Skip to content

Client-specific tls-crypt keys (--tls-crypt-v2)

Steffan Karger openvpn-devel 1 version In review

Get series with b4
b4 am [email protected]...

Versions newest first

  1. v1 Latest10 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/10Add crypto_pem_{encode,decode}()src/openvpn/crypto_backend.h src/openvpn/crypto_mbedtls.c src/openvpn/crypto_openssl.c +2 more+293 -13 replies
2/10tls-crypt-v2: add specification to doc/doc/tls-crypt-v2.txt+164 -04 replies
3/10tls-crypt-v2: generate client keysdoc/openvpn.8 src/openvpn/buffer.c src/openvpn/buffer.h +8 more+601 -160 replies
4/10tls-crypt-v2: add unwrap_client_keysrc/openvpn/buffer.h src/openvpn/tls_crypt.c tests/unit_tests/openvpn/test_tls_crypt.c+342 -200 replies
5/10tls-crypt-v2: add P_CONTROL_HARD_RESET_CLIENT_V3 opcodesrc/openvpn/ps.c src/openvpn/ssl.c src/openvpn/ssl.h +1 more+26 -70 replies
6/10tls-crypt-v2: implement tls-crypt-v2 handshakesrc/openvpn/init.c src/openvpn/openvpn.h src/openvpn/options.c +5 more+179 -180 replies
7/10Move env helper functions into their own module/filesrc/openvpn/Makefile.am src/openvpn/argv.c src/openvpn/env_set.c +4 more+584 -5134 replies
8/10Move file-related functions from misc.c to platform.csrc/openvpn/init.c src/openvpn/misc.c src/openvpn/misc.h +8 more+232 -1823 replies
9/10Move execve/run_script helper functions to run_command.csrc/openvpn/Makefile.am src/openvpn/env_set.c src/openvpn/init.c +15 more+351 -2661 reply
10/10tls-crypt-v2: Add script hook to verify metadataChanges.rst doc/openvpn.8 src/openvpn/init.c +8 more+160 -140 replies

Reviews trailers per patch

1 of 10 patches has a Reviewed-by or Acked-by of their own; the series has one for all of them.

PatchGert DoeringAntonio Quartulli
SeriesA-b A-b A-b A-b A-b T-b A-b A-b A-b A-b A-b A-b
1/10
2/10
3/10
4/10
5/10
6/10
7/10A-b A-b
8/10
9/10
10/10

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [Openvpn-devel] [PATCH 00/10] Client-specific tls-crypt keys (--tls-crypt-v2)

Hi,

The following patch set adds support for client-specific tls-crypt keys.

For a rationale, description and specification see patch 2/10, which adds all that to doc/tls-crypt-v2.txt.

This set is also available as a branch in my github fork:
https://github.com/syzzer/openvpn/tree/tls-crypt-v2-preview4

-Steffan