From ae50675e9095750cee9810237fb6b9f60030dae4 Mon Sep 17 00:00:00 2001 From: Micah Anderson Date: Tue, 6 May 2014 18:11:31 -0400 Subject: update cipher configuration for openvpn to use the IANA name, due to deprecation warning: 2014-05-06 18:10:23,594 - INFO - L#826 : leap.openvpn:outReceived() - Tue May 6 18:10:23 2014 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA' Change-Id: I159b26604993d38806fcb7c2ed8f6de8138999f7 --- provider_base/services/openvpn.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/provider_base/services/openvpn.json b/provider_base/services/openvpn.json index 090afcd6..3776aedb 100644 --- a/provider_base/services/openvpn.json +++ b/provider_base/services/openvpn.json @@ -20,7 +20,7 @@ "unlimited_prefix": "= provider.ca.client_certificates.unlimited_prefix", "rate_limit": "= openvpn.allow_limited ? provider.service.bandwidth_limit : nil", "configuration": { - "tls-cipher": "DHE-RSA-AES128-SHA", + "tls-cipher": "TLS-DHE-RSA-WITH-AES-128-CBC-SHA", "auth": "SHA1", "cipher": "AES-128-CBC", "keepalive": "10 30", -- cgit v1.2.3