Project

General

Profile

Actions

Todo #15188

closed

Remove deprecated OpenVPN hardware crypto engine option

Added by Jim Pingle 3 months ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
OpenVPN
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
24.03
Release Notes:
Default

Description

There is an option in the OpenVPN client/server configuration (and wizard) which sets a hardware crypto engine for OpenVPN. This hasn't been necessary in years as it's handled automatically in OpenSSL and now in the kernel. There are no more traditional "engines" that can be selected in the way this option used to use.

Remove the frontend and backend code that uses the option.

Upgrade code to remove the setting from the config is unnecessary, whatever is left over will be ignored.

Actions #1

Updated by Jim Pingle 3 months ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100
Actions #2

Updated by aleksei prokofiev 3 months ago

Tested on
23.09.1-RELEASE (amd64)
built on Wed Dec 20 21:27:00 MSK 2023
FreeBSD 14.0-CURRENT

24.03-DEVELOPMENT (amd64)
built on Wed Jan 17 6:00:00 UTC 2024
FreeBSD 15.0-CURRENT

Works as expected, the patch will remove Hardware Crypto option.

Actions #3

Updated by Jim Pingle 3 months ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF