[Openvpn-commits] [OpenVPN/openvpn] 084853: Do not try to use the encrypt-then-mac ciphers fro...

[<ope...@li...>]

  Branch: refs/heads/release/2.6
  Home:   https://github.com/OpenVPN/openvpn
  Commit: 0848531640f670f7f6bb79833223ac8a05c1b36e
      https://github.com/OpenVPN/openvpn/commit/0848531640f670f7f6bb79833223ac8a05c1b36e
  Author: Arne Schwabe <ar...@rf...>
  Date:   2025-10-23 (Thu, 23 Oct 2025)

  Changed paths:
    M src/openvpn/crypto_openssl.c
    M src/openvpn/openssl_compat.h

  Log Message:
  -----------
  Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0

These ciphers claim to be CBC but since they are also include an HMAC
are more a mix of AEAD and CBC. Nevertheless, we do not support these
and also have no (good) reason to support them.

Change-Id: Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d
Signed-off-by: Arne Schwabe <ar...@rf...>
Acked-by: Gert Doering <ge...@gr...>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1295
Message-Id: <202...@gr...>
URL: https://www.mail-archive.com/ope...@li.../msg33849.html
Signed-off-by: Gert Doering <ge...@gr...>



To unsubscribe from these emails, change your notification settings at https://github.com/OpenVPN/openvpn/settings/notifications