Hi,
The OpenVPN 3 Linux v8 beta is now released.
This is available in our git repositories [0] and URLs for source tarballs
are listed later in this e-mail. We have pre-built binaries for the
following Linux distributions:
* Fedora 30, 31 and Rawhide(via Fedora Copr: x86_64, ppc64le, a
From: Selva Nair
Have the cryptoapicert option find the first matching certificate
in store that is valid at the present time. Currently the first
found item, even if expired, is returned.
This makes it possible to update certifiates in store without having
to delete old ones. As a side effect,
From: Selva Nair
Currently when the certificate is specified as "SUBJ:foo", the
string foo is assumed to be ascii. Change that and interpret
it as utf-8, convert to a wide string, and flag it as unicode
in CertFindCertifcateInStore().
Signed-off-by: Selva Nair
---
v3: nudging again, with a reba
when using "--verify-x509-name [hostname] name" hostname will now be accepted
also when matched against one of the X509v3 Subject Alternative Name IP or DNS
entries (instead of just Subject's CN).
see also: https://github.com/OpenVPN/openvpn/pull/136/
Signed-off-by: Mateusz Markowicz
---
src/ope
Your patch has been applied to the master branch.
I have not tested this in any way, but since Lev has reviewed & tested
v2 (and found a bug) and reviewed & tested v3, I do not think I would
add much value anyway.
commit c6cc66a13568dd1078bfbeb763998c1b9e2a2999
Author: Selva Nair
Date: Sun Feb
Built with MSVC and tested, works as described - membership
check is performed only if options validation fails. Also error message
is sent only when user is not authorized (this got broken in v2).
Acked-by: Lev Stipakov
___
Openvpn-devel mailing list
O