Hi,
On Sun, Dec 15, 2013 at 07:34:27PM +0100, Steffan Karger wrote:
> One note on the implementation though; the code generates one ephemeral
> RSA key that is used during the entire lifetime of an OpenVPN process.
> If OpenSSL requests a new (ephemeral) key, it will keep on returning the
> same (
Your patch has been applied to the master and release/2.3 branch.
(I have not actually tested that it *works* - my gentoo system only
installs pkcs11-helper 1.10, which isn't sufficient for --enable-pkcs11
with this patch. So I just tested that it doesn't break default compiles)
commit 6575ad483
In 2.3 some options that were allowed only in global config before have been
moved to connection blocks. This changes the behaviour if the variables were
defined after connection block. This patch adds a warning to catch these
mistakes.
---
src/openvpn/common.h | 5 +
src/openvpn/options
Your patch has been applied to the master and release/2.3 branches.
commit b77bffe8186647c6fd1f2f76aac41fd45719edb8 (master)
commit c79fa3b0bb63bf7833f5a1c163bd30433c213b6a (release/2.3)
Author: David Sommerseth
List-Post: openvpn-devel@lists.sourceforge.net
Date: Mon Nov 25 13:32:58 2013 +0100
Hi,
On Mon, Dec 16, 2013 at 08:10:07PM +0100, Arne Schwabe wrote:
> In 2.3 some options that were allowed only in global config before have been
> moved to connection blocks. This changes the behaviour if the variables were
> defined after connection block. This patch adds a warning to catch th