Attention is currently required from: MaxF.

plaisthos has posted comments on this change. ( 
http://gerrit.openvpn.net/c/openvpn/+/370?usp=email )

Change subject: Add support for mbedtls 3.X.Y
......................................................................


Patch Set 7:

(1 comment)

Patchset:

PS7:
I just playing around with the patch and I noticed HAVE_EXPORT_KEYING_MATERIAL 
is no longer defined in mbed TLS 3.

This means that mbed TLS will fall back to using OpenVPN's custom TLS 1.0 style 
key generation of using MD5+SHA1 instead of TLS export for that feature. This 
lack of TLS export also disables dynamic tls-crypt feature as that also relies 
on that. I am fine with not having that in this patch but it should be noted in 
the README.mbedtls and maybe also be resolved in a follow up patch.



--
To view, visit http://gerrit.openvpn.net/c/openvpn/+/370?usp=email
To unsubscribe, or for help writing mail filters, visit 
http://gerrit.openvpn.net/settings

Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I445a93e84dc54b865b757038d22318ac427fce96
Gerrit-Change-Number: 370
Gerrit-PatchSet: 7
Gerrit-Owner: MaxF <m...@max-fillinger.net>
Gerrit-Reviewer: flichtenheld <fr...@lichtenheld.com>
Gerrit-Reviewer: plaisthos <arne-open...@rfc2549.org>
Gerrit-CC: openvpn-devel <openvpn-devel@lists.sourceforge.net>
Gerrit-Attention: MaxF <m...@max-fillinger.net>
Gerrit-Comment-Date: Fri, 27 Oct 2023 15:41:53 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Gerrit-MessageType: comment
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to