Steffan Karger c94b3ff0f5 Discourage using 64-bit block ciphers ... As discussed with the development team, we should start moving away from ciphers with a small block size. For OpenVPN in particular this means moving away from 64-bit block ciphers, towards 128-bit block ciphers. This patch makes a start with that by moving ciphers with a block size < 128 bits to the bottom of the --show-ciphers output, and printing a warning in the connection phase if such a cipher is used. While touching this function, improve the output of --show-ciphers by ordering the output alphabetically, and changing the output format slightly. [DS: Fixed C89 issues in patch, moving 'int nid' and 'size_t i' declaration to begining of function instead of in the for-loops. This is also required to not break building on stricter compiler setups where C99 must be enabled explicitly ] Signed-off-by: Steffan Karger <steffan@karger.me> Acked-by: Arne Schwabe <arne@rfc2549.org> Message-Id: <1471358742-8773-1-git-send-email-steffan@karger.me> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg00029.html CVE: 2016-6329 Signed-off-by: David Sommerseth <davids@openvpn.net>		2016-08-22 14:52:50 +02:00
..
unit_tests	Only build and run cmocka unit tests if its submodule is initialized	2016-05-31 16:40:29 +02:00
Makefile.am	Add unit testing support via cmocka	2016-05-30 22:40:55 +02:00
t_client.rc-sample	Fix IPv6 examples in t_client.rc-sample	2013-11-17 09:59:57 +01:00
t_client.sh.in	Prevent integration test timeout bc. of sudo	2016-05-09 20:17:01 +02:00
t_cltsrv-down.sh	build: standard directory layout	2012-03-22 22:07:08 +01:00
t_cltsrv.sh	build: standard directory layout	2012-03-22 22:07:08 +01:00
t_lpback.sh	Discourage using 64-bit block ciphers	2016-08-22 14:52:50 +02:00