-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 17/08/11 17:53, Heiko Hund wrote:
> The CryptoAPI function CryptAcquireCertificatePrivateKey() was
> previously unsupported in MinGW. With recent w32api headers it's now
> defined, mostly. Since the code used to load the CryptoAPI DLL is
> prone to a DLL hijacking attack [1], it's now a good time to get rid
> of wrapper completely.
> 
> Just a few macros left that may still be undefined on some systems
> using the original MinGW headers.
> 
> [1] http://isc.sans.edu/diary.html?storyid=9445
> 
> Signed-off-by: Heiko Hund <[email protected]> --- cryptoapi.c |
> 43 +++++++++++++------------------------------ 1 files changed, 13
> insertions(+), 30 deletions(-)

One more old patch recovered from the dust.  Applied to master branch on
- -testing and -stable trees.

commit 14a382a3f1c70fdbc822bcad27096040ed394661
Author: Heiko Hund <[email protected]>
List-Post: [email protected]
Date:   Wed Aug 17 15:53:01 2011 +0000

    remove wrapper code for Windows CryptoAPI function

    Signed-off-by: Heiko Hund <[email protected]>
    Acked-by: James Yonan <[email protected]>
    URL: http://article.gmane.org/gmane.network.openvpn.devel/4979
    Signed-off-by: David Sommerseth <[email protected]>


kind regards,

David Sommerseth
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9DoPMACgkQDC186MBRfromnwCeP8qqwfaEtZ1//ql+AAVM3RMG
6M0AoInMli3/80vp1zFCL42O26iUyTUP
=LpaP
-----END PGP SIGNATURE-----

Reply via email to