From: Paul Donald <redacted>
Date: Sun, 8 Feb 2026 21:46:39 +0000 (+0100)
Subject: openvpn: disable compression in builds
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=0ff7aa62fca32be7c863fff7d39983f9ae9d4a40;p=openwrt-packages.git

openvpn: disable compression in builds

If you need the security risks of using compression,
make a custom build.

Signed-off-by: Paul Donald <redacted>
https://github.com/openwrt/packages/pull/28533
---

diff --git a/net/openvpn/Config-mbedtls.in b/net/openvpn/Config-mbedtls.in
index 14b1959c4..0cf46a917 100644
--- a/net/openvpn/Config-mbedtls.in
+++ b/net/openvpn/Config-mbedtls.in
@@ -6,7 +6,7 @@ config OPENVPN_mbedtls_ENABLE_LZO
 
 config OPENVPN_mbedtls_ENABLE_LZ4
 	bool "Enable LZ4 compression support"
-	default y
+	default n
 
 #config OPENVPN_mbedtls_ENABLE_EUREPHIA
 #	bool "Enable support for the eurephia plug-in"
diff --git a/net/openvpn/Config-openssl.in b/net/openvpn/Config-openssl.in
index 9ff203020..b5a928258 100644
--- a/net/openvpn/Config-openssl.in
+++ b/net/openvpn/Config-openssl.in
@@ -2,11 +2,11 @@ if PACKAGE_openvpn-openssl
 
 config OPENVPN_openssl_ENABLE_LZO
 	bool "Enable LZO compression support"
-	default y
+	default n
 
 config OPENVPN_openssl_ENABLE_LZ4
 	bool "Enable LZ4 compression support"
-	default y
+	default n
 
 config OPENVPN_openssl_ENABLE_X509_ALT_USERNAME
 	bool "Enable the --x509-username-field feature"
diff --git a/net/openvpn/Config-wolfssl.in b/net/openvpn/Config-wolfssl.in
index e3c70a511..68bf6b064 100644
--- a/net/openvpn/Config-wolfssl.in
+++ b/net/openvpn/Config-wolfssl.in
@@ -11,7 +11,7 @@ config OPENVPN_wolfssl_ENABLE_LZO
 
 config OPENVPN_wolfssl_ENABLE_LZ4
 	bool "Enable LZ4 compression support"
-	default y
+	default n
 
 config OPENVPN_wolfssl_ENABLE_X509_ALT_USERNAME
 	bool "Enable the --x509-username-field feature"