On 28.08.2017 18:43, Kurt Roeckx wrote: Hi,
>>> Source: openvpn >>> Version: 2.4.3-4 >>> Severity: important >>> Tags: patch >>> >>> Hi, >>> >>> The attached patch add supports for the new way of setting up the >>> minimum and maximum supported TLS version in OpenSSL. >>> >>> This is marked as important because if you switch to openssl 1.1.0 >>> the defaults minimum version in Debian is currently TLS 1.2 and >>> you can't override it with the options that you're currently using >>> (and are deprecated). >> >> Thanks a lot. Could you please submit this as patch to the openvpn-devel >> ML (https://sourceforge.net/p/openvpn/mailman/openvpn-devel/)? The devs >> are pretty active there and I'd like to have patches like this upstream. > > I really don't want to subscribe to a list just to post a patch. > > What about creating a github pull request? In OpenVPN all patches need to go through the mailinglist, see https://community.openvpn.net/openvpn/wiki/DeveloperDocumentation . The list is well moderated so you might just send it to openvpn-de...@lists.sourceforge.net . IME it does not make sense for us to forward this patch to the ML, I'm sure there will be follow-up questions regarding compatibility, usecases etc. Bernhard
