webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 03:07:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

OpenVPN: Replace existing Diffie-Hellman parameter with ffdhe4096

Browse Source 
Initial patch: https://git.ipfire.org/?p=people/ummeegge/ipfire-2.x.git;a=commit;h=2ccc799f8bd6a12c3edab5f1a89fab4d2cd05ea8

Minor adjustments to make it apply to the current state of "next", and
removal of chown operation in OpenSSL's LFS file, which would have lead
to the Diffie-Hellman group file being writable by nobody, for which
there is no necessity.

Fixes: #12632
From: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
This commit is contained in:
Peter Müller
2022-11-11 12:14:37 +00:00
parent c899c04b11
commit 35494eac83
8 changed files with 11 additions and 260 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
config/rootfiles/common/openssl
View File

@@ -2,6 +2,7 @@
#etc/ssl/certs
#etc/ssl/ct_log_list.cnf
#etc/ssl/ct_log_list.cnf.dist
etc/ssl/ffdhe4096.pem
#etc/ssl/misc
#etc/ssl/misc/CA.pl
#etc/ssl/misc/tsget