Hi, On Tue, Jan 30, 2018 at 12:21:58PM -0500, Selva Nair wrote: > A quick comment regarding item 2 in topics: > > 2 mgmt version 2 / pk-sign and 2.4 > > Is this something we want in 2.4? If not, how's the GUI going to deal with > > 2.4 and master being different?" > > Unless 2.4 is getting EC cert external signing support, we do not need > this in there, do we? > > I think it shouldn't be a problem for UI's as the master will behave > the same way as 2.4 towards old UI's. New/updated UI's are expected to > first check the management version of the daemon, then optionally > announce version 2 support, and be prepared to handle old and > new-style requests.
This is the part I was missing - that the GUI knows what version the openvpn.exe process can handle. So a "master GUI" would send "version 2", while a "2.4 GUI" would see "openvpn.exe can only do 1" and send "version". Good - that basically concludes the topic for tomorrow :-) (unless someone convinces me that we want EC cert external signing in 2.4) > Anyway, "The Windows GUI" doesn't care as it does not handle signature > requests. Jonathan said the same about Tunneblick. Oh? I missed that part. So who is using --management-external-key, then, if neither of the "two main GUIs" are doing it? gert -- now what should I write here... Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
