X-Git-Url: https://www.tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=doc%2FPROTOCOL;h=6b8f9facc63dd974e00e636640b01141eca5f2ed;hp=81de215c52bfab7121ab8a23558feadfec82d5e2;hb=09f4ec190119298187cec09dd5049af8fd8bad94;hpb=1b28f88808b9ac3193cf9a0db7a81a89eed8b4ef diff --git a/doc/PROTOCOL b/doc/PROTOCOL index 81de215c..6b8f9fac 100644 --- a/doc/PROTOCOL +++ b/doc/PROTOCOL @@ -11,7 +11,7 @@ This is the protocol documentation for tinc, a Virtual Private Network daemon. that the entire resulting derived work is distributed under the terms of a permission notice identical to this one. - $Id: PROTOCOL,v 1.1.2.1 2000/06/30 22:38:58 guus Exp $ + $Id: PROTOCOL,v 1.1.2.2 2000/07/01 14:32:24 guus Exp $ 1. Protocols used in tinc @@ -29,7 +29,7 @@ The protocols for those interfaces will not be described in this document. 2. Packet protocol ------------------ -This is described in net.h. +See net.h for now. 3. Meta protocol ---------------- @@ -58,34 +58,34 @@ may be sent. The following diagram shows how authentication is done: Client Server ---------------------------------------------------------------- -Connects to server - Accepts connection - Sends BASIC_INFO -Verifies BASIC_INFO +Connects to server: + Accepts connection. + Sends BASIC_INFO: +Verifies BASIC_INFO. If server is already in connection list, abort. -Else sends his own BASIC_INFO - Verifies BASIC_INFO +Else sends his own BASIC_INFO: + Verifies BASIC_INFO. If client is alread in connection list, remove old entry. - Sends PASSPHRASE + Sends PASSPHRASE: Receives and stores PASSPHRASE. -Sends his own PASSPHRASE +Sends his own PASSPHRASE: Receives and stores PASSPHRASE. - Sends PUBLIC_KEY + Sends PUBLIC_KEY: Verifies PUBLIC key and stored PASSPHRASE. If wrong, abort. -Else sends his own PUBLIC_KEY +Else sends his own PUBLIC_KEY: Verifies PUBLIC key and stored PASSPHRASE. If wrong, abort. Else activates connection and sends ACK and ADD_HOSTs for all - known hosts + known hosts. Receives ACK and activates connection. Sends ADD_HOSTs for all known -hosts +hosts. ---------------------------------------------------------------- The client must never make a connection to a server that is already in it's