upstream/openvpn
1
0
Fork 0
mirror of https://github.com/OpenVPN/openvpn.git synced 2026-02-03 20:39:40 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
openvpn/sample/sample-config-files
History
Gert Doering 2d73540316 Remove use of 'dh dh2048.pem' from sample configs, remove 'dh2048.pem' file 
Since commit bd9aa06feb (Jan 2015) OpenVPN has allowed to use
'--dh none' to disable traditional Diffie Hellman, since more secure
ECDH algorithms are available that do not use explicit DH parameters.

If configured with a suffiently high securelevel (3+), or if running in
FIPS mode, OpenSSL 3.5 will refuse 2048 bit DH files, making our tests
fail.

Thus, remove all the DH2048 stuff from our sample configs.

Github: triggered by OpenVPN/openvpn#819

Change-Id: If66438662bd862a195b2a69c4fa45f63838982b7
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <20250820175459.11227-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg32632.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
2025-08-20 23:11:33 +02:00
..
client.conf samples: Update sample configurations 2024-03-25 13:53:39 +01:00
firewall.sh Fix error in example firewall.sh script 2021-11-09 16:13:47 +01:00
loopback-client sample-keys: renew for the next 10 years 2023-11-21 12:34:57 +01:00
loopback-server Remove use of 'dh dh2048.pem' from sample configs, remove 'dh2048.pem' file 2025-08-20 23:11:33 +02:00
openvpn-shutdown.sh build: standard directory layout 2012-03-22 22:07:08 +01:00
openvpn-startup.sh build: standard directory layout 2012-03-22 22:07:08 +01:00
README samples: Update sample configurations 2024-03-25 13:53:39 +01:00
server.conf Remove use of 'dh dh2048.pem' from sample configs, remove 'dh2048.pem' file 2025-08-20 23:11:33 +02:00

README 

Sample OpenVPN Configuration Files.

These files are part of the OpenVPN HOWTO
which is located at:

http://openvpn.net/howto.html

See also the openvpn-examples man page.