alex.tls
Hi everyone,
to my understanding,
OPENVPN can sign packages before package is sent, what I don't understand is, signing process will generate signature? the signature will be attached to the original package? if the original package already big enough (let's say it is already 1500 Byte in size), it can't attached to original package; or the signature will be sent in a new package, which just follow the original one.
OPENVPN can verify packages before it decrypt encrypted packages when it receives them from peer, I don't understand how OPENVPN to verify packages,it just make a HASH on the package with predefined hash method and then compare the HASH it received?
Anyone can help , "sign" operation looks like it does a hash on package, then get a hash value A ,then encrypt hash value A with a pre-shared key , then get signature , but how the signature is sent , "verify" operation looks like it decrypt received signature with pre-shared key, then it get a hash value B, but it also do hash on received package, then get hash value C, then it will compare B & C , if B not equal to C ,then verify fail ?
