]> git.ipfire.org Git - ipfire-2.x.git/commit - html/cgi-bin/ovpnmain.cgi
ovpnmain.cgi: Fixes Bug#13137 - Existing n2n client connection created with openssl...
authorAdolf Belka <adolf.belka@ipfire.org>
Sun, 4 Jun 2023 18:57:08 +0000 (20:57 +0200)
committerPeter Müller <peter.mueller@ipfire.org>
Mon, 5 Jun 2023 14:49:51 +0000 (14:49 +0000)
commit0b216134c2107ac0dccccac15a97db0082c84678
treef5d53dbec83bb9fb741b84104f955b2be7f0f4cf
parent9797af30061946db16ab7bbca1635865d9318336
ovpnmain.cgi: Fixes Bug#13137 - Existing n2n client connection created with openssl-1.1.1x fails to start with openssl-3.x

- With a n2n connection .p12 certificate created wityh openssl-1.1.1x the line
   providers legacy default is required in the n2nconf file to enable it to start.
- Any openssl-3.x attempt to open a .p12 file created with openssl-1.1.1x will result in
   a failure and an error message. All the openssl commands dealing with pkcs12 (.p12)
   files need to have the -legacy option added to them.

Fixes: Bug#13137
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ovpnmain.cgi