Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-21 Thread Adriaan de Jong
Ack, I think this solves the PolarSSL with/without PKCS11-helper problem. > -Original Message- > From: Steffan Karger [mailto:steffan.kar...@fox-it.com] > Sent: woensdag 20 maart 2013 19:53 > To: Gert Doering > Cc: openvpn-devel@lists.sourceforge.net > Subject: Re: [Openvpn-devel] [PATCH 1

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-21 Thread Steffan Karger
Hi, Attached a new version of the patch. It partly resolves the first issue, as it overrides the 32-bit default blowfish keysize with a sane 128 bit value. However, the options strings between openssl and polarssl still differ. That is fixed in an updated patch 4/5 which I will send shortly. -

Re: [Openvpn-devel] [PATCH 4/5] Config compatibility patch. Added translate_cipher_name.

2013-03-21 Thread Steffan Karger
Hi, Attached an updated version of the patch, which should resolve the issue. It passes t_client tests. -Steffan -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent: woensdag 20 maart 2013 9:53 To: Steffan Karger Cc: openvpn-devel@lists.sourceforge.net Subject: Re:

Re: [Openvpn-devel] [PATCH 3/5] Improve verify_callback messages

2013-03-21 Thread Steffan Karger
Hi, Attached an updated patch, which removes the stale 0 from %0x in the printf format string. -Steffan -Original Message- From: Steffan Karger Sent: maandag 18 maart 2013 17:38 To: openvpn-devel@lists.sourceforge.net Cc: Steffan Karger Subject: [PATCH 3/5] Improve verify_callback mess

Re: [Openvpn-devel] [PATCH 1/5] PolarSSL-1.2 support

2013-03-21 Thread Steffan Karger
Hi, Attached an updated version, which will not fail when polarssl is not installed in some system library path. Sorry for the spam! -Steffan -Original Message- From: Steffan Karger [mailto:steffan.kar...@fox-it.com] Sent: woensdag 20 maart 2013 19:53 To: Gert Doering Cc: openvpn-deve

Re: [Openvpn-devel] [PATCH 4/5] Config compatibility patch. Added translate_cipher_name.

2013-03-21 Thread Gert Doering
Hi, On Thu, Mar 21, 2013 at 06:41:04PM +0100, Steffan Karger wrote: > Attached an updated version of the patch, which should resolve the issue. It > passes t_client tests. It does! OCC is happy now, keysize defaults to 128 bits now, so I am happy to report that "release/2.3 plus your most re