Message-ID: <53BADA1D.1040605@...1856...> Date: Mon, 07 Jul 2014 19:34:21 +0200 From: Steffan Karger MIME-Version: 1.0 References: <1402244175-31462-1-git-send-email-steffan@...1856...> <1402244175-31462-2-git-send-email-steffan@...1856...> <53BA5E08.7@...1227...> In-Reply-To: <53BA5E08.7@...1227...> Subject: Re: [Openvpn-devel] [PATCH 1/4] Rename ALLOW_NON_CBC_CIPHERS to ENABLE_OFB_CFB_MODE, and add to configure. List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit To: Arne Schwabe , openvpn-devel@lists.sourceforge.net On 07-07-14 10:44, Arne Schwabe wrote: > Am 08.06.14 18:16, schrieb Steffan Karger: >> Makes OFB/CFB compile time configurable, and fixes output of --show-ciphers >> to also show OFB/CFB ciphers along the way (becasue crypto.h was not >> included from crypto_openssl.c). >> >> > ACK. But maybe we should just always enable this mode instead of having > another configure option. Thanks. Just to make this clear to others too: OFB/CFB was and after this still is enabled by default. Still, I'd prefer to have this option, because it makes my life easier for OpenVPN-NL, where everything not-CBC is disabled (and I'm the one maintaining this code, so in the end it is my problem anyway ;) ). -Steffan