-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 17/08/11 17:53, Heiko Hund wrote:
> The CryptoAPI function CryptAcquireCertificatePrivateKey() was
> previously unsupported in MinGW. With recent w32api headers it's now
> defined, mostly. Since the code used to load the CryptoAPI DLL is
> prone to a DLL hijacking attack [1], it's now a good time to get rid
> of wrapper completely.
>
> Just a few macros left that may still be undefined on some systems
> using the original MinGW headers.
>
> [1] http://isc.sans.edu/diary.html?storyid=9445
>
> Signed-off-by: Heiko Hund <heiko.h...@sophos.com> --- cryptoapi.c |
> 43 +++++++++++++------------------------------ 1 files changed, 13
> insertions(+), 30 deletions(-)
One more old patch recovered from the dust. Applied to master branch on
- -testing and -stable trees.
commit 14a382a3f1c70fdbc822bcad27096040ed394661
Author: Heiko Hund <heiko.h...@sophos.com>
List-Post: openvpn-devel@lists.sourceforge.net
Date: Wed Aug 17 15:53:01 2011 +0000
remove wrapper code for Windows CryptoAPI function
Signed-off-by: Heiko Hund <heiko.h...@sophos.com>
Acked-by: James Yonan <ja...@openvpn.net>
URL: http://article.gmane.org/gmane.network.openvpn.devel/4979
Signed-off-by: David Sommerseth <dav...@redhat.com>
kind regards,
David Sommerseth
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk9DoPMACgkQDC186MBRfromnwCeP8qqwfaEtZ1//ql+AAVM3RMG
6M0AoInMli3/80vp1zFCL42O26iUyTUP
=LpaP
-----END PGP SIGNATURE-----
