Go to file
Steffan Karger ad178f0144
Deprecate --keysize
The --keysize option can only be used with already deprecated ciphers,
such as CAST5, RC2 or BF.  Deviating from the default keysize is
generally not a good idea (see man page text), and otherwise only
complicates our code.

Since we will also remove the support for weak ciphers (ciphers with
cipher block length less than 128 bits) in OpenVPN 2.6 as well, we
start the deprecation of this option instantly.

[DS: Slightly amended the patch, referencing OpenVPN 2.6 and added
     a few more details to Changes.rst and the commit message]

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <20170701112951.19119-1-steffan@karger.me>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg15004.html
Signed-off-by: David Sommerseth <davids@openvpn.net>
2017-08-15 15:40:49 +02:00
.github github: Add PR template with contributor related information 2017-02-06 11:26:05 +01:00
.travis travis-ci: update pkcs11-helper to 1.22 2017-08-11 21:51:52 +02:00
build Update copyrights 2016-12-21 21:57:58 +01:00
contrib Document down-root plugin usage in client.down 2017-08-14 15:36:44 +02:00
debug build: standard directory layout 2012-03-22 22:07:08 +01:00
dev-tools dev-tools: Script generating the source releases in an automated fashion 2017-06-16 10:43:33 +02:00
distro systemd: Add more security feature for systemd units 2017-01-25 19:40:39 +01:00
doc Deprecate --keysize 2017-08-15 15:40:49 +02:00
include copyright: Update GPLv2 license texts 2017-06-16 10:38:03 +02:00
m4 copyright: Update GPLv2 license texts 2017-06-16 10:38:03 +02:00
sample sample-plugins: fix ASN1_STRING_to_UTF8 return value checks 2017-08-14 15:10:52 +02:00
src Deprecate --keysize 2017-08-15 15:40:49 +02:00
tests Move adjust_power_of_2() to integer.h 2017-06-27 20:33:39 +02:00
vendor git: Merge .gitignore files into a single file 2017-01-23 00:51:34 +01:00
.gitattributes cleanup: add .gitattributes to control eol style explicitly 2012-04-26 20:54:26 +02:00
.gitignore systemd: Use automake tools to install unit files 2017-01-25 19:39:42 +01:00
.gitmodules Change cmocka remote to use https in stead of git protocol 2016-11-22 22:24:25 +01:00
.mailmap Update .mailmap to unify and clean up odd names and e-mail addresses 2016-10-18 13:46:04 +02:00
.svncommitters Added mapping files from SVN commit ID to more descriptive commit IDs. 2010-10-21 11:31:26 +02:00
.travis.yml travis-ci: update pkcs11-helper to 1.22 2017-08-11 21:51:52 +02:00
AUTHORS This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
ChangeLog Update copyrights 2016-12-21 21:57:58 +01:00
Changes.rst Deprecate --keysize 2017-08-15 15:40:49 +02:00
compat.m4 copyright: Update GPLv2 license texts 2017-06-16 10:38:03 +02:00
config-msvc-version.h.in Fix Building Using MSVC 2017-03-16 08:55:33 +01:00
config-msvc.h Fix Building Using MSVC 2017-03-16 08:55:33 +01:00
configure.ac Print ec bit details, refuse management-external-key if key is not RSA 2017-08-11 21:16:51 +02:00
CONTRIBUTING.rst Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes 2016-05-19 11:22:50 +02:00
COPYING Update copyrights 2016-12-21 21:57:58 +01:00
COPYRIGHT.GPL copyright: Update GPLv2 license texts 2017-06-16 10:38:03 +02:00
INSTALL Mention that OpenVPN 2.4 requires Windows Vista or higher 2016-12-01 16:31:01 +01:00
Makefile.am copyright: Update GPLv2 license texts 2017-06-16 10:38:03 +02:00
msvc-build.bat build: msvc: chdir with change drive to script location 2012-06-29 10:26:15 +02:00
msvc-dev.bat build: msvc: chdir with change drive to script location 2012-06-29 10:26:15 +02:00
msvc-env.bat Continuation of MSVS fixes 2015-10-06 13:17:34 +02:00
NEWS This is the start of the BETA21 branch. 2005-09-26 05:28:27 +00:00
openvpn.sln build: msvc: upgrade to Visual Studio 2010 + fixups 2012-03-29 12:31:10 +02:00
PORTS Update copyrights 2016-12-21 21:57:58 +01:00
README Remove last rest of INSTALL-win32.txt references 2016-10-27 18:57:24 +02:00
README.ec Add support for elliptic curve diffie-hellmann key exchange (ECDH) 2014-04-25 19:36:52 +02:00
README.IPv6 Update IPv6 related readme files 2014-01-03 16:01:12 +01:00
README.polarssl Update README.polarssl 2014-06-24 22:51:27 +02:00
TODO.IPv6 Update IPv6 related readme files 2014-01-03 16:01:12 +01:00
version.m4 Bump master to version 2.5_git 2016-12-21 21:59:35 +01:00
version.sh.in build: windows: install version.sh to allow installer read version 2012-03-24 00:14:23 +01:00

OpenVPN -- A Secure tunneling daemon

Copyright (C) 2002-2010 OpenVPN Technologies, Inc. This program is free software;
you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2
as published by the Free Software Foundation.

*************************************************************************

To get the latest release of OpenVPN, go to:

	https://openvpn.net/index.php/download/community-downloads.html

To Build and Install,

	tar -zxf openvpn-<version>.tar.gz
	cd openvpn-<version>
	./configure
	make
	make install

or see the file INSTALL for more info.

*************************************************************************

For detailed information on OpenVPN, including examples, see the man page
  http://openvpn.net/man.html

For a sample VPN configuration, see
  http://openvpn.net/howto.html

To report an issue, see
  https://community.openvpn.net/openvpn/report

For a description of OpenVPN's underlying protocol,
  see the file ssl.h included in the source distribution.

*************************************************************************

Other Files & Directories:

* configure.ac -- script to rebuild our configure
  script and makefile.

* sample/sample-scripts/verify-cn

  A sample perl script which can be used with OpenVPN's
  --tls-verify option to provide a customized authentication
  test on embedded X509 certificate fields.

* sample/sample-keys/

  Sample RSA keys and certificates.  DON'T USE THESE FILES
  FOR ANYTHING OTHER THAN TESTING BECAUSE THEY ARE TOTALLY INSECURE.

* sample/sample-config-files/

  A collection of OpenVPN config files and scripts from
  the HOWTO at http://openvpn.net/howto.html

*************************************************************************

Note that easy-rsa and tap-windows are now maintained in their own subprojects.
Their source code is available here:

  https://github.com/OpenVPN/easy-rsa
  https://github.com/OpenVPN/tap-windows

The old cross-compilation environment (domake-win) and the Python-based
buildsystem have been replaced with openvpn-build:

  https://github.com/OpenVPN/openvpn-build

See the INSTALL file for usage information.