[OpenWrt-Devel] [PATCH] [packages] AA: update openvpn-devel to compile against polarssl 1.2.x

[Gert Doering]

Hi,

On Wed, Sep 24, 2014 at 07:43:13PM +0200, Stefano De Carlo wrote:
> Il 24/09/2014 18:30, Gert Doering ha scritto:
> >
> > "OpenVPN Upstream" would recommend to go up to HEAD in git/master, aka
> > 9048d50b0a27a724ad088dc4904eb4888b0bca87 - this is all "openvpn-devel"
> > anyway, but what we have in-tree right now has seen some more minor
> > bugfixes in SSL land (nothing security critical, but documentation,
> > proper logging, fixing compile-time warnings and such) plus a few 
> > nice features, compared to that revision from 2013...
> 
> Hi,
> 
> my rationale for not going all the way up to the last commit is that
> 
> * AA gets rarely touched these days (this is after all an almost 2 years old issue), so I didn't want to discourage applying this by introducing too big a change without proper testing.
> * This patch has been deployed on 20+ nodes in our mesh network without any issue for several months now.

Well, and the counterargument is that a *devel* version should not be
over a year old, if there have been bugfixes and useful functionality
added in the mean time :-) - I can see your argument about stability, but
be assured, current HEAD is very well tested (no *major* code changes have
been done in that time frame, and what we have has seen deployment in
some commercial environments as server, and is used under the hood in
the OpenVPN for Android client).

> If OpenWrt developers are interested in commiting this to the 12.09 package feed but would rather have a newer revision of OpenVPN I could and will align the patch to v.2.3.4 or later after proper testing.

Yeah.  I'm happy to help, but leave the decision to the OpenWRT devs.

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 291 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20140928/fd855104/attachment.sig>
-------------- next part --------------
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel