On Fri, May 03, 2002 at 09:09:01AM -0600, James Yonan wrote: > > > So, I need to know the process of integration of new cipher to Crypto > > > library. > > > I've tried to place the directory with new cipher (aes) inside of the > crypto > > > directory, > > > modified root Makefile.ssl and crypto/Makefile.ssl however it seems that > it > > > is not enough - > > > new codec does not appear in the list of supported codecs of openvpn > > > executable. > > > > Ask the author, James Yonan, he is around on this list. > > And with him around asking about EVP-problems I am would guess that > > he already nailed down the problem with 0.9.7. > > OpenVPN uses the cipher-independent EVP layer of OpenSSL as an interface to > the symmetric cipher algorithms. In the current 0.9.7 snapshot, the EVP API > has been modified so it is incompatible with 0.9.6 -- this is probably the > cause of the crash. I had the same result when I tried to test OpenVPN with > 0.9.7 and AES-256. I know there's some discussion going on about fixing > this, so the EVP API stays compatible. > > If you need something right now, I have a simple patch for 0.9.7 which will > restore the 0.9.6 EVP behavior. When I applied this patch, OpenVPN ran fine > with 0.9.7 and the AES-256 cipher.
The following statement is not an official announcement: * We intended to put 0.9.7 into beta this week. We failed to keep this schedule. * Nevertheless 0.9.7 beta is due in the next days and a treatment of the problem will be included, most likely the old behaviour will be restored. So I would simply recommed to stay patient for the next hours/days. I didn't want to speak up before we have agreed on an official position (and my statement here still has a (quite) small risk of being wrong), but as discussion here becomes that intensive, I felt obligued to give a statement. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] http://www.aet.TU-Cottbus.DE/personen/jaenicke/ BTU Cottbus, Allgemeine Elektrotechnik Universitaetsplatz 3-4, D-03044 Cottbus ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]