I have been informed that OpenVPN gets easily confused if you set
--reneg-time to ridiculously low values... and this will help the
other end to stay unconfused. While low-impact it's still a bug,
so 2.7
Tested both branches with a full t_client/t_server run - this won't
excercise this particular section of code, but it verifies that nothing
gets broken, and also that the cherry-pick backport is correct.
Your patch has been applied to the master and release/2.7 branch.
commit 95e4fd0f905fea3decfdbdd28caeee901009d250 (master)
commit a0290b07db7435851f264416e2813cd75f33cc04 (release/2.7)
Author: Ralf Lici
Date: Tue Nov 10 12:58:22 2026 +0100
tls: reject incoming reneg request if primary key is not fully valid
Signed-off-by: Ralf Lici <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1478
Message-Id: <[email protected]>
URL:
https://www.mail-archive.com/[email protected]/msg41068.html
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
