* Tue Sep 02 2025 Jean-Philippe Pialasse <jpp@koozali.org> 0.1.6-10.sme

- set lzo compression as disabled [SME: 13123]
- set default hmac sha256 and ciphers AES-256-GCM [SME: 13115]
  remove BF-CBC
- remove /var/service/openvpn-routed [SME: 12379]
- use locatime to log connexions [SME: 13128]
This commit is contained in:
2025-09-02 13:52:05 -04:00
parent 7fa421b070
commit df2484857d
7 changed files with 20 additions and 17 deletions

View File

@@ -25,6 +25,11 @@ if [[ ! -f /etc/openvpn/routed/pub/cacrl.pem && -f /etc/openvpn/bridge/pub/cacrl
fi
fi
# to use localtime to log
/usr/bin/cp -f /etc/localtime /etc/openvpn/routed/etc/
mkdir -p /etc/openvpn/routed/usr/share
cp -af /usr/share/zoneinfo /etc/openvpn/routed/usr/share
if [ ! -z "$( ls -A '/etc/openvpn/routed/priv/' )" ]; then
chmod 0600 /etc/openvpn/routed/priv/*
chown root:admin /etc/openvpn/routed/priv/*
@@ -33,3 +38,4 @@ if [ ! -z "$( ls -A '/etc/openvpn/routed/pub/' )" ]; then
chmod 0644 /etc/openvpn/routed/pub/*
chown root:admin /etc/openvpn/routed/pub/*
fi
exit 0