[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] "--askpass file" is evil!


  • Subject: Re: [Openvpn-users] "--askpass file" is evil!
  • From: Jason Haar <Jason.Haar@xxxxxxxxxxxxx>
  • Date: Sat, 04 Dec 2004 18:48:51 +1300

I don't understand why it's needed. I assume "--askpass file" only refers to certs? If so, if you have a valid reason to have a cert without a passphrase, then you'd simply use the "--nodes" option in openssl to "strip" the password out - i.e make your cert not have a password.

There is no reason to have an extra option to grab a cert password from somewhere else.

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users