Message-ID: <4DFF2133.5010003@...1147...> Date: Mon, 20 Jun 2011 12:30:11 +0200 From: Jan Just Keijser MIME-Version: 1.0 References: <1308302282-27985-1-git-send-email-samuli@...515...> <1308556181-20317-1-git-send-email-samuli@...515...> <4DFF127B.1060006@...1114...> <4DFF1488.4040509@...1147...> <4DFF165D.7070501@...1114...> In-Reply-To: <4DFF165D.7070501@...1114...> Subject: Re: [Openvpn-devel] [PATCH] Add new openssl.cnf to easy-rsa/Windows List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit To: David Sommerseth Cc: openvpn-devel@lists.sourceforge.net Hi David, David Sommerseth wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 20/06/11 11:36, Jan Just Keijser wrote: > >> NACK on this patch - the openssl.cnf file should be (almost) the same as >> the one used in easy-rsa/2.0 >> that way the certificates are generated in the same manner (*with* >> EKU=ServerAuth) >> >> > > Okay, I'll revert commit 663860ad04dd4190fddbee63e724d3fdceafd937 (master) > and 6989cbde616a00380acf3a390959987765a5325b (release/2.2) immediately. > > Samuli, can you please look closer into this? I did a more careful diff > from 2.0/openssl.cnf and Windows/openssl.cnf ... and it seems quite > different. Can we please unite them? > > JJK: Do you know which differences are needed between Windows and non-Windows? > > I just checked that the openssl.cnf file shipped with the windows version of openvpn 2.1.4 is identical to the easy-rsa/2.0 version - is there any reason not to do the same for openvpn 2.2? cheers, JJK