From: Peter Müller Date: Sat, 17 Dec 2022 14:46:32 +0000 (+0000) Subject: backup(.pl): Replace OpenVPN DH parameter with ffdhe4096 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=bbbb0b9e01d342a5a5b4db14a37641a427786844;p=people%2Fms%2Fipfire-2.x.git backup(.pl): Replace OpenVPN DH parameter with ffdhe4096 This ensures restoring a backup won't silently bring back an insecure Diffie-Hellman parameter (which could also not be inspected through the web interface anymore). Reported-by: Michael Tremer Signed-off-by: Peter Müller --- diff --git a/config/backup/backup.pl b/config/backup/backup.pl index 6fd9e45bb1..96e794439f 100644 --- a/config/backup/backup.pl +++ b/config/backup/backup.pl @@ -184,6 +184,9 @@ restore_backup() { # move nobeeps if exist [ -e "/var/ipfire/ppp/nobeeps" ] && mv /var/ipfire/ppp/nobeeps /var/ipfire/red/nobeeps + # Replace previously used OpenVPN Diffie-Hellman parameter by ffdhe4096 + sed -i 's|/var/ipfire/ovpn/ca/dh1024.pem|/etc/ssl/ffdhe4096.pem|' /var/ipfire/ovpn/server.conf /var/ipfire/ovpn/n2nconf/*/*.conf + # Update OpenVPN CRL /etc/fcron.daily/openvpn-crl-updater