From: Florian Eckert <fe@dev.tdt.de>
Date: Fri, 11 Dec 2020 09:40:33 +0000 (+0100)
Subject: luci-app-openvpn: add security hint for comp-lzo
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=3691c65d1a10e90e96b9f92bab53166873ae715a;p=project%2Fluci.git

luci-app-openvpn: add security hint for comp-lzo

See https://community.openvpn.net/openvpn/wiki/VORACLE

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
---

diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
index 04934c8c11..585d2d7d4f 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
@@ -254,7 +254,7 @@ local knownParams = {
 		{ ListValue,
 			"comp_lzo",
 			{ "yes", "no", "adaptive" },
-			translate("Use fast LZO compression") },
+			translate("Security recommendation: It is recommended to not enable compression and set this parameter to `no`")},
 		{ Flag,
 			"comp_noadapt",
 			0,
diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
index 980238cb67..9265cd61cc 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-basic.lua
@@ -42,7 +42,7 @@ local basicParams = {
 	{ ListValue,
 		"comp_lzo",
 		{"yes","no","adaptive"},
-		translate("Use fast LZO compression") },
+		translate("Security recommendation: It is recommended to not enable compression and set this parameter to `no`")},
 	{ Value,
 		"keepalive",
 		"10 60",