Re: [Openvpn-devel] [PATCH 1/3] Drop support for OpenSSL 1.0.1

2020-07-14 Thread Arne Schwabe
> > Also, there's some export_keying_material and "security level" related > #ifdefs that look liek they can go now. Just git grep for "0x10001" and > "1\.0\.1" in the code and you'll see. I missed that, will update the patch accordingly. > Finally, did you check openssl_compat.h to see of we

Re: [Openvpn-devel] [PATCH 1/3] Drop support for OpenSSL 1.0.1

2020-07-14 Thread Steffan Karger
Hi, Feature-ACK for sure. Some comments below. On 13-07-2020 11:46, Arne Schwabe wrote: > OpenSSL 1.0.1 was supported until 2016-12-31. Rhel6/Centos6 still > use this version but considering that RHEL7 and RHEL8 are already > out, these versions can also stay with OpenVPN 2.4. > > All the

[Openvpn-devel] [PATCH 1/3] Drop support for OpenSSL 1.0.1

2020-07-13 Thread Arne Schwabe
OpenSSL 1.0.1 was supported until 2016-12-31. Rhel6/Centos6 still use this version but considering that RHEL7 and RHEL8 are already out, these versions can also stay with OpenVPN 2.4. All the supported Debian based distributions also come with at least 1.0.2 This also allows the tls groups