Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-13 Thread Vasily Kulikov
On Mon, Jan 12, 2015 at 13:54 +0100, Arne Schwabe wrote: > > Am 12.01.15 12:45, schrieb David Woodhouse: > > On Mon, 2015-01-12 at 11:51 +0300, Vasily Kulikov wrote: > >> This patch adds support for using certificates stored in the Mac OSX > >> Keychain to authenticate with the OpenVPN server.

Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread David Woodhouse
On Mon, 2015-01-12 at 13:54 +0100, Arne Schwabe wrote: > I wonder why only certifcates and not ca certifcates. It would be > logical to get all certifcates from the keychain. Yes, that makes some sense. Although perhaps it should be the other way round — you present the peer's cert to the

Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread Arne Schwabe
Am 12.01.15 12:45, schrieb David Woodhouse: > On Mon, 2015-01-12 at 11:51 +0300, Vasily Kulikov wrote: >> This patch adds support for using certificates stored in the Mac OSX >> Keychain to authenticate with the OpenVPN server. This works with >> certificates stored on the computer as well as

Re: [Openvpn-devel] [PATCHv2] Mac OS X Keychain management client

2015-01-12 Thread David Woodhouse
On Mon, 2015-01-12 at 11:51 +0300, Vasily Kulikov wrote: > This patch adds support for using certificates stored in the Mac OSX > Keychain to authenticate with the OpenVPN server. This works with > certificates stored on the computer as well as certificates on hardware > tokens that support