small fixes

Nikos Mavrogiannopoulos n.mavrogiannopoulos at gmail.com
Mon Oct 27 02:52:18 PDT 2014


By reading gnutls.c I have the following fixes. A question is, whether
the DISABLE_SAFE_RENEGOTIATION flag is intentional. I see that I
copied that to ocserv, but as far as I know this has no
interoperability issues, and using it, makes known attacks apply to
openconnect.

regards,
Nikos
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-remove-the-disable-safe-renegotiation-flag-from-DTLS.patch
Type: text/plain-diff
Size: 1954 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20141027/d5a8e9c4/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-corrected-gnutls-version-number-check.patch
Type: text/plain-diff
Size: 819 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20141027/d5a8e9c4/attachment-0001.bin>


More information about the openconnect-devel mailing list