]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commitdiff
ovpnmain.cgi: Keep the fallback cipher disabled by default
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 19 Mar 2024 17:36:42 +0000 (18:36 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Fri, 6 Dec 2024 19:58:55 +0000 (19:58 +0000)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ovpnmain.cgi

index 35efebe516cc71140542890629ee9f91ac50a1d4..99a5efdb4de718b15b55dc04370d79f17e3d6fb8 100755 (executable)
@@ -2479,9 +2479,6 @@ END
 #      $cgiparams{'CLIENT2CLIENT'} =  'on';
 #    }
 ADV_ERROR:
-    if ($cgiparams{'DCIPHER'} eq '') {
-               $cgiparams{'DCIPHER'} =  'AES-256-CBC';
-    }
        if ($cgiparams{'DAUTH'} eq '') {
                if (-z "${General::swroot}/ovpn/ovpnconfig") {
                        $cgiparams{'DAUTH'} = 'SHA512';