]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Remove ability to use configurations without TLS by default
authorArne Schwabe <arne@rfc2549.org>
Mon, 9 Oct 2023 10:58:32 +0000 (12:58 +0200)
committerGert Doering <gert@greenie.muc.de>
Fri, 13 Oct 2023 15:52:13 +0000 (17:52 +0200)
commit392da5bdaaa94ca7e3e32f16084b47fc20b2c22d
treeb573996cb0406bf1fb802a1c120542a4b8401a42
parent9e99ac54a6373a259ed82f45fbbf9e7a1b38ab6b
Remove ability to use configurations without TLS by default

OpenVPN 2.6 already warned about this feature being removed. OpenVPN
2.7 will with this change no longer accept these configurations without
having a --allow-deprecated-insecure-static-crypto added to the command
line or the configuration itself. This will serve as a last and final
warning for people who missed the warning message in OpenVPN 2.6.

This commit also removes the documentation for --secret and the static key
mode.

Change-Id: I4f29953b91cf8e8daf2c9503da44073ad96d0ff5
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Message-Id: <20231009105832.34762-1-frank@lichtenheld.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg27194.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Changes.rst
doc/man-sections/encryption-options.rst
doc/man-sections/inline-files.rst
doc/man-sections/link-options.rst
doc/man-sections/protocol-options.rst
doc/man-sections/server-options.rst
doc/man-sections/tls-options.rst
src/openvpn/options.c
src/openvpn/options.h
tests/t_lpback.sh