Patches

Current (22nd May 2013) list of unreviewed patches is this:

Gert Döring

• Forward-port of all outstanding 2.1 SVN patches
  • PATCH 1/5: Added remote-override option.
  • PATCH 3/5: Minor fix to process_ipv4_header so that any combination of options can be defined.
  • PATCH 4/5: Always push basic set of peer info values to server.
• PATCH: Make push-peer-info visible in "normal" per-instance environment. (the amended version from cron2, if available)

Arne Schwabe

• PATCH: Add support of utun devices under Mac OS X
  • native tun, no need for extra tun.kext
  • Supported for all OS X >= 10.6.8 (latest PPC version)
  • Unfortunately requires root
  • Real question: Drop tun.kext support and support only utun or "try utun first, fall back to tun.kext if it fails"
• The Android patchset
  • PATCH 1/5: Remove script-security warning
• PATCH: Fix client-nat only working if also mss-fix is specified.
• PATCH: PATCHv3 Remove unused variables or put them to the defines they are being used in

Heikki Hannikainen

• PATCH: pkcs12-additional-cas option to load CA+intermediate certs from both PKCS#12 and a --ca PEM file
  • Current code does not load trusted CAs or intermediate certs from PKCS12 if --ca is given
  • Alternative to this patch: Make the code simply load CAs from both PKCS12 and --ca by default, but current default behavior seems to be very intentional, might have a use case of someone needing to override PKSC12 CAs