required from: flichtenheld, plaisthos. cron2 has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/946?usp=email ) Change subject: Fix MBEDTLS_DEPRECATED_REMOVED build errors .. Pa

[Openvpn-devel] [PATCH v2] Fix MBEDTLS_DEPRECATED_REMOVED build errors

2025-04-29 Thread Gert Doering
From: rein.vanbaaren This commit allows compiling OpenVPN with recent versions of mbed TLS if MBEDTLS_DEPRECATED_REMOVED is defined. Cherry-pick note: - Adapt to still support TLS 1.0 and 1.1 which were removed in master. Change-Id: If96c2ebd2af16b18ed34820e8c0531547e2076d9 Signed-off-by: Max

Re: [Openvpn-devel] [SPAM] [PATCH] Skip tmp-dir check unless actualy used

2025-04-29 Thread Klemens Nanni
29 апреля 2025 г. 08:24:12 UTC, Arne Schwabe пишет: >There are more instances where the tmp dir is used. Just to name one of the >top of my head is tls-crypt-v2-verify. I wonder if the benefit herre is big >enough. As you said, even in your ro scenario it can be workarounded with >specifying an

[Openvpn-devel] [M] Change in openvpn[release/2.6]: Fix MBEDTLS_DEPRECATED_REMOVED build errors

2025-04-29 Thread flichtenheld (Code Review)
Attention is currently required from: flichtenheld, plaisthos. Hello cron2, plaisthos, I'd like you to reexamine a change. Please visit http://gerrit.openvpn.net/c/openvpn/+/946?usp=email to look at the new patch set (#2). Change subject: Fix MBEDTLS_DEPRECATED_REMOVED build errors ..

Re: [Openvpn-devel] [SPAM] [PATCH] Skip tmp-dir check unless actualy used

2025-04-29 Thread Arne Schwabe
Am 28.04.2025 um 23:46 schrieb Klemens Nanni: As per the manual, it is subject to `chroot` and used only by `client-connect` and `plugin`. Without additional code being run and `chroot /var/empty/` (amongst `user`, `persist-*`, etc.) set to reduce run-time privileges as much as possible, the de