Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-22 Thread Samuli Seppänen
Hi, A new Windows installer based on release/2.2 branch with my easy-rsa patches applied is now available here: Also, a standalone version of fixed easy-rsa directory is available here:

Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-21 Thread Samuli Seppänen
Hi all, I falsely assumed openssl.cnf was a default file from OpenSSL release packages, even though it was heavily modified for easy-rsa. The root cause of the issue seems to be that OpenSSL 1.0.0 does not like undefined variables in openssl.cnf. I fixed the Windows side today, and a preliminary

Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-20 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/06/11 12:30, Jan Just Keijser wrote: [...snip...] >> Samuli, can you please look closer into this? I did a more careful diff >> from 2.0/openssl.cnf and Windows/openssl.cnf ... and it seems quite >> different. Can we please unite them? >> >>

Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-20 Thread Jan Just Keijser
Hi David, David Sommerseth wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/06/11 11:36, Jan Just Keijser wrote: NACK on this patch - the openssl.cnf file should be (almost) the same as the one used in easy-rsa/2.0 that way the certificates are generated in the same manner

Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-20 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/06/11 11:36, Jan Just Keijser wrote: > NACK on this patch - the openssl.cnf file should be (almost) the same as > the one used in easy-rsa/2.0 > that way the certificates are generated in the same manner (*with* > EKU=ServerAuth) > Okay, I'll

Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-20 Thread Jan Just Keijser
NACK on this patch - the openssl.cnf file should be (almost) the same as the one used in easy-rsa/2.0 that way the certificates are generated in the same manner (*with* EKU=ServerAuth) JJK David Sommerseth wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/06/11 09:49,

Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows

2011-06-20 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/06/11 09:49, sam...@openvpn.net wrote: > From: Samuli Seppänen > > This is required for patch "Fix a build-ca issue on Windows" to work > --- > easy-rsa/Windows/openssl.cnf | 350 >