From patchwork Mon Dec 13 02:52:53 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Lev Stipakov X-Patchwork-Id: 2153 Return-Path: Delivered-To: patchwork@openvpn.net Delivered-To: patchwork@openvpn.net Received: from director9.mail.ord1d.rsapps.net ([172.30.191.6]) by backend41.mail.ord1d.rsapps.net with LMTP id YOs8MYNQt2GrVgAAqwncew (envelope-from ) for ; Mon, 13 Dec 2021 08:54:11 -0500 Received: from proxy4.mail.ord1d.rsapps.net ([172.30.191.6]) by director9.mail.ord1d.rsapps.net with LMTP id 4N1WE4RQt2FkTAAAalYnBA (envelope-from ) for ; Mon, 13 Dec 2021 08:54:12 -0500 Received: from smtp4.gate.ord1d ([172.30.191.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by proxy4.mail.ord1d.rsapps.net with LMTPS id 8MYNE4RQt2FbdwAAiYrejw (envelope-from ) for ; Mon, 13 Dec 2021 08:54:12 -0500 X-Spam-Threshold: 95 X-Spam-Score: 0 X-Spam-Flag: NO X-Virus-Scanned: OK X-Orig-To: openvpnslackdevel@openvpn.net X-Originating-Ip: [216.105.38.7] Authentication-Results: smtp4.gate.ord1d.rsapps.net; iprev=pass policy.iprev="216.105.38.7"; spf=pass smtp.mailfrom="openvpn-devel-bounces@lists.sourceforge.net" smtp.helo="lists.sourceforge.net"; dkim=fail (signature verification failed) header.d=sourceforge.net; dkim=fail (signature verification failed) header.d=sf.net; dkim=fail (signature verification failed) header.d=gmail.com; dmarc=fail (p=none; dis=none) header.from=gmail.com X-Suspicious-Flag: YES X-Classification-ID: 2655f29e-5c1c-11ec-bd87-525400760ffc-1-1 Received: from [216.105.38.7] ([216.105.38.7:49026] helo=lists.sourceforge.net) by smtp4.gate.ord1d.rsapps.net (envelope-from ) (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 9E/1E-07260-38057B16; Mon, 13 Dec 2021 08:54:11 -0500 Received: from [127.0.0.1] (helo=sfs-ml-2.v29.lw.sourceforge.com) by sfs-ml-2.v29.lw.sourceforge.com with esmtp (Exim 4.94.2) (envelope-from ) id 1mwllJ-0003sC-Jo; Mon, 13 Dec 2021 13:53:05 +0000 Received: from [172.30.20.202] (helo=mx.sourceforge.net) by sfs-ml-2.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1mwllG-0003rm-Le for openvpn-devel@lists.sourceforge.net; Mon, 13 Dec 2021 13:53:02 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Message-Id:Date:Subject:Cc:To:From:Sender:Reply-To: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=Ki8APXqQxTCrs2DcMx5qFXmBSX6boIj0pR0YgvttekM=; b=HxoHpujut3JwY1KT0On6DTGy7Y 3yhH8LZz0/6Q9Z52uylXnrCGNShFcZDiSBcMj34g5covT5DYR5bnjJu3NTNurNPaIj7bAufrUSDul q8jiDiI7pi2daOoeE4q/9PGFcs1iMmu1zL1eTI7S0bnVC43+VaVHQvTI3ZiTjKosWtgg=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Message-Id:Date:Subject:Cc:To:From:Sender:Reply-To:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=Ki8APXqQxTCrs2DcMx5qFXmBSX6boIj0pR0YgvttekM=; b=Tjmn2Xz/mFBzaqJ6dRaDsQnrqm 8lva3Tr0CH/NlMBF5sOWj1cl0JhiKQUTUf7YtCUFSYumcFNhRtNcEPmTmhmYAI//E3dENU7oy16a7 7jqsSoTh7wbOxMviRDiYsXgpCNwpGg5/8doIOgv9JmIWZ60LzRYm9+hm3YVyzRoGHyco=; Received: from mail-wr1-f49.google.com ([209.85.221.49]) by sfi-mx-1.v28.lw.sourceforge.