summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPaul Donald2026-02-08 21:46:39 +0000
committerHannu Nyman2026-02-22 09:54:13 +0000
commit0ff7aa62fca32be7c863fff7d39983f9ae9d4a40 (patch)
tree2b859241f0490a0c9390aa8e931e3fc8a6c5803e
parentaffa96dc816653475bebef94d21443434cb1532c (diff)
downloadpackages-0ff7aa62fca32be7c863fff7d39983f9ae9d4a40.tar.gz
openvpn: disable compression in builds
If you need the security risks of using compression, make a custom build. Signed-off-by: Paul Donald <newtwen+github@gmail.com> https://github.com/openwrt/packages/pull/28533
-rw-r--r--net/openvpn/Config-mbedtls.in2
-rw-r--r--net/openvpn/Config-openssl.in4
-rw-r--r--net/openvpn/Config-wolfssl.in2
3 files changed, 4 insertions, 4 deletions
diff --git a/net/openvpn/Config-mbedtls.in b/net/openvpn/Config-mbedtls.in
index 14b1959c42..0cf46a917f 100644
--- a/net/openvpn/Config-mbedtls.in
+++ b/net/openvpn/Config-mbedtls.in
@@ -6,7 +6,7 @@ config OPENVPN_mbedtls_ENABLE_LZO
config OPENVPN_mbedtls_ENABLE_LZ4
bool "Enable LZ4 compression support"
- default y
+ default n
#config OPENVPN_mbedtls_ENABLE_EUREPHIA
# bool "Enable support for the eurephia plug-in"
diff --git a/net/openvpn/Config-openssl.in b/net/openvpn/Config-openssl.in
index 9ff2030206..b5a9282586 100644
--- a/net/openvpn/Config-openssl.in
+++ b/net/openvpn/Config-openssl.in
@@ -2,11 +2,11 @@ if PACKAGE_openvpn-openssl
config OPENVPN_openssl_ENABLE_LZO
bool "Enable LZO compression support"
- default y
+ default n
config OPENVPN_openssl_ENABLE_LZ4
bool "Enable LZ4 compression support"
- default y
+ default n
config OPENVPN_openssl_ENABLE_X509_ALT_USERNAME
bool "Enable the --x509-username-field feature"
diff --git a/net/openvpn/Config-wolfssl.in b/net/openvpn/Config-wolfssl.in
index e3c70a5117..68bf6b064c 100644
--- a/net/openvpn/Config-wolfssl.in
+++ b/net/openvpn/Config-wolfssl.in
@@ -11,7 +11,7 @@ config OPENVPN_wolfssl_ENABLE_LZO
config OPENVPN_wolfssl_ENABLE_LZ4
bool "Enable LZ4 compression support"
- default y
+ default n
config OPENVPN_wolfssl_ENABLE_X509_ALT_USERNAME
bool "Enable the --x509-username-field feature"