Patches to Review

James' Set of Patches (Based on 2.3)

• View all patches
  • Added "setenv opt" directive prefix
  • Updated the TLS negotiation logic
  • Minor fix to process_ipv4_header
    • Arne Schwabe objected and provided another patch for this code (See discussion)

Arne Schwabe

• PATCH: Add support of utun devices under Mac OS X
  • Native tun, no need for extra tun.kext
  • Supported for all OS X >= 10.6.8 (latest PPC version)
  • Requires root
  • Discussion: Drop tun.kext support and support only utun or "try utun first, fall back to tun.kext if it fails"
  • What about Peter Sagerson's alternative OS X/utun patch?
  • For version 2.3.3 or 2.4 only?
• PATCH: Fix client-nat only working if mss-fix is specified
• PATCHv3: Remove unused variables or put them to the defines they are being used in
  • ACK by cron2, committed and pushed to master

Heikki Hannikainen

• PATCH: Always load intermediate certificates from a PKCS#12 file

David Sommerseth

• PATCH: Extend the plugin v3 API to identify the SSL implementation used
  • NAK by cron2 (feature-ACK, but code needs a v3)
• PATCH: Update man page about the tls_digest_{n} environment variable (easy)
  • ACK by cron2
• PATCH: Fix typo in autoconf (easy)
  • ACK by cron2
• PATCH: Remove the --disable-eurephia configure option
  • ACK by cron2

Kenny Root

• Adding support for AEAD cipher modes (AES-GCM, et al.)

Development Discussion

• Proposal to have an in-person hackfest in Munich at the end of this year (November) instead of going to Brussels.
• Discussion and decision on James' OpenVPN versioning proposals.