]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commitdiff
ovpnmain.cgi: Keep the fallback cipher disabled by default
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 19 Mar 2024 17:36:42 +0000 (18:36 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 2 Jun 2025 19:45:31 +0000 (19:45 +0000)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ovpnmain.cgi

index 2e15d146d950a6443b5ccb7d26aaf4f09e47dd64..d2d199a6294cbd4a4ef22db4218d0b07f75ded70 100644 (file)
@@ -2480,9 +2480,6 @@ END
 #      $cgiparams{'CLIENT2CLIENT'} =  'on';
 #    }
 ADV_ERROR:
-    if ($cgiparams{'DCIPHER'} eq '') {
-               $cgiparams{'DCIPHER'} =  'AES-256-CBC';
-    }
        if ($cgiparams{'DAUTH'} eq '') {
                if (-z "${General::swroot}/ovpn/ovpnconfig") {
                        $cgiparams{'DAUTH'} = 'SHA512';