On Thu, Mar 19, 2015 at 8:58 AM, Vick Khera <vi...@khera.org> wrote:

> pfsense < 2.2 have a split-brain openssl. so to test the version that
> you're getting with the openvpn service, you need to check the openssl
> linked to it. In this case "/usr/lcoal/bin/openssl version" will tell you
> it is newer.
>
> However, as everyone says, update to newest version of pfSense is your
> best move. Disabling export grade ciphers is also good advice.
>
>
This is most likley the wrong place to ask this but I figure some would
know.  Why are EXPORT ciphers still written into the suite?  I thought the
EXPORT rules were gone?
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to