Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-22 Thread Matthias Andree
Am 21.06.2017 um 18:53 schrieb Илья Шипицин: > > > 2017-06-21 21:48 GMT+05:00 Matthias Andree >: > > Am 21.06.2017 um 16:33 schrieb Samuli Seppänen: > > On 21/06/2017 17:06, Simon Matter wrote: > >>> On Wed, Jun 21, 2017 at 6:47

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-22 Thread Samuli Seppänen
Hi, > So just trying to hijack this discussion which is to be found a few more > places elsewhere in this mail thread. No need to let this discussion > run longer. > > There are several area where we definitely can improve the release > process. Last round where we managed to mess up the

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Jeremie Courreges-Anglas
Hi, Emmanuel Deloget writes: > Hi David, > > On Wed, Jun 21, 2017 at 11:06 PM, David Sommerseth < > open...@sf.lists.topphemmelig.net> wrote: > > ​​ > > >> But for reasons unknown to me, those tarballs got re-created somewhere >> later in the release chain. The contents of all

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread James Bekkema
> On 22 Jun 2017, at 7:06 am, David Sommerseth > wrote: > > - What can be done with Cloudflare to fully ensure their caches are > truly purged when we ask for it? As Jonathan noticed, their caches > are tightly connected to the web browser and have a

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Emmanuel Deloget
Hi David, On Wed, Jun 21, 2017 at 11:06 PM, David Sommerseth < open...@sf.lists.topphemmelig.net> wrote: ​​ > But for reasons unknown to me, those tarballs got re-created somewhere > later in the release chain. The contents of all tarballs are > essentially the same, but due to the "nice"

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread David Sommerseth
On 21/06/17 12:47, Samuli Seppänen wrote: > The OpenVPN community project team is proud to release OpenVPN 2.4.3. It > can be downloaded from here: > > > > OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In > the

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Jonathan K. Bullard
On Wed, Jun 21, 2017 at 12:48 PM, Matthias Andree wrote: > > Am 21.06.2017 um 16:33 schrieb Samuli Seppänen: > > On 21/06/2017 17:06, Simon Matter wrote: > >>> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen > >>> wrote: > The OpenVPN community

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Jonathan K. Bullard
On Wed, Jun 21, 2017 at 7:48 AM, Jonathan K. Bullard wrote: > On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen > wrote: > > The OpenVPN community project team is proud to release OpenVPN 2.4.3. It > > can be downloaded from here: > > > >

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Matthias Andree
Am 21.06.2017 um 18:02 schrieb Gert Doering: > Hi, > > On Wed, Jun 21, 2017 at 05:58:18PM +0200, David Sommerseth wrote: >> Hmmm ... not a bad idea. But do we really need tar.gz at all these >> days? Why not just make autotools generate tar.xz by default and be >> done with it? > "distcheck"

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Matthias Andree
Am 21.06.2017 um 16:33 schrieb Samuli Seppänen: > On 21/06/2017 17:06, Simon Matter wrote: >>> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen >>> wrote: The OpenVPN community project team is proud to release OpenVPN 2.4.3. It can be downloaded from here:

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Gert Doering
Hi, On Wed, Jun 21, 2017 at 05:58:18PM +0200, David Sommerseth wrote: > Hmmm ... not a bad idea. But do we really need tar.gz at all these > days? Why not just make autotools generate tar.xz by default and be > done with it? "distcheck" tends to just do .tar.gz - can you make it still do the

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread David Sommerseth
On 21/06/17 17:49, Gert Doering wrote: > Hi, > > On Wed, Jun 21, 2017 at 05:25:32PM +0200, Simon Matter wrote: >>> .gz is built with "make distcheck", .xz right after from the same >>> tree with "make dist-xz". >>> >>> What differs? >> >> The check sum of both extracted tarballs, not really their

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Gert Doering
Hi, On Wed, Jun 21, 2017 at 05:25:32PM +0200, Simon Matter wrote: > > .gz is built with "make distcheck", .xz right after from the same > > tree with "make dist-xz". > > > > What differs? > > The check sum of both extracted tarballs, not really their content. Ah. Yeah, that's one of the

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Simon Matter
> Hi, > > On Wed, Jun 21, 2017 at 04:18:41PM +0200, Simon Matter wrote: >> An additional source of confusion seems that the tarball of the .gz and >> .xz files don't match. Maybe this could easily be fixed in the build >> process. > > .gz is built with "make distcheck", .xz right after from the

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Gert Doering
Hi, On Wed, Jun 21, 2017 at 04:18:41PM +0200, Simon Matter wrote: > An additional source of confusion seems that the tarball of the .gz and > .xz files don't match. Maybe this could easily be fixed in the build > process. .gz is built with "make distcheck", .xz right after from the same tree

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Simon Matter
>>> I believe it is Cloudflare playing tricks on us again. >>> >>> Attached are the proper signature files and below a list of the SHA256 >>> checksums: >>> >>> 7aa86167a5b8923e54e8795b814ed77288c793671f59fd830d9ab76d4b480571 >>> openvpn-2.4.3.tar.xz >>> >>> This is based on the files I've already

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Samuli Seppänen
On 21/06/2017 17:42, Simon Matter wrote: >> On 21/06/17 13:48, Jonathan K. Bullard wrote: >>> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen >>> wrote: The OpenVPN community project team is proud to release OpenVPN 2.4.3. It can be downloaded from here:

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Simon Matter
> On 21/06/17 13:48, Jonathan K. Bullard wrote: >> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen >> wrote: >>> The OpenVPN community project team is proud to release OpenVPN 2.4.3. >>> It >>> can be downloaded from here: >>> >>>

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Samuli Seppänen
On 21/06/2017 17:06, Simon Matter wrote: >> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen >> wrote: >>> The OpenVPN community project team is proud to release OpenVPN 2.4.3. It >>> can be downloaded from here: >>> >>>

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Simon Matter
>> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen >> wrote: >>> The OpenVPN community project team is proud to release OpenVPN 2.4.3. >>> It >>> can be downloaded from here: >>> >>> >> >> Hi. Thanks for this release.

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Simon Matter
> On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen > wrote: >> The OpenVPN community project team is proud to release OpenVPN 2.4.3. It >> can be downloaded from here: >> >> > > Hi. Thanks for this release. > >

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread David Sommerseth
On 21/06/17 13:48, Jonathan K. Bullard wrote: > On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen wrote: >> The OpenVPN community project team is proud to release OpenVPN 2.4.3. It >> can be downloaded from here: >> >> >

Re: [Openvpn-devel] OpenVPN 2.4.3 released (with security fixes)

2017-06-21 Thread Jonathan K. Bullard
On Wed, Jun 21, 2017 at 6:47 AM, Samuli Seppänen wrote: > The OpenVPN community project team is proud to release OpenVPN 2.4.3. It > can be downloaded from here: > > Hi. Thanks for this release. Verifying the PGP