So this is basically an optimization, avoiding needless rounds of work
in the library for the always-the-same HMAC key - introducing an #ifdef
because it was broken in OpenSSL 3.0.0-3.0.2. Meh, but still a good
change (even if we tell people "for performance, go DCO" this is not yet
available everywhere).
Your patch has been applied to the master and release/2.7 branch
(filed under "crypto library compatibility" and "optimization with
minor code impact", as it's not really a "bugfix").
commit 3568e9d8cca78be9577cb7220d9bb9419894d207 (master)
commit e04e93a339d33b3e52b11eae4b9f83cb29f20fa3 (release/2.7)
Author: Gleb Pesin
Date: Thu Aug 13 18:32:33 2026 +0200
OpenSSL: avoid resetting the HMAC key on every packet
Signed-off-by: Arne Schwabe <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Acked-by: Razvan Cojocaru <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1840
Message-Id: <[email protected]>
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
