openvpn: disable compression in builds
authorPaul Donald <redacted>
Sun, 8 Feb 2026 21:46:39 +0000 (22:46 +0100)
committerHannu Nyman <redacted>
Sun, 22 Feb 2026 09:54:13 +0000 (11:54 +0200)
If you need the security risks of using compression,
make a custom build.

Signed-off-by: Paul Donald <redacted>
https://github.com/openwrt/packages/pull/28533

net/openvpn/Config-mbedtls.in
net/openvpn/Config-openssl.in
net/openvpn/Config-wolfssl.in

index 14b1959c42588813475264de3371d048c0bc2dc7..0cf46a917f04a01fddbcf9bc83f38e5dc3f39137 100644 (file)
@@ -6,7 +6,7 @@ config OPENVPN_mbedtls_ENABLE_LZO
 
 config OPENVPN_mbedtls_ENABLE_LZ4
        bool "Enable LZ4 compression support"
-       default y
+       default n
 
 #config OPENVPN_mbedtls_ENABLE_EUREPHIA
 #      bool "Enable support for the eurephia plug-in"
index 9ff2030206265345ac2d223eb397b0d8124e632c..b5a928258629b62281eaf372555cfd14f49c2aa0 100644 (file)
@@ -2,11 +2,11 @@ if PACKAGE_openvpn-openssl
 
 config OPENVPN_openssl_ENABLE_LZO
        bool "Enable LZO compression support"
-       default y
+       default n
 
 config OPENVPN_openssl_ENABLE_LZ4
        bool "Enable LZ4 compression support"
-       default y
+       default n
 
 config OPENVPN_openssl_ENABLE_X509_ALT_USERNAME
        bool "Enable the --x509-username-field feature"
index e3c70a51178d0cbaf75c3d01fe06a77c07ba1d1b..68bf6b064c978c1a68c03dfb45aa292aa47de446 100644 (file)
@@ -11,7 +11,7 @@ config OPENVPN_wolfssl_ENABLE_LZO
 
 config OPENVPN_wolfssl_ENABLE_LZ4
        bool "Enable LZ4 compression support"
-       default y
+       default n
 
 config OPENVPN_wolfssl_ENABLE_X509_ALT_USERNAME
        bool "Enable the --x509-username-field feature"
git clone https://git.99rst.org/PROJECT