]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Deprecate NTLMv1 proxy auth method.
authorArne Schwabe <arne@rfc2549.org>
Thu, 15 Dec 2022 19:01:43 +0000 (20:01 +0100)
committerGert Doering <gert@greenie.muc.de>
Fri, 16 Dec 2022 17:40:31 +0000 (18:40 +0100)
commite005b8d1fda1ad1e26fe0dbe7e09184a1f19b553
tree68f78d8e32357e6be6558454fc8acad5e109a82f
parenta034dc8153522713c3cfda90b2cda114cea70e2d
Deprecate NTLMv1 proxy auth method.

NTLMv1 is ancient and not considered secure anymore and we are not
aware of any users or software still requiring this feature.

Additionally it currently depends on our "doing single DES using
3DES" workaround for OpenSSL (cipher_des_encrypt_ecb). So removing
NTLMv1 will also allow us to remove that workaround.

Reported-By: Trial of Bits (TOB-OVPN-7)
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <20221215190143.2107896-9-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg25731.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/proxy.c