* Tue Sep 02 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.1.6-10.sme
- set lzo compression as disabled [SME: 13123] - set default hmac sha256 and ciphers AES-256-GCM [SME: 13115] remove BF-CBC - remove /var/service/openvpn-routed [SME: 12379] - use locatime to log connexions [SME: 13128]
This commit is contained in:
@@ -25,6 +25,11 @@ if [[ ! -f /etc/openvpn/routed/pub/cacrl.pem && -f /etc/openvpn/bridge/pub/cacrl
|
||||
fi
|
||||
fi
|
||||
|
||||
# to use localtime to log
|
||||
/usr/bin/cp -f /etc/localtime /etc/openvpn/routed/etc/
|
||||
mkdir -p /etc/openvpn/routed/usr/share
|
||||
cp -af /usr/share/zoneinfo /etc/openvpn/routed/usr/share
|
||||
|
||||
if [ ! -z "$( ls -A '/etc/openvpn/routed/priv/' )" ]; then
|
||||
chmod 0600 /etc/openvpn/routed/priv/*
|
||||
chown root:admin /etc/openvpn/routed/priv/*
|
||||
@@ -33,3 +38,4 @@ if [ ! -z "$( ls -A '/etc/openvpn/routed/pub/' )" ]; then
|
||||
chmod 0644 /etc/openvpn/routed/pub/*
|
||||
chown root:admin /etc/openvpn/routed/pub/*
|
||||
fi
|
||||
exit 0
|
||||
|
Reference in New Issue
Block a user