Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-19 Thread Christian Hesse
David Sommerseth on Sat, 2017/02/18 02:52: > On 17/02/17 22:59, Emmanuel Deloget wrote: > > I'm not targetting 2.4 -- my work is done on the current master. Adding > > hundreds of lines to the current 2.4 for the purpose of supporting a > > library which is not

[Openvpn-devel] [PATCH applied] Re: OpenSSL: check for the SSL reason, not the full error

2017-02-19 Thread Gert Doering
Your patch has been applied to the master and release/2.4 branch. 2.3 does not have this code, as far as I could see, so doesn't get the patch. I can't reach sf.net right now (git.code.sf.net gives me "connection refused"), so only pushed to github and gitlab. commit

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-19 Thread Gert Doering
Hi, On Sun, Feb 19, 2017 at 04:12:02PM +0100, David Sommerseth wrote: > But things may change again. I heard recently that Red Hat is migrating > over to OpenVPN as the only internal IT supported VPN solution. So > about 10k employees will soon depend on OpenVPN for their daily VPN > need. We

Re: [Openvpn-devel] [RFC PATCH v1 00/15] Add support for OpenSSL 1.1.x

2017-02-19 Thread Gert Doering
Hi, On Sun, Feb 19, 2017 at 01:03:45PM +0100, Steffan Karger wrote: > Thank you very much. You approach looks good to me, and quite closely > matches what I had in mind for when I would find the time to tackle > this. (Which might have taken me a while, so really happy to see these > patches!)

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-19 Thread David Sommerseth
On 19/02/17 05:48, Илья Шипицин wrote: > > > 2017-02-19 4:16 GMT+05:00 David Sommerseth > >: > > On 18/02/17 08:34, Илья Шипицин wrote: > > I added openssl-1.0.1e to test matrix (do not pay attention to >

Re: [Openvpn-devel] [RFC PATCH v1 00/15] Add support for OpenSSL 1.1.x

2017-02-19 Thread Steffan Karger
On 19-02-17 15:58, David Sommerseth wrote: > On 19/02/17 13:03, Steffan Karger wrote: > >> As discussed in other threads, we do want to support building on RHEL6, >> which is why we would prefer to be compatible with (patched) OpenSSL >> 0.9.8. I haven't tested anything yet, but looking at the

Re: [Openvpn-devel] [RFC PATCH v1 00/15] Add support for OpenSSL 1.1.x

2017-02-19 Thread Emmanuel Deloget
Hello, On Sun, Feb 19, 2017 at 1:03 PM, Steffan Karger wrote: > > Hi Emmanuel, > > Thank you very much. You approach looks good to me, and quite closely > matches what I had in mind for when I would find the time to tackle > this. (Which might have taken me a while, so

Re: [Openvpn-devel] [RFC PATCH v1 00/15] Add support for OpenSSL 1.1.x

2017-02-19 Thread David Sommerseth
On 19/02/17 13:03, Steffan Karger wrote: > As discussed in other threads, we do want to support building on RHEL6, > which is why we would prefer to be compatible with (patched) OpenSSL > 0.9.8. I haven't tested anything yet, but looking at the patches this > might very well just work, or

Re: [Openvpn-devel] [RFC PATCH v1 14/15] OpenSSL: check for the SSL reason, not the full error

2017-02-19 Thread Steffan Karger
Hi, On 17-02-17 23:00, log...@free.fr wrote: > From: Emmanuel Deloget > > OpenSSL 1.1 changed the SSLv3 API and removed many SSL_L_SSL3_* > constants. Moreover, new code might use different function > code for the same error. > > Thus, we extract the error reason from the error

Re: [Openvpn-devel] [RFC PATCH v1 00/15] Add support for OpenSSL 1.1.x

2017-02-19 Thread Steffan Karger
Hi Emmanuel, On 17-02-17 23:00, log...@free.fr wrote: > From: Emmanuel Deloget > > The purpose of this RFC series is to make the latest master of OpenVPN > (2.5-git) linkable with OpenSSL v1.1.x. It may not be complete (I may > have missed something due to my work environment,