diff options
| author | Daniel Kubec | 2015-03-12 15:14:20 +0100 |
|---|---|---|
| committer | David Sommerseth | 2015-10-10 00:02:40 +0200 |
| commit | 685e486e8b8f70c25f09590c24762ff734f94a51 (patch) | |
| tree | 2352755e34a75ea39f48497d6fb7dc7469330294 /src/openvpn/options.h | |
| parent | 7246ccfdbe6039c5c578ecaa07505307d53b8e84 (diff) | |
| download | openvpn-685e486e8b8f70c25f09590c24762ff734f94a51.zip openvpn-685e486e8b8f70c25f09590c24762ff734f94a51.tar.gz | |
Added support for TLS Keying Material Exporters [RFC-5705]
Keying Material Exporter [RFC-5705] allow additional keying material to be
derived from existing TLS channel. This exported keying material can then be
used for a variety of purposes.
[DS: Updated man page to document both upper and lower length boundaries]
Signed-off-by: Daniel Kubec <niel@rtfm.cz>
Signed-off-by: David Sommerseth <davids@redhat.com>
Acked-by: Steffan Karger <steffan.karger@fox-it.com
Acked-by: David Sommerseth <davids@redhat.com>
Diffstat (limited to 'src/openvpn/options.h')
| -rw-r--r-- | src/openvpn/options.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/openvpn/options.h b/src/openvpn/options.h index abec83f..c642aa0 100644 --- a/src/openvpn/options.h +++ b/src/openvpn/options.h @@ -591,6 +591,12 @@ struct options bool use_peer_id; uint32_t peer_id; + +#if defined(ENABLE_CRYPTO_OPENSSL) && OPENSSL_VERSION_NUMBER >= 0x10001000 + /* Keying Material Exporters [RFC 5705] */ + const char *keying_material_exporter_label; + int keying_material_exporter_length; +#endif }; #define streq(x, y) (!strcmp((x), (y))) |