diff options
| author | Frank Lichtenheld | 2024-01-18 16:12:42 +0100 |
|---|---|---|
| committer | Gert Doering | 2024-01-18 18:07:06 +0100 |
| commit | b541a86948d7e9866b33e876fcf070fad00b3dce (patch) | |
| tree | 7640f91e29d5f681088d5d52446a3921cd54c91a /Changes.rst | |
| parent | d3f84afedd33734416704d5d92e8d3ac639ef491 (diff) | |
| download | openvpn-b541a86948d7e9866b33e876fcf070fad00b3dce.zip openvpn-b541a86948d7e9866b33e876fcf070fad00b3dce.tar.gz | |
NTLM: when NTLMv1 is requested, try NTLMv2 instead
Commit 21910ebc2ee8a6138eb2af8d38056d2b94e59f9c removed
support for NTLMv1 authentication. This adjusts the
behavior for existing configurations that specify
"ntlm" keyword.
Do not error out hard, instead just try to upgrade. This
should work fine in many cases and will avoid breaking
user configs unnecessarily on upgrade.
In addition it fixes an issue with the mentioned patch
where "auto" wasn't working correctly for NTLM anymore.
Change-Id: Iec74e88f86cd15328f993b6cdd0317ebda81563c
Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com>
Acked-by: Arne Schwabe <arne-openvpn@rfc2549.org>
Message-Id: <20240118151242.12169-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/search?l=mid&q=20240118151242.12169-1-gert@greenie.muc.de
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'Changes.rst')
| -rw-r--r-- | Changes.rst | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/Changes.rst b/Changes.rst index 69c811d..58cb3db 100644 --- a/Changes.rst +++ b/Changes.rst @@ -12,8 +12,13 @@ Deprecated features ``--allow-deprecated-insecure-static-crypto`` but will be removed in OpenVPN 2.8. -NTLMv1 support has been removed because it is completely insecure. - NTLMv2 support is still available, but will removed in a future release. +NTLMv1 authentication support for HTTP proxies has been removed. + This is considered an insecure method of authentication that uses + obsolete crypto algorithms. + NTLMv2 support is still available, but will be removed in a future + release. + When configured to authenticate with NTLMv1 (``ntlm`` keyword in + ``--http-proxy``) OpenVPN will try NTLMv2 instead. Overview of changes in 2.6 |