Re: [Openvpn-devel] [PATCH] Deprecate --no-iv

2016-12-07 Thread Gert Doering
Hi, On Wed, Dec 07, 2016 at 09:51:16PM +0100, Arne Schwabe wrote: > > +- ``--no-iv`` is deprecated in 2.4 and will be remove in 2.5. > > Typo: removed Since I had not pushed it yet, I've changed Changes.rst to fix that, and added your Acked-By: The new commitish is now commit 4969f0d6bba8a82d4

Re: [Openvpn-devel] [PATCH] Deprecate --no-iv

2016-12-07 Thread Arne Schwabe
Am 07.12.16 um 20:20 schrieb Steffan Karger: > This fixes the bug of supporting --no-iv (since we're only accepting > bugfixes in the current release phase ;) ). > > The --no-iv function decreases security if used (CBC *requires* > unpredictable IVs, other modes don't allow --no-iv at all), and ev

[Openvpn-devel] [PATCH] Deprecate --no-iv

2016-12-07 Thread Steffan Karger
This fixes the bug of supporting --no-iv (since we're only accepting bugfixes in the current release phase ;) ). The --no-iv function decreases security if used (CBC *requires* unpredictable IVs, other modes don't allow --no-iv at all), and even marginally decreases other user's security by adding