Tunnel needs to re-encrypt/reinitialize?

[lightleptonparticle 0]

This is probably nothing, more out of curiosity than anything I guess, but still:

 

I noticed in the output from the console that suddenly a long time after establishing the tunnel with running "openvpn" that I got:

 

 

Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
...

 

But I saw earlier the same message, so I guess it was encrypted earlier too, but why would it need to reinitialize like that, what is it that takes place? Does anyone know? There were no other messages about the tunnel getting disconnected and needing to reconnect, and one established connection I had didn't die.

[Staff 10014]

Hello,

 

maybe you refer to TLS re-keying?

 

http://openvpn.net/index.php/open-source/documentation/security-overview.html

 

"During SSL/TLS rekeying, there is a transition-window parameter that permits overlap between old and new key usage, so there is no time pressure or latency bottleneck during SSL/TLS renegotiations."

 

Kind regards

[lightleptonparticle 0]

Hello,

 

maybe you refer to TLS re-keying?

 

http://openvpn.net/index.php/open-source/documentation/security-overview.html

 

"During SSL/TLS rekeying, there is a transition-window parameter that permits overlap between old and new key usage, so there is no time pressure or latency bottleneck during SSL/TLS renegotiations."

 

Kind regards

 

That's probably it yeah, thanks!