From 7d303d3ae53aeafc28441c5707f15bda32c0a93d Mon Sep 17 00:00:00 2001 From: Sidd Date: Tue, 28 Aug 2018 01:40:28 -0400 Subject: [PATCH] Disable LZO Compression to mitigate VORACLE --- openvpn-install.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index 403e0fd..040adf2 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -296,7 +296,7 @@ ifconfig-pool-persist ipp.txt" > /etc/openvpn/server.conf esac echo "keepalive 10 120 cipher AES-256-CBC -comp-lzo +comp-lzo no user nobody group $GROUPNAME persist-key @@ -385,7 +385,7 @@ persist-tun remote-cert-tls server auth SHA512 cipher AES-256-CBC -comp-lzo +comp-lzo no setenv opt block-outside-dns key-direction 1 verb 3" > /etc/openvpn/client-common.txt