Control: blocks 828477 859555 On Sat, Jun 24, 2017 at 11:24:18AM +0200, Dr. Markus Waldeck wrote:
Hi, > this defect will be fixed in OpenVPN 2.5. > > OpenVPN 2.5_git [git:master/0402c7faadf907d4] x86_64-pc-linux-gnu [SSL > (OpenSSL)] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2017 > library versions: OpenSSL 1.1.0f 25 May 2017 > works fine e.g. with tls-cipher TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256 > > Is there any chance to get a prebuild based on > https://github.com/OpenVPN/openvpn.git for experimental? As far as I can see it has been fixed in 2.4.3, but switching over is currently blocked by libpkcs11-helper1-dev depending on libssl1.0-dev (presumably because of OpenVPN, see Bug #859555). Eric, if openvpn was the only reason to stay on OpenSSL 1.0 feel free to switch over now. OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2017 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.08 (that is without libpkcs11) Bernhard