From cf69617bbea45a15423c4188daa9386debcbe1ec Mon Sep 17 00:00:00 2001 From: James Yonan Date: Thu, 9 Dec 2010 11:21:04 +0000 Subject: Added "management-external-key" option. This option can be used instead of "key" in client mode, and allows the client to run without the need to load the actual private key. When the SSL protocol needs to perform an RSA sign operation, the data to be signed will be sent to the management interface via a notification as follows: >RSA_SIGN:[BASE64_DATA] The management interface client should then sign BASE64_DATA using the private key and return the signature as follows: rsa-sig [BASE64_SIG_LINE] . . . END This capability is intended to allow the use of arbitrary cryptographic service providers with OpenVPN via the management interface. git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@6708 e7ae566f-a301-0410-adde-c780ea21d3b5 --- syshead.h | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'syshead.h') diff --git a/syshead.h b/syshead.h index 63b82ba..30ff556 100644 --- a/syshead.h +++ b/syshead.h @@ -509,6 +509,21 @@ socket_defined (const socket_descriptor_t sd) #define ENABLE_DEF_AUTH #endif +/* + * Enable external private key + */ +#if defined(ENABLE_MANAGEMENT) && defined(USE_SSL) +#define MANAGMENT_EXTERNAL_KEY +#endif + +/* + * MANAGEMENT_IN_EXTRA allows the management interface to + * read multi-line inputs from clients. + */ +#if defined(MANAGEMENT_DEF_AUTH) || defined(MANAGMENT_EXTERNAL_KEY) +#define MANAGEMENT_IN_EXTRA +#endif + /* * Enable packet filter? */ -- cgit