0eedafdbda
This commit updates openvpn to version 2.6.5 and add DCO support. There are several changes: - Starting with version 2.6.0, the sources are only provided as .tar.gz file. - removed OPENVPN_<variant>_ENABLE_MULTIHOME: multihome support is always included and cannot be disabled anymore with 2.6.x. - removed OPENVPN_<variant>_ENABLE_DEF_AUTH: deferred auth support is always included and cannot be disabled anymore with 2.6.x. - removed OPENVPN_<variant>_ENABLE_PF: PF (packet filtering) support was removed in 2.6.x. - The internal lz4 library was removed in 2.6.x; we now use the liblz4 package if needed - To increase reproducibility, _DATE_ is only used for development builds and not in release builds in 2.6.x. - wolfSSL support was integrated into upstream openvpn - DES support was removed from openvpn The first two wolfSSL patches were created following these 2 commits:4cf01c8e43028b501734Signed-off-by: Martin Schiller <ms@dev.tdt.de>
205 lines
2.3 KiB
Text
205 lines
2.3 KiB
Text
OPENVPN_PARAMS='
|
|
allow_compression
|
|
askpass
|
|
auth
|
|
auth_retry
|
|
auth_user_pass
|
|
auth_user_pass_verify
|
|
bcast_buffers
|
|
bind_dev
|
|
ca
|
|
capath
|
|
cd
|
|
cert
|
|
chroot
|
|
cipher
|
|
client_config_dir
|
|
client_connect
|
|
client_disconnect
|
|
comp_lzo
|
|
compress
|
|
connect_freq
|
|
connect_retry
|
|
connect_retry_max
|
|
connect_timeout
|
|
crl_verify
|
|
data_ciphers_fallback
|
|
dev
|
|
dev_node
|
|
dev_type
|
|
dh
|
|
ecdh_curve
|
|
echo
|
|
engine
|
|
explicit_exit_notify
|
|
extra_certs
|
|
fragment
|
|
group
|
|
hand_window
|
|
hash_size
|
|
http_proxy
|
|
http_proxy_option
|
|
http_proxy_timeout
|
|
ifconfig
|
|
ifconfig_ipv6
|
|
ifconfig_ipv6_pool
|
|
ifconfig_ipv6_push
|
|
ifconfig_pool
|
|
ifconfig_pool_persist
|
|
ifconfig_push
|
|
inactive
|
|
ipchange
|
|
iroute
|
|
iroute_ipv6
|
|
keepalive
|
|
key
|
|
key_direction
|
|
learn_address
|
|
link_mtu
|
|
lladdr
|
|
local
|
|
log
|
|
log_append
|
|
lport
|
|
management
|
|
management_log_cache
|
|
max_clients
|
|
max_routes_per_client
|
|
mode
|
|
mssfix
|
|
mtu_disc
|
|
mute
|
|
nice
|
|
ping
|
|
ping_exit
|
|
ping_restart
|
|
pkcs12
|
|
plugin
|
|
port
|
|
port_share
|
|
prng
|
|
proto
|
|
pull_filter
|
|
push
|
|
rcvbuf
|
|
redirect_gateway
|
|
remap_usr1
|
|
remote
|
|
remote_cert_eku
|
|
remote_cert_ku
|
|
remote_cert_tls
|
|
reneg_bytes
|
|
reneg_pkts
|
|
reneg_sec
|
|
replay_persist
|
|
replay_window
|
|
resolv_retry
|
|
route
|
|
route_delay
|
|
route_gateway
|
|
route_ipv6
|
|
route_metric
|
|
route_pre_down
|
|
route_up
|
|
rport
|
|
secret
|
|
server
|
|
server_bridge
|
|
server_ipv6
|
|
server_poll_timeout
|
|
setenv
|
|
shaper
|
|
sndbuf
|
|
socks_proxy
|
|
status
|
|
status_version
|
|
syslog
|
|
tcp_queue_limit
|
|
tls_auth
|
|
tls_crypt
|
|
tls_crypt_v2
|
|
tls_crypt_v2_verify
|
|
tls_export_cert
|
|
tls_timeout
|
|
tls_verify
|
|
tls_version_min
|
|
tmp_dir
|
|
topology
|
|
tran_window
|
|
tun_mtu
|
|
tun_mtu_extra
|
|
txqueuelen
|
|
user
|
|
verb
|
|
verify_client_cert
|
|
verify_x509_name
|
|
vlan_accept
|
|
vlan_pvid
|
|
x509_username_field
|
|
'
|
|
|
|
OPENVPN_BOOLS='
|
|
allow_recursive_routing
|
|
auth_nocache
|
|
auth_user_pass_optional
|
|
bind
|
|
block_ipv6
|
|
ccd_exclusive
|
|
client
|
|
client_to_client
|
|
comp_noadapt
|
|
disable
|
|
disable_occ
|
|
down_pre
|
|
duplicate_cn
|
|
fast_io
|
|
float
|
|
http_proxy_retry
|
|
ifconfig_noexec
|
|
ifconfig_nowarn
|
|
management_forget_disconnect
|
|
management_hold
|
|
management_query_passwords
|
|
management_signal
|
|
mktun
|
|
mlock
|
|
mtu_test
|
|
multihome
|
|
mute_replay_warnings
|
|
ncp_disable
|
|
nobind
|
|
opt_verify
|
|
passtos
|
|
persist_key
|
|
persist_local_ip
|
|
persist_remote_ip
|
|
persist_tun
|
|
ping_timer_rem
|
|
pull
|
|
push_peer_info
|
|
push_reset
|
|
remote_random
|
|
rmtun
|
|
route_noexec
|
|
route_nopull
|
|
single_session
|
|
socks_proxy_retry
|
|
suppress_timestamps
|
|
tcp_nodelay
|
|
test_crypto
|
|
tls_client
|
|
tls_exit
|
|
tls_server
|
|
up_delay
|
|
up_restart
|
|
username_as_common_name
|
|
vlan_tagging
|
|
'
|
|
|
|
OPENVPN_LIST='
|
|
data_ciphers
|
|
ncp_ciphers
|
|
tls_cipher
|
|
tls_ciphersuites
|
|
tls_groups
|
|
'
|