Skip to contentSkip to conversation

man: encourage user to read on about --tls-crypt

PATCH In review Steffan Karger 2 participants 2 messages Dec 25, 2016 – Dec 26, 2016

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 man: encourage user to read on about --tls-crypt

As suggested by krzee in trac #790, refer to the --tls-crypt option form the --tls-auth section of the man page, to encourage users to check out the --tls-crypt feature.

Trac: #790

---
 doc/openvpn.8 | 5 +++++
 1 file changed, 5 insertions(+)
doc/openvpn.8 +5 -0
index b1ca9ed..c618746 100644
@@ -5029,6 +5029,11 @@ key file used with
 .B \-\-tls\-auth
 gives a peer nothing more than the power to initiate a TLS
 handshake.  It is not used to encrypt or authenticate any tunnel data.
+
+Use
+.B \-\-tls\-crypt
+instead if you want to use the key file to not only authenticate, but also
+encrypt the TLS control channel.
 .\"*********************************************************
 .TP
 .B \-\-tls\-crypt keyfile
Signature · 1 line
2.7.4
#1 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ACK. Looks good and I agree this is a good idea.

Your patch has been applied to the following branches

commit 403dfe1bfdbdf6e5f8abac3401a96852562aec54 (master) commit ebd24617f97c63fbe40a07e855ae3469f96474d7 (release/2.4)

Author: Steffan Karger
Date:   Sun Dec 25 23:02:14 2016 +0100
     man: encourage user to read on about --tls-crypt

     Trac: #790
     Signed-off-by: Steffan Karger <[email protected]...>
     Acked-by: David Sommerseth <[email protected]...>
     Message-Id: <[email protected]...>
     URL: https://www.mail-archive.com/[email protected]/msg13713.html
     Signed-off-by: David Sommerseth <[email protected]...>

- --
kind regards,

David Sommerseth

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQIcBAEBAgAGBQJYYQreAAoJEIbPlEyWcf3ys2EQAKZP3hFeP/SgEUDN64Siq1dK Pq0sOtpIcvAvsNOrlrJbVnt5RtddXr7uvEA0oSeM0A/suQdyrYBOvmwnaNgqaYeM W5hG+dm/yEQ0kEf9ANSHLT37Uk9zpY2X9QzInCsZIIOQ5lFDbeumpiZrM+cRzL23 I4/e1Mt6qGyG5mOmAelStqM5FIbGsrtsvLncTw/TFUAgwvAbZBYrj8e76Cw5Se1v hicx8TmFi+ZaTYAPH2arpYKyRdC2sOmkP3Wqm1j94Q6eUF7E8o77oMGbj1Me+SzX eZaXD03RcVZwqb7i2YgWoHgPofrU0mWvYdTLD1y63Nbd+Tm/duEjMeQZSEoAnqXX aCxumz6z5tHjscThsDcbkTWOXnJfMBO5ATtJ3WOr663fWsljFOIc+lPFDjAL5JDS x9fypPt0lxzcvfWI0jQ3iIVYQbK9c2ThjTZCI+H32itTOqjWHqmsOwgwAPBtw7KQ KtIOvM+w0UDTL1UiqZBzt+5RnhMWDuPG7/iVz/JGke1Sko497tmK9t0SOhmHALq1 IdlmCKmxUS553li3LT7oc6x0iHOYy88AgryIIBsEr2nIsTJ2ZKI8zKVq+qM4Vmr5 /v+MZtvw62scKDqiB1u1zcrlFFDNRGYwpaoNgkf7Jmz7jqN2EaelrMLTqk2bj2Lr GzqXjowLpUU429NwEWWo
=ghBE
-----END PGP SIGNATURE-----