From: Peter Müller Date: Sat, 17 Dec 2022 14:44:49 +0000 (+0000) Subject: Core Updatr 172: Properly replace DH parameter in /var/ipfire/ovpn/n2nconf/*/*.conf X-Git-Tag: v2.27-core172~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ee7944fe32e49c73abcaeb2509c1f1630b645b32;p=ipfire-2.x.git Core Updatr 172: Properly replace DH parameter in /var/ipfire/ovpn/n2nconf/*/*.conf https://lists.ipfire.org/pipermail/development/2022-December/015001.html Reported-by: Michael Tremer Signed-off-by: Peter Müller --- diff --git a/config/rootfiles/core/172/update.sh b/config/rootfiles/core/172/update.sh index 585943950c..dffe090d80 100644 --- a/config/rootfiles/core/172/update.sh +++ b/config/rootfiles/core/172/update.sh @@ -155,13 +155,7 @@ done chown -Rv root:root /var/ipfire/connscheduler/lib.pl /var/ipfire/updatexlrator/updxlrator-lib.pl /var/ipfire/menu.d/* # Replace existing OpenVPN Diffie-Hellman parameter by ffdhe4096, as specified in RFC 7919 -if [ -f /var/ipfire/ovpn/server.conf ]; then - sed -i 's|/var/ipfire/ovpn/ca/dh1024.pem|/etc/ssl/ffdhe4096.pem|' /var/ipfire/ovpn/server.conf -fi - -if [ -f "/var/ipfire/ovpn/n2nconf/*/*.conf" ]; then - sed -i 's|/var/ipfire/ovpn/ca/dh1024.pem|/etc/ssl/ffdhe4096.pem|' /var/ipfire/ovpn/n2nconf/*/*.conf -fi +sed -i 's|/var/ipfire/ovpn/ca/dh1024.pem|/etc/ssl/ffdhe4096.pem|' /var/ipfire/ovpn/server.conf /var/ipfire/ovpn/n2nconf/*/*.conf # Start services if grep -q "ENABLE_IDS=on" /var/ipfire/suricata/settings; then