This commit updates openvpn to version 2.6.5 and add DCO support. There are several changes: - Starting with version 2.6.0, the sources are only provided as .tar.gz file. - removed OPENVPN_<variant>_ENABLE_MULTIHOME: multihome support is always included and cannot be disabled anymore with 2.6.x. - removed OPENVPN_<variant>_ENABLE_DEF_AUTH: deferred auth support is always included and cannot be disabled anymore with 2.6.x. - removed OPENVPN_<variant>_ENABLE_PF: PF (packet filtering) support was removed in 2.6.x. - The internal lz4 library was removed in 2.6.x; we now use the liblz4 package if needed - To increase reproducibility, _DATE_ is only used for development builds and not in release builds in 2.6.x. - wolfSSL support was integrated into upstream openvpn - DES support was removed from openvpn The first two wolfSSL patches were created following these 2 commits:4cf01c8e43
028b501734
Signed-off-by: Martin Schiller <ms@dev.tdt.de>
12 lines
409 B
Diff
12 lines
409 B
Diff
--- a/src/openvpn/ssl_verify_openssl.c
|
|
+++ b/src/openvpn/ssl_verify_openssl.c
|
|
@@ -269,6 +269,9 @@ backend_x509_get_username(char *common_n
|
|
return FAILURE;
|
|
}
|
|
}
|
|
+#if defined(ENABLE_CRYPTO_WOLFSSL)
|
|
+ #define LN_serialNumber "serialNumber"
|
|
+#endif
|
|
else if (strcmp(LN_serialNumber, x509_username_field) == 0)
|
|
{
|
|
ASN1_INTEGER *asn1_i = X509_get_serialNumber(peer_cert);
|