management-external-key and rsa-sig

How to customize and extend your OpenVPN installation.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
Arvydas
OpenVpn Newbie
Posts: 1
Joined: Wed May 13, 2015 1:35 pm

management-external-key and rsa-sig

Post by Arvydas » Wed May 13, 2015 2:07 pm

Hello,

I have a question how to properly sign and send signature via management interface, in my case telnet.

So for example I use this to run openvpn client, please note there is nothing special in the configuration file and authentication is key based.

Cmd1> openvpn.exe --config openvpn.ovpn --management-external-key --management 127.0.0.1 12345

When doing telnet I get a string to be signed that needs to be sent by passing:
rsa-sig
[BASE64_encoded_Signed_string]
END

---> Question is how this string can be signed and can it be signed with openssl ? <---
Tried to google some more information or examples how to do this but couldn't find anything.
I have tried guessing :D for example:
openssl.exe rsautl -sign -pkcs -in hash.txt -inkey client.key | openssl.exe enc -base64 -out signed_hash.txt


Here is an example of after telnet :)

Cmd2> telnet localhost 12345
>INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
>RSA_SIGN:6iYp3+KvViKSRFC64obdRQDD6RhPCl1tT0DNrOLpgYT5xsR/

Post Reply