aboutsummaryrefslogtreecommitdiff
path: root/net/openvpn/Config-mbedtls.in
diff options
context:
space:
mode:
authorMagnus Kroken <mkroken@gmail.com>2020-12-01 11:03:55 +0100
committerRosen Penev <rosenp@gmail.com>2020-12-01 13:04:38 -0800
commite4376793b4e093089543cb1bad64eef34ed25eca (patch)
treefeb61b67241a47090be35c084c4dfe045d1793f5 /net/openvpn/Config-mbedtls.in
parent2e55fc8b2d42682cd1c26e9827b7b6f47fb51398 (diff)
openvpn: disable LZO support by default
OpenVPN recommends disabling compression, as it may weaken the security of the connection. For users who need compression, we build with LZ4 support by default. LZO in OpenVPN pulls in liblzo at approx. 32 kB. OpenWrt users will no longer be able to connect to OpenVPN peers that require LZO compression, unless they build the OpenVPN package themselves. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Diffstat (limited to 'net/openvpn/Config-mbedtls.in')
-rw-r--r--net/openvpn/Config-mbedtls.in2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/openvpn/Config-mbedtls.in b/net/openvpn/Config-mbedtls.in
index 2a2f303c4..3cf233b8f 100644
--- a/net/openvpn/Config-mbedtls.in
+++ b/net/openvpn/Config-mbedtls.in
@@ -2,7 +2,7 @@ if PACKAGE_openvpn-mbedtls
config OPENVPN_mbedtls_ENABLE_LZO
bool "Enable LZO compression support"
- default y
+ default n
config OPENVPN_mbedtls_ENABLE_LZ4
bool "Enable LZ4 compression support"