[Group.of.nepali.translators] [Bug 1567717] Re: openvpn supports many cipher suites that it probably shouldn't

2017-02-06 Thread Seth Arnold
Thanks Christian; I think we can probably close this due to "The --cipher and --auth options are not negotiable, so I see less risk there" in the upstream ticket. There's doubtless higher-priority things to work on than preventing poor security configurations. Thanks ** Changed in: openvpn

[Group.of.nepali.translators] [Bug 1567717] Re: openvpn supports many cipher suites that it probably shouldn't

2017-02-06 Thread ChristianEhrhardt
Thanks Merlijn for the link. That means that 2.3.11 is fixed which in turn means >=Yakkety is fine. Seth, what is the security Teams position on that for Xenial now? ** Also affects: openvpn (Ubuntu Xenial) Importance: Undecided Status: New ** Changed in: openvpn (Ubuntu Xenial)