Patches

Current (22nd May 2013) list of unreviewed patches is this:

• Gert Döring
  • ​Forward-port of all outstanding 2.1 SVN patches
    • [PATCH 1/5] ​Added remote-override option.
    • [PATCH 3/5] ​Minor fix to process_ipv4_header so that any combination of options can be defined.
    • [PATCH 4/5] ​Always push basic set of peer info values to server.
  • [PATCH] ​Make push-peer-info visible in "normal" per-instance environment. (the ​amended version from cron2, if available)
• Arne Schwabe
  • [PATCH] ​Add support of utun devices under Mac OS X
    • native tun, no need for extra tun.kext
    • Supported for all OS X >= 10.6.8 (latest PPC version)
    • Unfortunatly requires root
    • Real question: Drop tun.kext support and support only utun or "try utun first, fall back to tun.kext if it fails"
  • The Android patchset
    • [PATCH 1/5]​Remove script-security warning
  • [PATCH] ​Fix client-nat only working is also mss-fix is specified.
  • [PATCH] ​PATCHv3 Remove unused variables or put them to the defines they are being used in
• Heikki Hannikainen
  • [PATCH] ​pkcs12-additional-cas option to load CA+intermediate certs from both PKCS#12 and a --ca PEM file
    • Current code does not load trusted CAs or intermediate certs from PKCS12 if --ca is given
    • Alternative to this patch: Make the code simply load CAs from both PKCS12 and --ca by default, but current default behaviour seems to be very intentional, might have a use case of someone needing to override PKSC12 CAs