]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commitdiff
ovpnmain.cgi: Keep the fallback cipher disabled by default
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 19 Mar 2024 17:36:42 +0000 (18:36 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 23 Sep 2024 11:08:42 +0000 (13:08 +0200)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ovpnmain.cgi

index 678281c6155f0b31e77a60014075316fa9b0043c..b87c1287c83c3ead63c89b891fcc88f9ab2341f3 100755 (executable)
@@ -2479,9 +2479,6 @@ END
 #      $cgiparams{'CLIENT2CLIENT'} =  'on';
 #    }
 ADV_ERROR:
-    if ($cgiparams{'DCIPHER'} eq '') {
-               $cgiparams{'DCIPHER'} =  'AES-256-CBC';
-    }
        if ($cgiparams{'DAUTH'} eq '') {
                if (-z "${General::swroot}/ovpn/ovpnconfig") {
                        $cgiparams{'DAUTH'} = 'SHA512';