Hi,

On Wed, Nov 06, 2019 at 03:42:32PM +0100, Jan Just Keijser wrote:
> > This might actually be pushable...  NCP_VERSION 2.0?

> What might work is this:
> - client pushes a flag that it can do PRF2 (for lack of a better name)
> - server decides whether it wants to do PRF or PRF2 for this client
> - if we decide to go for PRF2, then push an option to the client to 
> (re)adjust the session keys

This is about what I had in mind.

Now we just need to agree on the definitions, the option name, and who
gets to code it :-)

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to