[Openvpn-devel] Proposal: tls-crypt-v2 (client-specific tls-crypt keys)

2017-07-24 Thread Steffan Karger
Hi, As mentioned previously on hackathons, IRC and the mailing list, we've been working on tls-crypt (which is available in 2.4) and a variant that requires a bit more provisioning, but is better suited for large VPN setups and also useful for VPN providers: tls-crypt-v2. This is a public request

Re: [Openvpn-devel] Proposal: tls-crypt-v2 (client-specific tls-crypt keys)

2017-07-24 Thread Steffan Karger
On 24-07-17 09:11, Steffan Karger wrote: > The full specification is attached. Argh, attachments are hard. The previous mail carried an older version of the spec. Attached the newest spec. This aims to describe the same implementation, but should have improved wording. -Steffan Client-specific

Re: [Openvpn-devel] [PATCH applied] management: preserve wait_for_push field when asking for user/pass

2017-07-24 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 ACK. Tested and glared at code. This matches quite well the analyzsis I had done before Antonio took over and completed. And it works as expected. Your patch has been applied to the following branches commit 3322c558fa742cb823fa919f682486973abc

[Openvpn-devel] [PATCH] rename mroute_extract_addr_ipv4 to mroute_extract_addr_ip

2017-07-24 Thread Antonio Quartulli
mroute_extract_addr_ipv4() is able to extract an IPv4 as well as an IPv6. Remove the "v4" suffix from its name to make this behaviour more explicit. Signed-off-by: Antonio Quartulli --- src/openvpn/mroute.c | 7 +++ src/openvpn/mroute.h | 8 2 files changed, 7 insertions(+), 8 delet