Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-12 Thread Gert Doering
Hi Selva, On Sun, Mar 11, 2018 at 09:17:58PM -0400, selva.n...@gmail.com wrote: > From: Selva Nair > > Have the cryptoapicert option find the first matching certificate > in store that is valid at the present time. Currently the first > found item, even if expired, is returned. Are these two in

[Openvpn-devel] multihome broken in the presence of asymmetric routing

2018-03-12 Thread Teodor Milkov
Hello, I have the following multihomed setup:    BGP1    BGP2     ^   ^     |   | +---+---+    +--+---+ | IP1.1   IP1.2   IP1.3 |    | IP2.1  IP2.2   IP3.1 | |

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-12 Thread Selva Nair
Hi, On Mon, Mar 12, 2018 at 4:21 AM, Gert Doering wrote: > > Hi Selva, > > On Sun, Mar 11, 2018 at 09:17:58PM -0400, selva.n...@gmail.com wrote: > > From: Selva Nair > > > > Have the cryptoapicert option find the first matching certificate > > in store that is valid at the present time. Currentl

Re: [Openvpn-devel] [PATCH 1/2] Skip expired certificates in Windows certificate store

2018-03-12 Thread Gert Doering
Hi, On Mon, Mar 12, 2018 at 10:37:53AM -0400, Selva Nair wrote: > Agree, this could qualify for 2.4. Anyway, the context is the same and > it applies/cherry-picks to 2.4 without issues. OK, thanks. > Elsewhere in the code we only warn about expired certs (like those > read from a file) and conti