admin/gluetun
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix: OpenVPN remove compression options (security)

Browse Source 
- Affects FastestVPN
- Affects Hide My Ass
- Affects IP Vanish
- Affects IVPN
- Affects NordVPN
- Affects PrivateVPN
- Affects ProtonVPN
- Affects VPN Unlimited
- Affects VyprVPN
This commit is contained in:
Quentin McGaw (desktop)
2021-09-14 14:45:30 +00:00
parent a1588302a7
commit 76a0c1f6c4
9 changed files with 0 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
internal/provider/fastestvpn/openvpnconf.go
View File

@@ -35,7 +35,6 @@ func (f *Fastestvpn) BuildConf(connection models.Connection,
"ping-restart 0", "ping-restart 0",
"tls-client", "tls-client",
"tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA", //nolint:lll "tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA", //nolint:lll
"comp-lzo",
"key-direction 1", "key-direction 1",
"tun-mtu 1500", "tun-mtu 1500",
"tun-mtu-extra 32", "tun-mtu-extra 32",

2
internal/provider/hidemyass/openvpnconf.go
View File

@@ -28,8 +28,6 @@ func (h *HideMyAss) BuildConf(connection models.Connection,
// HideMyAss specific // HideMyAss specific
"remote-cert-tls server", // updated name of ns-cert-type "remote-cert-tls server", // updated name of ns-cert-type
// "route-metric 1", // "route-metric 1",
"comp-lzo yes",
"comp-noadapt",
// Added constant values // Added constant values
"mute-replay-warnings", "mute-replay-warnings",

1
internal/provider/ipvanish/openvpnconf.go
View File

@@ -27,7 +27,6 @@ func (i *Ipvanish) BuildConf(connection models.Connection,
"tls-exit", "tls-exit",
// Ipvanish specific // Ipvanish specific
"comp-lzo",
"tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA", "tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA",
// Added constant values // Added constant values

1
internal/provider/ivpn/openvpnconf.go
View File

@@ -30,7 +30,6 @@ func (i *Ivpn) BuildConf(connection models.Connection,
// IVPN specific // IVPN specific
"remote-cert-tls server", // updated name of ns-cert-type "remote-cert-tls server", // updated name of ns-cert-type
"comp-lzo no",
"key-direction 1", "key-direction 1",
"tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA", "tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA",

1
internal/provider/nordvpn/openvpnconf.go
View File

@@ -37,7 +37,6 @@ func (n *Nordvpn) BuildConf(connection models.Connection,
"tun-mtu-extra 32", "tun-mtu-extra 32",
"mssfix " + strconv.Itoa(int(settings.MSSFix)), "mssfix " + strconv.Itoa(int(settings.MSSFix)),
"reneg-sec 0", "reneg-sec 0",
"comp-lzo no",
"key-direction 1", "key-direction 1",
"ping 15", "ping 15",
"ping-restart 0", "ping-restart 0",

1
internal/provider/privatevpn/openvpnconf.go
View File

@@ -28,7 +28,6 @@ func (p *Privatevpn) BuildConf(connection models.Connection,
"tls-exit", "tls-exit",
// Privatevpn specific // Privatevpn specific
"comp-lzo",
// Added constant values // Added constant values
"auth-nocache", "auth-nocache",

1
internal/provider/protonvpn/openvpnconf.go
View File

@@ -39,7 +39,6 @@ func (p *Protonvpn) BuildConf(connection models.Connection,
"reneg-sec 0", "reneg-sec 0",
"key-direction 1", "key-direction 1",
"pull", "pull",
"comp-lzo no",
// Added constant values // Added constant values
"auth-nocache", "auth-nocache",

1
internal/provider/vpnunlimited/openvpnconf.go
View File

@@ -23,7 +23,6 @@ func (p *Provider) BuildConf(connection models.Connection,
"reneg-sec 0", "reneg-sec 0",
"ping 5", "ping 5",
"ping-exit 30", "ping-exit 30",
"comp-lzo no",
"route-metric 1", "route-metric 1",
// Added constant values // Added constant values

1
internal/provider/vyprvpn/openvpnconf.go
View File

@@ -31,7 +31,6 @@ func (v *Vyprvpn) BuildConf(connection models.Connection,
"tls-exit", "tls-exit",
// Vyprvpn specific // Vyprvpn specific
"comp-lzo",
// "verify-x509-name lu1.vyprvpn.com name", // "verify-x509-name lu1.vyprvpn.com name",
"tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA", //nolint:lll "tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA", //nolint:lll