[Openvpn-devel] [PATCH v3] Allow running a default configuration with TLS libraries without BF-CBC

2021-02-15 Thread Arne Schwabe
Modern TLS libraries might drop Blowfish by default or distributions might disable Blowfish in OpenSSL/mbed TLS. We still signal OCC options with BF-CBC compatible strings. To avoid requiring BF-CBC for this, special this one usage of BF-CBC enough to avoid a hard requirement on Blowfish in the

[Openvpn-devel] [PATCH v5] Prefer TLS libraries TLS PRF function, fix OpenVPN in FIPS mode

2021-02-15 Thread Arne Schwabe
This moves from using our own copy of the TLS1 PRF function to using TLS library provided function where possible. This includes currently OpenSSL 1.1.0+ and mbed TLS 2.18+. For the libraries where it is not possible to use the library's own function, we still use our own implementation. mbed TLS

[Openvpn-devel] [PATCH v4] Prefer TLS libraries TLS PRF function, fix OpenVPN in FIPS mode

2021-02-15 Thread Arne Schwabe
This moves from using our own copy of the TLS1 PRF function to using TLS library provided function where possible. This includes currently OpenSSL 1.1.0+ and mbed TLS 2.18+. For the libraries where it is not possible to use the library's own function, we still use our own implementation. mbed TLS

Re: [Openvpn-devel] [PATCH] Support for wolfSSL in OpenVPN

2021-02-15 Thread Juliusz Sosinowicz
Hi Arne, the pull request has been merged to the wolfSSL master branch and will be included in the next wolfSSL release. Your issue has been resolved. Are able to try compiling again? Sincerely Juliusz On 27/01/2021 20:07, Arne Schwabe wrote: Am 27.01.21 um 18:25 schrieb Juliusz

Re: [Openvpn-devel] [PATCH applied] Re: Implement client side handling of AUTH_PENDING message

2021-02-15 Thread Arne Schwabe
Am 14.02.21 um 16:19 schrieb Gert Doering: > Your patch has been applied to the master branch. > > I'm not sure I understand the code, though. It receives the new timeout > from the server (that is easy), but then caps it by "hand_window", which > is never increased - so the maximum timeout