Hi,
are there still plans to do this?
Would be very interesting for openwrt routers.
ALBI...
For all cryptography-related functions, tinc uses the functions
provided by the OpenSSL library.
If this library is not installed, you wil get an error when
configuring tinc for build. Support for running tinc without having
OpenSSL installed _may_ be added in the future.
On Thu, Aug 16, 2007 at 02:17:50PM +0200, Albi Rebmann wrote:> are there still plans to do this? > Would be very interesting for openwrt routers.The 1.1 branch can be built with GNUTLS and Gcrypt instead of OpenSSL, however Gcrypt currently does not support OFB mode, and tinc uses that by default for the meta data connection, so the code in that branch currently does not work. One could make it work with CFB mode, but that would make it incompatible with tincds using OpenSSL. -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://www.tinc-vpn.org/pipermail/tinc/attachments/20070816/0749a2fc/attachment.pgp
On Thu, Aug 16, 2007 at 02:30:53PM +0200, Guus Sliepen wrote:> On Thu, Aug 16, 2007 at 02:17:50PM +0200, Albi Rebmann wrote: > > > are there still plans to do this? > > Would be very interesting for openwrt routers. > > The 1.1 branch can be built with GNUTLS and Gcrypt instead of OpenSSL, > however Gcrypt currently does not support OFB mode, and tinc uses that > by default for the meta data connection, so the code in that branch > currently does not work. One could make it work with CFB mode, but that > would make it incompatible with tincds using OpenSSL.Correction: the 1.1 branch only uses Gcrypt, not GNUTLS. -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://www.tinc-vpn.org/pipermail/tinc/attachments/20070816/1cd77050/attachment.pgp