Re: [Openvpn-devel] [PATCH v4] Implement HMAC based session id for tls-crypt v2

2022-05-05 Thread Frank Lichtenheld
> Arne Schwabe hat am 05.05.2022 15:03 geschrieben: > [...] > diff --git a/src/openvpn/ssl_pkt.c b/src/openvpn/ssl_pkt.c > index 810b189e9..dad65e26a 100644 > --- a/src/openvpn/ssl_pkt.c > +++ b/src/openvpn/ssl_pkt.c [...] > @@ -434,8 +443,17 @@ tls_reset_standalone(struct tls_auth_standalone *ta

Re: [Openvpn-devel] [PATCH v4] Implement HMAC based session id for tls-crypt v2

2022-05-05 Thread Antonio Quartulli
Hi, On 05/05/2022 15:03, Arne Schwabe wrote: Tls-crypt v2 is more complicated to implement a proper stateless handshake. To allow state handshake this commit does - introduce a new packet CONTROL_WKC_V1 that repeats the wrapped client key. - introduce a way to negotiate the support for