>> With that in mind, if shipping a patched pkcs11-helper in Windows
>> makes your life easier I'd consider doing this. But step carefully,
>> avoid getting in a situation where you suddenly have to maintain these
>> patches yourself. Rather try to see what Fedora does and see if that
>> can be re-used as much as possible.
>
> The Fedora patch for adding RFC7512 support is precisely the same as in
> the open pull request at https://github.com/OpenSC/pkcs11-helper/pull/4
>
> It shouldn't need much ongoing maintenance. But I do definitely think
> it would be good to move away from pkcs11-helper completely. I'd
> actually like to remove it from Fedora entirely. There are only a small
> handful of projects which use it, and they can all be fixed.
Given the state of 2.4 ("almost there") I think we should, at most,
apply Fedora's patch to pkcs11-helper in Windows 2.4 installers. The
long-term fix should (imho) wait until 2.5.
--
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc
irc freenode net: mattock
------------------------------------------------------------------------------
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
