]> git.ipfire.org Git - people/ummeegge/ipfire-2.x.git/commit
openvpn: Warning for broken algorithms . openvpn_cipher_warning
authorErik Kapfer <erik.kapfer@ipfire.org>
Mon, 21 Nov 2022 09:59:19 +0000 (10:59 +0100)
committerErik Kapfer <erik.kapfer@ipfire.org>
Mon, 21 Nov 2022 09:59:19 +0000 (10:59 +0100)
commitdd11f42776f1b60660f4e862d6e847e746b9411b
treeef544cde418ab67ce5dbd145faac0a94b6f91846
parentace891f71937c0e08e5b3243565e55c1704c8451
openvpn: Warning for broken algorithms .

Since OpenSSL-3.x will remove all 64 bit block-cipher but also OpenVPNs changelog
for version 2.5.8 gives hints to get rid of BF-CBC for default configuations,
a warning will be displayed in the WUI if the user is running
BF-CBC|CAST5-CBC|DESX-CBC|DES-EDE-CBC|DES-EDE3-CBC but also SHA1 to change
as soon as possible to another more secure algorithm.

The call of the pkiconfigcheck function is now located in the status page section.

Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
html/cgi-bin/ovpnmain.cgi
langs/de/cgi-bin/de.pl
langs/en/cgi-bin/en.pl