[Openvpn-devel] [PATCH] Fix triggering assertion of ks->authticated after tls_deauthenticate

2021-11-29 Thread Arne Schwabe
When tls_deauthenticate is called (e.g. by management kicking of a client) the key auth state is changed to KS_AUTH_FALSE while the key state is still in S_GENERATED_KEYS. This triggers the assertion. Remove the assertions and instead check that the auth state is KS_AUTH_TRUE Signed-off-by: Arne S

[Openvpn-devel] [PATCH] Implement optional cipher in --data-ciphers prefixed with ?

2021-11-29 Thread Arne Schwabe
This allows to use the same configuration multiple platforms/ssl libraries and include optional algorithms that are not available on all platforms For example "AES-256-GCM:AES-128-GCM:?CHACHA20-POLY1305" can be used to emulate the default behaviour of OpenVPN 2.6. --- Changes.rst

[Openvpn-devel] [PATCH] doc/protocol-options.rst: Correct default for --allow-compression

2021-11-29 Thread Richard T Bonhomme
Signed-off-by: Richard T Bonhomme --- doc/man-sections/protocol-options.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/man-sections/protocol-options.rst b/doc/man-sections/protocol-options.rst index c7aa6b0e..bde91779 100644 --- a/doc/man-sections/protocol-option