Re: [Openvpn-devel] [PATCH] Implement on-link route adding for iproute2

2014-09-26 Thread Gert Doering
Hi, On Fri, Sep 26, 2014 at 06:11:01PM +0200, Philipp Hagemeister wrote: > Currently, when compiling with --enable-iproute2 , OpenVPN does not > create a correct route when the user is connected to the Internet > without a gateway (e.g. via ppp). This patch implements the > corresponding FIXME. >

[Openvpn-devel] [PATCH] Implement on-link route adding for iproute2

2014-09-26 Thread Philipp Hagemeister
Currently, when compiling with --enable-iproute2 , OpenVPN does not create a correct route when the user is connected to the Internet without a gateway (e.g. via ppp). This patch implements the corresponding FIXME. Signed-off-by: Philipp Hagemeister --- src/openvpn/route.c | 13 - 1

[Openvpn-devel] [PATCH 1/2] ocsp_check - signature verification and cert staus results are separate

2014-09-26 Thread Hubert Kario
when openssl returns result of parsing and verification of the OCSP response, the signature verification is separate from the certificate status, as such it's necessary to check both of them. Otherwise results like: Response Verify Failure 140170966779776:error:27069076:OCSP routines:OCSP_basic_v

[Openvpn-devel] [PATCH 2/2] ocsp_check - double check if ocsp didn't report any errors in execution

2014-09-26 Thread Hubert Kario
in case the reposnses are too old, ocsp tool can return text like this: Response verify OK ca/cert.pem: WARNING: Status times invalid. 139990703290240:error:2707307D:OCSP routines:OCSP_check_validity:status expired:ocsp_cl.c:358: good This Update: Sep 21 12:12:48 2014 GMT Next Upd