Re: [PATCH] OpenVPN: Update to version 2.4.7

[ummeegge <ummeegge@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 2351 bytes --]

Hi Michael,

On Di, 2019-02-26 at 17:00 +0000, Michael Tremer wrote:
> Thank you. Merged.
Your welcome.
> 
> I guess this will also introduce TLS 1.3 for OpenVPN?
Partly yes. As far as i can see (tested also a little) it currently
only introduces TLSv1.3 for the Control Channel via a new directive
called '--tls-ciphersuites' which can also be overviewed with a 
openvpn --show-tls
. IPFire currently do not provide a control channel selection for the
ciphers nor a '--tls-min [VER]' option so this update is primarily a
bugfix and a performance one in my opinion but i haven´t had a depper
into it.

I think TLSv1.3 is neverthless not far away for a general usage (data
channel too) on OpenVPN.

Best,

Erik




> 
> > On 26 Feb 2019, at 10:56, Erik Kapfer <ummeegge(a)ipfire.org> wrote:
> > 
> > Changelog can be found in here 
> > https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .
> > 
> > Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org>
> > ---
> > lfs/openvpn | 6 +++---
> > 1 file changed, 3 insertions(+), 3 deletions(-)
> > 
> > diff --git a/lfs/openvpn b/lfs/openvpn
> > index 2503654f1..61c805fdb 100644
> > --- a/lfs/openvpn
> > +++ b/lfs/openvpn
> > @@ -1,7 +1,7 @@
> > ###################################################################
> > ############
> > #                                                                  
> >            #
> > # IPFire.org - A linux based
> > firewall                                         #
> > -# Copyright (C) 2007-2018  IPFire Team  <info(a)ipfire.org>         
> >             #
> > +# Copyright (C) 2007-2019  IPFire Team  <info(a)ipfire.org>         
> >             #
> > #                                                                  
> >            #
> > # This program is free software: you can redistribute it and/or
> > modify        #
> > # it under the terms of the GNU General Public License as published
> > by        #
> > @@ -24,7 +24,7 @@
> > 
> > include Config
> > 
> > -VER        = 2.4.6
> > +VER        = 2.4.7
> > 
> > THISAPP    = openvpn-$(VER)
> > DL_FILE    = $(THISAPP).tar.xz
> > @@ -40,7 +40,7 @@ objects = $(DL_FILE)
> > 
> > $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
> > 
> > -$(DL_FILE)_MD5 = 3a1f3f63bdaede443b4df49957df9405
> > +$(DL_FILE)_MD5 = 4ad8a008e1e7f261b3aa0024e79e7fb7
> > 
> > install : $(TARGET)
> > 
> > -- 
> > 2.12.2
> > 
> 

>