diff options
| author | Steffan Karger | 2017-07-01 13:29:51 +0200 |
|---|---|---|
| committer | David Sommerseth | 2017-08-15 15:40:49 +0200 |
| commit | ad178f01444d61e48fca83c4f0bc5d82270cee87 (patch) | |
| tree | ecae92d3af9d60d986fed6c3f6e4db4769831344 /Changes.rst | |
| parent | cbeff7b1b3f2815ee27f4479dca502c220fc4d15 (diff) | |
| download | openvpn-ad178f01444d61e48fca83c4f0bc5d82270cee87.zip openvpn-ad178f01444d61e48fca83c4f0bc5d82270cee87.tar.gz | |
Deprecate --keysize
The --keysize option can only be used with already deprecated ciphers,
such as CAST5, RC2 or BF. Deviating from the default keysize is
generally not a good idea (see man page text), and otherwise only
complicates our code.
Since we will also remove the support for weak ciphers (ciphers with
cipher block length less than 128 bits) in OpenVPN 2.6 as well, we
start the deprecation of this option instantly.
[DS: Slightly amended the patch, referencing OpenVPN 2.6 and added
a few more details to Changes.rst and the commit message]
Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <20170701112951.19119-1-steffan@karger.me>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg15004.html
Signed-off-by: David Sommerseth <davids@openvpn.net>
Diffstat (limited to 'Changes.rst')
| -rw-r--r-- | Changes.rst | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Changes.rst b/Changes.rst index 0b2b04d..4358f78 100644 --- a/Changes.rst +++ b/Changes.rst @@ -178,6 +178,9 @@ Deprecated features - ``--no-iv`` is deprecated in 2.4 and will be removed in 2.5. +- ``--keysize`` is deprecated and will be removed in v2.6 together + with the support of ciphers with cipher block size less than 128 bits. + User-visible Changes -------------------- |