Re: [Openvpn-devel] Enhancements.

[Jan Just Keijser]

Gert Doering wrote:

Hi,

On Fri, Sep 24, 2010 at 12:01:08PM +0200, Jan Just Keijser wrote:

3385 #ifdef ENABLE_PUSH_PEER_INFO

[..]

just toyed with it for about an hour or so and I can't get it to work - I even ran

  openvpn --cipher none --auth none

to see if I could see the IV_ and UV_ variables fly over the wire and I don't even see that.

Are you sure it has been compiled in?  The code block is #ifdef'ed...

(Yes, this sounds like a dumb question, but sometimes we overlook the
obvious)

OK, just toyed with it a little bit more:

- yes the code is compiled in (there's a #define in syshead.h)
- yes the IV_ lines are sent over the wire if you specify --push-peer-info


so it definitely looks like a "work in progress" ...


cheers,

JJK

- but no the server never does anything with it (in key_method_2_read the buffer is emptied out after reading the username and password; the IV_/UV_ part comes after that)

smime.p7s
Description: S/MIME Cryptographic Signature