Changes between Version 49 and Version 50 of DeprecatedOptions


Ignore:
Timestamp:
12/13/21 16:24:07 (2 years ago)
Author:
tct
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • DeprecatedOptions

    v49 v50  
    9393||=Status =||Pending removal ||
    9494||=Deprecated in: =||OpenVPN v2.4 ||
    95 ||=To be removed in: =||'''OpenVPN v2.6''' ||
     95||=To be removed in: =||'''OpenVPN v2.7''' ||
    9696||=Affects: =||Client and server ||
    9797||=Result if used: =||OpenVPN will not start due to incorrect cipher being used||
    … …  
    107107This will allow older clients to add or change `--cipher` to use `AES-256-CBC` instead of the default `BF-CBC` or any other cipher enlisted.  This can be done on client configuration files on a one-by-one approach.  Unmodified clients will be able to connect as before.  Once all clients have been updated to OpenVPN v2.4 or later (preferred) or have their configuration altered, the `--ncp-ciphers` list can be modified to remove `BF-CBC`.
    108108
    109 '''WARNING:''' This migration approach '''will not''' work after the release of OpenVPN v2.6.  As of that release, `BF-CBC`, `CAST` or `RC2` ciphers '''will not''' be accepted any more.
     109'''WARNING:''' This migration approach '''will not''' work after the release of OpenVPN v2.7.  As of that release, `BF-CBC`, `CAST` or `RC2` ciphers '''will not''' be accepted any more.
    110110
    111111'''NOTE:''' For Fedora 27, if the `openvpn-server@.service` unit file is used for ''server configurations'', this migration path have already been enabled.