]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Allow external EC key through --management-external-key
authorSelva Nair <selva.nair@gmail.com>
Thu, 25 Jan 2018 19:45:13 +0000 (14:45 -0500)
committerGert Doering <gert@greenie.muc.de>
Tue, 20 Feb 2018 10:08:49 +0000 (11:08 +0100)
commit7eca140c70ff76177371dc94c19aeb8644c2c3b5
tree1a07b96e4c7ec5d023bcd2264ca5e551bf56d5b9
parent7f7f00da88eeea847da57f4f34c66c1f4a935a73
Allow external EC key through --management-external-key

- This automatically supports EC certificates through
  --management-external-cert
- EC signature request from management is prompted by
  >PK_SIGN if the client supports it (or >RSA_SIGN)
  Response should be of the form 'pk-sig' (or rsa-sig
  by older clients) followed by DER encoded signature
  as base64 terminated by 'END' on a new line.

v3: This is v2 adapted to the client_version capability
Requires pacthes 1 and 2 of the series 147:
https://patchwork.openvpn.net/project/openvpn2/list/?series=147

Signed-off-by: Selva Nair <selva.nair@gmail.com>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <1516909513-31683-1-git-send-email-selva.nair@gmail.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg16365.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
doc/management-notes.txt
src/openvpn/ssl_openssl.c