search

luscis / openlan

Cloudify VPN written in Golang, and simple deployment via Kubernetes
http://vpn.luscis.cn
GNU General Public License v3.0
55 stars 24 forks source link

Encrypt control message by SSL #8

Closed danieldin95 closed 1 year ago

danieldin95 commented 2 years ago

Now, using AES to encrypt control and ethernet frame is not good, with a shared key. we need to support SSL for control message, and ethernet frame as before.

danieldin95 commented 2 years ago

Maybe support negotiate random secret key before accept client connection is a good solution. when client or point connect to server, send a random key to server, and server reply a hash or md5 value to client for negotiating.