Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-21 Thread Steffan Karger
-devel@lists.sourceforge.net Subject: Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support Hi, Attached a patch for the second point you make. It was a pre-existing bug where the autoconf script was not equipped to detect incorrectly compiled polarssl builds, e.g. without pkcs11 support. I'm

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-21 Thread Steffan Karger
. -Steffan -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent: dinsdag 19 maart 2013 15:27 To: Steffan Karger Cc: openvpn-devel@lists.sourceforge.net Subject: Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support Hi, On Mon, Mar 18, 2013 at 05:37:28PM +0100, steffan.kar

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-21 Thread Adriaan de Jong
nvpn-devel] [PATCH 1/5] PolarSSL-1.2 support > > Hi, > > Attached a patch for the second point you make. It was a pre-existing > bug where the autoconf script was not equipped to detect incorrectly > compiled polarssl builds, e.g. without pkcs11 support. > > I'm still

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-20 Thread Steffan Karger
st on that one. Regards, -Steffan -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent: dinsdag 19 maart 2013 15:27 To: Steffan Karger Cc: openvpn-devel@lists.sourceforge.net Subject: Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support Hi, On Mon, Mar 18, 2013 at

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-19 Thread Gert Doering
Hi, On Mon, Mar 18, 2013 at 05:37:28PM +0100, steffan.kar...@fox-it.com wrote: > From: Steffan Karger > > Add support for PolarSSL-1.2, which has changed the API in several places. > This is a minimal port, new features have not been enabled. Only PolarSSL > 1.2.5 and newer are accepted, as earl

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-19 Thread Gert Doering
Hi, On Tue, Mar 19, 2013 at 11:38:44AM +0100, Steffan Karger wrote: > Sure. There's two options here: remove it from 1/5 and 'break' BF-CBC between > 1/5 and 4/5 (although BF wasn't supported by polar before 1.2 anyway), or > revert these changes in 4/5. I'd go for first option, since it deliver

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-19 Thread Steffan Karger
;ll send an updated patch this afternoon. -Steffan -Original Message- From: Heiko Hund [mailto:heiko.h...@sophos.com] Sent: dinsdag 19 maart 2013 11:27 To: openvpn-devel@lists.sourceforge.net Cc: Steffan Karger Subject: Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support On Monday 18 M

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-19 Thread Heiko Hund
On Monday 18 March 2013 17:37:28 steffan.kar...@fox-it.com wrote: > diff --git a/src/openvpn/options.c b/src/openvpn/options.c > index 8592955..9766742 100644 > --- a/src/openvpn/options.c > +++ b/src/openvpn/options.c > @@ -827,7 +827,11 @@ init_options (struct options *o, const bool init_gc) >

[Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-18 Thread steffan.karger
From: Steffan Karger Add support for PolarSSL-1.2, which has changed the API in several places. This is a minimal port, new features have not been enabled. Only PolarSSL 1.2.5 and newer are accepted, as earlier versions contain unresolved (security) issues. Signed-off-by: Joachim Schipper Signe