md5 is out of date

ralfoertner

Hello!

I have a few OpenVPN installations where users get an error message that md5 supoort will be dropped in april this year. I googled a lot. But I did not find a clear solution.

Some said putting in the parameter tls-cipher "DEFAULT:@SECLEVEL=0" would be the solution. But where must it be putted in? Client or server config file?

Or do I have to update the openvpn software including easy rsa and create all the certificates new?

I hope I took the right forum for thar question.

Thank you!
RO

TinCanTech

ralfoertner wrote I hope I took the right forum for thar question.

This is the correct forum.

ralfoertner wrote Some said putting in the parameter tls-cipher "DEFAULT:@SECLEVEL=0" would be the solution.

If you prefer to compromise your security then sure .. but it is strongly not recommended..

ralfoertner wrote Or do I have to update the openvpn software including easy rsa and create all the certificates new?

Very strongly recommended indeed. :!: