Bug 1443942
| Summary: | enable the x509-username-field option | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Hristo Venev <hristo> |
| Component: | openvpn | Assignee: | David Sommerseth <dazo> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 25 | CC: | dazo, huzaifas, mauricio.teixeira, steve |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | openvpn-2.4.2-1.fc26 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-05-14 20:21:08 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Hristo Venev
2017-04-20 10:06:03 UTC
Sorry, the version is 2.4.1. Sorry about removing that feature in the packaging clean-up. On the other hand, I now know there are at least one user of this feature. Could you please test a scratch build and see how that works for you? * x86_64 build: https://koji.fedoraproject.org/koji/taskinfo?taskID=19098346 * armv7hl build https://koji.fedoraproject.org/koji/taskinfo?taskID=19098345 * i686 build https://koji.fedoraproject.org/koji/taskinfo?taskID=19098347 Just pick the build which matches best your environment. This fix will be in the pipe for the next OpenVPN build, unless there are more users needing this fix in the mean time. The option seems to be enabled in your build. I also managed to port this to Fedora 26 and fixed an OpenVPN bug with numeric OIDs. I'll try to upstream the patches. Here's a SRPM: https://copr-be.cloud.fedoraproject.org/results/hvenev/experiments/fedora-26-x86_64/00541892-openvpn/openvpn-2.4.1-3.1.fc26.src.rpm Thanks a lot! I've just given your src.rpm a very quick look, but spotted you seem to have done some OpenSSL 1.1 porting as well. There is an upstream effort already on-going doing the OpenSSL v1.1 port. You can see the patches here: http://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14075.html If you have any chance to test, review and comment on those still not applied to the upstream OpenVPN, we'd be thankful for that help. Get in touch with me directly on e-mail and I'll get you the needed pointers to reply properly. For 0002-Fix-extract_x509_field_ssl-for-external-objects.patch, this looks reasonable to get upstream as well. But I'd encourage you to elaborate a bit more in the commit message what is wrong and why, plus some brief explanation of why you chose this approach - especially if there are more alternatives. With that in place + a signed-off-by line, then that patch looks reasonable and shouldn't have too much struggles for inclusion - as long as it doesn't break existing configurations (which I don't think your patch will do). openvpn-2.4.2-1.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-89d98779ec openvpn-2.4.2-1.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-89d98779ec openvpn-2.4.2-1.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report. |