1 |
djc 15/02/08 16:22:58 |
2 |
|
3 |
Added: 2.3.6-null-cipher.patch |
4 |
Log: |
5 |
Fix support for null ciphers (bug 531700; thanks to gentoo@×××××××.org) |
6 |
|
7 |
(Portage version: 2.2.15/cvs/Linux x86_64, signed Manifest commit with key 30380381) |
8 |
|
9 |
Revision Changes Path |
10 |
1.1 net-misc/openvpn/files/2.3.6-null-cipher.patch |
11 |
|
12 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/openvpn/files/2.3.6-null-cipher.patch?rev=1.1&view=markup |
13 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/openvpn/files/2.3.6-null-cipher.patch?rev=1.1&content-type=text/plain |
14 |
|
15 |
Index: 2.3.6-null-cipher.patch |
16 |
=================================================================== |
17 |
The "really fix cipher none" patch has been merged to release/2.3 and master: |
18 |
|
19 |
commit 785838614afc20d362b64907b0212e9a779e2287 (release/2.3) |
20 |
commit 98156e90e1e83133a6a6a020db8e7333ada6156b (master) |
21 |
|
22 |
diff --git a/src/openvpn/crypto_backend.h b/src/openvpn/crypto_backend.h |
23 |
index 8749878..4e45df0 100644 |
24 |
--- a/src/openvpn/crypto_backend.h |
25 |
+++ b/src/openvpn/crypto_backend.h |
26 |
@@ -237,8 +237,7 @@ int cipher_kt_mode (const cipher_kt_t *cipher_kt); |
27 |
* |
28 |
* @return true iff the cipher is a CBC mode cipher. |
29 |
*/ |
30 |
-bool cipher_kt_mode_cbc(const cipher_kt_t *cipher) |
31 |
- __attribute__((nonnull)); |
32 |
+bool cipher_kt_mode_cbc(const cipher_kt_t *cipher); |
33 |
|
34 |
/** |
35 |
* Check if the supplied cipher is a supported OFB or CFB mode cipher. |
36 |
@@ -247,8 +246,7 @@ bool cipher_kt_mode_cbc(const cipher_kt_t *cipher) |
37 |
* |
38 |
* @return true iff the cipher is a OFB or CFB mode cipher. |
39 |
*/ |
40 |
-bool cipher_kt_mode_ofb_cfb(const cipher_kt_t *cipher) |
41 |
- __attribute__((nonnull)); |
42 |
+bool cipher_kt_mode_ofb_cfb(const cipher_kt_t *cipher); |
43 |
|
44 |
|
45 |
/** |
46 |
diff --git a/tests/t_lpback.sh b/tests/t_lpback.sh |
47 |
index 8f88ad9..d7792cd 100755 |
48 |
--- a/tests/t_lpback.sh |
49 |
+++ b/tests/t_lpback.sh |
50 |
@@ -35,6 +35,9 @@ CIPHERS=$(${top_builddir}/src/openvpn/openvpn --show-ciphers | \ |
51 |
# GD, 2014-07-06 do not test RC5-* either (fails on NetBSD w/o libcrypto_rc5) |
52 |
CIPHERS=$(echo "$CIPHERS" | egrep -v '^(DES-EDE3-CFB1|DES-CFB1|RC5-)' ) |
53 |
|
54 |
+# Also test cipher 'none' |
55 |
+CIPHERS=${CIPHERS}$(printf "\nnone") |
56 |
+ |
57 |
"${top_builddir}/src/openvpn/openvpn" --genkey --secret key.$$ |
58 |
set +e |
59 |
|
60 |
-- |
61 |
1.9.1 |