)]}'
{"id":"openvpn~457","triplet_id":"openvpn~master~Ic74195a4ed340547c5e862dc2438f95be318c286","project":"openvpn","branch":"master","topic":"tls10prf","attention_set":{},"removed_from_attention_set":{"1000003":{"account":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2024-02-10 09:13:06.000000000","reason":"Change was submitted"},"1000001":{"account":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"last_update":"2024-01-10 16:12:36.000000000","reason":"\u003cGERRIT_ACCOUNT_1000001\u003e replied on the change","reason_account":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}}},"hashtags":["mailsubmitted"],"change_id":"Ic74195a4ed340547c5e862dc2438f95be318c286","subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","status":"MERGED","created":"2023-11-21 19:35:58.000000000","updated":"2024-02-10 09:13:06.000000000","submitted":"2024-02-10 09:13:06.000000000","submitter":{"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"total_comment_count":11,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"457-tls10prf","meta_rev_id":"35178e7fc7e1ea919ae3592781b845ab34926aab","_number":457,"virtual_id_number":457,"owner":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},{"value":0,"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}],"REVIEWER":[{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2023-11-21 19:35:58.000000000","updated_by":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2023-11-21 19:35:58.000000000","updated_by":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"reviewer":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"state":"REVIEWER"}],"messages":[{"id":"875fbb6b99e9e650213747dfc901e01736835b79","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-21 19:35:58.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"79cc7e4d5bffd6bdbe28ca84abf05a756c105473","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-21 19:36:50.000000000","message":"Uploaded patch set 2: Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"0182d3656dba33aab291e154caf7435585240350","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-22 10:45:13.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"77a0866345a5dbcea22b3985044e83bf3b09eac4","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-23 12:39:57.000000000","message":"Uploaded patch set 4: New patch set was added with same tree, parent tree, and commit message as Patch Set 3.","accounts_in_message":[],"_revision_number":4},{"id":"10e9929f2f36def9eb20275378a8c60f4dd2d80e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-28 13:40:26.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.","accounts_in_message":[],"_revision_number":5},{"id":"b67b6af47b4f3d3ee5c9b5fdb8bd8614e29133e7","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2023-11-28 14:00:19.000000000","message":"Patch Set 5: Code-Review-2\n\n(3 comments)","accounts_in_message":[],"_revision_number":5},{"id":"67629304985354bcf3eb1fc3d29c37af0bdae69b","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-29 12:15:50.000000000","message":"Patch Set 5:\n\n(3 comments)","accounts_in_message":[],"_revision_number":5},{"id":"cdf9251cf4767462e406b8bcbc1149ae619621d5","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-11-29 12:17:19.000000000","message":"Uploaded patch set 6.\n\nCopied Votes:\n* Code-Review-2 (copy condition: \"changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR **is:MIN**\")\n","accounts_in_message":[],"_revision_number":6},{"id":"0bd1bec86669f11339b6ff0c255d25c37ded89d8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2023-12-01 12:19:04.000000000","message":"Uploaded patch set 7: New patch set was added with same tree, parent tree, and commit message as Patch Set 6.\n\nCopied Votes:\n* Code-Review-2 (copy condition: \"**changekind:NO_CHANGE** OR **changekind:TRIVIAL_REBASE** OR **is:MIN**\")\n","accounts_in_message":[],"_revision_number":7},{"id":"1353e4917cc3721d33cf1c06e6651e96bcf4c7d9","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2023-12-01 12:42:25.000000000","message":"Patch Set 7: -Code-Review\n\n(2 comments)","accounts_in_message":[],"_revision_number":7},{"id":"05864bdb2806cba9fad0bc89971213b35a11e92f","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2023-12-20 16:59:16.000000000","message":"Patch Set 7: Code-Review-2\n\n(1 comment)","accounts_in_message":[],"_revision_number":7},{"id":"c8b1ae1af68d82b99263cc76269a2fb116124f4b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2024-01-05 13:55:38.000000000","message":"Uploaded patch set 8.\n\nCopied Votes:\n* Code-Review-2 (copy condition: \"changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR **is:MIN**\")\n","accounts_in_message":[],"_revision_number":8},{"id":"de972dd516378c1b11b448b4726b5b273ee1c0ca","author":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"date":"2024-01-05 13:56:11.000000000","message":"Patch Set 8:\n\n(2 comments)","accounts_in_message":[],"_revision_number":8},{"id":"fa93decc7703a063a82841c08c3795c39c42a144","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-01-10 16:12:36.000000000","message":"Patch Set 8: -Code-Review","accounts_in_message":[],"_revision_number":8},{"id":"4ec6ea57bcc4be6902a7263711c37f2a8c808415","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-02-09 11:04:41.000000000","message":"Patch Set 8: Code-Review+2","accounts_in_message":[],"_revision_number":8},{"id":"a8681a30ac666e31179aa732c9808f6ba0a21443","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":1000001,"name":"flichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-02-09 11:06:41.000000000","message":"Hashtag added: mailsubmitted","accounts_in_message":[],"_revision_number":8},{"id":"35178e7fc7e1ea919ae3592781b845ab34926aab","tag":"autogenerated:gerrit:merged","author":{"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2024-02-10 09:13:06.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":9}],"current_revision_number":9,"current_revision":"7435114d9a979611dfe5ab751c213900cc1773e8","revisions":{"b2a4216f206dd97e87fbb72e57e9ca49b7100cf5":{"kind":"REWORK","_number":1,"created":"2023-11-21 19:35:58.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/1","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/1","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/1 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/1","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"3fe3e2d474d4b8162e5cd8b008abf7eb35e680f3","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:35:46.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nuse now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0, it gives the same error as with the older API but\nsince moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"bde4854ff70e6bf92b9f5e7e7a8193eca03c786b":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2023-11-21 19:36:50.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/2","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/2","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/2 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/2","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"3fe3e2d474d4b8162e5cd8b008abf7eb35e680f3","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:36:41.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0, it gives the same error as with the older API but\nsince moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"2ad41342b3c6b271340b4f05a40d258e8c0c4037":{"kind":"REWORK","_number":3,"created":"2023-11-22 10:45:13.