[Openvpn-devel] Does openvpn 2.3.2 has memory leak? (addendum3 and 4)

2013-11-22 Thread arno . odermatt
Dear Gert, Brad all, as I also had reported to have recognized, that memory was not freed, even though the openvpn disconnect-script was disconnecting all of the 3400 Openvpn-sessions (pls see mail below). Would you think, this is also improved by the change from malloc to calloc, so we could

Re: [Openvpn-devel] Does openvpn 2.3.2 has memory leak? (addendum3 and 4)

2013-11-22 Thread Gert Doering
Hi, On Fri, Nov 22, 2013 at 10:51:27AM +0100, arno.oderm...@ch.schindler.com wrote: > Dear Gert, Brad all, > > as I also had reported to have recognized, that memory was not freed, even > > though the openvpn disconnect-script was disconnecting all of the 3400 > Openvpn-sessions (pls see mail

[Openvpn-devel] [PATCH] Fix file checks when --chroot is being used

2013-11-22 Thread David Sommerseth
From: David Sommerseth Commit 0f2bc0dd92f43c9 started to introduce some file sanity checking before OpenVPN started to avoid harder to explain issues due to missing files or directories later on. But that commit did not consider --chroot at all. Which would basically cause OpenVPN to complain o

[Openvpn-devel] [PATCH applied] Re: Change the type of all ports in openvpn to const char* and let getaddrinfo resolve the port together with the hostname.

2013-11-22 Thread Gert Doering
Feature-ACK from "the group" in Munich. Code review ACK and (lightly) tested for a few cases by me. Patch has been applied to the master branch. commit 076fd3e46bbbe6261317d58cc2442f8eccc927ce (master) Author: Arne Schwabe List-Post: openvpn-devel@lists.sourceforge.net Date: Thu Nov 21 21:0

Re: [Openvpn-devel] [PATCH 1/3] Refactor tls_ctx_use_external_private_key()

2013-11-22 Thread Arne Schwabe
Am 19.09.13 12:47, schrieb steffan.kar...@fox-it.com: > From: Joachim Schipper > > OpenSSL's tls_ctx_load_cert_file() had a parameter in which a copy of the > context's certificate chain was stored on return, used by > tls_ctx_use_external_private_key() only and free()d immediately thereafter. > >

Re: [Openvpn-devel] [PATCH 2/3] --management-external-key for PolarSSL

2013-11-22 Thread Arne Schwabe
Am 19.09.13 12:47, schrieb steffan.kar...@fox-it.com: > From: Joachim Schipper > > Add --management-external-key support, compatible with the OpenSSL > implementation. Needs the flexibility of ssl_set_own_cert_alt(), which is new > in PolarSSL-1.2. > ACK. Also works on Android :) Arne smime.p7

Re: [Openvpn-devel] [PATCH 3/3] external_pkcs1_sign: Support non-RSA_SIG_RAW hash_ids

2013-11-22 Thread Arne Schwabe
Am 19.09.13 12:47, schrieb steffan.kar...@fox-it.com: > From: Joachim Schipper > > For TLSv1.2, we need to support various hashes. (GPL) code taken from PolarSSL > pkcs11_sign(). > > ACK smime.p7s Description: S/MIME Cryptographic Signature