]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Refactor static/tls-auth key loading
authorSteffan Karger <steffan.karger@fox-it.com>
Tue, 8 Nov 2016 20:18:18 +0000 (21:18 +0100)
committerGert Doering <gert@greenie.muc.de>
Mon, 14 Nov 2016 18:40:31 +0000 (19:40 +0100)
commit28c115e401636432b1da2365b8f144523d9d7c53
tree818bd163b07e1d78a566cc9255d347bb68d102c5
parent11eedcd0071e7185fc3011cda4703f5cc75fe979
Refactor static/tls-auth key loading

Remove duplicate code, in preparation for adding --tls-crypt, which
otherwise would have to duplicate this code again.

This should be equivalent to the old code, except for two things:
* The log lines for static key initialization change slightly, from
  "Static Encrypt/Decrypt" to "Incoming/Outgoing Static Key Encryption"
* We also 'check and fix highly unlikely key problems' for tls-auth
  keys (boils down to a sanity-check for an all-zero key).

Signed-off-by: Steffan Karger <steffan.karger@fox-it.com>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <1478636302-9678-2-git-send-email-steffan.karger@fox-it.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg12969.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/crypto.c
src/openvpn/crypto.h
src/openvpn/init.c