[Openvpn-devel] [PATCH 1/2] Add openssl-specific common cipher list names to ssl.c.

2014-03-01 Thread Steffan Karger
This adds a number of commonly used cipher list names to ssl.c, which makes OpenVPN not give a "translation not found" warning when using these. Signed-off-by: Steffan Karger --- src/openvpn/ssl.c | 13 + 1 file changed, 13 insertions(+) diff --git a/src/openvpn/ssl.c b/src/openvpn/

[Openvpn-devel] [PATCH] Clean up --show-tls output for OpenSSL builds

2014-03-01 Thread Steffan Karger
Hi, The following two (small) patches are usability improvements. 1/2 removes some of the warnings OpenVPN-with-OpenSSL issue when a user specifies valid OpenSSL TLS cipher group names with --tls-cipher. PolarSSL does not support group names, so these are not applicable for PolarSSL. 2/2 changes

[Openvpn-devel] [PATCH 2/2] Disable unsupported TLS cipher modes by default, cleans --show-tls output.

2014-03-01 Thread Steffan Karger
This explicitly disables a number of tls ciphers that OpenVPN has currently no support for. OpenSSL will automatically detect this during negotiation, but --show-tls would erroneously show a number of unsupported ciphers. Signed-off-by: Steffan Karger --- src/openvpn/ssl_openssl.c | 4 ++-- 1 fi

Re: [Openvpn-devel] [PATCH] Clean up --show-tls output for OpenSSL builds

2014-03-01 Thread Gert Doering
Hi, On Sat, Mar 01, 2014 at 03:36:13PM +0100, Steffan Karger wrote: > The following two (small) patches are usability improvements. is this master-only, or does it make sense for 2.3 as well? gert -- USENET is *not* the non-clickable part of WWW!

Re: [Openvpn-devel] [PATCH] Clean up --show-tls output for OpenSSL builds

2014-03-01 Thread Steffan Karger
Hi, On 01-03-14 16:34, Gert Doering wrote: > On Sat, Mar 01, 2014 at 03:36:13PM +0100, Steffan Karger wrote: >> The following two (small) patches are usability improvements. > > is this master-only, or does it make sense for 2.3 as well? Good point, I forgot to mention: 1/2 Makes sense for 2.3 t