Toggle navigation
Patchwork
OpenVPN 2
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Submitter =
Arne Schwabe
| Archived =
No
| 819 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Search
Archived
No
Yes
Both
Delegate
Apply
«
1
2
3
4
…
8
9
»
Patch
Series
A/R/T
S/W/F
Date
Submitter
Delegate
State
[Openvpn-devel,16/21] Remove link_mtu parameter when running up/down scripts
Big buffer/frame refactoring patch set
- - -
0 0 0
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,16/28] Move CRL reload to key_state_init from S_START transition
Stateless three-way handshake and control channel improvements
1 - -
0 0 0
2022-04-22
Arne Schwabe
Accepted
[Openvpn-devel,1/6] Fix loading inline tls-crypt-v2 keys with mbed TLS
[Openvpn-devel,1/6] Fix loading inline tls-crypt-v2 keys with mbed TLS
1 - -
0 0 0
2019-01-14
Arne Schwabe
Accepted
[Openvpn-devel,1/6] Remove leftover frame_set_mtu_dynamic definitions in mtu.h
[Openvpn-devel,1/6] Remove leftover frame_set_mtu_dynamic definitions in mtu.h
1 - -
0 0 0
2022-06-21
Arne Schwabe
Accepted
[Openvpn-devel,17/17] Move openvpn specific key expansion into its own function
OpenVPN refactoring
- - -
0 0 0
2020-08-10
Arne Schwabe
Superseded
[Openvpn-devel,17/21] Use new frame header methods to calculate OCC_MTU_LOAD payload size
Big buffer/frame refactoring patch set
- - -
0 0 0
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,17/28] Implement constructing a control channel reset client as standalone fucntion
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Superseded
[Openvpn-devel,1/7] Move tls_select_primary_key into its own function
[Openvpn-devel,1/7] Move tls_select_primary_key into its own function
1 - -
0 0 0
2021-04-22
Arne Schwabe
Accepted
[Openvpn-devel,1/7] Refactor early initialisation and uninitialisation into methods
Improve OpenSSL 3.0 support in OpenVPN 2.5
1 - -
0 0 0
2022-05-12
Arne Schwabe
Accepted
[Openvpn-devel,1/7] Remove --disable-multihome option
[Openvpn-devel,1/7] Remove --disable-multihome option
- - -
0 0 0
2021-04-21
Arne Schwabe
Changes Requested
[Openvpn-devel,18/21] Remove extra_link from frame
Big buffer/frame refactoring patch set
- - -
0 0 0
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,18/28] Implement stateless, HMAC basedsesssion id three way handshake
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Superseded
[Openvpn-devel,1/8] Deprecate ncp-disable and add improved ncp to Changes.rst
[Openvpn-devel,1/8] Deprecate ncp-disable and add improved ncp to Changes.rst
1 - -
0 0 0
2020-07-09
Arne Schwabe
Accepted
[Openvpn-devel,1/8,OSSL,3.0] Use new EVP_MAC API for HMAC implementation
[Openvpn-devel,1/8,OSSL,3.0] Use new EVP_MAC API for HMAC implementation
- - -
0 0 0
2021-09-19
Arne Schwabe
Superseded
[Openvpn-devel,19/21] Replace TUN_MTU_SIZE with frame->tun_mtu
Big buffer/frame refactoring patch set
- - -
0 0 0
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,19/28] Make buf_write_u8/16/32 take the type they pretend to take
Stateless three-way handshake and control channel improvements
1 - -
0 0 0
2022-04-22
Arne Schwabe
Accepted
[Openvpn-devel,1/9] Implement optional cipher in --data-ciphers prefixed with ?
[Openvpn-devel,1/9] Implement optional cipher in --data-ciphers prefixed with ?
