Opened 14 years ago
Closed 12 years ago
#150 closed Bug / Defect ( fixed )
Verify that PolarSSL refactoring has not affected authentication functions
| Reported by: | Samuli Seppänen | Owned by: | David Sommerseth |
|---|---|---|---|
| Priority: | major | Milestone: | release 2.3 |
| Component: | Generic / unclassified | Version: | OpenVPN git master branch (Community Ed) |
| Severity: | Not set (select this one, unless your'e a OpenVPN developer) | Keywords: | |
| Cc: |
Description
A patch that was originally a part of the
PolarSSL patchset
significantly
refactores username and password authentication code
. As this patch may have security implications, it was ACKed on the condition that all possible auth modes are tested. This includes auth driven by scripts, plugins and management interface.
Change History (2)
comment:1 Changed 13 years ago by
| Owner: | set to David Sommerseth |
|---|---|
| Status: | new → accepted |
comment:2 Changed 12 years ago by
| Resolution: | → fixed |
|---|---|
| Status: | accepted → closed |
I have been running 2.3-alphas together with eurephia for username/password and certificate authentication for some months, without any issues. I would consider this refactoring safe.