[Openvpn-devel] OpenVPN 3 Linux client - v2/v3 beta released

2019-01-31 Thread David Sommerseth
Hi, We have released the OpenVPN 3 Linux v3 (and v2) beta. This is available in our git repositories [0] and URLs for source tarballs are listed later in this e-mail. RPM binaries for Fedora and RHEL/CentOS/Scientific Linux [1] completed the build process quite recently too. Debian and Ubuntu

Re: [Openvpn-devel] OpenVPN 2.4: crypto api patches for OpenSSL 1.1.1? cryptoapicert

2019-01-31 Thread Selva Nair
Hi On Thu, Jan 31, 2019 at 11:40 AM Gert Doering wrote: > Hi, > > I have changed the Subject: and started a new thread, so that this > isn't lost in the discussion specific to commit ce1c1beef1eb. > > On Thu, Jan 31, 2019 at 11:28:52AM -0500, Selva Nair wrote: > > So now the question -- do we

Re: [Openvpn-devel] OpenVPN 2.4: crypto api patches for OpenSSL 1.1.1? cryptoapicert

2019-01-31 Thread Gert Doering
Hi, I have changed the Subject: and started a new thread, so that this isn't lost in the discussion specific to commit ce1c1beef1eb. On Thu, Jan 31, 2019 at 11:28:52AM -0500, Selva Nair wrote: > So now the question -- do we want to support Windows builds with OpenSSL > 1.1.1 in 2.4? Basically,

Re: [Openvpn-devel] [PATCH applied] Re: Handle PSS padding in cryptoapicert

2019-01-31 Thread Selva Nair
Thanks. So now the question -- do we want to support Windows builds with OpenSSL 1.1.1 in 2.4? Selva On Thu, Jan 31, 2019 at 11:22 AM Gert Doering wrote: > Your patch has been applied to the master branch. > > (Test built on ubuntu 16.04 / mingw, not really tested as such) > > commit

[Openvpn-devel] [PATCH applied] Re: Handle PSS padding in cryptoapicert

2019-01-31 Thread Gert Doering
Your patch has been applied to the master branch. (Test built on ubuntu 16.04 / mingw, not really tested as such) commit ce1c1beef1eb9ea776e00861117f72c4a1a6f1f8 Author: Selva Nair Date: Wed Jan 30 10:53:20 2019 -0500 Handle PSS padding in cryptoapicert Signed-off-by: Selva Nair

Re: [Openvpn-devel] [PATCH 2/2 v3] Handle PSS padding in cryptoapicert

2019-01-31 Thread Arne Schwabe
Am 30.01.19 um 16:53 schrieb selva.n...@gmail.com: > From: Selva Nair > > For PSS padding, CNG requires the digest to be signed > and the digest algorithm in use, which are not accessible > via the rsa_sign and rsa_priv_enc callbacks of OpenSSL. > This patch uses the EVP_KEY interface to hook to