schwabe

= Build OpenVPN and OpenSSL with FIPS =
Checkout OpenSSL
    
    git clone https://github.com/openssl/openssl -b openssl-3.2 openssl32-fips
  
Compile OpenSSL
  
     ./Configure  --prefix=${HOME}/oss/openssl32-fips/dist --libdir=${HOME}/oss/openssl32-fips/dist/ --openssldir=${HOME}/oss/openssl32-fips/dist fips -g

     make install

schwabe

#! /usr/bin/python3

import sys
import random
import os
from base64 import standard_b64decode
import time
import pyotp

import pprint

schwabe

//  c++ -O2 -std=c++14 -g  -I/usr/local/opt/openssl@3/include -L/usr/local/opt/openssl@3/lib -lcrypto -lssl -lbenchmark scratch.cpp  && ./a.out
#include <benchmark/benchmark.h>
#include <openssl/rand.h>
#include <openssl/evp.h>
#include <iostream>

static uint8_t *nonce_data = NULL; /* GLOBAL */
const EVP_MD *nonce_md = NULL;

int nonce_secret_len = 16;

schwabe

def generate_pem(data:bytes, pemtype:bytes):
    s = b"-----BEGIN %s-----\n" % pemtype
    s += base64.encodebytes(data)
    s += b"-----END %s-----" % pemtype
    return s
  
def generate_tls_crypt2_wrapped_client_key_(clientkeys, serverkey, metadata: bytes):
    TLS_CRYPT_V2_TAG_SIZE = int(256/8)

    # The real max length is more but we restrict us here to a bit shorter string

schwabe

From 171e43142c82b6f0bf2cd5e4ce9265bb95527579 Mon Sep 17 00:00:00 2001
From: Arne Schwabe <arne@rfc2549.org>
Date: Wed, 19 Feb 2020 14:16:10 +0100
Subject: [PATCH] Use PROFILE=SYSTEM instead of DEFAULT for ssl ciphers on
 RHEL/Fedora

There is a Redhat/Fedora policy that you should not use "DEFAULT" and
SSL_CTX_set_cipher_list as that overrides the system wide policies.

Dropping this call however on Fedora/Redhat would weaken our security

schwabe

From faa6cadd30cbd459cf8c51bfe197af78f6bf9f95 Mon Sep 17 00:00:00 2001
From: Arne Schwabe <arne@openvpn.net>
Date: Wed, 6 Feb 2019 15:22:34 +0100
Subject: [PATCH] Fix management tunnel argument

When the conversion to the new getaddrinfo happened I forgot to add the
port to the getaddrinfo call here. Remember that port to fix binding to
a random port.
---
 src/openvpn/manage.c | 13 ++++++++++---

schwabe

• Support of new Transmitters
  • Frsky Horus
  • Frsky Q X7
• Much improved and overhauled Companion software
  • High DPI Display support
  • Qt5 instead of Qt4
  • Show custom names for switches/knobs/channels/etc throughout user interface.
  • Many performance and stability improvements.
  • Improved Simulator integration.
• Fully re-worked "SD Sync" feature with options dialog, faster and reliable copying between any two folders.

schwabe

schwabe