Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

openvpn: disable LZO support by default

Browse source 
OpenVPN recommends disabling compression, as it may weaken the security
of the connection. For users who need compression, we build with LZ4
support by default. LZO in OpenVPN pulls in liblzo at approx. 32 kB.

OpenWrt users will no longer be able to connect to OpenVPN peers that
require LZO compression, unless they build the OpenVPN package themselves.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
This commit is contained in:
Magnus Kroken 2020-12-01 11:03:55 +01:00 committed by Rosen Penev
parent 2e55fc8b2d
commit e4376793b4
No known key found for this signature in database
GPG key ID: 36D31CFA845F0E3B
3 changed files with 3 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
net/openvpn/Config-mbedtls.in
View file

@ -2,7 +2,7 @@ if PACKAGE_openvpn-mbedtls
config OPENVPN_mbedtls_ENABLE_LZO
bool "Enable LZO compression support"
default y
default n
config OPENVPN_mbedtls_ENABLE_LZ4
bool "Enable LZ4 compression support"

2
net/openvpn/Config-openssl.in
View file

@ -2,7 +2,7 @@ if PACKAGE_openvpn-openssl
config OPENVPN_openssl_ENABLE_LZO
bool "Enable LZO compression support"
default y
default n
config OPENVPN_openssl_ENABLE_LZ4
bool "Enable LZ4 compression support"

6
net/openvpn/files/openvpn.config
View file

@ -293,9 +293,7 @@ config openvpn sample_server
#
# LZ4 requires OpenVPN 2.4+ client and server
# option compress lz4
# LZO is compatible with most OpenVPN versions
# (set "compress lzo" on 2.4+ clients, and "comp-lzo yes" on older clients)
# option compress lzo
# Control how OpenVPN handles peers using compression
#
# Do not allow any connections using compression
@ -487,8 +485,6 @@ config openvpn sample_client
#
# LZ4 requires OpenVPN 2.4+ on server and client
# option compress lz4
# LZO is compatible with most OpenVPN versions
# option compress lzo
# Set log file verbosity.
option verb 3