Re: [Openvpn-devel] [PATCH] Set SSL_OP_NO_TICKET flag in SSL context for OpenSSL builds, to disable TLS stateless session resumption.

2014-03-18 Thread Steffan Karger
Hi, > On 17/03/2014 23:23, James Yonan wrote: > > On 17/03/2014 14:29, Gert Doering wrote: > > Right now, if I read configure.ac correct, we require 0.9.6 or later > > (and check this only if pkg-config is available) - but obviously, > > SSL_OP_NO_TICKET was added later on. > > > > Fix 1: only us

Re: [Openvpn-devel] [PATCH] Set SSL_OP_NO_TICKET flag in SSL context for OpenSSL builds, to disable TLS stateless session resumption.

2014-03-18 Thread Jan Just Keijser
On 18/03/14 10:39, Steffan Karger wrote: Hi, On 17/03/2014 23:23, James Yonan wrote: On 17/03/2014 14:29, Gert Doering wrote: Right now, if I read configure.ac correct, we require 0.9.6 or later (and check this only if pkg-config is available) - but obviously, SSL_OP_NO_TICKET was added later

Re: [Openvpn-devel] [PATCH] Set SSL_OP_NO_TICKET flag in SSL context for OpenSSL builds, to disable TLS stateless session resumption.

2014-03-18 Thread David Sommerseth
On 18/03/14 10:39, Steffan Karger wrote: > Hi, > >> On 17/03/2014 23:23, James Yonan wrote: >> >> On 17/03/2014 14:29, Gert Doering wrote: >>> Right now, if I read configure.ac correct, we require 0.9.6 or later >>> (and check this only if pkg-config is available) - but obviously, >>> SSL_OP_NO_TI

Re: [Openvpn-devel] [PATCH] Set SSL_OP_NO_TICKET flag in SSL context for OpenSSL builds, to disable TLS stateless session resumption.

2014-03-18 Thread Jan Just Keijser
Hi David, On 18/03/14 14:12, David Sommerseth wrote: On 18/03/14 10:51, Jan Just Keijser wrote: On 18/03/14 10:39, Steffan Karger wrote: Hi, On 17/03/2014 23:23, James Yonan wrote: On 17/03/2014 14:29, Gert Doering wrote: Right now, if I read configure.ac correct, we require 0.9.6 or later

Re: [Openvpn-devel] [PATCH] Set SSL_OP_NO_TICKET flag in SSL context for OpenSSL builds, to disable TLS stateless session resumption.

2014-03-18 Thread Steffan Karger
Hi, On 18/03/2014 14:44, Jan Just Keijser wrote: > On 18/03/14 14:12, David Sommerseth wrote: > > On 18/03/14 10:51, Jan Just Keijser wrote: > >> On 18/03/14 10:39, Steffan Karger wrote: > On 17/03/2014 23:23, James Yonan wrote: > > On 17/03/2014 14:29, Gert Doering wrote: > > R

Re: [Openvpn-devel] [PATCH] Set SSL_OP_NO_TICKET flag in SSL context for OpenSSL builds, to disable TLS stateless session resumption.

2014-03-18 Thread David Sommerseth
On 18/03/14 17:40, Steffan Karger wrote: > Hi, > > On 18/03/2014 14:44, Jan Just Keijser wrote: >> On 18/03/14 14:12, David Sommerseth wrote: >>> On 18/03/14 10:51, Jan Just Keijser wrote: On 18/03/14 10:39, Steffan Karger wrote: >> On 17/03/2014 23:23, James Yonan wrote: >> >> On