diff options
| author | wangmy <wangmy@fujitsu.com> | 2021-11-16 09:54:04 +0800 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2021-11-15 18:04:23 -0800 |
| commit | 54567412b55e76f768d928a4eb06aae7ad8ba464 (patch) | |
| tree | b9440d6ae8a8c2b107ebe7dfc369a1046ae18db9 /meta-python/recipes-devtools/python/python3-yappi/python310.patch | |
| parent | 542ffbafe17055988e580e71dd834600efca7495 (diff) | |
| download | meta-openembedded-54567412b55e76f768d928a4eb06aae7ad8ba464.tar.gz | |
openvpn: Change the default cipher to AES-256-GCM for server configurations
This change makes the server use AES-256-GCM instead of BF-CBC as the default
cipher for the VPN tunnel. To avoid breaking existing running configurations
defaulting to BF-CBC, the Negotiable Crypto Parameters (NCP) list contains
the BF-CBC in addition to AES-CBC. This makes it possible to migrate
existing older client configurations one-by-one to use at least AES-CBC unless
the client is updated to v2.4 (which defaults to upgrade to AES-GCM automatically)
Upstream-Status: Backport [https://src.fedoraproject.org/rpms/openvpn/blob/rawhide/f/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch]
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-yappi/python310.patch')
0 files changed, 0 insertions, 0 deletions