pfSense

Offering stuff known to be insecure since 2008 at least on not an option. Ditch the crappy HW. http://www.win.tue.nl/hashclash/rogue-ca/

Yes, MD5 is insicure, but untill yealink don't update your ip-phone for SHA support is impossible use this phone with pfsense and openVpn. The best think to do is insert into select algorithm an further MD5 option. In this case is possible choose.
Thank

Until?! :-O If they've not noticed they are using insecure crap in 5 years, you'd better find a viable vendor (and ditch the junk, as suggested above.)

My comunication is only an advice. Insert an option in pfSense don't mean with pfSense will become insicure, because you can choose between (MD%, SHA1, SHA256, ecc..)
Change all my ip phone (I have a company with ip phone, don't sell ip-phone) and add ad option in fpsense have different cost.
But the pfsense comunity don't accet this suggestion is the same. I will use pfsene 2.0.1 untill Yealink Ip Phone don't update your firmware.

Thank.