Re: [Openvpn-devel] [PATCH] Refuse mbed TLS external key with non RSA certificates

2018-10-09 Thread Steffan Karger
Hi, On 08-10-18 23:41, Arne Schwabe wrote: > The current API that we use (mbedtls_pk_setup_rsa_alt) only allows > using RSA keys with the external API. Using an EC, mbed TLS and external > key in OpenVPN will fail very late with a rather obscure error message. > > Instead fail early and provide

[Openvpn-devel] [PATCH] Refuse mbed TLS external key with non RSA certificates

2018-10-08 Thread Arne Schwabe
The current API that we use (mbedtls_pk_setup_rsa_alt) only allows using RSA keys with the external API. Using an EC, mbed TLS and external key in OpenVPN will fail very late with a rather obscure error message. Instead fail early and provide a clear message that only RSA keys are supported.