# Patches to Review

## James' Set of Patches (Based on 2.3)
- [View all patches](https://github.com/jamesyonan/openvpn/commits/2.3.2-mods)
  - [Added "setenv opt" directive prefix](https://github.com/jamesyonan/openvpn/commit/037690df22a4604a556c9b470d1f5e891991834b)
  - [Updated the TLS negotiation logic](https://github.com/jamesyonan/openvpn/commit/6ee8faade224cc346d67a7f1716df4012782999a)
  - [Minor fix to process_ipv4_header](https://github.com/jamesyonan/openvpn/commit/0a081bc3e0dfecde9464bddec8d775d1dbb8b9cd)
    - Arne Schwabe objected and provided another patch for this code ([See discussion](http://thread.gmane.org/gmane.network.openvpn.devel/7527/focus=7534))

## Arne Schwabe
- [PATCH: Add support of utun devices under Mac OS X](http://news.gmane.org/find-root.php?message_id=%3C1364762609-30320-1-git-send-email-arne@rfc2549.org%3E)
  - Native tun, no need for extra tun.kext
  - Supported for all OS X >= 10.6.8 (latest PPC version)
  - Requires root
  - Discussion: Drop tun.kext support and support only utun or "try utun first, fall back to tun.kext if it fails"
  - What about Peter Sagerson's [alternative OS X/utun patch](http://thread.gmane.org/gmane.network.openvpn.devel/7689)?
  - For version 2.3.3 or 2.4 only?
- [PATCH: Fix client-nat only working if mss-fix is specified](http://news.gmane.org/find-root.php?message_id=%3c1366452267%2d15838%2d1%2dgit%2dsend%2demail%2darne%40rfc2549.org%3e)
- [PATCHv3: Remove unused variables or put them to the defines they are being used in](http://news.gmane.org/find-root.php?message_id=%3c1366059999%2d31731%2d1%2dgit%2dsend%2demail%2darne%40rfc2549.org%3e)
  - ACK by cron2, committed and pushed to master

## Heikki Hannikainen
- [PATCH: Always load intermediate certificates from a PKCS#12 file](http://thread.gmane.org/gmane.network.openvpn.devel/7721)

## David Sommerseth
- [PATCH: Extend the plugin v3 API to identify the SSL implementation used](http://article.gmane.org/gmane.network.openvpn.devel/7677)
  - NAK by cron2 (feature-ACK, but code needs a v3)
- [PATCH: Update man page about the tls_digest_{n} environment variable](http://article.gmane.org/gmane.network.openvpn.devel/7659) (easy)
  - ACK by cron2
- [PATCH: Fix typo in autoconf](http://article.gmane.org/gmane.network.openvpn.devel/7658) (easy)
  - ACK by cron2
- [PATCH: Remove the --disable-eurephia configure option](http://article.gmane.org/gmane.network.openvpn.devel/7660)
  - ACK by cron2

## Kenny Root
- [Adding support for AEAD cipher modes (AES-GCM, et al.)](http://thread.gmane.org/gmane.network.openvpn.devel/7653)

# Development Discussion

- Proposal to have an in-person hackfest in Munich at the end of this year (November) instead of going to Brussels.
- Discussion and decision on [James' OpenVPN versioning proposals](http://thread.gmane.org/gmane.network.openvpn.devel/7678).