Store ta.key in Android keystore: now, later, never?

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
doomaybe
OpenVpn Newbie
Posts: 1
Joined: Fri Mar 06, 2020 10:51 pm

Store ta.key in Android keystore: now, later, never?

Post by doomaybe » Fri Mar 06, 2020 11:21 pm

Am I missing something, or is there no way to store the tls key for tls-auth in the Android keystore (and iOS keychain), instead of inline in the .ovpn file or as separate file like "ta.key"? Is there scheduled or active work to ensure this key is stored securely?

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Store ta.key in Android keystore: now, later, never?

Post by TinCanTech » Fri Mar 06, 2020 11:43 pm

doomaybe wrote:
Fri Mar 06, 2020 11:21 pm
Am I missing something
OpenVPN TLS auth is only supported via inline or absolute file name
because it is not an industry standard.

Post Reply