[Openvpn-devel] OpenVPN 3 Linux client - v8 beta released

2020-02-10 Thread David Sommerseth
Hi, The OpenVPN 3 Linux v8 beta is now released. This is available in our git repositories [0] and URLs for source tarballs are listed later in this e-mail. We have pre-built binaries for the following Linux distributions: * Fedora 30, 31 and Rawhide(via Fedora Copr: x86_64, ppc64le, a

[Openvpn-devel] [PATCH 1/2 v3] Skip expired certificates in Windows certificate store

2020-02-10 Thread selva . nair
From: Selva Nair Have the cryptoapicert option find the first matching certificate in store that is valid at the present time. Currently the first found item, even if expired, is returned. This makes it possible to update certifiates in store without having to delete old ones. As a side effect,

[Openvpn-devel] [PATCH 2/2 v3] Allow unicode search string in --cryptoapicert option

2020-02-10 Thread selva . nair
From: Selva Nair Currently when the certificate is specified as "SUBJ:foo", the string foo is assumed to be ascii. Change that and interpret it as utf-8, convert to a wide string, and flag it as unicode in CertFindCertifcateInStore(). Signed-off-by: Selva Nair --- v3: nudging again, with a reba

[Openvpn-devel] [PATCH] openssl: alternative names support for --verify-x509-name CN checks

2020-02-10 Thread Mateusz Markowicz via Openvpn-devel
when using "--verify-x509-name [hostname] name" hostname will now be accepted also when matched against one of the X509v3 Subject Alternative Name IP or DNS entries (instead of just Subject's CN). see also: https://github.com/OpenVPN/openvpn/pull/136/ Signed-off-by: Mateusz Markowicz --- src/ope

[Openvpn-devel] [PATCH applied] Re: Swap the order of checks for validating interactive service user

2020-02-10 Thread Gert Doering
Your patch has been applied to the master branch. I have not tested this in any way, but since Lev has reviewed & tested v2 (and found a bug) and reviewed & tested v3, I do not think I would add much value anyway. commit c6cc66a13568dd1078bfbeb763998c1b9e2a2999 Author: Selva Nair Date: Sun Feb

Re: [Openvpn-devel] [PATCH v3] Swap the order of checks for validating interactive service user

2020-02-10 Thread Lev Stipakov
Built with MSVC and tested, works as described - membership check is performed only if options validation fails. Also error message is sent only when user is not authorized (this got broken in v2). Acked-by: Lev Stipakov ___ Openvpn-devel mailing list O