Re: [Openvpn-devel] [PATCH] Use RSA_generate_key_ex() instead of deprecated, RSA_generate_key()

2013-12-16 Thread Gert Doering
Hi, On Sun, Dec 15, 2013 at 07:34:27PM +0100, Steffan Karger wrote: > One note on the implementation though; the code generates one ephemeral > RSA key that is used during the entire lifetime of an OpenVPN process. > If OpenSSL requests a new (ephemeral) key, it will keep on returning the > same (

[Openvpn-devel] [PATCH applied] Re: pkcs11: use generic evp key instead of rsa

2013-12-16 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branch. (I have not actually tested that it *works* - my gentoo system only installs pkcs11-helper 1.10, which isn't sufficient for --enable-pkcs11 with this patch. So I just tested that it doesn't break default compiles) commit 6575ad483

[Openvpn-devel] [PATCH] Add warning for using connection block variables after connection blocks

2013-12-16 Thread Arne Schwabe
In 2.3 some options that were allowed only in global config before have been moved to connection blocks. This changes the behaviour if the variables were defined after connection block. This patch adds a warning to catch these mistakes. --- src/openvpn/common.h | 5 + src/openvpn/options

[Openvpn-devel] [PATCH applied] Re: Fix file checks when --chroot is being used

2013-12-16 Thread Gert Doering
Your patch has been applied to the master and release/2.3 branches. commit b77bffe8186647c6fd1f2f76aac41fd45719edb8 (master) commit c79fa3b0bb63bf7833f5a1c163bd30433c213b6a (release/2.3) Author: David Sommerseth List-Post: openvpn-devel@lists.sourceforge.net Date: Mon Nov 25 13:32:58 2013 +0100

Re: [Openvpn-devel] [PATCH] Add warning for using connection block variables after connection blocks

2013-12-16 Thread Gert Doering
Hi, On Mon, Dec 16, 2013 at 08:10:07PM +0100, Arne Schwabe wrote: > In 2.3 some options that were allowed only in global config before have been > moved to connection blocks. This changes the behaviour if the variables were > defined after connection block. This patch adds a warning to catch th