)]}'
{"id":"openvpn~1294","triplet_id":"openvpn~master~Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d","project":"openvpn","branch":"master","attention_set":{},"removed_from_attention_set":{"1000003":{"account":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2025-10-23 15:46:32.000000000","reason":"Change was submitted"},"1000001":{"account":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"last_update":"2025-10-23 11:03:51.000000000","reason":"removed on reply"}},"hashtags":[],"change_id":"Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d","subject":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0","status":"MERGED","created":"2025-10-22 16:44:13.000000000","updated":"2025-10-23 15:46:32.000000000","submitted":"2025-10-23 15:46:32.000000000","submitter":{"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1294","meta_rev_id":"54bffb623efb046b20b4f289ec3fa5a0b35496e8","_number":1294,"virtual_id_number":1294,"owner":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},{"value":0,"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"default_value":0}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}],"CC":[{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2025-10-22 16:44:13.000000000","updated_by":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2025-10-22 16:44:13.000000000","updated_by":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"reviewer":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"state":"REVIEWER"}],"messages":[{"id":"41d90229251e39d72a16f6631c3876e06f5cfa56","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2025-10-22 16:44:13.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"04828038c9a964f2a335c46d2f5c7cbe1f41bc5c","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2025-10-22 17:02:35.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"eb9d7972bf96f149a7b997cebffca96a29357da7","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2025-10-23 09:53:26.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"19ac9f045dc72c1baa4f968b59f1c66a3b4930a3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2025-10-23 09:56:04.000000000","message":"Uploaded patch set 3: Commit message was updated.","accounts_in_message":[],"_revision_number":3},{"id":"05e3ac42b73c51e80dc02a3753c50a146416affe","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2025-10-23 11:03:51.000000000","message":"Patch Set 3: Code-Review+2","accounts_in_message":[],"_revision_number":3},{"id":"54bffb623efb046b20b4f289ec3fa5a0b35496e8","tag":"autogenerated:gerrit:merged","author":{"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2025-10-23 15:46:32.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"a69d9b66502f13354750d8146cd038cc7a26a0bd","revisions":{"7574bc66f507f7fe60238812631d52166008414d":{"kind":"REWORK","_number":1,"created":"2025-10-22 16:44:13.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/94/1294/1","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/94/1294/1","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/1 \u0026\u0026 git checkout -b change-1294 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/94/1294/1","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"0abf6e716b5a50b2b7f4287b1d50f4889eed36aa","subject":"multi: Fix wrong usage of mroute_extract_openvpn_sockaddr"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-22 16:42:24.000000000","tz":120},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-22 16:43:59.000000000","tz":120},"subject":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0","message":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0\n\nThese ciphers claim to be CBC but since they are also include an HMAC\nare more a mix of AEAD and CBC. Nevertheless, we do not support these\nand also have no (good) reason to support them.\n\nChange-Id: Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"329dd7ed35124f07c394e3cecaef6e7b288d6009":{"kind":"REWORK","_number":2,"created":"2025-10-23 09:53:26.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/94/1294/2","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/94/1294/2","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/2 \u0026\u0026 git checkout -b change-1294 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/94/1294/2","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"0abf6e716b5a50b2b7f4287b1d50f4889eed36aa","subject":"multi: Fix wrong usage of mroute_extract_openvpn_sockaddr"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-22 16:42:24.000000000","tz":120},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-23 09:53:01.000000000","tz":120},"subject":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0","message":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0\n\nThese ciphers claim to be CBC but since they are also include an HMAC\nare more a mix of AEAD and CBC. Nevertheless, we do not support these\nand also have no (good) reason to support them.\n\nChange-Id: Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"947d672e4c1498c66b34295a7105395a0bd4b8ab":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2025-10-23 09:56:04.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/94/1294/3","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/94/1294/3","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/3 \u0026\u0026 git checkout -b change-1294 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/94/1294/3","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"0abf6e716b5a50b2b7f4287b1d50f4889eed36aa","subject":"multi: Fix wrong usage of mroute_extract_openvpn_sockaddr"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-22 16:42:24.000000000","tz":120},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-23 09:54:01.000000000","tz":120},"subject":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0","message":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0\n\nThese ciphers claim to be CBC but since they are also include an HMAC\nare more a mix of AEAD and CBC. Nevertheless, we do not support these\nand also have no (good) reason to support them.\n\nThis patch defines the flag if the SSL library does not define the flag\nto also work when the SSL library is upgraded after OpenVPN has been compiled.\n\nChange-Id: Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"a69d9b66502f13354750d8146cd038cc7a26a0bd":{"kind":"NO_CODE_CHANGE","_number":4,"created":"2025-10-23 15:46:32.000000000","uploader":{"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"ref":"refs/changes/94/1294/4","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/94/1294/4","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/4 \u0026\u0026 git checkout -b change-1294 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/94/1294/4","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/94/1294/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"0abf6e716b5a50b2b7f4287b1d50f4889eed36aa","subject":"multi: Fix wrong usage of mroute_extract_openvpn_sockaddr"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2025-10-23 11:11:33.000000000","tz":120},"committer":{"name":"Gert Doering","email":"gert@greenie.muc.de","date":"2025-10-23 15:27:06.000000000","tz":120},"subject":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0","message":"Do not try to use the encrypt-then-mac ciphers from OpenSSL 3.6.0\n\nThese ciphers claim to be CBC but since they are also include an HMAC\nare more a mix of AEAD and CBC. Nevertheless, we do not support these\nand also have no (good) reason to support them.\n\nThis patch defines the flag if the SSL library does not define the flag\nto also work when the SSL library is upgraded after OpenVPN has been compiled.\n\nChange-Id: Iafe3c94b952cd3fbecf6f3d05816e5859f425e7d\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\nAcked-by: Frank Lichtenheld \u003cfrank@lichtenheld.com\u003e\nGerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1294\nMessage-Id: \u003c20251023111138.25245-1-gert@greenie.muc.de\u003e\nURL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg33846.html\nSigned-off-by: Gert Doering \u003cgert@greenie.muc.de\u003e\n"},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}