Re: [Openvpn-devel] build against openssl 1.1.0

2017-04-28 Thread Hubert Kario
On Friday, 17 February 2017 18:18:27 CEST David Sommerseth wrote: > On 17/02/17 17:35, Emmanuel Deloget wrote: > > I understand that I'm the new guy in town, but can you allow me to > > make the formal request to ditch OpenSSL 0.9.8, 1.0.0 and 1.0.1 and > > require at least version 1.0.2? > > So

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-23 Thread Илья Шипицин
2017-02-19 9:48 GMT+05:00 Илья Шипицин : > > > 2017-02-19 4:16 GMT+05:00 David Sommerseth topphemmelig.net>: > >> On 18/02/17 08:34, Илья Шипицин wrote: >> > I added openssl-1.0.1e to test matrix (do not pay attention to >> > commit title, it

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-21 Thread David Sommerseth
On 13/02/17 21:16, David Sommerseth wrote: > On 13/02/17 20:50, Christian Hesse wrote: >> And a lot more has to be done... There's a long list of packages to be >> fixed. Sadly openssl developers do not care about ABI and API stability >> or compatibility. :( > > I do understand the frustration

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-19 Thread Christian Hesse
David Sommerseth on Sat, 2017/02/18 02:52: > On 17/02/17 22:59, Emmanuel Deloget wrote: > > I'm not targetting 2.4 -- my work is done on the current master. Adding > > hundreds of lines to the current 2.4 for the purpose of supporting a > > library which is not

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-19 Thread Gert Doering
Hi, On Sun, Feb 19, 2017 at 04:12:02PM +0100, David Sommerseth wrote: > But things may change again. I heard recently that Red Hat is migrating > over to OpenVPN as the only internal IT supported VPN solution. So > about 10k employees will soon depend on OpenVPN for their daily VPN > need. We

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-19 Thread David Sommerseth
On 19/02/17 05:48, Илья Шипицин wrote: > > > 2017-02-19 4:16 GMT+05:00 David Sommerseth > >: > > On 18/02/17 08:34, Илья Шипицин wrote: > > I added openssl-1.0.1e to test matrix (do not pay attention to >

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-18 Thread Илья Шипицин
2017-02-19 4:16 GMT+05:00 David Sommerseth < open...@sf.lists.topphemmelig.net>: > On 18/02/17 08:34, Илья Шипицин wrote: > > I added openssl-1.0.1e to test matrix (do not pay attention to > > commit title, it happened accidently from iPad), so ... > > > >

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-18 Thread David Sommerseth
On 18/02/17 08:34, Илья Шипицин wrote: > I added openssl-1.0.1e to test matrix (do not pay attention to > commit title, it happened accidently from iPad), so ... > > https://travis-ci.org/OpenVPN/openvpn/jobs/202709493 > > t_cltsrv.sh + openssl-1.0.1f = OK > t_cltsrv.sh +

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Илья Шипицин
2017-02-17 23:17 GMT+05:00 Илья Шипицин : > > Пт, 17 февр. 2017 г. в 22:21, David Sommerseth topphemmelig.net>: > >> On 17/02/17 17:35, Emmanuel Deloget wrote: >> > >> > Now, I have a question which is related to this. The way I'm doing >> > things, I

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread David Sommerseth
On 17/02/17 22:59, Emmanuel Deloget wrote: > I'm not targetting 2.4 -- my work is done on the current master. Adding > hundreds of lines to the current 2.4 for the purpose of supporting a library > which is not yet present on the user systems does not make much sense :) Currently, master and

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Emmanuel Deloget
Hello, On Fri, Feb 17, 2017 at 6:42 PM, Gert Doering wrote: > Hi, > > On Fri, Feb 17, 2017 at 06:37:04PM +0100, Emmanuel Deloget wrote: >> I guess the answer to the riddle is: "how long will the 2.4 branch >> live?". v2.3 shipped in May 2013. If we assume that v2.4 will be

