Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-04-02 Thread Steffan Karger
Hi, On 02-04-18 16:58, Selva Nair wrote: > On Mon, Apr 2, 2018 at 8:37 AM, Steffan Karger wrote: >> Also, this looks like a somewhat unrelated fix. I would have personally >> preferred it in a separate patch (so we can e.g. backport it easily even >> if we decide not not backport the functional

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-04-02 Thread Selva Nair
Hi, Thanks for looking at this. On Mon, Apr 2, 2018 at 8:37 AM, Steffan Karger wrote: > > Hi, > > One comment based on stare-at-code only: > > On 12-03-18 02:17, selva.n...@gmail.com wrote: > > @@ -636,6 +640,8 @@ find_certificate_in_store(const char *cert_prop, > > HCERTSTORE cert_store) > >

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-04-02 Thread Steffan Karger
Hi, One comment based on stare-at-code only: On 12-03-18 02:17, selva.n...@gmail.com wrote: > @@ -636,6 +640,8 @@ find_certificate_in_store(const char *cert_prop, > HCERTSTORE cert_store) > } > if (!*++p) /* unexpected end of string */ > { > +

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-12 Thread Gert Doering
Hi, On Mon, Mar 12, 2018 at 10:37:53AM -0400, Selva Nair wrote: > Agree, this could qualify for 2.4. Anyway, the context is the same and > it applies/cherry-picks to 2.4 without issues. OK, thanks. > Elsewhere in the code we only warn about expired certs (like those > read from a file) and conti

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-12 Thread Selva Nair
Hi, On Mon, Mar 12, 2018 at 4:21 AM, Gert Doering wrote: > > Hi Selva, > > On Sun, Mar 11, 2018 at 09:17:58PM -0400, selva.n...@gmail.com wrote: > > From: Selva Nair > > > > Have the cryptoapicert option find the first matching certificate > > in store that is valid at the present time. Currentl

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-12 Thread Gert Doering
Hi Selva, On Sun, Mar 11, 2018 at 09:17:58PM -0400, selva.n...@gmail.com wrote: > From: Selva Nair > > Have the cryptoapicert option find the first matching certificate > in store that is valid at the present time. Currently the first > found item, even if expired, is returned. Are these two in

[Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-11 Thread selva . nair
From: Selva Nair Have the cryptoapicert option find the first matching certificate in store that is valid at the present time. Currently the first found item, even if expired, is returned. This makes it possible to update certifiates in store without having to delete old ones. As a side effect,