"What it says on the lid" - even if this is a CANTHAPPEN when talking to
a well-behaving server, this is easily enough turned from a fatal error
into a proper "your server stinks" error message...
Have not tested this beyond a light stare-at-code and confirming "all green"
on BB (except for nbsd10 which turned out to be "disk full")
Your patch has been applied to the master and release/2.7 branch
(sort of bugfix).
commit 5e1d17e611de02f194bf959df9f5795580f570be (master)
commit 69a7cb1b4f87bbef87aca78db74f75ee4dccea9a (release/2.7)
Author: Antonio Quartulli
Date: Sat Sep 19 21:18:04 2026 +0200
ssl: reject a pushed epoch data format tag with a non-AEAD cipher
Signed-off-by: Antonio Quartulli <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1836
Message-Id: <[email protected]>
URL:
https://www.mail-archive.com/[email protected]/msg39356.html
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel