]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Remove support for NTLM v1 proxy authentication
authorFrank Lichtenheld <frank@lichtenheld.com>
Sat, 30 Dec 2023 14:37:33 +0000 (15:37 +0100)
committerGert Doering <gert@greenie.muc.de>
Sat, 30 Dec 2023 16:06:14 +0000 (17:06 +0100)
commit21910ebc2ee8a6138eb2af8d38056d2b94e59f9c
tree253b0ea66540eabb6ed4a84c6d054860992d6fed
parent30751632b5d919d6a01a625be48060ee23b4f968
Remove support for NTLM v1 proxy authentication

Due to the limitation of the protocol it is not
considered secure. Better to use basic auth instead
of a false sense of security. NTLM v2 remains
supported for now.

Change-Id: I0dcb2dac4136f194da7050a8ea8495e9faba9dd9
Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com>
Acked-by: Arne Schwabe <arne-openvpn@rfc2549.org>
Message-Id: <20231230143733.4426-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg27862.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Changes.rst
doc/man-sections/proxy-options.rst
src/openvpn/crypto_backend.h
src/openvpn/crypto_mbedtls.c
src/openvpn/crypto_openssl.c
src/openvpn/ntlm.c
src/openvpn/options.c
src/openvpn/proxy.c
src/openvpn/proxy.h
tests/unit_tests/openvpn/test_crypto.c