Emmanuel Deloget <log...@free.fr> on Mon, 2017/02/20 12:45: > Hello, > > On Sun, Feb 19, 2017 at 6:49 PM, Gert Doering <g...@greenie.muc.de> wrote: > > Hi, > > > > On Sun, Feb 19, 2017 at 01:03:45PM +0100, Steffan Karger wrote: > >> Thank you very much. You approach looks good to me, and quite closely > >> matches what I had in mind for when I would find the time to tackle > >> this. (Which might have taken me a while, so really happy to see these > >> patches!) > > [..] > >> Also very good that this is split up into small and independently > >> reviewable patches. I'll start review soon. > > > > While Steffan is our resident expert on nasty crypto libraries, I just > > want to echo the sentiment - having these "chunks" tackle one API function > > at a time, they are easily testable, and in case something explodes, it's > > much easier to bisect to find the problematic one. > > > > Now back to being a commit slave for Steffan's ACKs :-) (I do not know > > the APIs well enough to properly comment on the changes, I can only run > > tests...) > > I resumed the work this morning. So far the results are : > > * 0.9.8zh --> EVP_PKEY_id() is not defined. I'm adding this to > openssl_compat.h and will provide a v2 patch with the change. Once > added, OpenVPN compiled successfully and was able to connect to my > /2.3 server. > > * 1.0.0t --> compile OK, connect OK > > * 1.0.1u --> compile OK, connect OK > > * 1.0.2.k --> compile OK, connect OK > > * 1.1.0-git --> compile OK, failure to connect. I'm currently > investigating this issue. I'll provide a patch as soon as I fix this > (this is a bit ironic ; I may have forgotten something somewhere...).
That matches my findings. Built against openssl 1.1.0e (Arch Linux package openssl 1.1.0.e-1 [0]) the build itself succeeds, but 'make check' reports lots of cipher failures. Are your patches available from a public git repository? [0] https://www.archlinux.org/packages/staging/x86_64/openssl/ -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}
pgpUrshXYFkya.pgp
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
