Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi, On Mon, Jul 21, 2014 at 07:17:30PM +0200, Lisa Minogue wrote: > Hi Samuli and friends: > > This is what I think. Don't think so much, use google first :) > Both of us don't know how long it will take for OpenSSL to fix the long list > of bugs -some of which are significant- that have

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi Samuli and friends: This is what I think. Both of us don't know how long it will take for OpenSSL to fix the long list of bugs -some of which are significant- that have accumulated over the years. One year or two years? OpenVPN is in the business of providing software that enables secure

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

On 21/07/14 14:44, Samuli Seppänen wrote: > Although we probably can all agree > that the state of OpenSSL leaves a lot to be desired, it's now funded by > the Core Infratructure Initiative: > > > > I don't know if money

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

On 21/07/14 14:02, Gert Doering wrote: > Hi, > > On Mon, Jul 21, 2014 at 01:24:53PM +0200, Steffan Karger wrote: >> LibreSSL has just been ported to Linux. > > I'd stay away from LibreSSL for a while. "We do OpenBSD, and do not care > for portability" seems to have side effects on things like

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Hi, > > On Mon, Jul 21, 2014 at 11:35:48AM +0200, Lisa Minogue wrote: >> In the light of the above, do you have plans to replace OpenSSL with PolarSSL or LibreSSL? And how soon will new bundles of OpenVPN software be released that incorporate

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi, On Mon, Jul 21, 2014 at 11:35:48AM +0200, Lisa Minogue wrote: > In the light of the above, do you have plans to replace OpenSSL with PolarSSL > or LibreSSL? And how soon will new bundles of OpenVPN software be released > that incorporate OpenSSL alternatives? [..] > P.S.: I apologize if the

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi, On Mon, Jul 21, 2014 at 01:24:53PM +0200, Steffan Karger wrote: > LibreSSL has just been ported to Linux. I'd stay away from LibreSSL for a while. "We do OpenBSD, and do not care for portability" seems to have side effects on things like "seeding RNG" that should be fully understood before

Re: [Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi Lisa, On Mon, Jul 21, 2014 at 11:35 AM, Lisa Minogue wrote: > do you have plans to replace OpenSSL with PolarSSL or LibreSSL? And how soon > will new bundles of OpenVPN software be released that incorporate OpenSSL > alternatives? OpenVPN is already capable of using

[Openvpn-devel] OpenSSL in OpenVPN software to be replaced?

Hi guys, It's been universally acknowledged that you all have been doing a wonderful job by providing free, open-source OpenVPN software and free support for it over the past few years. However a few days ago OpenSSL, in a project roadmap last modified on July 16, stated [sic]"there are a