diff options
author | Magnus Kroken <mkroken@gmail.com> | 2020-07-27 20:34:49 +0200 |
---|---|---|
committer | Daniel Golle <daniel@makrotopia.org> | 2020-08-01 14:54:39 +0100 |
commit | 48a9d99a218c6d83e3337c56b6cc7592e7ad12ae (patch) | |
tree | 430aa5f401283b243b98f8975a9b309639b89345 /tools/sstrip | |
parent | 9565c5726a34da7c9c953d2293b70fdbfef0e0be (diff) | |
download | upstream-48a9d99a218c6d83e3337c56b6cc7592e7ad12ae.tar.gz upstream-48a9d99a218c6d83e3337c56b6cc7592e7ad12ae.tar.bz2 upstream-48a9d99a218c6d83e3337c56b6cc7592e7ad12ae.zip |
openvpn: revise sample configuration
Update the openvpn sample configurations to use modern options in favor
of deprecated ones, suggest more sane default settings and add some
warnings.
* Add tls_crypt and ncp_disable to the sample configuration
* Replace nsCertType with remote_cert_tls in client sample configuration
* Comment out "option compress", compression should not be preferred
* Advise 2048-bit Diffie-Hellman parameters by default
* Add warnings about compression and use of Blowfish (BF-CBC)
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Diffstat (limited to 'tools/sstrip')
0 files changed, 0 insertions, 0 deletions