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Илья Шипицин
Пт, 17 февр. 2017 г. в 22:21, David Sommerseth < open...@sf.lists.topphemmelig.net>: > On 17/02/17 17:35, Emmanuel Deloget wrote: > > > > Now, I have a question which is related to this. The way I'm doing > > things, I will make sure that the new code is compatible with both > > OpenSSL 1.0.x and

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Matthias Andree
Am 17.02.2017 um 17:35 schrieb Emmanuel Deloget: > I understand that I'm the new guy in town, but can you allow me to > make the formal request to ditch OpenSSL 0.9.8, 1.0.0 and 1.0.1 and > require at least version 1.0.2? 1.0.1 has also gone out of support, and I propose to let the distros sort

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Gert Doering
Hi, On Fri, Feb 17, 2017 at 06:37:04PM +0100, Emmanuel Deloget wrote: > I guess the answer to the riddle is: "how long will the 2.4 branch > live?". v2.3 shipped in May 2013. If we assume that v2.4 will be the > stable branch for two more years (I cannot find any roadmap, so this > is pure

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Emmanuel Deloget
Hello, On Fri, Feb 17, 2017 at 5:41 PM, Gert Doering wrote: > Hi, > > On Fri, Feb 17, 2017 at 05:35:04PM +0100, Emmanuel Deloget wrote: >> I understand that I'm the new guy in town, but can you allow me to >> make the formal request to ditch OpenSSL 0.9.8, 1.0.0 and 1.0.1

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread David Sommerseth
On 17/02/17 17:35, Emmanuel Deloget wrote: > > Now, I have a question which is related to this. The way I'm doing > things, I will make sure that the new code is compatible with both > OpenSSL 1.0.x and OpenSSL 1.1. There is a good chance that it will be > compatible with version 0.9.8 as well,

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Gert Doering
Hi, On Fri, Feb 17, 2017 at 05:35:04PM +0100, Emmanuel Deloget wrote: > I understand that I'm the new guy in town, but can you allow me to > make the formal request to ditch OpenSSL 0.9.8, 1.0.0 and 1.0.1 and > require at least version 1.0.2? I'm not going to make a call on any of these

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-17 Thread Emmanuel Deloget
Hello, First, sorry for the inconvenience: this message is not attached to the remaining of the discussion (I just joined the ML so I cannot answer to a one week old message). That being said: On Mon, Feb 13, 2017 at 08:17:58PM +0100, Christian Hesse wrote: > Arch Linux is about to upgrade

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-13 Thread David Sommerseth
On 13/02/17 20:50, Christian Hesse wrote: > And a lot more has to be done... There's a long list of packages to be > fixed. Sadly openssl developers do not care about ABI and API stability > or compatibility. :( I do understand the frustration ... but lets be fair too. OpenSSL v1.1 is considered

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-13 Thread Matthias Andree
Am 13.02.2017 um 20:50 schrieb Christian Hesse: > And a lot more has to be done... There's a long list of packages to be > fixed. Sadly openssl developers do not care about ABI and API stability > or compatibility. :( Much frustration can be muttered and uttered about OpenSSL and more so of its

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-13 Thread Christian Hesse
On Mon, 13 Feb 2017 20:33:38 +0100 Gert Doering wrote: > On Mon, Feb 13, 2017 at 08:17:58PM +0100, Christian Hesse wrote: > > Arch Linux is about to upgrade openssl to version 1.1.0. OpenVPN > > does not compile against this version. Did anybody start the work > > to support

Re: [Openvpn-devel] build against openssl 1.1.0

2017-02-13 Thread Gert Doering
Hi, On Mon, Feb 13, 2017 at 08:17:58PM +0100, Christian Hesse wrote: > Arch Linux is about to upgrade openssl to version 1.1.0. OpenVPN does not > compile against this version. Did anybody start the work to support latest > openssl versions? How does Arch deal with OpenSSH (which doesn't compile