# Patches

Current (22nd May 2013) list of unreviewed patches is this:

## Gert Döring
- [Forward-port of all outstanding 2.1 SVN patches](http://news.gmane.org/find-root.php?message_id=%3c1366393268%2d27392%2d1%2dgit%2dsend%2demail%2dgert%40greenie.muc.de%3e)
  - [PATCH 1/5: Added remote-override option.](http://news.gmane.org/find-root.php?message_id=%3c1366393268%2d27392%2d2%2dgit%2dsend%2demail%2dgert%40greenie.muc.de%3e)
  - [PATCH 3/5: Minor fix to process_ipv4_header so that any combination of options can be defined.](http://news.gmane.org/find-root.php?message_id=%3c1366393268%2d27392%2d4%2dgit%2dsend%2demail%2dgert%40greenie.muc.de%3e)
  - [PATCH 4/5: Always push basic set of peer info values to server.](http://news.gmane.org/find-root.php?message_id=%3c1366393268%2d27392%2d5%2dgit%2dsend%2demail%2dgert%40greenie.muc.de%3e)
- [PATCH: Make push-peer-info visible in "normal" per-instance environment.](http://news.gmane.org/find-root.php?message_id=%3c1366483371%2d5202%2d1%2dgit%2dsend%2demail%2dgert%40greenie.muc.de%3e) (the [amended version from cron2, if available](http://thread.gmane.org/gmane.network.openvpn.devel/7559))

## Arne Schwabe
- [PATCH: Add support of utun devices under Mac OS X](http://news.gmane.org/find-root.php?message_id=%3C1364762609-30320-1-git-send-email-arne@rfc2549.org%3E)
  - native tun, no need for extra tun.kext
  - Supported for all OS X >= 10.6.8 (latest PPC version)
  - Unfortunately requires root
  - Real question: Drop tun.kext support and support only utun or "try utun first, fall back to tun.kext if it fails"
- The Android patchset
  - [PATCH 1/5: Remove script-security warning](http://news.gmane.org/find-root.php?message_id=%3c1366467768%2d16260%2d1%2dgit%2dsend%2demail%2darne%40rfc2549.org%3e)
- [PATCH: Fix client-nat only working if also mss-fix is specified.](http://news.gmane.org/find-root.php?message_id=%3c1366452267%2d15838%2d1%2dgit%2dsend%2demail%2darne%40rfc2549.org%3e)
- [PATCH: PATCHv3 Remove unused variables or put them to the defines they are being used in](http://news.gmane.org/find-root.php?message_id=%3c1366059999%2d31731%2d1%2dgit%2dsend%2demail%2darne%40rfc2549.org%3e)

## Heikki Hannikainen
- [PATCH: pkcs12-additional-cas option to load CA+intermediate certs from both PKCS#12 and a --ca PEM file](http://news.gmane.org/find-root.php?message_id=%3cCAHqXQkNN%5fbf9G%5fSRefYTCu8EiVQCAaCZ3G%2bK4ppoXGTcN%2b1g4Q%40mail.gmail.com%3e)
  - Current code does not load trusted CAs or intermediate certs from PKCS12 if --ca is given
  - Alternative to this patch: Make the code simply load CAs from both PKCS12 and --ca by default, but current default behavior seems to be very intentional, might have a use case of someone needing to override PKSC12 CAs
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9