Re: [Openvpn-devel] [PATCH] build: Remove --disable-server from ./configure

2020-04-26 Thread Arne Schwabe
Am 27.02.20 um 21:54 schrieb David Sommerseth: > After some discussion among the core community developers [1,2], it was > decided to remove the possibility to build openvpn as a pure client. > This was alterted on the mailing list [3] that it was scheduled for > removal unless anyone had strong ar

Re: [Openvpn-devel] [PATCH v9] convert *_inline attributes to bool

2020-04-26 Thread Arne Schwabe
Am 22.04.20 um 11:26 schrieb Antonio Quartulli: > Carrying around the INLINE_TAG is not really efficient, > because it requires a strcmp() to be performed every > time we want to understand if the data is stored inline > or not. > > Convert all the *_inline attributes to bool to make the > logic e

[Openvpn-devel] [PATCH v3] Do not write extra 0 byte for --gen-key with auth-token/tls-crypt-v2

2020-04-26 Thread Arne Schwabe
Change crypto_pem_encode to not put a nul-terminated terminated string into the buffer. This was useful for printf but should not be written into the file. Instead do not assume that the buffer is null terminated and print only the number of bytes in the buffer. Also fix a similar case in printin

Re: [Openvpn-devel] [PATCH v2 1/3] Use crypto library functions for const time memcmp when possible

2020-04-26 Thread Arne Schwabe
Am 26.04.20 um 11:34 schrieb Gert Doering: > Hi, > > On Sun, Apr 26, 2020 at 11:25:49AM +0200, Steffan Karger wrote: well, sometimes to adhere to the codestyle, you have to re-arrange code :) >>> >>> "rearrange" and "rewrite in a not easy to understand way" (which looks >>> a bit overthought

Re: [Openvpn-devel] [PATCH] Uncrustify the tests/unit_tests/ part of our tree.

2020-04-26 Thread Steffan Karger
Hi, On 26-04-2020 11:54, Gert Doering wrote: > Apply uncrustify 0.70.1 (FreeBSD port) with our rules to that part > of the tree, which followed a more compact coding style so far. > --- > > @@ -155,20 +157,21 @@ test_packet_id_write_long_wrap(void **state) > } > > int > -main(void) { > +main(

Re: [Openvpn-devel] [PATCH] Uncrustify the tests/unit_tests/ part of our tree.

2020-04-26 Thread Gert Doering
Hi, On Sun, Apr 26, 2020 at 11:54:02AM +0200, Gert Doering wrote: > Apply uncrustify 0.70.1 (FreeBSD port) with our rules to that part > of the tree, which followed a more compact coding style so far. Just as a remark: the coding style in tests/unit_tests is fairly consistent, just *different*.

[Openvpn-devel] [PATCH] Uncrustify the tests/unit_tests/ part of our tree.

2020-04-26 Thread Gert Doering
Apply uncrustify 0.70.1 (FreeBSD port) with our rules to that part of the tree, which followed a more compact coding style so far. --- tests/unit_tests/example_test/test.c | 18 ++- tests/unit_tests/example_test/test2.c | 6 +- tests/unit_tests/openvpn/test_argv.c | 5 +- tes

[Openvpn-devel] [PATCH applied] Re: Add tls-crypt-v2 test writing metadata

2020-04-26 Thread Gert Doering
Your patch has been applied to the master branch. Basic "make check" testing with cmocka on linux with openssl 1.1.1 and mbedtls passed. I have changed whitespaceing of the *new* lines, as instructed, but I notice that this whole file is not according to coding conventions - so it seems the last

Re: [Openvpn-devel] [PATCH v2 1/3] Use crypto library functions for const time memcmp when possible

2020-04-26 Thread Steffan Karger
Hi, On 26-04-2020 11:34, Gert Doering wrote: > On Sun, Apr 26, 2020 at 11:25:49AM +0200, Steffan Karger wrote: well, sometimes to adhere to the codestyle, you have to re-arrange code :) >>> >>> "rearrange" and "rewrite in a not easy to understand way" (which looks >>> a bit overthought to me,

Re: [Openvpn-devel] [PATCH v2 1/3] Use crypto library functions for const time memcmp when possible

2020-04-26 Thread Gert Doering
Hi, On Sun, Apr 26, 2020 at 11:25:49AM +0200, Steffan Karger wrote: > >> well, sometimes to adhere to the codestyle, you have to re-arrange code :) > > > > "rearrange" and "rewrite in a not easy to understand way" (which looks > > a bit overthought to me, TBH - unlike "secure memzero" I cannot se

Re: [Openvpn-devel] [Openvpn-users] new openssl = new OpenVPN release ?

2020-04-26 Thread Steffan Karger
On 22-04-2020 10:27, Jan Just Keijser wrote: > On 22/04/20 10:13, Arne Schwabe wrote: SSL_check_chain() function". Which we don't, I just grepped through our source tree. So, unless I misunderstand something about OpenSSL intricacies, I think we're safe - no new inst

Re: [Openvpn-devel] [PATCH v2 1/3] Use crypto library functions for const time memcmp when possible

2020-04-26 Thread Steffan Karger
Hi, On 17-04-2020 17:36, Gert Doering wrote: > On Fri, Apr 17, 2020 at 03:42:49PM +0200, Antonio Quartulli wrote: -static inline int -memcmp_constant_time(const void *a, const void *b, size_t size) -{ >>> >>> Not sure I understand the motivation for this change. "Just so uncrustify

Re: [Openvpn-devel] [PATCH] Add tls-crypt-v2 test writing metadata

2020-04-26 Thread Steffan Karger
Hi, On 20-04-2020 12:44, Arne Schwabe wrote: > --- > tests/unit_tests/openvpn/test_tls_crypt.c | 44 +-- > 1 file changed, 41 insertions(+), 3 deletions(-) > > diff --git a/tests/unit_tests/openvpn/test_tls_crypt.c > b/tests/unit_tests/openvpn/test_tls_crypt.c > index b9e3a7