]> git.ipfire.org Git - ipfire-2.x.git/commit
OpenVPN: Mark unsecure ciphers and DH-parameter as 'weak' in WUI menu
authorErik Kapfer <erik.kapfer@ipfire.org>
Thu, 8 Feb 2018 08:54:58 +0000 (09:54 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Sun, 11 Feb 2018 23:41:42 +0000 (23:41 +0000)
commitea6dd5b0aca7b28d7b9a5b539f614fcf6b736b18
treeaff1e72a7c12b1e07224b9d844e9222e4631e7a2
parentcb18f19307f64bfadada2d995893d9f5699911ed
OpenVPN: Mark unsecure ciphers and DH-parameter as 'weak' in WUI menu

64 bit block ciphers like Blowfish, TDEA and CAST5 are vulnerable to the so called 'Birthday attacks' .
    Infos for 'Sweet32' Birthday attacks can be found in here
        https://sweet32.info/ .
    An Overview of 64 bit clock ciphers can also be found in here
        http://en.citizendium.org/wiki/Block_cipher/Catalogs/Cipher_list#64-bit_blocks

1024 bit Diffie-Hellman parameter has also been marked as weak causing the 'Logjam Attack' .
   Infos for 'Logjam Attack' can be found in here
        https://weakdh.org/ .

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ovpnmain.cgi