Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-26 Thread Gert Doering
Hi, On Thu, Mar 25, 2021 at 01:01:20AM +0100, Arne Schwabe wrote: > The non-TLS mode is a relict from OpenVPN 1.x or 2.0. When tls mode was > introduce the advantages of TLS over non-tls were small but tls mode > evolved to include a lot more features. (NCP, multipeer, AEAD ciphers to name > a few

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Antonio Quartulli
Hi, On 25/03/2021 01:01, Arne Schwabe wrote: > The non-TLS mode is a relict from OpenVPN 1.x or 2.0. When tls mode was > introduce the advantages of TLS over non-tls were small but tls mode > evolved to include a lot more features. (NCP, multipeer, AEAD ciphers to name > a few). > > Today VPN tha

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Matthias Andree
Am 25.03.21 um 20:57 schrieb Antonio Quartulli: > Hi, > > On 25/03/2021 20:29, Matthias Andree wrote: >> I find the reasons you present to withdraw the symmetric non-TLS mode >> too weak to justify its deprecation or removal. Yes, TLS-based >> configurations may be more feature-rich, but those are

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Antonio Quartulli
Hi, On 25/03/2021 20:29, Matthias Andree wrote: > I find the reasons you present to withdraw the symmetric non-TLS mode > too weak to justify its deprecation or removal. Yes, TLS-based > configurations may be more feature-rich, but those are not mandatory and > we should not paternalize the users

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Matthias Andree
Am 25.03.21 um 01:01 schrieb Arne Schwabe: > The non-TLS mode is a relict from OpenVPN 1.x or 2.0. When tls mode was > introduce the advantages of TLS over non-tls were small but tls mode > evolved to include a lot more features. (NCP, multipeer, AEAD ciphers to name > a few). > > Today VPN that us

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Antonio Quartulli
Hi, On 25/03/2021 16:46, tincanteksup wrote: > Hi, > > On 25/03/2021 07:59, Antonio Quartulli wrote: >> Hi, >> >> On 25/03/2021 08:49, Antonio Quartulli wrote: >>> That change (that was *Actually* made in 2.4) was exactly to remove this >>> ambiguity. >> >> Forgive my hasty reply. This combinatio

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread tincanteksup
Hi, On 25/03/2021 07:59, Antonio Quartulli wrote: Hi, On 25/03/2021 08:49, Antonio Quartulli wrote: That change (that was *Actually* made in 2.4) was exactly to remove this ambiguity. Forgive my hasty reply. This combination of option is actually not-supported since 2.5 (in 2.4 we probably o

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Antonio Quartulli
Hi, On 25/03/2021 08:49, Antonio Quartulli wrote: > That change (that was *Actually* made in 2.4) was exactly to remove this > ambiguity. Forgive my hasty reply. This combination of option is actually not-supported since 2.5 (in 2.4 we probably only introduced the deprecation warning). Regards,

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-25 Thread Antonio Quartulli
Hi, On 25/03/2021 01:47, tincanteksup wrote: > I made this change to the wiki: > https://community.openvpn.net/openvpn/wiki/DeprecatedOptions?action=diff&version=45 I had this discussion with "Pippin_" in #openvpn-meeting: The change you made is wrong. That part of the wikipage talks about movin

Re: [Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-24 Thread tincanteksup
I made this change to the wiki: https://community.openvpn.net/openvpn/wiki/DeprecatedOptions?action=diff&version=45 ___ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel

[Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-24 Thread Arne Schwabe
The non-TLS mode is a relict from OpenVPN 1.x or 2.0. When tls mode was introduce the advantages of TLS over non-tls were small but tls mode evolved to include a lot more features. (NCP, multipeer, AEAD ciphers to name a few). Today VPN that use --secret are mainly used because of its relative eas

[Openvpn-devel] [PATCH 1/2] Deprecate non TLS mode in OpenVPN

2021-03-24 Thread Arne Schwabe
The non-TLS mode is a relict from OpenVPN 1.x or 2.0. When tls mode was introduce the advantages of TLS over non-tls were small but tls mode evolved to include a lot more features. (NCP, multipeer, AEAD ciphers to name a few). Today VPN that use --secret are mainly used because of its relative eas