Hi, somehow I forgot to also add this message to the pkcs11 bug...
Eric, if openvpn was the only reason to stay on OpenSSL 1.0 feel free to switch over now. OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2017 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.08 (that is without libpkcs11) Bernhard
--- Begin Message ---Control: blocks 828477 859555 On Sat, Jun 24, 2017 at 11:24:18AM +0200, Dr. Markus Waldeck wrote: Hi, > this defect will be fixed in OpenVPN 2.5. > > OpenVPN 2.5_git [git:master/0402c7faadf907d4] x86_64-pc-linux-gnu [SSL > (OpenSSL)] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2017 > library versions: OpenSSL 1.1.0f 25 May 2017 > works fine e.g. with tls-cipher TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256 > > Is there any chance to get a prebuild based on > https://github.com/OpenVPN/openvpn.git for experimental? As far as I can see it has been fixed in 2.4.3, but switching over is currently blocked by libpkcs11-helper1-dev depending on libssl1.0-dev (presumably because of OpenVPN, see Bug #859555). Eric, if openvpn was the only reason to stay on OpenSSL 1.0 feel free to switch over now. OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2017 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.08 (that is without libpkcs11) Bernhard
--- End Message ---
