Re: tls-crypt2

tincantech via Openvpn-users <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <RkqBfa1mCgNAqEVbPY9ziUGOJrrXxEayO1EA-1DeJ7GgeB-rEMXd0FBH84MKn9uIWq8RP_nQJWlGCQZUzHKOsWJR8WEBbszkynl8Hr0KaeQ=@protonmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

Sent with Proton Mail secure email.

On Monday, 8 January 2024 at 20:46, Antonio Quartulli <[email protected]> wrote:


> Hi,
> 
> On 08/01/2024 21:34, Hans via Openvpn-users wrote:

<snip>

> > 1) how can I revoke a SINGLE client key (as this was suggested as a
> > ‘new feature”)

TLS-Crypt-V2 keys are not X509 keys and cannot be "revoked".

<snip>

> This is why you couldn't find any "how" on the Internet. You need to
> build the logic by yourself.

Alternatively, you can take a look at how Easy-TLS achieves this functionality:
* https://github.com/TinCanTech/easy-tls

Easy-TLS uses a disabled-list, to disable individual TLS-Crypt-V2 keys.

HTH
tct
-- 

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBYJlnGuMCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAABawAgAqkAIJUnJy3DLETSF+yOeRBfsmT89Lr3zjXHkfVPRx70Kk4ZV
2TNgJNuv6ojuovvl1ixt4ZDadVzQ3GXbPQ2VcJD/VQo6flGdaxeM8bsVM3c3
YsHTkU0DiSl/wij+k2OLYzinCC1I5hTxTN0rsyBnctoEcT7LFd4pv9ElrwrO
hFRHg7yCeAzmuVjEZOimeLvecw/fU8GHMRRUXhcW1p31Hmwyc631wi0PF4kU
hwLpa0FWI+D1tKNTu0e0F1w5QyVcqFCoMgpvNmzNOEFoxmBgW9Ov56pjGyde
inzDFd1KclkkGuEAlJYtECw4UPTjGaK4pDAxzpysl5AErBiCwLJRkA==
=rJE2
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
publickey - [email protected] - 0x09BC3D44.asc (application/pgp-keys, 1.7 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----

xsBNBFvwSccBCADOmHEnQlLmOjJRtJL2l53MLwwFTy7XnEps3b1Q0UwWYFCv
L2oNp0nrdGlKKDJq50Y09SR+URYBQmKmY3EmzpyUIKM/rgo1RyubHpMRHbDp
7Jp8LxkffFBVJj/t5VMpD6eMR6aUciQjgRL8NZe6+T7xfXXXwV5hoReZ3jO+
zHi6SR7xTvGXla+MQz6EEpWnlbLvg2ort9KseuVjYrqvRMxcdP0o9cZWJ5ep
JNmgeB6M7+OW08U1SsXtKrpLRcI6yKmV38jhzPr2ZgP9rmrlErR/1iqQQHXY
o8/0DfPyF0mH9ynQIiLE/l+FYu4rsG8ViKlxhXczePzAtLCjiB0a0mRVABEB
AAHNNyJ0aW5jYW50ZWNoQHByb3Rvbm1haWwuY29tIiA8dGluY2FudGVjaEBw
cm90b25tYWlsLmNvbT7CwH8EEAEIACkFAlvwSccGCwkHCAMCCRBPl5z2a5C4
nQQVCAoCAxYCAQIZAQIbAwIeAQAKCRBPl5z2a5C4nQBDB/9ZUo9BOXJR61Nm
02oZ/8aRXO9NnUSFt6GLOWcDNvAs4IJWMDVEQfYanb+421QNd/5d6H1iXF+i
4LDK0M6agC+gsNFJnjPGItvPtj7WyjynZRx8D40PPXigfHYuw2oRu0lr+P1p
1qeUe4NbcqIv8IIvLz2zClYZONgAsQVcNAHi7Z4ortQ2io2BAVj/819JPYMt
tHgY81wS1V7v8GDTZg8oaPhXGfaC4TZFGtZr/bybcqrso35jaQmC54xMbXpF
AUrc3uGVOH+OdG/BW2gcYqpvUFBukXxCUBYHP2NfXhNfzGt9nC1ulNKYeP19
TGlOorBMYIAEHoGxvpbUXfbaNWCUzsBNBFvwSccBCAC9KyVZRS5aMaG5Pi0n
fx8aNos3bYp246MtfaoKBfTQArd+GZW+WnFyJEiSyLdz0rUutyCAdf5lgVH+
WvLvImiGrSrzVpMT2nCS09LqL50Qjz8A7gp5H/hQztZ8iNysGD9NO46OnI75
90dHfCrXjQPSFtFGsTzgDxQIiMuzz9DR7BekKPmuOFIhBe9eEZqbxc8RWeQt
ha7i/DrJTRNK1aOADQFVuV1/Am5ThGPWFM/YJUyTYhMW0yePh45ObWuRQZks
l+aOm4L0KGDDYlm/FQx/EMCubvlzy/zxDdB6nqFih2qZrfymniSOKajG0joT
pZoz/Ez+4fAtg6y0PspNR6idABEBAAHCwGkEGAEIABMFAlvwSccJEE+XnPZr
kLidAhsMAAoJEE+XnPZrkLidRe0H/j5CIFIAucuaiEMkLkNKEAO5s7x47eNy
GPfZslyY+HjzGU0d07MkkGmVkPTVzwqVzNZbny7ZAv1zlW0Uy0yHp1APpyYt
8buUppTBq7d47ogxERYzt/Lc2L5a/VKFNRbhN1/XQmPiz2Ele4tyipbTapcy
+zbyfzAMD13cIdZ13hTsNP0olgBhAqUAUUYpxRlkAHeJ+Dt3NbzHS4KQK538
NJ/l7bXSKsGqoYqJeZ8VNBxwWWUbuG4jjrh43MIRgUZ5WsPUYV6Hx056kMjb
/bYBjI0TEMvH8160uqzFXeHvYyUlq0SinD/Z9ioIe8QdsHGBDUIRYYub1pO8
qrCzRZx0oNA=
=/Dea
-----END PGP PUBLIC KEY BLOCK-----
publickey - [email protected] - 0x09BC3D44.asc.sig (application/pgp-signature, 310 B) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.