Do we need this fix in openvpn-gui? It only (?) uses openssl to change
private key password, could this functionality be affected by config?

ke 24. marrask. 2021 klo 12.06 Gert Doering ([email protected]) kirjoitti:
>
> Your patch has been applied to the master and release/2.5 branch
> (I consider this a bugfix since the "do not load config!" CVE patch
> unintendedly broke functionality for people)
>
> As instructed I have changed "* " to " *" according to style :-), and
> removed the double declaration in buffer.h - the latter is something
> on the edge of "can I do that at commit time?" but in this case it's
> "the very same declaration", "tun.c and win32.c do include win32.h",
> so easy enough.
>
> I did not change the "static" bit.
>
> I have not tested this "for real", just did a test compile of master
> and release/2.5 on MinGW.  But the code change looks good, and it does
> not break compilation, even with my changes :-)
>
> Added the trac reference to #1296 (thanks Lev for digging it up).
>
> commit 23e6aaef149bd31a7e80af28ee1e3658d2810d4f (master)
> commit f911b3f69b0a8296918a06d02eb5144bb4cd8a06 (release/2.5)
> Author: Lev Stipakov
> Date:   Fri Nov 19 03:55:48 2021 +0200
>
>      Load OpenSSL config on Windows from trusted location
>
>      Signed-off-by: Lev Stipakov <[email protected]>
>      Acked-by: Selva Nair <[email protected]>
>      Message-Id: <[email protected]>
>      URL: 
> https://www.mail-archive.com/[email protected]/msg23248.html
>      Signed-off-by: Gert Doering <[email protected]>
>
>
> --
> kind regards,
>
> Gert Doering
>
>
>
> _______________________________________________
> Openvpn-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openvpn-devel



--
-Lev


_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to