From 0ff7aa62fca32be7c863fff7d39983f9ae9d4a40 Mon Sep 17 00:00:00 2001 From: Paul Donald Date: Sun, 8 Feb 2026 22:46:39 +0100 Subject: [PATCH] openvpn: disable compression in builds If you need the security risks of using compression, make a custom build. Signed-off-by: Paul Donald https://github.com/openwrt/packages/pull/28533 --- net/openvpn/Config-mbedtls.in | 2 +- net/openvpn/Config-openssl.in | 4 ++-- net/openvpn/Config-wolfssl.in | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/net/openvpn/Config-mbedtls.in b/net/openvpn/Config-mbedtls.in index 14b1959c42..0cf46a917f 100644 --- a/net/openvpn/Config-mbedtls.in +++ b/net/openvpn/Config-mbedtls.in @@ -6,7 +6,7 @@ config OPENVPN_mbedtls_ENABLE_LZO config OPENVPN_mbedtls_ENABLE_LZ4 bool "Enable LZ4 compression support" - default y + default n #config OPENVPN_mbedtls_ENABLE_EUREPHIA # bool "Enable support for the eurephia plug-in" diff --git a/net/openvpn/Config-openssl.in b/net/openvpn/Config-openssl.in index 9ff2030206..b5a9282586 100644 --- a/net/openvpn/Config-openssl.in +++ b/net/openvpn/Config-openssl.in @@ -2,11 +2,11 @@ if PACKAGE_openvpn-openssl config OPENVPN_openssl_ENABLE_LZO bool "Enable LZO compression support" - default y + default n config OPENVPN_openssl_ENABLE_LZ4 bool "Enable LZ4 compression support" - default y + default n config OPENVPN_openssl_ENABLE_X509_ALT_USERNAME bool "Enable the --x509-username-field feature" diff --git a/net/openvpn/Config-wolfssl.in b/net/openvpn/Config-wolfssl.in index e3c70a5117..68bf6b064c 100644 --- a/net/openvpn/Config-wolfssl.in +++ b/net/openvpn/Config-wolfssl.in @@ -11,7 +11,7 @@ config OPENVPN_wolfssl_ENABLE_LZO config OPENVPN_wolfssl_ENABLE_LZ4 bool "Enable LZ4 compression support" - default y + default n config OPENVPN_wolfssl_ENABLE_X509_ALT_USERNAME bool "Enable the --x509-username-field feature"