LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
24332 Commits
1 Branch
46 MiB
Tree: 1813c82ff3
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '1813c82ff3'
${ noResults }
openwrt-packages-dist/net/openvpn/test.sh

13 lines
246 B
Raw Normal View History

openvpn: update to 2.5.2 Fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. In combination with "--auth-gen-token" or a user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. OpenVPN 2.5.2 also includes other bug fixes and improvements. Add CI build test script. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
3 years ago
​
​
​
​
​
​
​
​
openvpn: enable using wolfSSL cryptographic API engine Support for wolfSSL has been upstreamed to the master OpenVPN branch in f6dca235ae560597a0763f0c98fcc9130b80ccf4 so we can use wolfSSL directly in OpenVPN. So no more needed differnt SSL engine for OpenVPN in systems based on wolfSSL library Compiled && tested on ramips/mt7620, ramips/mt7621 Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
3 years ago
​
​
openvpn: update to 2.5.2 Fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. In combination with "--auth-gen-token" or a user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. OpenVPN 2.5.2 also includes other bug fixes and improvements. Add CI build test script. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
3 years ago
 
  1. #!/bin/sh

  2. 

  3. case "$1" in
  4. 	"openvpn-mbedtls")
  5. 		openvpn --version | grep "$2.*SSL (mbed TLS)"
  6. 		;;
  7. 	"openvpn-openssl")
  8. 		openvpn --version | grep "$2.*SSL (OpenSSL)"
  9. 		;;
  10. 	"openvpn-wolfssl")
  11. 		openvpn --version | grep "$2.*SSL (OpenSSL)"
  12. 		;;
  13. esac