* Tue Sep 02 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.1.6-11.sme

- set lzo compression as disabled [SME: 13123]
- set default hmac sha256 and ciphers AES-256-GCM [SME: 13115]
  remove BF-CBC
- remove /var/service/openvpn-routed [SME: 12379]
- use locatime to log connexions [SME: 13128]
This commit is contained in:
2025-09-02 13:58:16 -04:00
parent df2484857d
commit 10d358c088
2 changed files with 3 additions and 5 deletions

View File

@@ -26,9 +26,7 @@ if [[ ! -f /etc/openvpn/routed/pub/cacrl.pem && -f /etc/openvpn/bridge/pub/cacrl
fi
# to use localtime to log
/usr/bin/cp -f /etc/localtime /etc/openvpn/routed/etc/
mkdir -p /etc/openvpn/routed/usr/share
cp -af /usr/share/zoneinfo /etc/openvpn/routed/usr/share
/usr/bin/cp -L /etc/localtime /etc/openvpn/routed/etc/
if [ ! -z "$( ls -A '/etc/openvpn/routed/priv/' )" ]; then
chmod 0600 /etc/openvpn/routed/priv/*