In the short term, if you have access to the remote configs you can add a line to them:
Code: Select all
reneg-bytes 64000000[Feature Request] Fix OpenVPN vulnerability to SWEET32
The Mikrotik implementation of OpenVPN is vulnerable to https://sweet32.info/]SWEET32. This should have been patched months ago and OpenVPN updated to v2.4+.
In the short term, if you have access to the remote configs you can add a line to them:But this is just a mitigation and not a fix. The fix is to use stronger ciphers than the default bf-cbc. v2.4 supports stronger ciphers and automatic cipher negotiation.
In the short term, if you have access to the remote configs you can add a line to them:
Who is online
Users browsing this forum: f008600 and 68 guests