]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Add proper check for crypto modes (CBC or OFB/CFB)
authorSteffan Karger <steffan@karger.me>
Sun, 8 Jun 2014 16:16:13 +0000 (18:16 +0200)
committerGert Doering <gert@greenie.muc.de>
Mon, 7 Jul 2014 18:31:13 +0000 (20:31 +0200)
commita4b27b6481c7496f2a8705c993edfe150a3541cb
tree62732f6ee31dbb11950ce3f3597a0f0cba815c9c
parentc353af2f474f79bfd7b2b67ecc02e91152500209
Add proper check for crypto modes (CBC or OFB/CFB)

OpenSSL has added AEAD-CBC mode ciphers like AES-128-CBC-HMAC-SHA1, which
have mode EVP_CIPH_CBC_MODE, but require a different API (the AEAD API).
So, add extra checks to filter out those AEAD-mode ciphers.

Adding these made the crypto library agnostic function cfb_ofb_mode()
superfuous, so removed that on the go.

Also update all cipher mode checks to use the new cipher_kt_mode_*()
functions for consistency.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <1402244175-31462-3-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8779
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/crypto.c
src/openvpn/crypto.h
src/openvpn/crypto_backend.h
src/openvpn/crypto_openssl.c
src/openvpn/crypto_polarssl.c
src/openvpn/init.c