Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-20 Thread Steffan Karger
On 20-09-15 16:15, Boris Lytochkin wrote: v2 patch is attached. Thanks for comments! ACK to v2. Thanks the patch, and quick response! -Steffan

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-20 Thread Boris Lytochkin
Hi. v2 patch is attached. Thanks for comments! On 20.09.2015 14:28, Steffan Karger wrote: On 15-09-15 23:49, Steffan Karger wrote: I agree that the functionality makes, but need to look at the code. I'm currently on a long holiday and haven't had enough spare cycles to spend on openvpn. Aft

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-20 Thread Steffan Karger
On 15-09-15 23:49, Steffan Karger wrote: I agree that the functionality makes, but need to look at the code. I'm currently on a long holiday and haven't had enough spare cycles to spend on openvpn. After I get back (next week), this will be part of my backlog :) I looked at the code this morn

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-15 Thread Steffan Karger
Hi, I agree that the functionality makes, but need to look at the code. I'm currently on a long holiday and haven't had enough spare cycles to spend on openvpn. After I get back (next week), this will be part of my backlog :) -Steffan On 15 Sep 2015 03:34, "Boris Lytochkin" wrote: > Hi. > > An

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-15 Thread Boris Lytochkin
Hi. Any news on importing this patch into codebase? On 26.08.2015 16:15, David Sommerseth wrote: On 24/08/15 18:54, Boris Lytochkin wrote: Hi. Author: Boris Lytochkin Sponsored-by: Yandex LLC Log serial number of revoked certificate In most of situations admin of OpenVPN server needs to kn

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-26 Thread David Sommerseth
On 24/08/15 18:54, Boris Lytochkin wrote: > Hi. > > Author: Boris Lytochkin > Sponsored-by: Yandex LLC > > Log serial number of revoked certificate > > In most of situations admin of OpenVPN server needs to know which > particular certificate is used by client. > In the case when certificate is

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-25 Thread Gert Doering
Hi, On Tue, Aug 25, 2015 at 02:38:20AM -0400, grarpamp wrote: > Cert serial numbers found in the wild are hardly unique (witness They are not "in the wild" in this context, as the issueing CA in OpenVPN contexts is typically in-house - and serial numbers for certs issued by a single CA(!) *are* u

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-25 Thread Boris Lytochkin
Hi. I disagree. And openssl crl disagrees with you too. There are no sha1 (or other) fingerprints there, serial numbers are stored there :) As far as I understand in most of the cases where X509 is used for OpenVPN, single (mostly probable self-signed) CA is used for authentication so serial n

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-25 Thread grarpamp
On Mon, Aug 24, 2015 at 12:54 PM, Boris Lytochkin wrote: > Log serial number of revoked certificate > In most of situations admin of OpenVPN server needs to know which particular > certificate is used by client. Cert serial numbers found in the wild are hardly unique (witness the Mozilla CA bundl

[Openvpn-devel] Log cert serial no if it is revoked

2015-08-24 Thread Boris Lytochkin
Hi. Author: Boris Lytochkin Sponsored-by: Yandex LLC Log serial number of revoked certificate In most of situations admin of OpenVPN server needs to know which particular certificate is used by client. In the case when certificate is OK, environment variable can be used for that but once it i