-
This is a fairly significant upgrade to pyOpenSSL functionality in the sense that many additional OpenSSL APIs are exposed. Dave Cridland appears to have forked pyOpenSSL several years back (relative to the sourceforge branch), adding significant additional functionality including access to the digital signatures API. I have merged those changes back into the sourceforge.net pyOpenSSL branch...
2009-02-12 05:46:28 UTC in pyOpenSSL
-
Can you submit more configuration details on this? TCP or UDP, dev tun or tap, version of clients, plugins used, etc.
Thanks,
James.
2008-11-19 17:53:43 UTC in OpenVPN
-
Re: setting buf->len to -1, the fix for this is also discussed in ticket 2015672.
2008-07-27 18:23:50 UTC in OpenVPN
-
This has been fixed. See ticket 2015672 for a detailed description.
2008-07-27 18:07:59 UTC in OpenVPN
-
This has been fixed. See ticket 2015672 for a detailed description.
2008-07-27 18:07:39 UTC in OpenVPN
-
This has been fixed. See ticket 2015672 for a detailed description.
2008-07-27 18:07:18 UTC in OpenVPN
-
I've attempted to address these issues in a defensive programming change within buffer.[ch]:
-r3128 http://svn.openvpn.net/projects/openvpn/branches/BETA21
First, we introduce BUF_SIZE_MAX and require that buf.capacity always be below this level.
We guard against integer overflow by testing any value that will add or subtract against length or offset, that the value is within...
2008-07-27 18:04:27 UTC in OpenVPN
-
This has been verified as a security issue and has been fixed in:
-r3126 http://svn.openvpn.net/projects/openvpn/branches/BETA21
Note that the vulnerable code only exists in the 2.1 beta/rc series and has never been included in a stable-tagged release.
2008-07-26 23:16:53 UTC in OpenVPN
-
Added additional input validation on pulled options.
-r3126 https://svn.openvpn.net/projects/openvpn/branches/BETA21.
2008-07-26 23:11:39 UTC in OpenVPN
-
This has been fixed in -r3122 https://svn.openvpn.net/projects/openvpn/branches/BETA21
* Argument lists for external programs and scripts are now built by the new
argv_printf function which natively outputs to string arrays (i.e.
char *argv[] lists), never truncates its output, and eliminates the security
issues inherent in formatting and parsing command lines, and dealing with...
2008-07-26 07:45:09 UTC in OpenVPN
