Hi,

On 22/12/14 06:47, jack seth wrote:
Is it possible to dictate the parameters of the secret key that is generated? If so, how? The openvpn documentation just gives this command
*'openvpn --genkey --secret ta.key'  *What kind and size of key does this 
command generate?


the OpenVPN secret key format is static. It is a 2048bit key, with room for 4 512bit keys , depending on the ciphers and 'direction' used. It is currently not foreseen that we'll have a need of larger preshared keys in the near future.


See
http://openvpn.net/index.php/open-source/documentation/security-overview.html
and
https://community.openvpn.net/openvpn/wiki/327-changed-hex-bytes-in-the-static-key-the-key-still-connects-to-a-remote-peer-using-the-original-key

for more details.

HTH,

JJK

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to