From: <abe...@us...> - 2013-02-18 19:57:45
|
Revision: 5960 http://astlinux.svn.sourceforge.net/astlinux/?rev=5960&view=rev Author: abelbeck Date: 2013-02-18 19:57:20 +0000 (Mon, 18 Feb 2013) Log Message: ----------- openvpn, server and client, add optional Auth HMAC variables, OVPN_AUTH and OVPNC_AUTH Modified Paths: -------------- branches/1.0/package/openvpn/openvpn.init branches/1.0/package/openvpn/openvpnclient.init branches/1.0/project/astlinux/target_skeleton/stat/etc/rc.conf Modified: branches/1.0/package/openvpn/openvpn.init =================================================================== --- branches/1.0/package/openvpn/openvpn.init 2013-02-18 18:06:49 UTC (rev 5959) +++ branches/1.0/package/openvpn/openvpn.init 2013-02-18 19:57:20 UTC (rev 5960) @@ -103,6 +103,9 @@ if [ -n "$OVPN_CIPHER" ]; then echo "cipher $OVPN_CIPHER" >> /tmp/etc/openvpn.conf fi + if [ -n "$OVPN_AUTH" ]; then + echo "auth $OVPN_AUTH" >> /tmp/etc/openvpn.conf + fi if [ -n "$OVPN_TOPOLOGY" ]; then echo "topology $OVPN_TOPOLOGY" >> /tmp/etc/openvpn.conf fi Modified: branches/1.0/package/openvpn/openvpnclient.init =================================================================== --- branches/1.0/package/openvpn/openvpnclient.init 2013-02-18 18:06:49 UTC (rev 5959) +++ branches/1.0/package/openvpn/openvpnclient.init 2013-02-18 19:57:20 UTC (rev 5960) @@ -70,6 +70,9 @@ if [ -n "$OVPNC_CIPHER" ]; then echo "cipher $OVPNC_CIPHER" >> /tmp/etc/openvpnclient.conf fi + if [ -n "$OVPNC_AUTH" ]; then + echo "auth $OVPNC_AUTH" >> /tmp/etc/openvpnclient.conf + fi if [ -n "$OVPNC_NSCERTTYPE" ]; then echo "ns-cert-type $OVPNC_NSCERTTYPE" >> /tmp/etc/openvpnclient.conf fi Modified: branches/1.0/project/astlinux/target_skeleton/stat/etc/rc.conf =================================================================== --- branches/1.0/project/astlinux/target_skeleton/stat/etc/rc.conf 2013-02-18 18:06:49 UTC (rev 5959) +++ branches/1.0/project/astlinux/target_skeleton/stat/etc/rc.conf 2013-02-18 19:57:20 UTC (rev 5960) @@ -519,9 +519,10 @@ ## Enable QoS for the tunnel packet. yes|no ## Set the TOS field of the tunnel packet to what the payload's TOS is. #OVPN_QOS="yes" -## Define the Cipher, defaults to BF-CBC if not defined -## Change to match any hardware crypto acceleration, the client's setting must match +## Define the Cipher, defaults to BF-CBC if not defined, the client's setting must match #OVPN_CIPHER="AES-128-CBC" +## Define the Auth HMAC, defaults to SHA1 if not defined, the client's setting must match +#OVPN_AUTH="SHA256" ## Restrict OpenVPN clients allowed to connect, by CommonName. ## Client CommonName list lines are newline terminated. ## If not defined, the default, any client with a valid cert/key is allowed to connect. @@ -567,9 +568,10 @@ ## Enable QoS for the tunnel packet. yes|no ## Set the TOS field of the tunnel packet to what the payload's TOS is. #OVPNC_QOS="yes" -## Define the Cipher, defaults to BF-CBC if not defined -## Change to match any hardware crypto acceleration, the client's setting must match +## Define the Cipher, defaults to BF-CBC if not defined, the server's setting must match #OVPNC_CIPHER="AES-128-CBC" +## Define the Auth HMAC, defaults to SHA1 if not defined, the server's setting must match +#OVPNC_AUTH="SHA256" ## Define ns-cert-type if set #OVPNC_NSCERTTYPE="server" ## Allow OpenVPN Client tunnel to one LAN Interface, defaults to disallow This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |