[Openvpn-devel] [PATCH applied] Re: socket: remove duplicate expression

2014-11-23 Thread Gert Doering
ACK (obviously correct, Arne just beat me to it). Your patch has been applied to the master branch. commit d0ce829fbc2b3656c433e14f2c1c1b3db3b069c7 (master) Author: Yegor Yefremov List-Post: openvpn-devel@lists.sourceforge.net Date: Sat Nov 22 21:13:35 2014 +0100 socket: remove

Re: [Openvpn-devel] [PATCH] polarssl: fix unreachable code

2014-11-23 Thread Steffan Karger
ACK. Harmless, but definitely an oversight. -Steffan On 23-11-14 13:21, Yegor Yefremov wrote: > Found via cppcheck and compile-tested. > > Signed-off-by: Yegor Yefremov > --- > src/openvpn/ssl_polarssl.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >

[Openvpn-devel] [PATCH applied] Re: polarssl: fix unreachable code

2014-11-23 Thread Gert Doering
Your patch has been applied to the master branch. commit 98c5de769d6bcd4822b2fd81ae4f4b05edff5c0e Author: Yegor Yefremov List-Post: openvpn-devel@lists.sourceforge.net Date: Sun Nov 23 13:21:43 2014 +0100 polarssl: fix unreachable code Signed-off-by: Yegor Yefremov

[Openvpn-devel] [PATCH] Peer-id patch v7

2014-11-23 Thread Lev Stipakov
Added new packet format P_DATA_V2, which includes peer-id. If server supports, client sends all data packets in the new format. When data packet arrives, server identifies peer by peer-id. If peer's ip/port has changed, server assumes that client has floated, verifies HMAC and updates ip/port in

Re: [Openvpn-devel] [PATCH applied] Modernize sample keys and sample configs

2014-11-23 Thread Steffan Karger
Attached the same patch, just cherry-picked to release/2.3, and resolved the merge conflict in the readme file. Since today the old certs expired, which will cause 'make check' to fail, this probably just got a bit more priority. -Steffan On 15-11-14 17:56, Gert Doering wrote: > Your patch has

Re: [Openvpn-devel] [PATCH] Peer-id patch v7

2014-11-23 Thread Steffan Karger
On 23-11-14 16:17, Lev Stipakov wrote: > Added new packet format P_DATA_V2, which includes peer-id. If server > supports, client sends all data packets in the new format. When data > packet arrives, server identifies peer by peer-id. If peer's ip/port has > changed, server assumes that client has

[Openvpn-devel] [PATCH applied] Re: Modernize sample keys and sample configs

2014-11-23 Thread Gert Doering
ACK, thanks. Your patch has been applied to the release/2.3 branch. commit b77c27a1d945d740c7e7f6b64b1227d5d9077aa5 (release/2.3) Author: Steffan Karger List-Post: openvpn-devel@lists.sourceforge.net Date: Thu Oct 23 00:14:29 2014 +0200 Modernize sample keys and sample configs

[Openvpn-devel] [PATCH v2] Add client-only support for peer-id.

2014-11-23 Thread Gert Doering
This is a reduced version of the peer-id patch from Lev Stipakov implementing only the client side bits - send IV_PROTO=2, accept "peer-id " as pushed option, support P_DATA_V2 packets. v2: remove addition of "struct tls_multi;" to options.h, not needed Signed-off-by: Gert Doering

Re: [Openvpn-devel] [PATCH] configure.ac: fix default behavior

2014-11-23 Thread Yegor Yefremov
On Sat, Nov 22, 2014 at 12:57 PM, Gert Doering wrote: > Hiya, > > On Sat, Nov 22, 2014 at 11:47:05AM +0100, Arne Schwabe wrote: >> Almost anybody always turns this feature on, at least all distribution >> have it on. > > Which is indeed a strong argument for removing the

Re: [Openvpn-devel] [PATCH v2] Add client-only support for peer-id.

2014-11-23 Thread Steffan Karger
ACK. Code is similar to the full-blown patch for master, and float works nicely. -Steffan On 23-11-14 20:17, Gert Doering wrote: > This is a reduced version of the peer-id patch from Lev Stipakov > implementing only the client side bits - send IV_PROTO=2, accept > "peer-id " as pushed option,