> -Original Message-
> From: Victor Wagner [mailto:vi...@wagner.pp.ru]
...
> >
> > The OFB and CFB cipher modes in OpenVPN have not been
> well-tested and
> > should be considered experimental at this point.
>
>
> > They are not compiled by default mostly to prevent someone from
>
> -Original Message-
> From: 'Victor Wagner' [mailto:vi...@wagner.pp.ru]
...
> As far as I can see, openvpn can be thoroughly tested in automated
> fashion. I have some test farm with half a hundred various
> OSes (Linux,
> Windows, Solaris, FreeBSD on several architectures), and
On 2009.06.01 at 07:45:13 -0500, dave wrote:
> I would suspect that the exclusion is due to:
>
> A) in CFB/OFB/CNT, the encrypted stream is byte-bounded, as opposed to
> block-bounded. There may be some assumptions in the code that assume
> the cipher text is a multiple of block lengths. As
On 2009.05.30 at 04:38:41 -0600, James Yonan wrote:
>
> The OFB and CFB cipher modes in OpenVPN have not been well-tested and
> should be considered experimental at this point.
> They are not compiled by default mostly to prevent someone from
> accidentally using them.
Okay, you see there
Victor Wagner wrote:
On 2009.05.27 at 10:48:30 -0700, Frank Yellin wrote:
I posted the following onto the OpenVPN forum, but it was suggested
that I would be better off mailing directly to this list.
=
I seem to have found a bug in 2.1_rc16 that is also
A simpler way to see the crypto bug. . . .
$ openvpn --secret static.key --test-crypto
Fri May 29 10:56:58 2009 OpenVPN crypto self-test mode SUCCEEDED.
$ openvpn --secret static.key --test-crypto --cipher bf-ofb
Fri May 29 11:12:07 2009 OpenVPN 2.1_rc15 mipsel-unknown-linux-gnu [SSL]
On 2009.05.27 at 23:17:39 -0700, Frank Yellin wrote:
>[Just to you, not the list.]
>I figured that someone had to have noticed this problem before. But
>when I googled "OpenVPN BF-OFB" or "OpenVPN BF-CFB", I couldn't find
>anything.
Of course you haven't find anything about
[Just to you, not the list.]
I figured that someone had to have noticed this problem before. But when I
googled "OpenVPN BF-OFB" or "OpenVPN BF-CFB", I couldn't find anything.
This bug is particularly strange because just before the bug, there is code
that's supposed to deal with -CFB and
On 2009.05.27 at 10:48:30 -0700, Frank Yellin wrote:
>I posted the following onto the OpenVPN forum, but it was suggested
>that I would be better off mailing directly to this list.
>=
>I seem to have found a bug in 2.1_rc16 that is also apparent in earlier
I posted the following onto the OpenVPN forum, but it was suggested that I
would be better off mailing directly to this list.
=
I seem to have found a bug in 2.1_rc16 that is also apparent in earlier
versions. Although OpenVPN claims to support -CFB and -OFB cipher modes,
10 matches
Mail list logo
