[TriLUG] openvpn questions

[Joseph Mack NA3T]

On Fri, 20 Apr 2012, Joseph Mack NA3T wrote:

Well another question then.

The docs say the crypto login exchange _might_ not work if 
the client and server clocks aren't synchronised.

I take it there is a time offset check in the key exchange. 
Why is this? Why do you care if the other party's clock is 
wrong?

Why _might_ it not work? I would expect if there is a 
requirement for the clocks to be offset by less than a 
certain amount it _will_ (rather than _might_) fail.

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!