- - -
0 0 0
2021-12-01
Arne Schwabe
Changes Requested
[Openvpn-devel,1/9] Indicate that a client is in pull mode in IV_PROTO
[Openvpn-devel,1/9] Indicate that a client is in pull mode in IV_PROTO
- - -
0 0 0
2020-07-17
Arne Schwabe
Superseded
[Openvpn-devel,1/9] Remove explicit struct iovec check (HAVE_IOVEC)
Miscellaneous cleanup patches/small fixes
1 - -
0 0 0
2021-05-12
Arne Schwabe
Accepted
[Openvpn-devel,1/9,v3] Indicate that a client is in pull mode in IV_PROTO
[Openvpn-devel,1/9,v3] Indicate that a client is in pull mode in IV_PROTO
1 - -
0 0 0
2020-07-21
Arne Schwabe
cron2
Accepted
[Openvpn-devel,20/21] Remove frame->link_mtu
Big buffer/frame refactoring patch set
- - -
0 0 0
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,20/28] Change reliable_get_buf_sequenced to reliable_get_entry_sequenced
Stateless three-way handshake and control channel improvements
1 - -
0 0 0
2022-04-22
Arne Schwabe
Accepted
[Openvpn-devel,21/21] Remove frame.extra_frame and frame.extra_buffer
Big buffer/frame refactoring patch set
- - -
0 0 0
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,21/28] Extract read_incoming_tls_ciphertext into function
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Accepted
[Openvpn-devel,22/28] Implement HMAC based session id for tls-crypt v2
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Add ubuntu 22.04 to Github Actions
[Openvpn-devel,1/2] Add uncrustify check to github actions
1 - -
0 0 0
2022-05-06
Arne Schwabe
Accepted
[Openvpn-devel,2/2] Add Werror to github action ubuntu build
[Openvpn-devel,1/2] Fix 'defined but not used' warnings with enable-small/disable-management
1 - -
0 0 0
2022-02-14
Arne Schwabe
Accepted
[Openvpn-devel,2/2] Adjust Android code after sitnl patch merge
[Openvpn-devel,1/2] Fix check if iface name is set
- - -
0 0 0
2019-08-15
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Adjust Android code after sitnl patch merge
[Openvpn-devel,1/2] Fix check if iface name is set
- - -
0 0 0
2019-08-12
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Also announce IV_CIPHERS as client in OpenVPN 2.4
Backport/implement IV_CIPHERS support for OpenVPN 2.4
1 - -
0 0 0
2020-08-30
Arne Schwabe
Accepted
[Openvpn-devel,2/2] Avoid sending push request after receving push reply
[Openvpn-devel,1/2] Simplify calling logic of check_connection_established_dowork
1 - -
0 0 0
2020-07-25
Arne Schwabe
Accepted
[Openvpn-devel,2/2] Fix condition to generate session keys
[Openvpn-devel,1/2] Move context_auth from context_2 to tls_multi
- - -
0 0 0
2020-12-15
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Implement '--compress migrate' to migrate to non-compression setup
[Openvpn-devel,1/2] Move extract_iv_proto to ssl_util.c/h
- - -
0 0 0
2021-03-19
Arne Schwabe
Superseded
[Openvpn-devel,2/2] Include Chacha20-Poly1305 into default --data-ciphers when available
[Openvpn-devel,1/2] Detect unusable ciphers on patched OpenSSL of RHEL/Centos
1 - -
0 0 0
2021-08-18
Arne Schwabe
Accepted
[Openvpn-devel,2/2] merge key_state->authenticated and key_state->auth_deferred
[Openvpn-devel,1/2] Remember if we have seen a push request without async push
1 - -
0 0 0
2020-07-06
Arne Schwabe
Accepted
[Openvpn-devel,2/2] Remove deprecated option '--keysize'
[Openvpn-devel,1/2] Deprecate non TLS mode in OpenVPN
- - -
0 0 0
2021-03-25
Arne Schwabe
Changes Requested
[Openvpn-devel,2/2] Remove deprecated option '--keysize'
[Openvpn-devel,1/2] Deprecate non TLS mode in OpenVPN
- - -
0 0 0
2021-03-24
Arne Schwabe
Superseded
[Openvpn-devel,23/28] Optimise three-way handshake condition for S_PRE_START to S_START
Stateless three-way handshake and control channel improvements
1 - -
0 0 0
2022-04-22
Arne Schwabe
Accepted
[Openvpn-devel,2/3] Add support for tls-ciphersuites for TLS 1.3
[Openvpn-devel,1/3] Factor out convert_tls_list_to_openssl method
- - -
0 0 0
2018-10-06
Arne Schwabe
Superseded
[Openvpn-devel,2/3] Also restore/save compress related options in reconnects
[Openvpn-devel,1/3] Always save/restore pull options
1 - -
0 0 0
2021-04-08
Arne Schwabe
cron2
Accepted
[Openvpn-devel,2/3,Auth-token] Fix session id in env missing first byte
[Openvpn-devel,1/3,Auth-token] Fix session id and initial timestamp not begin preserved
1 - -
0 0 0
2020-03-26
Arne Schwabe
Accepted
[Openvpn-devel,2/3] Cleanup: Remove unused code of old poor man's NCP.
