From 3512dd8de571c8183a7e7476db30a928573d8442 Mon Sep 17 00:00:00 2001 From: Arne Schwabe Date: Tue, 1 May 2012 15:33:00 +0200 Subject: Support strange certificate + passsword authentication types --- openvpn/doc/openvpn.8 | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'openvpn/doc/openvpn.8') diff --git a/openvpn/doc/openvpn.8 b/openvpn/doc/openvpn.8 index 53d6bdb2..ee46de62 100644 --- a/openvpn/doc/openvpn.8 +++ b/openvpn/doc/openvpn.8 @@ -3846,6 +3846,20 @@ space-saving optimization that uses the unique identifier for datagram replay protection as the IV. .\"********************************************************* .TP +.B \-\-use-prediction-resistance +Enable prediction resistance on PolarSSL's RNG. + +Enabling prediction resistance causes the RNG to reseed in each +call for random. Reseeding this often can quickly deplete the kernel +entropy pool. + +If you need this option, please consider running a daemon that adds +entropy to the kernel pool. + +Note that this option only works with PolarSSL versions greater +than 1.1. +.\"********************************************************* +.TP .B \-\-test-crypto Do a self-test of OpenVPN's crypto options by encrypting and decrypting test packets using the data channel encryption options -- cgit v1.2.3