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.92.3) id 1mwllC-00EACd-GC for openvpn-devel@lists.sourceforge.net; Mon, 13 Dec 2021 13:53:02 +0000 Received: by mail-wr1-f49.google.com with SMTP id v11so27138214wrw.10 for ; Mon, 13 Dec 2021 05:52:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id; bh=Ki8APXqQxTCrs2DcMx5qFXmBSX6boIj0pR0YgvttekM=; b=I44nu08NU+izkpsGAxlYINQ7xs6kZZCXocJh0fBKjzhGPGa+VN+0pEMC2pq/H1Mp84 7OF8iKiqL2uEyp/U8MdS0gvUJ+Op1Q2nw9BxlvmDLRN12DEtekjIm+fKWB54XaDBLaL8 jJJxP+oqQHSIVCuqsZnV2lBHFJfpK50akmoUa6O9BeCQjgPb1Ei4GRuXcN8Jc1ei4lYU 4e0jXcosHsRl1Ds5wpezbT/pX+qWT1iFgonMEi5OQGN4biMs2x5eq5jYIW6SBX4Ybq8N kecJMKowxbj1lOie41klQnou/m6baltssJ0maCgpTX/8CoEd44KTMWCoweXZVy9Cu2fn XOHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=Ki8APXqQxTCrs2DcMx5qFXmBSX6boIj0pR0YgvttekM=; b=Ign/jPYNln0m9HgZIOfEsioKWgL9Gu9FZ/+yNqqBmpOJxKGU3qHAUGPVQc8f993Evo uDwGRiCwzmJkAloyqd5e2luakeZJ/sYMdAgVZskABNVmbF4LuLkQGsxbK8cDsBtRNxJy /VypTc+ErY6+NSt0ouySx1raASiVDuNvZ5Ef38zevABMIA3EBgWz1yj2EJcbd7D6tzQT e2Xz4MJRrDwarbs2y/sD7gUQOX+rPItrqW4bOXebhnvvNaVTZnb/R8d+FTKuVvVkO2j0 UoYYbrQbJddSRBM1uoFRXvStWT8VsZwyGVGu4sHbu8bgbupDYcajVYRuLnJH5T4D8QqP KJ0Q== X-Gm-Message-State: AOAM532kp+KMeM8KEWddIcRCvFxXVYH+65UF34DuLioLwjr4uNPgSNa3 jsO5tvIv306wo2q4fCGAU5r9lVyXxws= X-Google-Smtp-Source: ABdhPJwrzmY7q1noEx+QIGTNP2XHPT37uzEMjcnqJG1YuuN0WAqwI9ULU/HHHK95VhSLccPm4ukGoQ== X-Received: by 2002:a5d:6da1:: with SMTP id u1mr32189786wrs.263.1639403571860; Mon, 13 Dec 2021 05:52:51 -0800 (PST) Received: from LAPTOP-4L3N7KFS.localdomain (nat1.panoulu.net. [185.38.2.1]) by smtp.gmail.com with ESMTPSA id t17sm7714694wmq.15.2021.12.13.05.52.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Dec 2021 05:52:51 -0800 (PST) From: Lev Stipakov To: openvpn-devel@lists.sourceforge.net Date: Mon, 13 Dec 2021 15:52:53 +0200 Message-Id: <20211213135253.212-1-lstipakov@gmail.com> X-Mailer: git-send-email 2.17.1 X-Spam-Report: Spam detection software, running on the system "util-spamd-1.v13.lw.sourceforge.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Lev Stipakov MSVC build uses OpenSSL from vcpkg, which at the moment is 1.1.1l. Key material export was added to 1.1.1, so it is safe to indicate its support unconditionally. This enables Windows releases to benefit from tls-ekm data channel keys derivation. Content analysis details: (-0.2 points, 6.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [209.85.221.49 listed in list.dnswl.org] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [lstipakov[at]gmail.com] -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.221.49 listed in wl.mailspike.net] X-Headers-End: 1mwllC-00EACd-GC Subject: [Openvpn-devel] [PATCH master] config-msvc.h: indicate key material export support X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Lev Stipakov MIME-Version: 1.0 Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox From: Lev Stipakov MSVC build uses OpenSSL from vcpkg, which at the moment is 1.1.1l. Key material export was added to 1.1.1, so it is safe to indicate its support unconditionally. This enables Windows releases to benefit from tls-ekm data channel keys derivation. Signed-off-by: Lev Stipakov Acked-By: Arne Schwabe --- config-msvc.h | 1 + 1 file changed, 1 insertion(+) diff --git a/config-msvc.h b/config-msvc.h index 0ae38482..b08beb52 100644 --- a/config-msvc.h +++ b/config-msvc.h @@ -40,6 +40,7 @@ #define HAVE_IN_PKTINFO 1 #define HAVE_OPENSSL_ENGINE 1 +#define HAVE_EXPORT_KEYING_MATERIAL 1 #define HAVE_DIINSTALLDEVICE 1