Your patch has been applied to the master branch. I ran test builds on FreeBSD/mbedtls 2.16.3 (t_client test) and Gentoo/mbedtls 2.12.0 (t_server test), which pass. No tests were done with the crypto material exporter - have no test rig for it (but I wouldn't mind some easy to set up scripts to *do* test it...)
Of course my mbedtls versions are all too old to provide the needed functionality in the first place, so I suspect "#if HAVE_EKM" takes care of me not seeing any effects... but see my other mail on what happens if I upgrade the Gentoo to 2.19.1... *bang* :-) commit ab27c9f77b7cd10d530b3c6380465322969a9d21 Author: Steffan Karger Date: Mon Nov 11 00:10:18 2019 +0100 mbedtls: add RFC 5705 keying material exporter support Signed-off-by: Steffan Karger <stef...@karger.me> Acked-by: Arne Schwabe <a...@rfc2549.org> Message-Id: <20191110231018.30621-1-stef...@karger.me> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg19111.html Signed-off-by: Gert Doering <g...@greenie.muc.de> -- kind regards, Gert Doering _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel