packages/net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch

--- a/src/openvpn/ssl_mbedtls.c
+++ b/src/openvpn/ssl_mbedtls.c
@@ -1520,7 +1520,7 @@ const char *
 get_ssl_library_version(void)
 {
     static char mbedtls_version[30];
-    unsigned int pv = mbedtls_version_get_number();
+    unsigned int pv = MBEDTLS_VERSION_NUMBER;
     sprintf( mbedtls_version, "mbed TLS %d.%d.%d",
              (pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );
     return mbedtls_version;
openvpn: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com> 2020-12-01 20:36:46 +00:00			`--- a/src/openvpn/ssl_mbedtls.c`
			`+++ b/src/openvpn/ssl_mbedtls.c`
openvpn: update to 2.5.0 New features: * Per client tls-crypt keys * ChaCha20-Poly1305 can be used to encrypt the data channel * Routes are added/removed via Netlink instead of ifconfig/route (unless iproute2 support is enabled). * VLAN support when using a TAP device Significant changes: * Server support can no longer be disabled. * Crypto support can no longer be disabled, remove nossl variant. * Blowfish (BF-CBC) is no longer implicitly the default cipher. OpenVPN peers prior to 2.4, or peers with data cipher negotiation disabled, will not be able to connect to a 2.5 peer unless option data_fallback_ciphers is set on the 2.5 peer and it contains a cipher supported by the client. Signed-off-by: Magnus Kroken <mkroken@gmail.com> 2020-12-01 09:57:07 +00:00			`@@ -1520,7 +1520,7 @@ const char *`
openvpn: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com> 2020-12-01 20:36:46 +00:00			`get_ssl_library_version(void)`
			`{`
			`static char mbedtls_version[30];`
			`- unsigned int pv = mbedtls_version_get_number();`
			`+ unsigned int pv = MBEDTLS_VERSION_NUMBER;`
			`sprintf( mbedtls_version, "mbed TLS %d.%d.%d",`
			`(pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );`
			`return mbedtls_version;`