openwrt/package/network/services/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch

--- a/src/openvpn/ssl_mbedtls.c
+++ b/src/openvpn/ssl_mbedtls.c
@@ -1336,7 +1336,7 @@ const char *
 get_ssl_library_version(void)
 {
     static char mbedtls_version[30];
-    unsigned int pv = mbedtls_version_get_number();
+    unsigned int pv = MBEDTLS_VERSION_NUMBER;
     sprintf( mbedtls_version, "mbed TLS %d.%d.%d",
              (pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );
     return mbedtls_version;
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com> 2016-12-10 11:11:33 +00:00			`--- a/src/openvpn/ssl_mbedtls.c`
			`+++ b/src/openvpn/ssl_mbedtls.c`
openvpn: update to 2.4.3 Fixes for security and other issues. See security announcement for more details: https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 * Remotely-triggerable ASSERT() on malformed IPv6 packet (CVE-2017-7508) * Pre-authentication remote crash/information disclosure for clients (CVE-2017-7520) * Potential double-free in --x509-alt-username (CVE-2017-7521) * Remote-triggerable memory leaks (CVE-2017-7512) * Post-authentication remote DoS when using the --x509-track option (CVE-2017-7522) * Null-pointer dereference in establish_http_proxy_passthru() * Restrict --x509-alt-username extension types * Fix potential 1-byte overread in TCP option parsing * Fix mbedtls fingerprint calculation * openssl: fix overflow check for long --tls-cipher option * Ensure option array p[] is always NULL-terminated * Pass correct buffer size to GetModuleFileNameW() (Quarkslabs finding 5.6) Signed-off-by: Magnus Kroken <mkroken@gmail.com> 2017-06-22 21:01:01 +00:00			`@@ -1336,7 +1336,7 @@ const char *`
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com> 2016-12-10 11:11:33 +00:00			`get_ssl_library_version(void)`
			`{`
			`static char mbedtls_version[30];`
			`- unsigned int pv = mbedtls_version_get_number();`
			`+ unsigned int pv = MBEDTLS_VERSION_NUMBER;`
			`sprintf( mbedtls_version, "mbed TLS %d.%d.%d",`
			`(pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );`
			`return mbedtls_version;`