Re: [Openvpn-devel] [PATCH v2] Add --tls-cert-profile option for mbedtls builds

2017-04-14 Thread Steffan Karger
Hi, On 13-04-17 18:40, David Sommerseth wrote: > On 13/04/17 15:37, Steffan Karger wrote: >> On 13-04-17 15:09, David Sommerseth wrote: >>> On a more generic note to this patch. I wonder if we should keep >>> "legacy" the default in the v2.4 branch. In the Fedora 26 (and >>> Rawhide/27) builds I

Re: [Openvpn-devel] [PATCH v2] Add --tls-cert-profile option for mbedtls builds

2017-04-14 Thread David Sommerseth
On 14/04/17 11:16, Steffan Karger wrote: > Hi, > > On 13-04-17 18:40, David Sommerseth wrote: >> On 13/04/17 15:37, Steffan Karger wrote: >>> On 13-04-17 15:09, David Sommerseth wrote: On a more generic note to this patch. I wonder if we should keep "legacy" the default in the v2.4 bran

[Openvpn-devel] [PATCH (release/2.4)] Add --tls-cert-profile option for mbedtls builds

2017-04-14 Thread Steffan Karger
This allows the user to specify what certificate crypto algorithms to support. The supported profiles are 'preferred', 'legacy' (default) and 'suiteb', as discussed in <84590a17-1c48-9df2-c48e-4160750b2...@fox-it.com> (https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14214.html)

[Openvpn-devel] [PATCH v3] Add --tls-cert-profile option for mbedtls builds

2017-04-14 Thread Steffan Karger
This allows the user to specify what certificate crypto algorithms to support. The supported profiles are 'preferred' (default), 'legacy' and 'suiteb', as discussed in <84590a17-1c48-9df2-c48e-4160750b2...@fox-it.com> (https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14214.html)