[Openvpn-devel] [PATCH] PolarSSL 1.3

2014-02-27 Thread steffan.karger
Hi, The attached patches add support for PolarSSL 1.3. These patches are for master only, as they drop support for PolarSSL 1.2. Supporting both versions would require a lot of #ifdef's, so I opted for dropping 1.2. Along with PolarSSL 1.3 comes support for AES-NI and elliptic curve crypto. Polar

[Openvpn-devel] [PATCH 2/2] Improve error reporting during key/cert loading with PolarSSL.

2014-02-27 Thread steffan.karger
From: Steffan Karger Signed-off-by: Steffan Karger --- src/openvpn/ssl_polarssl.c | 18 ++ 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/src/openvpn/ssl_polarssl.c b/src/openvpn/ssl_polarssl.c index 3a0d8a0..2df1b30 100644 --- a/src/openvpn/ssl_polarssl.c +++ b/

[Openvpn-devel] [PATCH 1/2] Upgrade to PolarSSL 1.3

2014-02-27 Thread steffan.karger
From: Steffan Karger This removes support for PolarSSL 1.2. The mimimum version of PolarSSL required is now 1.3.3. The upgrade brings OpenVPN-with-PolarSSL: * Support for EC-crypto in TLS (but not yet for external pkcs11/management keys) * Support for AES-NI (if PolarSSL is compiled with AES-NI s