[Openvpn-devel] [PATCH v4 1/5] Extract check_session_cipher into standalone function

2022-07-29 Thread Arne Schwabe
This allow the code later to check if the cipher is okay to use and update it for the calculation for the max MTU size. Signed-off-by: Arne Schwabe Patch v2: Name function check_session_cipher to better reflect its function --- src/openvpn/ssl.c | 11 +-- src/openvpn/ssl_n

Re: [Openvpn-devel] [PATCH v2] xkey_provider: fix building with --disable-management

2022-07-29 Thread Frank Lichtenheld
On Wed, Jul 27, 2022 at 06:18:30PM -0400, selva.n...@gmail.com wrote: > From: Selva Nair > > v2: also fix building test_provider > - ifdefs in test_provider.c > - include integer.h for min_int as manage.h >may not always pull it in FTR, buildbot is happy now with these changes. uncrustify

Re: [Openvpn-devel] [PATCH v2 10/25] dco: periodically check and possibly rotate/delete keys

2022-07-29 Thread Antonio Quartulli
Hi, On 29/07/2022 09:41, Frank Lichtenheld wrote: On Thu, Jul 28, 2022 at 09:35:42PM +0200, Antonio Quartulli wrote: Data channel keys are periodically regenarated and installed in ovpn-dco. However, there is a certain moment when keys are rotated in order to elect the new primary one. Check t

Re: [Openvpn-devel] [PATCH v2 10/25] dco: periodically check and possibly rotate/delete keys

2022-07-29 Thread Frank Lichtenheld
On Thu, Jul 28, 2022 at 09:35:42PM +0200, Antonio Quartulli wrote: > Data channel keys are periodically regenarated and installed in > ovpn-dco. > However, there is a certain moment when keys are rotated in order > to elect the new primary one. > > Check the key status in userspace so that kernels