the example in https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html has: [code]openvpn --genkey --secret static.key[/code] the means i have for "sharing" a "key" is that both hosts have some [i]identical data[/i]. what i had been thinking was to that each would [i]make a hash of that data[/i] (for example SHA512) and [i]use that hash as the key[/i] or as the random seed to generate a key. [u]then each would have an identical key[/u]. how that be done or used?

[quote="The Howto"]Generate a static key: [list]openvpn --genkey --secret static.key[/list] [b]Copy the static key to both client and server, [u]over a pre-existing secure channel[/u][/b].[/quote]Use sftp to copy the file over .. or send it on a [i]floppy disk [/i].. It is straight forward.

a PSK not shared

Skaperen

the example in https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html has:

openvpn --genkey --secret static.key

the means i have for "sharing" a "key" is that both hosts have some identical data. what i had been thinking was to that each would make a hash of that data (for example SHA512) and use that hash as the key or as the random seed to generate a key. then each would have an identical key. how that be done or used?

Traffic

The Howto wroteGenerate a static key:

openvpn --genkey --secret static.key
Copy the static key to both client and server, over a pre-existing secure channel.

Use sftp to copy the file over .. or send it on a floppy disk ..

It is straight forward.

Skaperen

Traffic wrote
The Howto wroteGenerate a static key:

openvpn --genkey --secret static.key
Copy the static key to both client and server, over a pre-existing secure channel.
Use sftp to copy the file over .. or send it on a floppy disk ..

It is straight forward.

no opportunity to do either of those will exist at the intended time of starting. this is why i asked. i do have a test tunnel running with a PSK now (and it is working on IPv6 inside and outside running file transfers over SCTP inside). but i am asking about another scenario.

maybe i need to hack/patch the source and change where it gets randomness (if /dev/random or /dev/urandom maybe i could run it chrooted where i have a hacked /dev/random or /dev/urandom).