Re: [Openvpn-devel] [PATCH v2 9/9] client-connect: Add deferred support to the client-connect plugin v1 handler

2016-11-30 Thread Heikki Hannikainen
Fabian, Have you by any chance ported this patch set forward to the current OpenVPN master / 2.4. beta? We have used a variation of it, and gained a noticeable performance boost, for a long time. Thanks to the deferred client-connect handling the openvpn server does not stop packet processing wh

[Openvpn-devel] [PATCH] pkcs12-additional-cas option to load CA+intermediate certs from both PKCS#12 and a --ca PEM file

2013-05-18 Thread Heikki Hannikainen
Hi, I've set up a VPN service which authenticates users using certificates provided by a 3rd party (which has manually authenticated the users from paper documents and given out some 50k certs). Their tools allow the end users to nicely export a PKCS#12 certificate which OpenVPN can currently use

[Openvpn-devel] [PATCH] Always load intermediate certificates from a PKCS#12 file

2013-06-20 Thread Heikki Hannikainen
, while not making those certs trusted. Does not add any extra options. From cec65ff199443c7f95101a7bf4a75644516d7810 Mon Sep 17 00:00:00 2001 From: Heikki Hannikainen List-Post: openvpn-devel@lists.sourceforge.net Date: Thu, 20 Jun 2013 13:49:44 +0300 Subject: [PATCH] Load intermediate

Re: [Openvpn-devel] [PATCH] Floating: Add support for floating in TLS mode (upd.)

2013-11-15 Thread Heikki Hannikainen
On Wed, Oct 30, 2013 at 10:12 PM, André Valentin wrote: > Add support for floating in tls mode using the HMAC of a packet. It costs > a roundtrip through the clients. Its security comes from a secret key, both > peers have. This key and the data form the signature used, which is then > checked aga

Re: [Openvpn-devel] [PATCH v3] Floating: Add support for floating in TLS mode

2013-12-30 Thread Heikki Hannikainen
On Mon, Dec 23, 2013 at 4:43 PM, André Valentin wrote: > On 23.12.2013 12:32, Gert Doering wrote: >> We've discussed the patch on the Munich Hackathon, and we intend to do >> it in a different way. James wants to change the packet format for >> data packets anyway (due to bad alignment in the cur

Re: [Openvpn-devel] session-id implementation

2014-08-12 Thread Heikki Hannikainen
On Wed, 9 Jul 2014, Arne Schwabe wrote: Am 29.06.14 18:13, schrieb Arne Schwabe: Am 27.03.14 09:57, schrieb Lev Stipakov: Hi, Same patch with added NULL check in push.c:308. Turns out that peer_info might be NULL. I looked at the patched, a few minor nitpicks: One more little nitpick: