]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Remove reuse of key_type during init of data channel auth and tls-auth
authorSteffan Karger <steffan@karger.me>
Sun, 7 Feb 2016 19:47:10 +0000 (20:47 +0100)
committerGert Doering <gert@greenie.muc.de>
Tue, 9 Feb 2016 06:58:40 +0000 (07:58 +0100)
commite7d78e407d41d48fbd91a71b2edfedcd2879b778
tree23cad1e80834a529ed3df7d355327ba54a3f53b5
parent70fbc5be209635739458267abde31b5cd4f770d0
Remove reuse of key_type during init of data channel auth and tls-auth

Prepare for using AEAD cipher modes + tls-auth, as tls-auth might want to
use an HMAC, while the data channel uses e.g. GCM tags.  This separates
the two initialisations.  Also, error out (and give a clear error message)
if a user specifies tls-auth but no valid auth algorithm, which makes no
sense at all.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <1454874438-5081-3-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/11073
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/crypto.c
src/openvpn/init.c
src/openvpn/openvpn.h