smecontribs/smeserver-openvpn-routed
6
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

* Tue Sep 02 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.1.6-11.sme

Browse Source 
- set lzo compression as disabled [SME: 13123]
- set default hmac sha256 and ciphers AES-256-GCM [SME: 13115]
  remove BF-CBC
- remove /var/service/openvpn-routed [SME: 12379]
- use locatime to log connexions [SME: 13128]
This commit is contained in:
Jean-Philippe Pialasse
2025-09-02 13:58:16 -04:00
parent df2484857d
commit 10d358c088
2 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
root/sbin/e-smith/systemd/openvpn-routed
View File

@@ -26,9 +26,7 @@ if [[ ! -f /etc/openvpn/routed/pub/cacrl.pem && -f /etc/openvpn/bridge/pub/cacrl
fi fi
# to use localtime to log # to use localtime to log
/usr/bin/cp -f /etc/localtime /etc/openvpn/routed/etc/ /usr/bin/cp -L /etc/localtime /etc/openvpn/routed/etc/
mkdir -p /etc/openvpn/routed/usr/share
cp -af /usr/share/zoneinfo /etc/openvpn/routed/usr/share
if [ ! -z "$( ls -A '/etc/openvpn/routed/priv/' )" ]; then if [ ! -z "$( ls -A '/etc/openvpn/routed/priv/' )" ]; then
chmod 0600 /etc/openvpn/routed/priv/* chmod 0600 /etc/openvpn/routed/priv/*

4
smeserver-openvpn-routed.spec
View File

@@ -4,7 +4,7 @@
Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for routed mode Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for routed mode
Name: smeserver-openvpn-routed Name: smeserver-openvpn-routed
%define version 0.1.6 %define version 0.1.6
%define release 10 %define release 11
Version: %{version} Version: %{version}
Release: %{release}%{?dist} Release: %{release}%{?dist}
License: GPL License: GPL
@@ -26,7 +26,7 @@ to have a full working openvpn server running in routed mode.
%changelog %changelog
* Tue Sep 02 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.1.6-10.sme * Tue Sep 02 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.1.6-11.sme
- set lzo compression as disabled [SME: 13123] - set lzo compression as disabled [SME: 13123]
- set default hmac sha256 and ciphers AES-256-GCM [SME: 13115] - set default hmac sha256 and ciphers AES-256-GCM [SME: 13115]
remove BF-CBC remove BF-CBC