Re: [Openvpn-devel] [PATCH applied] Re: Fix build with mbedtls w/o SSL renegotiation support

2021-04-21 Thread Magnus Kroken
/2.5 as well. 2.5.2 is affected by this and does not compile with an mbed TLS library built in this manner. Regards, Magnus Kroken ___ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn

[Openvpn-devel] [PATCH 0/2] Fix mistyped option names

2020-08-15 Thread Magnus Kroken
her in OpenVPN, so I would not expect the literal --data-cipher to appear anywhere, even when a sentence refers to one singular cipher in the list of --data-ciphers. Magnus Kroken (2): Changes.rst: fix mistyped option names doc: fix typos in cipher-negotiation.rst Changes.rst

[Openvpn-devel] [PATCH 2/2] doc: fix typos in cipher-negotiation.rst

2020-08-15 Thread Magnus Kroken
Signed-off-by: Magnus Kroken --- doc/man-sections/cipher-negotiation.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/man-sections/cipher-negotiation.rst b/doc/man-sections/cipher-negotiation.rst index f1433052..a2feb5f9 100644 --- a/doc/man-sections/cipher

[Openvpn-devel] [PATCH 1/2] Changes.rst: fix mistyped option names

2020-08-15 Thread Magnus Kroken
Signed-off-by: Magnus Kroken --- Changes.rst | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Changes.rst b/Changes.rst index 0aee3603..f67e1d76 100644 --- a/Changes.rst +++ b/Changes.rst @@ -34,7 +34,7 @@ Improved Data channel cipher negotiation Removal of BF-CBC

Re: [Openvpn-devel] [PATCH] Document tls-crypt security considerations in man page

2017-05-07 Thread Magnus Kroken
Hi Steffan Non-crypto geek here, comments inline. On 05.05.2017 22:30, Steffan Karger wrote: > +control channel messages. A typical initial negotiation is about 10 packets > +in each direction. Assuming both initial negotation and renogatiations are > +at most 2^16 (65536) packets, and

Re: [Openvpn-devel] OpenVPN Service Flagged as Trojan

2016-12-29 Thread Magnus Kroken
Hi On 29.12.2016 19.07, Morris, Russell wrote: > That's good - thanks! Not sure how to fix Windows flagging this though - I'm > assuming others will have the same issue. > > ... Russell Most likely a definition update will fix this very soon, or already has. I just ran it through Virustotal

[Openvpn-devel] [PATCH] mbedtls: include correct net/net_sockets header according to version

2016-12-09 Thread Magnus Kroken
is deprecated as of mbedTLS 2.4.0, it is renamed . OpenVPN will fail to build with mbedTLS 2.4.0 with MBEDTLS_DEPRECATED_REMOVED defined. Check MBEDTLS_VERSION_NUMBER, and include net.h for < 2.4.0 and net_sockets.h for >= 2.4.0. Signed-off-by: Magnus Kroken <mkro...@gmail.com>

[Openvpn-devel] OpenVPN-mbedTLS depends on mbedTLS debug module - safe to remove?

2016-06-12 Thread Magnus Kroken
not asking OpenVPN to remove this, but I would like to know the known consequences of such a change. 1: https://github.com/OpenVPN/openvpn/commit/a9226fbdd90ac37891937b396c9c3212cd324262#diff-a06a4475e26fd6ec7e0cd3bbdcb30966R745 Regards, Magnus Kroken