[ClusterLabs] Few questions regarding corosync authkey

[Nikhil Utane]

Hi,

Would like to understand how secure is the corosync authkey.
As the authkey is a binary file, how is the private key saved inside the
authkey?
What safeguard mechanisms are in place if the private key is compromised?
For e.g I don't think it uses any temporary session key which refreshes
periodically.
Is it possible to dynamically update the key without causing any outage?

-Thanks
Nikhil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.clusterlabs.org/pipermail/users/attachments/20160606/aaf3fde0/attachment-0002.html>