This is the v3 of the patch series. I choose to resend all of the patches so they all cleanly apply. Since the patches depend on the changes suggested to --genkey, I made them part of the patch series. The other patches have been updated to incoperate the feedback.
Arne Schwabe (7): Write key to stdout if filename is not given Implement --genkey type keyfile syntax and migrate tls-crypt-v2 Add pem_read_key_file variant that allows a random key Rewrite auth-token-gen to be based on HMAC based tokens Implement a permanent session id in auth-token Sent indication that a session is expired to clients Implement unit tests for auth-gen-token doc/openvpn.8 | 141 ++++++-- src/openvpn/Makefile.am | 1 + src/openvpn/auth_token.c | 387 +++++++++++++++++++++ src/openvpn/auth_token.h | 129 +++++++ src/openvpn/crypto.c | 35 +- src/openvpn/crypto.h | 15 + src/openvpn/init.c | 90 +++-- src/openvpn/manage.c | 4 +- src/openvpn/openvpn.h | 1 + src/openvpn/options.c | 103 ++++-- src/openvpn/options.h | 19 +- src/openvpn/push.c | 70 +++- src/openvpn/push.h | 8 + src/openvpn/ssl.c | 13 +- src/openvpn/ssl_common.h | 56 +-- src/openvpn/ssl_verify.c | 213 ++++++------ src/openvpn/ssl_verify.h | 15 +- src/openvpn/tls_crypt.c | 13 +- tests/unit_tests/openvpn/Makefile.am | 18 +- tests/unit_tests/openvpn/test_auth_token.c | 375 ++++++++++++++++++++ 20 files changed, 1457 insertions(+), 249 deletions(-) create mode 100644 src/openvpn/auth_token.c create mode 100644 src/openvpn/auth_token.h create mode 100644 tests/unit_tests/openvpn/test_auth_token.c -- 2.21.0 _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel