Hi,

On 22-12-16 19:23, Gert Doering wrote:
> On Thu, Dec 22, 2016 at 07:01:32PM +0100, Matthias Andree wrote:
>> I haven't seen anything mentioned by a Jonathan recently, and see
>> nothing in the openvpn-devel archives, but yes it is about optionally
>> obfuscating OpenVPN traffic on the wire, adding an undocumented
>> --scramble option, and taken from here:
>> <https://github.com/opnsense/ports/commit/173db0315>.
> 
> Sorry, my fault.  That was Jonathan K. Bullard on openvpn-*users*, who
> is maintaining Tunnelblick, and he mentioned that his builds do contain
> an obfuscation patch.  So it seems to be the same thing.
> 
> Jonathan's mail is here:
> 
> http://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg03396.html
> 
> (he calls it the "openvpn_xorpatch")

Also, check out what he writes on
https://tunnelblick.net/cOpenvpn_xorpatch.html about the original OPN patch:

"However, a Tunnelblick developer has reviewed the patch, found some
problems, and modified it in Tunnelblick to resolve those problems. The
problems that were found and fixed involved insufficient parameter
validation, null pointer dereferences, division by zero errors, and a
buffer overflow."

So might be worth checking out which patch you're using.

-Steffan


Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to