[Openvpn-devel] Add file to ignore reformatting changes
- - -
0 0 0
2020-07-07
Arne Schwabe
Rejected
[Openvpn-devel,2/3] Cleanup tls_pre_decrypt_lite and tls_pre_encrypt
[Openvpn-devel,1/3] Refactor/Reformat tls_pre_decrypt
- - -
0 0 0
2020-07-22
Arne Schwabe
Not Applicable
[Openvpn-devel,2/3] Make cipher_kt_get also accept OpenVPN config cipher name
[Openvpn-devel,1/3] Make cipher_kt_name always return normalised cipher name
1 - -
0 0 0
2020-06-05
Arne Schwabe
Accepted
[Openvpn-devel,2/3] Move NCP saving and restore to the prepush restore code
[Openvpn-devel,1/3] Move restoring pr pull options to initialising of c2 context
- - -
0 0 0
2020-12-09
Arne Schwabe
Superseded
[Openvpn-devel,2/3] Move openvpn specific key expansion into its own function
[Openvpn-devel,1/3] Refactor key_state_export_keying_material functions
- - -
0 0 0
2020-08-12
Arne Schwabe
Superseded
[Openvpn-devel,2/3] Refactor counting number of element in a : delimited list into function
[Openvpn-devel] Fix OpenSSL 1.1.1 not using auto ecliptic curve selection
- - -
0 0 0
2020-04-01
Arne Schwabe
Superseded
[Openvpn-devel,2/3] Remove --ncp-disable option
P2P NCP support patch set
- - -
0 0 0
2021-04-08
Arne Schwabe
Superseded
[Openvpn-devel,2/3,v5] Implement tls-groups option to specify eliptic curves/groups
[Openvpn-devel,1/3] Drop support for OpenSSL 1.0.1
- - -
0 0 0
2020-07-13
Arne Schwabe
Superseded
[Openvpn-devel,24/28] Extract read_incoming_tls_plaintext into its own function
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Changes Requested
[Openvpn-devel,2/4] Cleanup receive_auth_failed and simplify method
Implement exit notifcation via control channel and temporary AUTH_FAIL
- - -
0 0 0
2022-05-18
Arne Schwabe
Superseded
[Openvpn-devel,2/4] Fix unchecked signess conversions reported by MSVC
[Openvpn-devel,1/4] Make buffer related function conversion explicit when narrowing
- - -
0 0 0
2021-03-24
Arne Schwabe
Changes Requested
[Openvpn-devel,2/4] Implement dynamic NCP negotiation
[Openvpn-devel,1/4] Only announce IV_NCP=2 when we are willing to support these ciphers
- - -
0 0 0
2019-11-17
Arne Schwabe
Superseded
[Openvpn-devel,2/4] Implement peer-fingerprint to check fingerprint of peer certificate
Allow setting up OpenVPN in TLS mode without CA
- - -
0 0 0
2020-09-08
Arne Schwabe
ordex
Superseded
[Openvpn-devel,2/4] Remove AUTO_USERID feature
Untitled series #359
1 - -
0 0 0
2018-10-08
Arne Schwabe
Accepted
[Openvpn-devel,25/28] Ensure that control channel packet are respecting tls-mtu
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Superseded
[Openvpn-devel,2/5] Implement forwarding client CR_RESPONSE messages to management
Implement additional two step authentication methods
- - -
0 0 0
2019-06-13
Arne Schwabe
Superseded
[Openvpn-devel,2/5] Remove checks for uint* types that are part of C99
[Openvpn-devel,1/5] Remove check for socket functions and Win XP compatbility code
1 - -
0 0 0
2021-04-06
Arne Schwabe
Accepted
[Openvpn-devel,2/5] xmit_hold is only required for port_share
[Openvpn-devel,1/5] Inline function tls_get_peer_info
- - -
0 0 0
2020-10-23
Arne Schwabe
ordex
Rejected
[Openvpn-devel,26/28] Allow setting control channel packet size with tls-mtu
Stateless three-way handshake and control channel improvements
- - -
0 0 0
2022-04-22
Arne Schwabe
Superseded
[Openvpn-devel,2/6] Inline frame_add_to_extra_tun function and remove frame_defined
[Openvpn-devel,1/6] Remove leftover frame_set_mtu_dynamic definitions in mtu.h
1 - -
0 0 0
2022-06-21
Arne Schwabe
Accepted
[Openvpn-devel,2/6] Refactor tls_crypt_v2_write_server_key_file into crypto.c
[Openvpn-devel,1/6] Fix loading inline tls-crypt-v2 keys with mbed TLS
1 - -
0 0 0
2019-01-14
Arne Schwabe
Accepted
[Openvpn-devel,27/28] Add unit test for reliable_get_num_output_sequenced_available
Stateless three-way handshake and control channel improvements
1 - -
0 0 0
2022-04-22
Arne Schwabe
New
[Openvpn-devel,2/7] Allow loading of non default providers
Improve OpenSSL 3.0 support in OpenVPN 2.5
1 - -
0 0 0
2022-05-12
Arne Schwabe
Accepted
[Openvpn-devel,2/7] Move direct.h header where it is used
[Openvpn-devel,1/7] Remove --disable-multihome option
- - -
0 0 0
2021-04-21
Arne Schwabe
Changes Requested
[Openvpn-devel,2/7] Use functions to access key_state instead direct member access
[Openvpn-devel,1/7] Move tls_select_primary_key into its own function
1 - -
0 0 0
2021-04-22
Arne Schwabe
Accepted
[Openvpn-devel,28/28] Always include ACKs for the last seen control packets
Stateless three-way handshake and control channel improvements
1 - -
0 0 0
2022-04-22
Arne Schwabe
New
[Openvpn-devel,2/8] Make key_state->authenticated more state machine like
[Openvpn-devel,1/8] Deprecate ncp-disable and add improved ncp to Changes.rst
1 - -
0 0 0
2020-07-09
Arne Schwabe
Accepted
[Openvpn-devel,2/8,OSSL,3.0] Disable engine support for OpenSSL 3.0
[Openvpn-devel,1/8,OSSL,3.0] Use new EVP_MAC API for HMAC implementation
- - -
0 0 0
2021-09-19
Arne Schwabe
Superseded
[Openvpn-devel,2/8] Replace key_scan array of static points with inline function
[Openvpn-devel] Remove --disable-def-auth configure argument
1 - -
0 0 0
2020-10-23
Arne Schwabe
Accepted
[Openvpn-devel,2/9] Directly use hardcoed OPENVPN_TAG_LENGTH instead lookup
[Openvpn-devel,1/9] Implement optional cipher in --data-ciphers prefixed with ?
1 - -
0 0 0
2021-12-01
Arne Schwabe
Accepted
[Openvpn-devel,2/9] Remove getpeername, getpid check
Miscellaneous cleanup patches/small fixes
1 - -
0 0 0
2021-05-12
Arne Schwabe
Accepted
[Openvpn-devel,3/3] Add better support for showing TLS 1.3 ciphersuites in --show-tls
[Openvpn-devel,1/3] Factor out convert_tls_list_to_openssl method
- - -
0 0 0
2018-10-06
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Add unit test for cipher name translations
[Openvpn-devel,1/3] Make cipher_kt_name always return normalised cipher name
1 - -
0 0 0
2020-06-05
Arne Schwabe
Accepted
[Openvpn-devel,3/3] Allow all GCM ciphers
[Openvpn-devel,1/3] Always save/restore pull options
- - -
0 0 0
2021-04-08
Arne Schwabe
Changes Requested
[Openvpn-devel,3/3,auth-token] Document reneweal mechanic of auth-token in manual
[Openvpn-devel,1/3,Auth-token] Fix session id and initial timestamp not begin preserved
1 - -
0 0 0
2020-03-26
Arne Schwabe
Accepted
[Openvpn-devel,3/3] Clean up a number of leftover C89 initialisations in ssl.c
[Openvpn-devel,1/3] Refactor/Reformat tls_pre_decrypt
- - -
0 0 0
2020-07-22
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Implement generating data channel keys via EKM/RFC 5705
[Openvpn-devel,1/3] Refactor key_state_export_keying_material functions
- - -
0 0 0
2020-08-12
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Implement tls-groups option to specify eliptic curves/groups
[Openvpn-devel] Fix OpenSSL 1.1.1 not using auto ecliptic curve selection
- - -
0 0 0
2020-04-01
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Make key_state->authenticated more state machine like
[Openvpn-devel] Add file to ignore reformatting changes
- - -
0 0 0
2020-07-07
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Remove key-method 1
[Openvpn-devel,1/3] Drop support for OpenSSL 1.0.1
