Further enhance async-push feature description

Signed-off-by: David Sommerseth <davids@openvpn.net>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <1481718210-15673-1-git-send-email-davids@openvpn.net>
URL: http://www.mail-archive.com/search?l=mid&q=1481718210-15673-1-git-send-email-davids@openvpn.net

diff --git a/Changes.rst b/Changes.rst
index a5002dd431e0b2a5ba92552ff038d8a10fa77d30..7da111926ed44059b243fa90d72f6967243f6f31 100644 (file)
--- a/Changes.rst
+++ b/Changes.rst
@@ -148,10 +148,11 @@ Control channel encryption (``--tls-crypt``)
     post-quantum security.
 
 Asynchronous push reply
-    If asynchronous authentication is enabled and completed after server received
-    PUSH_REQUEST message, server sends PUSH_REPLY immediately without waiting for next
-    PUSH_REQUEST. Requires use of ``--enable-async-push`` as ./configure parameter at
-    build time.
+    Plug-ins providing support for deferred authentication can benefit from a more
+    responsive authentication where the server sends PUSH_REPLY immediately once
+    the authentication result is ready instead of waiting for the the client to
+    to send PUSH_REQUEST once more.  This requires OpenVPN to be built with
+    ``./configure --enable-async-push``.  This is a compile-time only switch.
 
 
 Deprecated features

diff --git a/configure.ac b/configure.ac
index 27bdcc3a1119b9ba1d0b3f8f5e1bd6a6dd05cb3b..4f086eab2308ce3e60b870f14ac705182f021300 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -266,7 +266,7 @@ AC_ARG_ENABLE(
 
 AC_ARG_ENABLE(
        [async-push],
-       [AS_HELP_STRING([--enable-async-push], [enable async-push support @<:@default=no@:>@])],
+       [AS_HELP_STRING([--enable-async-push], [enable async-push support for plugins providing deferred authentication @<:@default=no@:>@])],
        ,
        [enable_async_push="no"]
 )