[Openvpn-devel] better handling of revoked certs

2017-10-05 Thread Илья Шипицин
Hello, I used to run openvpn in login/password mode for years. now, I'm getting working certificate setup. what I found strange about revoked certificates ... from client point of view it looks like any other "tls key negotiation timeout" is there a way to signal user "hey, you key is revoked"

[Openvpn-devel] [PATCH] man: Describe --proto options better

2017-10-05 Thread David Sommerseth
The --proto options changed a bit in OpenVPN v2.4. This tries to expand this section, explaining the new variants and how they related to older OpenVPN versions. Signed-off-by: David Sommerseth --- doc/openvpn.8 | 37 ++--- 1 file changed, 34 insertions(+), 3 del

[Openvpn-devel] [PATCH] Remove references to keychain-mcd in Changes.rst

2017-10-05 Thread David Sommerseth
In commit 59e7e9fce8de6ea90d13baeaede83adc0b594e22 the contrib/keychain-mcd code was completely removed. But it was not removed from Changes.rst. Signed-off-by: David Sommerseth --- Changes.rst | 4 1 file changed, 4 deletions(-) diff --git a/Changes.rst b/Changes.rst index 53a14438..db9b

Re: [Openvpn-devel] How to manage code under the contrib/ directory?

2017-10-05 Thread Steffan Karger
Hi, On 05-10-17 12:35, Samuli Seppänen wrote: > In yesterday's community meeting we talked a bit about how to best > manage code under contrib/ directory: > > > > We agreed that code going there does not necessarily need to go through > ou

Re: [Openvpn-devel] [PATCH] openssl 1.1 tls version support

2017-10-05 Thread Steffan Karger
Hi, Thanks for taking this to the openvpn-devel list. The proposed patch doesn't follow our approach of hiding the openssl 1.0/1.1 API compatibility mess inside openssl_compat.h, so we'll have to rework it before including it. I will pick this up some time soon, but have very limited access to i

Re: [Openvpn-devel] How to manage code under the contrib/ directory?

2017-10-05 Thread David Sommerseth
On 05/10/17 12:40, Samuli Seppänen wrote: > > On 05/10/2017 13:35, Samuli Seppänen wrote: >> >> We do not wish to "drop the ball" on code under "contrib/". We would >> also like to avoid the fate of the OpenVPN RADIUS plugin, which has been >> forked several times in a row by individuals, leaving

Re: [Openvpn-devel] How to manage code under the contrib/ directory?

2017-10-05 Thread Samuli Seppänen
On 05/10/2017 13:35, Samuli Seppänen wrote: > > We do not wish to "drop the ball" on code under "contrib/". We would > also like to avoid the fate of the OpenVPN RADIUS plugin, which has been > forked several times in a row by individuals, leaving users with no idea > of which version is the leas

[Openvpn-devel] How to manage code under the contrib/ directory?

2017-10-05 Thread Samuli Seppänen
Hi, In yesterday's community meeting we talked a bit about how to best manage code under contrib/ directory: We agreed that code going there does not necessarily need to go through our usual pretty strict review process. Accepting things w

[Openvpn-devel] Summary of the community meeting (Wed, 4th Oct 2017)

2017-10-05 Thread Samuli Seppänen
Hi, Here's the summary of the IRC meeting. --- COMMUNITY MEETING Place: #openvpn-meeting on irc.freenode.net Date: Wednesday 4th Oct 2017 Time: 19:00 CET (17:00 UTC) Planned meeting topics for this meeting were here: The next mee