Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-20 Thread Steffan Karger
On 20-09-15 16:15, Boris Lytochkin wrote: v2 patch is attached. Thanks for comments! ACK to v2. Thanks the patch, and quick response! -Steffan

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-20 Thread Boris Lytochkin
Hi. v2 patch is attached. Thanks for comments! On 20.09.2015 14:28, Steffan Karger wrote: On 15-09-15 23:49, Steffan Karger wrote: I agree that the functionality makes, but need to look at the code. I'm currently on a long holiday and haven't had enough spare cycles to spend on openvpn. Aft

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-20 Thread Steffan Karger
On 15-09-15 23:49, Steffan Karger wrote: I agree that the functionality makes, but need to look at the code. I'm currently on a long holiday and haven't had enough spare cycles to spend on openvpn. After I get back (next week), this will be part of my backlog :) I looked at the code this morn

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-15 Thread Steffan Karger
Hi, I agree that the functionality makes, but need to look at the code. I'm currently on a long holiday and haven't had enough spare cycles to spend on openvpn. After I get back (next week), this will be part of my backlog :) -Steffan On 15 Sep 2015 03:34, "Boris Lytochkin" wrote: > Hi. > > An

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-09-15 Thread Boris Lytochkin
Hi. Any news on importing this patch into codebase? On 26.08.2015 16:15, David Sommerseth wrote: On 24/08/15 18:54, Boris Lytochkin wrote: Hi. Author: Boris Lytochkin Sponsored-by: Yandex LLC Log serial number of revoked certificate In most of situations admin of OpenVPN server needs to kn

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-26 Thread David Sommerseth
On 24/08/15 18:54, Boris Lytochkin wrote: > Hi. > > Author: Boris Lytochkin > Sponsored-by: Yandex LLC > > Log serial number of revoked certificate > > In most of situations admin of OpenVPN server needs to know which > particular certificate is used by client. > In the case when certificate is

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-25 Thread Gert Doering
Hi, On Tue, Aug 25, 2015 at 02:38:20AM -0400, grarpamp wrote: > Cert serial numbers found in the wild are hardly unique (witness They are not "in the wild" in this context, as the issueing CA in OpenVPN contexts is typically in-house - and serial numbers for certs issued by a single CA(!) *are* u

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-25 Thread Boris Lytochkin
Hi. I disagree. And openssl crl disagrees with you too. There are no sha1 (or other) fingerprints there, serial numbers are stored there :) As far as I understand in most of the cases where X509 is used for OpenVPN, single (mostly probable self-signed) CA is used for authentication so serial n

Re: [Openvpn-devel] Log cert serial no if it is revoked

2015-08-25 Thread grarpamp
On Mon, Aug 24, 2015 at 12:54 PM, Boris Lytochkin wrote: > Log serial number of revoked certificate > In most of situations admin of OpenVPN server needs to know which particular > certificate is used by client. Cert serial numbers found in the wild are hardly unique (witness the Mozilla CA bundl