Re: [Openvpn-devel] [PATCH] Do not set pkcs11-helper "safe fork mode"

2019-07-20 Thread Steffan Karger
On 28-04-19 11:23, Steffan Karger wrote: > Together with the pkcs11-helper fixes, I do think this is the right fix. > I'll try to experiment a bit with it myself too. Finally got to some testing and staring at code. The patch resolves the issue for me, and I didn't find any other issues. Our code

Re: [Openvpn-devel] [PATCH v2] Fix broken fragment/mssfix with NCP

2019-07-20 Thread Steffan Karger
On 08-05-19 16:19, Arne Schwabe wrote: > Am 21.01.19 um 21:04 schrieb Lev Stipakov: >> From: Lev Stipakov >> >> NCP negotiation replaces worst cast crypto overhead >> with actual one in data channel frame. That frame >> params are used by mssfix. >> >> Fragment frame still contains worst case ove