Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
S1OVS
openvpn-server
Commits
a6a5132b
Commit
a6a5132b
authored
Jan 05, 2021
by
Lindsay Harvey
Browse files
Disable comp-lzo in templates due to VORACLE attack vulnerability
parent
1240eb12
Pipeline
#923
passed with stage
in 11 seconds
Changes
3
Pipelines
1
Hide whitespace changes
Inline
Side-by-side
config/ovpn-client.conf
View file @
a6a5132b
...
...
@@ -6,7 +6,7 @@ proto %%PROTOCOL%%
nobind
client
comp
-
lzo
#
comp-lzo
<- Do not use this option due to VORACLE attack vulnerability
pkcs12
%%
ORGNICK
%%-%%
USERNAME
%%.
p12
remote
-
cert
-
tls
server
cipher
AES
-
256
-
CBC
...
...
config/ovpn-generic-client.conf
View file @
a6a5132b
...
...
@@ -6,7 +6,7 @@ proto %%PROTOCOL%%
nobind
client
comp
-
lzo
#
comp-lzo
<- Do not use this option due to VORACLE attack vulnerability
remote
-
cert
-
tls
server
cipher
AES
-
256
-
CBC
pull
...
...
config/server.conf
View file @
a6a5132b
...
...
@@ -25,7 +25,7 @@ ifconfig-pool-persist /var/lib/openvpn-server/openvpn/ifconfig-pool.txt
keepalive
10
90
comp
-
lzo
#
comp-lzo
<- Do not use this option due to VORACLE attack vulnerability
persist
-
key
persist
-
tun
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment