diff options
| author | Magnus Kroken <mkroken@gmail.com> | 2020-07-27 20:34:49 +0200 |
|---|---|---|
| committer | Daniel Golle <daniel@makrotopia.org> | 2020-08-01 14:54:39 +0100 |
| commit | 48a9d99a218c6d83e3337c56b6cc7592e7ad12ae (patch) | |
| tree | 430aa5f401283b243b98f8975a9b309639b89345 /target/linux/ath79/image/common-mikrotik.mk | |
| parent | 9565c5726a34da7c9c953d2293b70fdbfef0e0be (diff) | |
| download | upstream-48a9d99a218c6d83e3337c56b6cc7592e7ad12ae.tar.gz upstream-48a9d99a218c6d83e3337c56b6cc7592e7ad12ae.tar.bz2 upstream-48a9d99a218c6d83e3337c56b6cc7592e7ad12ae.zip | |
openvpn: revise sample configuration
Update the openvpn sample configurations to use modern options in favor
of deprecated ones, suggest more sane default settings and add some
warnings.
* Add tls_crypt and ncp_disable to the sample configuration
* Replace nsCertType with remote_cert_tls in client sample configuration
* Comment out "option compress", compression should not be preferred
* Advise 2048-bit Diffie-Hellman parameters by default
* Add warnings about compression and use of Blowfish (BF-CBC)
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Diffstat (limited to 'target/linux/ath79/image/common-mikrotik.mk')
0 files changed, 0 insertions, 0 deletions