wangmy 54567412b5 openvpn: Change the default cipher to AES-256-GCM for server configurations ...

This change makes the server use AES-256-GCM instead of BF-CBC as the default
cipher for the VPN tunnel.  To avoid breaking existing running configurations
defaulting to BF-CBC, the Negotiable Crypto Parameters (NCP) list contains
the BF-CBC in addition to AES-CBC.  This makes it possible to migrate
existing older client configurations one-by-one to use at least AES-CBC unless
the client is updated to v2.4 (which defaults to upgrade to AES-GCM automatically)

Upstream-Status: Backport [https://src.fedoraproject.org/rpms/openvpn/blob/rawhide/f/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>

2021-11-15 18:04:23 -08:00

..

openvpn

openvpn: Change the default cipher to AES-256-GCM for server configurations

2021-11-15 18:04:23 -08:00

openvpn_2.5.4.bb

openvpn: upgrade 2.5.3 -> 2.5.4

2021-10-14 07:16:58 -07:00