- - -
0 0 0
2020-07-13
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Restore also ping related options on a reconnect
[Openvpn-devel,1/3] Move restoring pr pull options to initialising of c2 context
- - -
0 0 0
2020-12-09
Arne Schwabe
Superseded
[Openvpn-devel,3/3] Support NCP in pure P2P VPN setups
P2P NCP support patch set
- - -
0 0 0
2021-04-08
Arne Schwabe
ordex
Changes Requested
[Openvpn-devel,3/4] Add support for OpenSSL TLS 1.3 when using management-external-key
Untitled series #359
- - -
0 0 0
2018-10-08
Arne Schwabe
Superseded
[Openvpn-devel,3/4] Fix socket related functions using int instead of socket_descriptor_t
[Openvpn-devel,1/4] Make buffer related function conversion explicit when narrowing
1 - -
0 0 0
2021-03-24
Arne Schwabe
Accepted
[Openvpn-devel,3/4] Implement AUTH_FAIL, TEMP message support
Implement exit notifcation via control channel and temporary AUTH_FAIL
- - -
0 0 0
2022-05-18
Arne Schwabe
Superseded
[Openvpn-devel,3/4] Move NCP related function into a seperate file and add unit tests
[Openvpn-devel,1/4] Only announce IV_NCP=2 when we are willing to support these ciphers
- - -
0 0 0
2019-11-17
Arne Schwabe
Superseded
[Openvpn-devel,3/4] Support fingerprint authentication without CA certificate
Allow setting up OpenVPN in TLS mode without CA
- - -
0 0 0
2020-09-08
Arne Schwabe
ordex
Superseded
[Openvpn-devel,3/5] Align reliable_free with other free methods to accept NULL
[Openvpn-devel,1/5] Inline function tls_get_peer_info
1 - -
0 0 0
2020-10-23
Arne Schwabe
Accepted
[Openvpn-devel,3/5] Allow running a default configuration with TLS libraries without BF-CBC
Untitled series #902
- - -
0 0 0
2020-09-07
Arne Schwabe
Superseded
[Openvpn-devel,3/5] Implement support for signalling IV_SSO to server
Implement additional two step authentication methods
1 - -
0 0 0
2019-06-13
Arne Schwabe
Superseded
[Openvpn-devel,3/5] Remove a number of checks for functions/headers that are always present
[Openvpn-devel,1/5] Remove check for socket functions and Win XP compatbility code
1 - -
0 0 0
2021-04-06
Arne Schwabe
Accepted
[Openvpn-devel,3/6] Add send_control_channel_string_dowork variant
[Openvpn-devel,1/6] Fix loading inline tls-crypt-v2 keys with mbed TLS
1 - -
0 0 0
2019-01-14
Arne Schwabe
Accepted
[Openvpn-devel,3/6] Extract update_session_cipher into standalone function
[Openvpn-devel,1/6] Remove leftover frame_set_mtu_dynamic definitions in mtu.h
1 - -
0 0 0
2022-06-21
Arne Schwabe
Superseded
[Openvpn-devel,3/7] Add ubuntu 22.04 to Github Actions
Improve OpenSSL 3.0 support in OpenVPN 2.5
2 - -
0 0 0
2022-05-12
Arne Schwabe
Accepted
[Openvpn-devel,3/7] Remove always enabled USE_64_BIT_COUNTERS define
[Openvpn-devel,1/7] Remove --disable-multihome option
1 - -
0 0 0
2021-04-21
Arne Schwabe
Accepted
[Openvpn-devel,3/7] Return cached result in tls_authentication_status
[Openvpn-devel,1/7] Move tls_select_primary_key into its own function
- - -
0 0 0
2021-04-22
Arne Schwabe
Changes Requested
[Openvpn-devel,3/8] Add more documentation about our internal TLS functions
[Openvpn-devel] Remove --disable-def-auth configure argument
1 - -
0 0 0
2020-10-23
Arne Schwabe
Accepted
[Openvpn-devel,3/8] Extract process_incoming_push_reply from process_incoming_push_msg
[Openvpn-devel,1/8] Deprecate ncp-disable and add improved ncp to Changes.rst
1 - -
0 0 0
2020-07-09
Arne Schwabe
Accepted
[Openvpn-devel,3/8,OSSL,3.0] Implement DES ECB encrypt via EVP_CIPHER api
[Openvpn-devel,1/8,OSSL,3.0] Use new EVP_MAC API for HMAC implementation
- - -
0 0 0
2021-09-19
Arne Schwabe
Superseded
«
1
2
3
4
…
8
9
»