ooni / minivpn

A minimalistic OpenVPN implementation in Go
GNU General Public License v3.0
36 stars 6 forks source link

refactor: introduce tls state manager #52

Closed ainghazal closed 6 months ago

ainghazal commented 6 months ago

This is the fifth commit in the series of incremental refactoring of the current minivpn tree.

In this commit, we introduce the tlsstate package, which is the layer above the control channel

tlsstate is a service worker that will attempt to do a TLS negotiation (wrapped in a control packet), and then use this secure channel to exchange keys with the OpenVPN server and use these keys for encrypting and decrypting payloads in the data channel.

tlsstate waits for a signal in the NotifyTLS channel and then will start the handshake and the key negotiation.

Reference issue: https://github.com/ooni/minivpn/issues/47