[Openvpn-devel] [PATCH] Add --compat-names option

2012-09-10 Thread David Sommerseth
From: Heiko Hund With this option, users can basically undo the changes of the UTF-8 support commit 5e86fd93779482b90a191f929edebe414cd78a4f. It's here for short term compatibility and should be removed again as soon as possible. When OpenSSL is used, the subject strings will be in the proprieta

Re: [Openvpn-devel] [PATCH] Add 1:1 network mapping option (--netmap)

2012-09-10 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/09/12 17:24, Andrea Bonomi wrote: > There no difference, it's exactly the same feature. The next time I > promise to check better before implementing something that already > exist. Sorry, No worries, I'm just sorry for you spending time on impl

Re: [Openvpn-devel] [PATCH] Add 1:1 network mapping option (--netmap)

2012-09-10 Thread Andrea Bonomi
There no difference, it's exactly the same feature. The next time I promise to check better before implementing something that already exist. Sorry, Andrea Bonomi :: e n d i a n :: security with passion :: andrea bonomi :: http://www.endian.com :: a.bon...@endian.com On 10/set/2012, at 16:49, D

Re: [Openvpn-devel] [PATCH] Add 1:1 network mapping option (--netmap)

2012-09-10 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/09/12 15:38, Andrea Bonomi wrote: > Dear Developers, I developed a patch for implementing 1:1 NAT > (something similar to the iptables NETMAP target). This is useful > in situations when you have the same (private) network address > behind client

[Openvpn-devel] [PATCH] Add 1:1 network mapping option (--netmap)

2012-09-10 Thread Andrea Bonomi
Dear Developers, I developed a patch for implementing 1:1 NAT (something similar to the iptables NETMAP target). This is useful in situations when you have the same (private) network address behind clients. For example, consider the following scenario: -lan1--192.168.0.0/24-- -lan2--192.16

[Openvpn-devel] [PATCH] Add checks for external-key-managements

2012-09-10 Thread Arne Schwabe
Commit 4806cc102655f1a829d656f6deb83e5953c5eab2 fixed only part of the problem. Since it removed the filename either the magic filename has to be resurrected or all checks against priv_key_file need to take to check for MF_EXTERNAL_KEY as well. This patch implements the extra checks Signed-off-