Re: [ClusterLabs] Few questions regarding corosync authkey

2016-06-06 Thread Jan Friesse
Hi, Would like to understand how secure is the corosync authkey. As the authkey is a binary file, how is the private key saved inside the authkey? Corosync uses symmetric encryption, so there is no public certificate. authkey = private key What safeguard mechanisms are in place if the

[ClusterLabs] Few questions regarding corosync authkey

2016-06-06 Thread Nikhil Utane
Hi, Would like to understand how secure is the corosync authkey. As the authkey is a binary file, how is the private key saved inside the authkey? What safeguard mechanisms are in place if the private key is compromised? For e.g I don't think it uses any temporary session key which refreshes