diff options
| author | Micah Anderson <micah@leap.se> | 2014-05-13 19:04:17 -0400 |
|---|---|---|
| committer | Micah Anderson <micah@leap.se> | 2014-05-13 19:04:17 -0400 |
| commit | 89fac280079e4fd1eb9a4491a06a2dd549cee32b (patch) | |
| tree | 1a382d518909e6e1ea5049ab91faaa07e04bea18 | |
| parent | 3ef044034b51d992d6952a9c6b9d16cba16abc30 (diff) | |
Revert "update cipher configuration for openvpn to use the IANA name"
This reverts commit ae50675e9095750cee9810237fb6b9f60030dae4.
Older openssl implementations (wheezy, android, others) aren't able to
parse this newer string, so reverting to the deprecated name until we
are sure the support is there
| -rw-r--r-- | provider_base/services/openvpn.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/provider_base/services/openvpn.json b/provider_base/services/openvpn.json index 3776aedb..090afcd6 100644 --- a/provider_base/services/openvpn.json +++ b/provider_base/services/openvpn.json @@ -20,7 +20,7 @@ "unlimited_prefix": "= provider.ca.client_certificates.unlimited_prefix", "rate_limit": "= openvpn.allow_limited ? provider.service.bandwidth_limit : nil", "configuration": { - "tls-cipher": "TLS-DHE-RSA-WITH-AES-128-CBC-SHA", + "tls-cipher": "DHE-RSA-AES128-SHA", "auth": "SHA1", "cipher": "AES-128-CBC", "keepalive": "10 30", |