Re: [Openvpn-devel] [Openvpn-users] Incorrect HMAC generation

2010-03-09 Thread froggu 21
hi the debug test codes in OpenVPN are as follow, but the HMAC output is wrong. Did I missed out anything? regards Frances static void init_hmac (HMAC_CTX *ctx, const EVP_MD *digest, struct key *key, const struct key_type *kt, const char *prefix) { struct gc_arena gc = gc_new (); HMA

Re: [Openvpn-devel] [Openvpn-users] Incorrect HMAC generation

2010-03-09 Thread froggu 21
hi Jan Thanks. yes, the keys file was generated using the openvpn genkey function. The display was generated during the OpenVPN keys establishment phase. The keys are verified to be correct. Just that the HMAC generation output does not tally. In fact, I found that only the TLS PRF HMAC generati

Re: [Openvpn-devel] [Openvpn-users] Incorrect HMAC generation

2010-03-09 Thread Jan Just Keijser
Hi Frances, froggu 21 wrote: hi all May I know whether you have successfully verified the HMAC generated by OpenVPN? I found that the HMAC value generated by the OpenVPN does not tally with the HMAC value generated from the OpenSSL directly. I wonder is there any incorrect implementation of