Toggle navigation
Patchwork
OpenVPN 2
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Submitter =
Arne Schwabe
| Archived =
No
| 1061 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Search
Archived
No
Yes
Both
Delegate
------
Nobody
samuli
ordex
dazo
selvanair
syzzer
cron2
arne
flichtenheld
d12fk
Apply
«
1
2
...
6
7
8
…
10
11
»
Patch
Series
A/R/T
S/W/F
Date
Submitter
Delegate
State
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
2 - -
-
-
-
2021-04-22
Arne Schwabe
Accepted
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
1 - -
-
-
-
2019-01-22
Arne Schwabe
Accepted
[Openvpn-devel,v2,17/20] Add small unit test for testing HMAC
OpenSSL 3.0 improvements for OpenVPN
- - -
-
-
-
2021-10-19
Arne Schwabe
Superseded
[Openvpn-devel,v2,18/20] Fix error when BF-CBC is not available
OpenSSL 3.0 improvements for OpenVPN
- - -
-
-
-
2021-10-19
Arne Schwabe
Superseded
[Openvpn-devel,v2,1/8] Make management password check constant time
[Openvpn-devel,v2,1/8] Make management password check constant time
1 - -
-
-
-
2022-12-20
Arne Schwabe
Accepted
[Openvpn-devel,v2,19/20] Add insecure tls-cert-profile options
OpenSSL 3.0 improvements for OpenVPN
- - -
-
-
-
2021-10-19
Arne Schwabe
Superseded
[Openvpn-devel,v2,1/9] Implement optional cipher in --data-ciphers prefixed with ?
[Openvpn-devel,v2,1/9] Implement optional cipher in --data-ciphers prefixed with ?
- - -
-
-
-
2021-12-05
Arne Schwabe
Changes Requested
[Openvpn-devel,v2,1/9] Indicate that a client is in pull mode in IV_PROTO
[Openvpn-devel,v2,1/9] Indicate that a client is in pull mode in IV_PROTO
- - -
-
-
-
2020-07-19
Arne Schwabe
ordex
Superseded
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
1 - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2,20/20] Add macos OpenSSL 3.0 and ASAN builds
OpenSSL 3.0 improvements for OpenVPN
- - -
-
-
-
2021-10-19
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/2] Add detailed man page section to setup a OpenVPN setup with peer-fingerprint
[Openvpn-devel,v2,1/2] Move examples into openvpn-examples(5) man page
1 - -
-
-
-
2021-05-20
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/2] Add support for OpenSSL TLS 1.3 when using management-external-key
[Openvpn-devel,v2,1/2] Make tls_version_max return the actual maximum version
- - -
-
-
-
2018-10-31
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/2] Adjust Android code after sitnl patch merge
[Openvpn-devel,v2,1/2] Fix check if iface name is set
1 - -
-
-
-
2019-08-15
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/2] Document different behaviour of dynamic cipher negotiation
Untitled series #865
1 - -
-
-
-
2020-08-09
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/2] Fix condition to generate session keys
[Openvpn-devel,v2,1/2] Move context_auth from context_2 to tls_multi and name it multi_state
2 - -
-
-
-
2021-03-28
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2,2/2] Fix CR_RESPONSE mangaement message using wrong key_id
[Openvpn-devel,v2,1/2] Introduce get_key_by_management_key_id helper function
- - -
-
-
-
2023-05-22
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/2] Remove support for non ISO C99 vararg support
[Openvpn-devel,v2,1/2] Remove flexible array member autoconf check
1 - -
-
-
-
2021-03-28
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/3] Add support for OpenSSL TLS 1.3 when using management-external-key
[Openvpn-devel,v2,1/3] Remove MANAGMENT_EXTERNAL_KEY, MANAGMENT_IN_EXTRA, ENABLE_CLIENT_CR
- - -
-
-
-
2018-10-08
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/3] Minor style change to improve code style
[Openvpn-devel,v2,1/3] Use crypto library functions for const time memcmp when possible
1 - -
-
-
-
2020-04-16
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/3] Move NCP saving and restore to the prepush restore code
[Openvpn-devel,v2,1/3] Move restoring pre pull options to initialising of c2 context
1 - -
-
-
-
2021-03-17
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/3] Move openvpn specific key expansion into its own function
[Openvpn-devel,v2,1/3] Refactor key_state_export_keying_material functions
- - -
-
-
-
2020-08-12
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/3] Refactor counting number of element in a : delimited list into function
Untitled series #705
1 - -
-
-
-
2020-04-16
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/3] Use dedicated multi->dco_peer_id for DCO instead of multi->peer_id
Untitled series #1857
- - -
-
-
-
2022-11-24
Arne Schwabe
Changes Requested
[Openvpn-devel,v2,2/4] Bail out when trying to install a TCP socket with residual data to DCO
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/4] Bail out when trying to install a TCP socket with residual data to DCO
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
- - -
-
-
-
2022-12-27
Arne Schwabe
Rejected
[Openvpn-devel,v2,2/4] Cleanup receive_auth_failed and simplify method
Implement exit notifcation via control channel and temporary AUTH_FAIL
2 - -
-
-
-
2022-05-20
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/4] Implement a function to calculate the default MTU
[Openvpn-devel,v2,1/4] Extract update_session_cipher into standalone function
- - -
-
-
-
2022-06-24
Arne Schwabe
Superseded
[Openvpn-devel,v2,25/28] Ensure that control channel packet are respecting tls-mtu
Untitled series #1560
- - -
-
-
-
2022-05-10
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/5] Build unit tests in mingw Windows build
Build and run unittests with mingw in Github actions
- - -
-
-
-
2023-02-08
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/5] Implement dynamic NCP negotiation
Untitled series #646
1 - -
-
-
-
2020-02-13
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/5] Implement peer-fingerprint to check fingerprint of peer certificate
[Openvpn-devel,v2,1/5] Extend verify-hash to allow multiple hashes
- - -
-
-
-
2021-03-19
Arne Schwabe
ordex
Changes Requested
[Openvpn-devel,v2,2/5] Implement support for signalling IV_SSO to server
[Openvpn-devel,v2,1/5] Implement parsing and sending INFO and INFO_PRE control messages
1 - -
-
-
-
2019-11-09
Arne Schwabe
Superseded
[Openvpn-devel,v2,26/28] Allow setting control channel packet size with tls-mtu
Untitled series #1560
- - -
-
-
-
2022-05-10
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/6] Allow pem_read_key_file to generate a random key
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
- - -
-
-
-
2019-01-22
Arne Schwabe
Superseded
[Openvpn-devel,v2,2/6] Remove --disable-multihome option
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
- - -
-
-
-
2021-04-22
Arne Schwabe
Changes Requested
[Openvpn-devel,v2,28/28] Always include ACKs for the last seen control packets
Untitled series #1752
- - -
-
-
-
2022-08-31
Arne Schwabe
cron2
Accepted
[Openvpn-devel,v2,2/9] Drop support for OpenSSL 1.0.1
[Openvpn-devel,1/9] Indicate that a client is in pull mode in IV_PROTO
1 - -
-
-
-
2020-07-17
Arne Schwabe
Accepted
[Openvpn-devel,v2,2/9] Implement auth-token-user
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
1 - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2,3/3] Add better support for showing TLS 1.3 ciphersuites in --show-tls
Untitled series #372
- - -
-
-
-
2018-10-10
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/3] After the last big formatting patch a number of changes have been commited t…
[Openvpn-devel,v2,1/3] Use crypto library functions for const time memcmp when possible
1 - -
-
-
-
2020-04-16
Arne Schwabe
Accepted
[Openvpn-devel,v2,3/3] Implement generating data channel keys via EKM/RFC 5705
[Openvpn-devel,v2,1/3] Refactor key_state_export_keying_material functions
- - -
-
-
-
2020-08-12
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/3] Implement the nopadding option to management-external-key for mbed TLS
[Openvpn-devel,v2,1/3] Remove MANAGMENT_EXTERNAL_KEY, MANAGMENT_IN_EXTRA, ENABLE_CLIENT_CR
- - -
-
-
-
2018-10-08
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/3] Implement tls-groups option to specify eliptic curves/groups
Untitled series #705
- - -
-
-
-
2020-04-16
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/3] Introduce dynamic tls-crypt for secure soft_reset/session renegotiation
Untitled series #1827
- - -
-
-
-
2022-10-18
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/3] Restore also ping related options on a reconnect
[Openvpn-devel,v2,1/3] Move restoring pre pull options to initialising of c2 context
1 - -
-
-
-
2021-03-17
Arne Schwabe
Accepted
[Openvpn-devel,v2,3/4] Change default MTU in server mode to 1420 and push it to client
[Openvpn-devel,v2,1/4] Extract update_session_cipher into standalone function
- - -
-
-
-
2022-06-24
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/4] Check if the -wrap argument is actually supported by the platform's ld
Untitled series #2164
- - -
-
-
-
2023-07-01
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/4] Ignore OVPN_DEL_PEER_REASON_USERSPACE to avoid race conditions
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/4] Ignore OVPN_DEL_PEER_REASON_USERSPACE to avoid race conditions
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
1 - -
-
-
-
2022-12-27
Arne Schwabe
Accepted
[Openvpn-devel,v2,3/4] Implement AUTH_FAIL, TEMP message support
Implement exit notifcation via control channel and temporary AUTH_FAIL
- - -
-
-
-
2022-05-20
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/5] Implement sending response to challenge via CR_RESPONSE
[Openvpn-devel,v2,1/5] Implement parsing and sending INFO and INFO_PRE control messages
- - -
-
-
-
2019-11-09
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/5] Move NCP related function into a seperate file and add unit tests
Untitled series #646
- - -
-
-
-
2020-02-13
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/5] Support fingerprint authentication without CA certificate
[Openvpn-devel,v2,1/5] Extend verify-hash to allow multiple hashes
- - -
-
-
-
2021-03-19
Arne Schwabe
ordex
Superseded
[Openvpn-devel,v2,3/6] Move direct.h header where it is used
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
1 - -
-
-
-
2021-04-22
Arne Schwabe
Accepted
[Openvpn-devel,v2,3/6] Rewrite auth-token-gen to be based on HMAC based tokens
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
- - -
-
-
-
2019-01-22
Arne Schwabe
Superseded
[Openvpn-devel,v2,3/7] Return cached result in tls_authentication_status
Untitled series #1157
- - -
-
-
-
2021-05-03
Arne Schwabe
ordex
Changes Requested
[Openvpn-devel,v2,3/9] Add connection_established as state in tls_multi->context_auth
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
1 - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2,4/4] Allow scripts and plugins to set a custom AUTH_FAILED message
Implement exit notifcation via control channel and temporary AUTH_FAIL
- - -
-
-
-
2022-05-20
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/4] Allow tun-mtu to be pushed
[Openvpn-devel,v2,1/4] Extract update_session_cipher into standalone function
- - -
-
-
-
2022-06-24
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/4] Avoid unused function warning/error on FreeBSD (and potientially others)
Untitled series #2164
1 - -
-
-
-
2023-07-01
Arne Schwabe
Accepted
[Openvpn-devel,v2,4/4] Log peer-id if loglevel is D_DCO_DEBUG and dco is enabled
[Openvpn-devel,1/2] Replace custom min macro and use more C99 style in man_remote_entry_get
- - -
-
-
-
2022-12-27
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/4] Log peer-id if loglevel is D_DCO_DEBUG and dco is enabled
[Openvpn-devel,v2,1/4] Ensure we do not promote a TA_TIMEOUT to a TA_READ event with dco
- - -
-
-
-
2022-12-27
Arne Schwabe
Changes Requested
[Openvpn-devel,v2,4/4] Reduce initialisation spam from verb <= 3 and print summary instead
Untitled series #2016
1 - -
-
-
-
2023-02-14
Arne Schwabe
Accepted
[Openvpn-devel,v2,4/5] Check return values in md_ctx_init and hmac_ctx_init
Untitled series #1022
- - -
-
-
-
2021-01-28
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/5] Implement sending SSO challenge to clients
[Openvpn-devel,v2,1/5] Implement parsing and sending INFO and INFO_PRE control messages
- - -
-
-
-
2019-11-09
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/5] Normalise ncp-ciphers option and restrict it to 127 bytes
Untitled series #646
- - -
-
-
-
2020-02-13
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/6] Implement a permanent session id in auth-token
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
- - -
-
-
-
2019-01-22
Arne Schwabe
Superseded
[Openvpn-devel,v2,4/6] Remove support for blocking connect()
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
- - -
-
-
-
2021-04-22
Arne Schwabe
Changes Requested
[Openvpn-devel,v2,4/9] Make waiting on auth an explicit state in the context state machine
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
- - -
-
-
-
2021-05-20
Arne Schwabe
Superseded
[Openvpn-devel,v2,5/5] Add building unit tests with mingw to github actions
Collections of miscellenaous patches
- - -
-
-
-
2023-02-10
Arne Schwabe
Rejected
[Openvpn-devel,v2,5/5] Add building unit tests with mingw to github actions
Untitled series #2009
1 - -
-
-
-
2023-02-09
Arne Schwabe
Accepted
[Openvpn-devel,v2,5/5] Deprecate the --verify-hash option
[Openvpn-devel,v2,1/5] Extend verify-hash to allow multiple hashes
- - -
-
-
-
2021-03-19
Arne Schwabe
ordex
Superseded
[Openvpn-devel,v2,5/5] Implement forwarding client CR_RESPONSE messages to management
[Openvpn-devel,v2,1/5] Implement parsing and sending INFO and INFO_PRE control messages
- - -
-
-
-
2019-11-09
Arne Schwabe
Superseded
[Openvpn-devel,v2,5/6] Replace OS_SPECIFIC_DIRSEP with PATH_SEPARATOR
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
1 - -
-
-
-
2021-04-22
Arne Schwabe
Accepted
[Openvpn-devel,v2,5/6] Sent indication that a session is expired to clients
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
- - -
-
-
-
2019-01-22
Arne Schwabe
Superseded
[Openvpn-devel,v2,5/7] Extracting key_state deferred auth status update into function
Untitled series #1148
- - -
-
-
-
2021-04-28
Arne Schwabe
Superseded
[Openvpn-devel,v2,5/9] Extracting key_state deferred auth status update into function
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
1 - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2,5/9] Remove key-method 1
[Openvpn-devel,1/9] Indicate that a client is in pull mode in IV_PROTO
- - -
-
-
-
2020-07-17
Arne Schwabe
Superseded
[Openvpn-devel,v2,5/9] Remove key_type->cipher_length field
Untitled series #1365
1 - -
-
-
-
2021-12-05
Arne Schwabe
Accepted
[Openvpn-devel,v2,6/6] Implement unit tests for auth-gen-token
[Openvpn-devel,v2,1/6] Rename tls_crypt_v2_read_keyfile into generic pem_read_key_file
- - -
-
-
-
2019-01-22
Arne Schwabe
Superseded
[Openvpn-devel,v2,6/6] Remove a number of platform specific checks in configure.ac
[Openvpn-devel,v2,1/6] Avoid failing_test unused warning in example_test
1 - -
-
-
-
2021-04-22
Arne Schwabe
Accepted
[Openvpn-devel,v2,6/9] Introduce S_GENERATED_KEYS state and generate keys only when authenticated
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
1 - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Superseded
[Openvpn-devel,v2,7/7] Remove dependency on BF-CBC existance from test_ncp
Untitled series #1566
1 - -
-
-
-
2022-05-12
Arne Schwabe
Accepted
[Openvpn-devel,v2,7/9] Move auth_token_state_flags to tls_session and cleanup initial_token
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
- - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Rejected
[Openvpn-devel,v2,7/9] Remove cipher_kt_t and change type to const char* in API
Untitled series #1372
- - -
-
-
-
2021-12-07
Arne Schwabe
Superseded
[Openvpn-devel,v2,8/9] Remove md_kt_t and change cyrpto API to use const char*
Untitled series #1381
1 - -
-
-
-
2021-12-13
Arne Schwabe
Accepted
[Openvpn-devel,v2,8/9] Remove --ncp-disable option
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
1 - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2,9/9] Support NCP in pure P2P VPN setups
[Openvpn-devel,v2,1/9] Move auth_token_state from multi to key_state
- - -
-
-
-
2021-05-20
Arne Schwabe
ordex
Superseded
[Openvpn-devel,v2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
[Openvpn-devel,v2] Add 'allow-compression stub-only and refuse framing with 'allow-compression no'
- - -
-
-
-
2023-03-22
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add Apache2 linking with for new commits
[Openvpn-devel,v2] Add Apache2 linking with for new commits
- - -
-
-
-
2023-04-25
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add connect-freq-initial option to limit initial connection responses
[Openvpn-devel,v2] Add connect-freq-initial option to limit initial connection responses
- - -
-
-
-
2023-01-06
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add .git-blame-ignore-revs with reformat commits
[Openvpn-devel,v2] Add .git-blame-ignore-revs with reformat commits
1 - -
-
-
-
2020-06-04
Arne Schwabe
Accepted
[Openvpn-devel,v2] Add missing check for nl_socket_alloc failure
[Openvpn-devel,v2] Add missing check for nl_socket_alloc failure
- - -
-
-
-
2023-04-25
Arne Schwabe
Not Applicable
[Openvpn-devel,v2] Add missing check for nl_socket_alloc failure
[Openvpn-devel,v2] Add missing check for nl_socket_alloc failure
- - -
-
-
-
2023-03-29
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add OpenSSL 3.0 to mingw build
[Openvpn-devel,v2] Add OpenSSL 3.0 to mingw build
1 - -
-
-
-
2022-08-26
Arne Schwabe
Accepted
[Openvpn-devel,v2] Add OpenSSL compat definition for RSA_meth_set_sign
[Openvpn-devel,v2] Add OpenSSL compat definition for RSA_meth_set_sign
- - -
-
-
-
2018-10-05
Arne Schwabe
Superseded
[Openvpn-devel,v2] Add section about common error with OpenVPN 2.6 and OpenSSL 3.0
[Openvpn-devel,v2] Add section about common error with OpenVPN 2.6 and OpenSSL 3.0
1 - -
-
-
-
2022-11-29
Arne Schwabe
Accepted
[Openvpn-devel,v2] Adjust cipher-negotiation.rst with compat-mode changes
[Openvpn-devel,v2] Adjust cipher-negotiation.rst with compat-mode changes
1 - -
-
-
-
2021-12-13
Arne Schwabe
Accepted
[Openvpn-devel,v2] Allow all GCM ciphers
[Openvpn-devel,v2] Allow all GCM ciphers
1 - -
-
-
-
2021-04-21
Arne Schwabe
ordex
Accepted
[Openvpn-devel,v2] Allow Authtoken lifetime to be short than renegotiation time
[Openvpn-devel,v2] Allow Authtoken lifetime to be short than renegotiation time
1 - -
-
-
-
2022-10-17
Arne Schwabe
Accepted
«
1
2
...
6
7
8
…
10
11
»