Re: [Openvpn-devel] [PATCH 4/6] Remove OpenSSL tmp_rsa_callback. Removes support for ephemeral RSA in TLS.

2014-01-03 Thread Arne Schwabe
Am 01.01.14 21:10, schrieb Steffan Karger: > This code would not really generate ephemeral keys every time it is called, > but a single key that would be reused during process lifetime and returned > each time the function was called; probably not what users would expect. > > TLS allowes ephemeral

[Openvpn-devel] [PATCH 4/6] Remove OpenSSL tmp_rsa_callback. Removes support for ephemeral RSA in TLS.

2014-01-01 Thread Steffan Karger
This code would not really generate ephemeral keys every time it is called, but a single key that would be reused during process lifetime and returned each time the function was called; probably not what users would expect. TLS allowes ephemeral keys to be used only when no other key exchange,