Patches to review

• ​James set of patches based on 2.3
  • ​Added "setenv opt" directive prefix. If present, and if the...
  • ​Updated the TLS negotiation logic to adaptively try to connect using...
  • ​Minor fix to process_ipv4_header so that any combination of options...
    • Arne Schwabe ​objected and provided another patch for this code (See Fix client nat .... below)
• Arne Schwabe
  • [PATCH] ​Add support of utun devices under Mac OS X
    • native tun, no need for extra tun.kext
    • Supported for all OS X >= 10.6.8 (latest PPC version)
    • Unfortunately requires root
    • Real question: Drop tun.kext support and support only utun or "try utun first, fall back to tun.kext if it fails"
    • What about Peter Sagerson's ​alternative OS X/utun patch?
    • 2.3.3 or 2.4-only?
  • [PATCH] ​Fix client-nat only working is also mss-fix is specified.
  • [PATCH] ​PATCHv3 Remove unused variables or put them to the defines they are being used in
    • ACK by cron2, committed and pushed to master
• Heikki Hannikainen
  • [PATCH] ​Always load intermediate certificates from a PKCS#12 file
• David Sommerseth
  • [PATCH] ​plugin: Extend the plug-in v3 API to identify the SSL implementation used
    • NAK by cron2 (feature-ACK, but code needs a v3)
  • [PATCH] ​man page: Update man page about the tls_digest_{n} environment variable (easy)
    • ACK by cron2
  • [PATCH] ​autoconf: Fix typo (easy)
    • ACK by cron2
  • [PATCH] ​Remove the --disable-eurephia configure option
    • ACK by cron2
• Kenny Root
  • ​: Adding support for AEAD cipher modes (AES-GCM, et al.)

Development discussion

• shall we have an in-person hackfest in Munich end of this year (November) instead of going to Brussels?
• Discuss ​James' OpenVPN versioning proposals and decide what to do