From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter =?utf-8?q?M=C3=BCller?= <peter.mueller@link38.eu>
To: development@lists.ipfire.org
Subject: [PATCH] mark 3DES and 1024 bit DH params as weak
Date: Sun, 10 Dec 2017 11:17:16 +0100
Message-ID: <20171210111716.08300014.peter.mueller@link38.eu>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============9090105866064070061=="
List-Id: <development.lists.ipfire.org>

--===============9090105866064070061==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

These are not considered secure anymore but are unfortunately
still needed in some cases (legacy hardware, ...).

Signed-off-by: Peter M=C3=BCller <peter.mueller(a)link38.eu>
---
 html/cgi-bin/ovpnmain.cgi | 2 +-
 html/cgi-bin/vpnmain.cgi  | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi
index ceb88c156..638e8ef0f 100644
--- a/html/cgi-bin/ovpnmain.cgi
+++ b/html/cgi-bin/ovpnmain.cgi
@@ -1320,7 +1320,7 @@ END
 		<form method=3D'post'><input type=3D'hidden' name=3D'AREUSURE' value=3D'ye=
s' />
 		<input type=3D'hidden' name=3D'KEY' value=3D'$cgiparams{'KEY'}' />
 			<select name=3D'DHLENGHT'>
-				<option value=3D'1024' $selected{'DHLENGHT'}{'1024'}>1024 $Lang::tr{'bit=
'}</option>
+				<option value=3D'1024' $selected{'DHLENGHT'}{'1024'}>1024 $Lang::tr{'bit=
'} ($Lang::tr{'vpn weak'})</option>
 				<option value=3D'2048' $selected{'DHLENGHT'}{'2048'}>2048 $Lang::tr{'bit=
'}</option>
 				<option value=3D'3072' $selected{'DHLENGHT'}{'3072'}>3072 $Lang::tr{'bit=
'}</option>
 				<option value=3D'4096' $selected{'DHLENGHT'}{'4096'}>4096 $Lang::tr{'bit=
'}</option>
diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index d6f6ecb33..3e8d1ef03 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -2470,7 +2470,7 @@ if(($cgiparams{'ACTION'} eq $Lang::tr{'advanced'}) ||
 					<option value=3D'aes128gcm64' $checked{'IKE_ENCRYPTION'}{'aes128gcm64'}=
>128 bit AES-GCM/64 bit ICV</option>
 					<option value=3D'aes128' $checked{'IKE_ENCRYPTION'}{'aes128'}>128 bit A=
ES-CBC</option>
 					<option value=3D'camellia128' $checked{'IKE_ENCRYPTION'}{'camellia128'}=
>128 bit Camellia-CBC</option>
-					<option value=3D'3des' $checked{'IKE_ENCRYPTION'}{'3des'}>168 bit 3DES-=
EDE-CBC</option>
+					<option value=3D'3des' $checked{'IKE_ENCRYPTION'}{'3des'}>168 bit 3DES-=
EDE-CBC ($Lang::tr{'vpn weak'})</option>
 				</select>
 			</td>
 			<td class=3D'boldbase'>
@@ -2490,7 +2490,7 @@ if(($cgiparams{'ACTION'} eq $Lang::tr{'advanced'}) ||
 					<option value=3D'aes128gcm64' $checked{'ESP_ENCRYPTION'}{'aes128gcm64'}=
>128 bit AES-GCM/64 bit ICV</option>
 					<option value=3D'aes128' $checked{'ESP_ENCRYPTION'}{'aes128'}>128 bit A=
ES-CBC</option>
 					<option value=3D'camellia128' $checked{'ESP_ENCRYPTION'}{'camellia128'}=
>128 bit Camellia-CBC</option>
-					<option value=3D'3des' $checked{'ESP_ENCRYPTION'}{'3des'}>168 bit 3DES-=
EDE-CBC</option>
+					<option value=3D'3des' $checked{'ESP_ENCRYPTION'}{'3des'}>168 bit 3DES-=
EDE-CBC ($Lang::tr{'vpn weak'})</option>
 				</select>
 			</td>
 		</tr>
--=20
2.13.6



--===============9090105866064070061==--