]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Add support for Mbed TLS 4
authorMax Fillinger <maximilian.fillinger@sentyron.com>
Fri, 23 Jan 2026 16:47:39 +0000 (17:47 +0100)
committerGert Doering <gert@greenie.muc.de>
Sat, 24 Jan 2026 17:49:44 +0000 (18:49 +0100)
commit494fb71804dc8b2d686cc431ec41edeea43fe9b6
tree1d08d970f207febfddebefc8bbd9529ef259eb48
parentb10ee38ccde5f155d02fcd3e8f1b1ab454826ab0
Add support for Mbed TLS 4

This commit adds support for Mbed TLS 4. This version comes with some
drastic changes. The crypto library has been completely redesigned, so
the contents of crypto_mbedtls.c are moved to crypto_mbedtls_legacy.c
and crypto_mbedtls.c handles the crypto for version 4.

Mbed TLS 4 also removed the feature for looking up a crypto algorithm by
name, so we need to translate algorithm names to Mbed TLS numbers in
OpenVPN. The tables are not yet complete. For symmetric algorithms, I
have added AES and Chacha-Poly which should be enough for most use
cases.

Change-Id: Ib251d546d993b96ed3bd8cb9111bcc627cdb0fae
Signed-off-by: Max Fillinger <maximilian.fillinger@sentyron.com>
Acked-by: Arne Schwabe <arne-openvpn@rfc2549.org>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1441
Message-Id: <20260123164746.7333-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg35401.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
16 files changed:
README.mbedtls
src/openvpn/Makefile.am
src/openvpn/crypto_backend.h
src/openvpn/crypto_mbedtls.c
src/openvpn/crypto_mbedtls.h
src/openvpn/crypto_mbedtls_legacy.c [new file with mode: 0644]
src/openvpn/crypto_mbedtls_legacy.h [new file with mode: 0644]
src/openvpn/mbedtls_compat.h
src/openvpn/ssl_mbedtls.c
src/openvpn/ssl_mbedtls.h
src/openvpn/ssl_verify_mbedtls.c
src/openvpn/syshead.h
tests/Makefile.am
tests/t_server_null_default.rc
tests/unit_tests/openvpn/Makefile.am
tests/unit_tests/openvpn/test_common.h