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/3","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/3","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/3 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/3","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"c857a436bb8019dc39c2a7475d9e468219d9e2f2","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-22 10:45:07.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0, it gives the same error as with the older API but\nsince moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"739ff87bf61ee615ac872cddbb4e91d16fc189df":{"kind":"NO_CHANGE","_number":4,"created":"2023-11-23 12:39:57.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/4","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/4","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/4 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/4","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"274ab5ab12d2317e626b32e2d040a5ca539e65f1","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-23 12:39:39.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0, it gives the same error as with the older API but\nsince moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"c400f4ef5025ee1d59762df4e71b46898107999a":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2023-11-28 13:40:26.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/5","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/5","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/5 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/5","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/5 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"2d04a96c0084d094b53cedde9ce4103db9ac818c","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-28 13:40:15.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0, it gives the same error as with the older API but\nsince moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"53a298ffbcbcfbe3101fb7fbc57f0bbaee65d771":{"kind":"REWORK","_number":6,"created":"2023-11-29 12:17:19.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/6","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/6","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/6 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/6","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/6 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"8ec7c68d2a054b724fd4210059692ceba9e3495c","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-29 12:16:40.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0 in FIPS butit gives the same error as with the older API\nbut since moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nThis also allows us now to compile an OpenSSL build that has been built with\nOPENSSL_NO_MD5. Which is not yet common but might be in the future.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"6ec91e6c5d26d8dd54fc0dd50fe62d3b6bbba3b4":{"kind":"NO_CHANGE","_number":7,"created":"2023-12-01 12:19:04.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/7","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/7","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/7 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/7","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/7 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"ddb0cfddb3e34336bcf8225ac1864d00219f7f62","subject":"Extend the error message when TLS 1.0 PRF fails"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-12-01 12:16:26.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0 in FIPS butit gives the same error as with the older API\nbut since moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nThis also allows us now to compile an OpenSSL build that has been built with\nOPENSSL_NO_MD5. Which is not yet common but might be in the future.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"dfbb5b3a63c638e406f1ddd32e623063d7a69573":{"kind":"REWORK","_number":8,"created":"2024-01-05 13:55:38.000000000","uploader":{"_account_id":1000003,"name":"plaisthos","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"ref":"refs/changes/57/457/8","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/8","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/8 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/8 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/8 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/8 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/8","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/8 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"fa7960961415fa4f368e9bbb39dc4047680ff30c","subject":"Check PRF availability on initialisation and add --force-tls-key-material-export"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2023-11-21 19:33:00.000000000","tz":60},"committer":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2024-01-05 13:54:41.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0 in FIPS butit gives the same error as with the older API\nbut since moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nThis also allows us now to compile an OpenSSL build that has been built with\nOPENSSL_NO_MD5. Which is not yet common but might be in the future.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\n"},"branch":"refs/heads/master"},"7435114d9a979611dfe5ab751c213900cc1773e8":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":9,"created":"2024-02-10 09:13:06.000000000","uploader":{"_account_id":1000002,"name":"cron2","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"ref":"refs/changes/57/457/9","fetch":{"anonymous http":{"url":"http://gerrit.openvpn.net/openvpn","ref":"refs/changes/57/457/9","commands":{"Branch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/9 \u0026\u0026 git checkout -b change-457 FETCH_HEAD","Checkout":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/9 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/9 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/9 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull http://gerrit.openvpn.net/openvpn refs/changes/57/457/9","Reset To":"git fetch http://gerrit.openvpn.net/openvpn refs/changes/57/457/9 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"b431721eb1b676f8e1a1cbcf233507d2dd29f846","subject":"Print SSL peer signature information in handshake debug details"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2024-02-09 11:06:29.000000000","tz":60},"committer":{"name":"Gert Doering","email":"gert@greenie.muc.de","date":"2024-02-09 16:36:40.000000000","tz":60},"subject":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs","message":"Implement generating TLS 1.0 PRF using new OpenSSL 3.0 APIs\n\nOpenSSL 3.0 introduced a new API for doing key derivation. So this leaves\nus now with three different implementation for 1.0.2, 1.1.x and 3.x.\n\nThis was initially done to maybe still have a working TLS 1.0 PRF when\nusing OpenSSL 3.0 in FIPS but it gives the same error as with the older API.\nBut since moving to a new API is always good, we use the new API when using\nOpenSSL 3.0. We also print the internal OpenSSL error message when\nthe KDF fails.\n\nThis also allows us now to compile an OpenSSL build that has been built with\nOPENSSL_NO_MD5. Which is not yet common but might be in the future.\n\nChange-Id: Ic74195a4ed340547c5e862dc2438f95be318c286\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\nAcked-by: Frank Lichtenheld \u003cfrank@lichtenheld.com\u003e\nMessage-Id: \u003c20240209110629.15364-1-frank@lichtenheld.com\u003e\nURL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg28203.html\nSigned-off-by: Gert Doering \u003cgert@greenie.muc.de\u003e\n"},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}