diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-03-05 19:49:28 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-03-06 20:14:56 +0100 |
| commit | 89e037a7d85cf9525418d521dcdf427545161948 (patch) | |
| tree | 236d3662349da50e7ecc7b96ed1b4119dd370fac /src/migration-scripts/https | |
| parent | 7c520f8ec786f6cff411188498822eab00e69afd (diff) | |
| download | vyos-1x-89e037a7d85cf9525418d521dcdf427545161948.tar.gz vyos-1x-89e037a7d85cf9525418d521dcdf427545161948.zip | |
openvpn: T8304: fix migration for des, bf128 or bf256 cipher; use 3des instead
This extends the CLI migration from commit 941c5adfaca2c7 ("openvpn: T5634:
Remove support for insecure DES and Blowfish ciphers") by not only deleting
insecure DES and Blowfish ciphers, but providing an alternative (3DES).
If no cipher is defined, this will result in OpenVPN service not starting at
all, as the implicit defined BF-CBC cipher is no longer supported by
OpenSSL 3.0.0.
Diffstat (limited to 'src/migration-scripts/https')
0 files changed, 0 insertions, 0 deletions