Re: [Openvpn-devel] [PATCH] Require minimum OpenSSL 1.0.1

2017-04-11 Thread Simon Matter
> Hi, > > On 11-04-17 19:31, David Sommerseth wrote: >> As RHEL 5 has reached EOL, we no longer need to support OpenSSL v0.9.8. >> This also makes it possible to remove a few workaronds which was >> needed earlier, as well as some left overs from v0.9.6. >> >> This also makes ./configure really

Re: [Openvpn-devel] [PATCH] Require minimum OpenSSL 1.0.1

2017-04-11 Thread Matthias Andree
Am 11.04.2017 um 23:56 schrieb David Sommerseth: > On 11/04/17 23:20, Steffan Karger wrote: >> For release/2.4: I wonder whether we need to keep 0.9.8 support, as >> SLES11 still ships with 0.9.8h, and has general support until 31 Mar 2019. > While it is James who insisted on RHEL being the oldest

Re: [Openvpn-devel] [PATCH] Add --tls-cert-profile option for mbedtls builds

2017-04-11 Thread David Sommerseth
On 10/04/17 11:15, Steffan Karger wrote: > This allows the user to specify what certificate crypto algorithms to > support. The supported profiles are 'preferred' (default), 'legacy' and > 'suiteb', as discussed in <84590a17-1c48-9df2-c48e-4160750b2...@fox-it.com> >

Re: [Openvpn-devel] [PATCH] Require minimum OpenSSL 1.0.1

2017-04-11 Thread David Sommerseth
On 11/04/17 23:20, Steffan Karger wrote: > Hi, > > On 11-04-17 19:31, David Sommerseth wrote: >> As RHEL 5 has reached EOL, we no longer need to support OpenSSL v0.9.8. >> This also makes it possible to remove a few workaronds which was >> needed earlier, as well as some left overs from v0.9.6.

Re: [Openvpn-devel] [PATCH applied] Require minimum OpenSSL 1.0.1

2017-04-11 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Your patch has been applied to the master branch. commit 039a89c331e9b7998d8047ec72144097f7c5826a Author: David Sommerseth Date: Tue Apr 11 19:31:33 2017 +0200 Require minimum OpenSSL 1.0.1 Signed-off-by: David Sommerseth

Re: [Openvpn-devel] [PATCH] Require minimum OpenSSL 1.0.1

2017-04-11 Thread Steffan Karger
Hi, On 11-04-17 19:31, David Sommerseth wrote: > As RHEL 5 has reached EOL, we no longer need to support OpenSSL v0.9.8. > This also makes it possible to remove a few workaronds which was > needed earlier, as well as some left overs from v0.9.6. > > This also makes ./configure really stop

[Openvpn-devel] [PATCH] Require minimum OpenSSL 1.0.1

2017-04-11 Thread David Sommerseth
As RHEL 5 has reached EOL, we no longer need to support OpenSSL v0.9.8. This also makes it possible to remove a few workaronds which was needed earlier, as well as some left overs from v0.9.6. This also makes ./configure really stop running unless a new enough OpenSSL library is found. Compile

Re: [Openvpn-devel] [PATCH applied] Make --cipher/--auth none more explicit on the risks

2017-04-11 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Just a commit time correction added, fixing wrong spelling of RECONSIDER. Patch has been applied to the following branches commit 7a1b6a0dd706a81897457b0456a951c0b30bbcfb (master) commit 1935729fe6d6badd978e9dfdd3402857b3d000a0 (release/2.4)

Re: [Openvpn-devel] [PATCH] Make --cipher/--auth none more explicit on the risks

2017-04-11 Thread Steffan Karger
On 11-04-17 10:55, David Sommerseth wrote: > On 11/04/17 06:26, Simon Matter wrote: >>> The warning provided to --cipher and --auth using the 'none' setting may >>> not have been too clearly understandable to non-developers or people not >>> fully understanding encryption and cryptography. This

Re: [Openvpn-devel] [PATCH] Make --cipher/--auth none more explicit on the risks

2017-04-11 Thread David Sommerseth
On 11/04/17 06:26, Simon Matter wrote: >> The warning provided to --cipher and --auth using the 'none' setting may >> not have been too clearly understandable to non-developers or people not >> fully understanding encryption and cryptography. This tries to improve >> that. >> >> While at it, also