[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openconnect-devel
Subject:    PFS and openconnect
From:       n.mavrogiannopoulos () gmail ! com (Nikos Mavrogiannopoulos)
Date:       2015-02-25 10:54:18
Message-ID: CAJU7zaLEo4YsSy8aEOhVn=a2DSiVf87nPNhWrqikupkVBqO8wg () mail ! gmail ! com
[Download RAW message or body]

On Wed, Feb 25, 2015 at 11:32 AM, Bj?rn JACKE <bj at sernet.de> wrote:
> Hi,
> openconnect works great for me with PFS. However it would be nice if the usage
> of PFS would be visible from the log output. For example I see this in the log
> output:
> Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)-(AES-256-CBC)-(SHA1).

You can ignore the DTLS session information with regards to PFS.
Although it uses a DTLS ciphersuite, it is using a key that was
generated during the CSTP exchange. The TLS ciphersuite is the
important here, but indeed, it is not printed.

regards,
Nikos


[prev in list] [next in list] [prev in thread] [next in thread]