Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-13 Thread Vasily Kulikov
On Mon, Jan 12, 2015 at 13:54 +0100, Arne Schwabe wrote: > > Am 12.01.15 12:45, schrieb David Woodhouse: > > On Mon, 2015-01-12 at 11:51 +0300, Vasily Kulikov wrote: > >> This patch adds support for using certificates stored in the Mac OSX > >> Keychain to authenticate with the OpenVPN server. Th

Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread David Woodhouse
On Mon, 2015-01-12 at 13:54 +0100, Arne Schwabe wrote: > I wonder why only certifcates and not ca certifcates. It would be > logical to get all certifcates from the keychain. Yes, that makes some sense. Although perhaps it should be the other way round — you present the peer's cert to the manageme

Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread Arne Schwabe
Am 12.01.15 12:45, schrieb David Woodhouse: > On Mon, 2015-01-12 at 11:51 +0300, Vasily Kulikov wrote: >> This patch adds support for using certificates stored in the Mac OSX >> Keychain to authenticate with the OpenVPN server. This works with >> certificates stored on the computer as well as cer

Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread David Woodhouse
On Mon, 2015-01-12 at 11:51 +0300, Vasily Kulikov wrote: > This patch adds support for using certificates stored in the Mac OSX > Keychain to authenticate with the OpenVPN server. This works with > certificates stored on the computer as well as certificates on hardware > tokens that support Apple'

[Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread Vasily Kulikov
This patch adds support for using certificates stored in the Mac OSX Keychain to authenticate with the OpenVPN server. This works with certificates stored on the computer as well as certificates on hardware tokens that support Apple's tokend interface. The patch is based on the Windows Crypto API