References: <1478636302-9678-1-git-send-email-steffan.karger@...1435...> <1478636302-9678-2-git-send-email-steffan.karger@...1435...> From: Arne Schwabe Message-ID: Date: Thu, 10 Nov 2016 16:50:54 +0100 MIME-Version: 1.0 In-Reply-To: <1478636302-9678-2-git-send-email-steffan.karger@...1435...> Subject: Re: [Openvpn-devel] [PATCH 1/5] Refactor static/tls-auth key loading List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit To: Steffan Karger , openvpn-devel@lists.sourceforge.net Am 08.11.16 um 21:18 schrieb Steffan Karger: > Remove duplicate code, in preparation for adding --tls-crypt, which > otherwise would have to duplicate this code again. > > This should be equivalent to the old code, except for two things: > * The log lines for static key initialization change slightly, from > "Static Encrypt/Decrypt" to "Incoming/Outgoing Static Key Encryption" > * We also 'check and fix highly unlikely key problems' for tls-auth > keys (boils down to a sanity-check for an all-zero key). Looks good. ACK to this one. Arne