Re: [Openvpn-devel] linux openvpn development job

2009-04-29 Thread Benny Amorsen
"Karl O. Pinc" writes: > Doesn't the kernel care whether userspace has direct access to > hardware? If userspace has the right privileges, then no. The X server is an example of this. > Seems to me that the kernel does more than abstract hardware, it also > protects hardware by managing concurr

Re: [Openvpn-devel] linux openvpn development job

2009-04-29 Thread Benny Amorsen
Siim Põder writes: > Are you sure crypto accelerators allow DMA from user memory? I don't > know for sure either, but I would suspect that they would work like any > other device: copy to kernel, DMA to device, DMA back to kernel, copy to > user. Devices don't care if memory belongs to user or k

Re: [Openvpn-devel] linux openvpn development job

2009-04-27 Thread Benny Amorsen
David Sommerseth writes: > What if OpenVPN on selected platforms also provided it's own kernel driver > which would do practically the same as the upstream tun.ko modules - > except it provides a direct API which OpenVPN can utilize, to avoid the > kernel-userspace-kernel ping-pong. It seems tha

[Openvpn-devel] Raw RSA authentication

2008-12-29 Thread Benny Amorsen
Would it be possible to add raw RSA authentication to OpenVPN, like Openswan has for IPSEC? Openswan automatically generates a private key in the format: #pubkey=0sAQOdODm...Yog5rTj3V2AsI/ Modulus: 0x9d38399...9ad38f757602c23f PublicExponent: 0x03 # everything after this point is secret PrivateEx