mrash/fwknop — Issue #7: SPA packet size encryption method differentiation
Author: mrash
Created: 2012-02-09 19:02:50+00:00
State: open

The current message size test is a problem in some cases such as in command mode with long command strings being included within an SPA packet. One alternative would just be to pretty much ignore packet size and just try decrypting incoming packets according to the keys defined in the access.conf file. If no Rijndael key is defined in any stanza and only gpg is used, then decryption would only be attempted via gpg and vice versa.

This issue was reported by Ruhsam Bernhard.