Jo-Philipp Wich a28deda590 openvpn: disable CBC record splitting in PolarSSL/mbedTLS (#19101) ... OpenVPN assumes that its control channel messages are sent and received unfragmented, this assumption is broken when CBC record splitting is enabled in mbedTLS. The record splitting is intended as countermeasure against BEAST attacks which do not apply to OpenVPN, therefore we simply disable it until upstream OpenVPN gains the ability to process fragmented control messages. Disabling the splitting also works around a (not remotely triggerable) segmentation fault in mbedTLS. References: * https://dev.openwrt.org/ticket/19101 * https://community.openvpn.net/openvpn/ticket/524 * https://github.com/ARMmbed/mbedtls/pull/185 Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 45602		2015-05-04 08:49:21 +00:00
..
001-backport_cipher_none_fix.patch	openvpn: backport an upstream fix for a regression in using --cipher none (fixes #18676)	2015-01-04 12:03:29 +00:00
100-polarssl_compat.h	openvpn: update to 2.3.6, fixes CVE-2014-8104	2014-12-01 19:49:59 +00:00
110-musl_compat.patch	openvpn: fix compile error with musl	2014-06-30 15:34:03 +00:00
120-polarssl-disable-record-splitting.patch	openvpn: disable CBC record splitting in PolarSSL/mbedTLS (#19101)	2015-05-04 08:49:21 +00:00