diff options
| author | Jörg Frings-Fürst <debian@jff.email> | 2018-07-29 13:59:08 +0200 |
|---|---|---|
| committer | Jörg Frings-Fürst <debian@jff.email> | 2018-07-29 13:59:08 +0200 |
| commit | ec0c1de5bfbf202261ca511d372c761b9745935b (patch) | |
| tree | 3ebf1c9da90db82b07f7785332c9a35cc46aca19 /src/openvpn/options.c | |
| parent | 3408a277eb3293c0c29d50c66b42727ad31181aa (diff) | |
| parent | 2c8e4bc4f9ab94e4d0b63341820d471af7c28c6c (diff) | |
Update upstream source from tag 'upstream/2.4.6'
Update to upstream version '2.4.6'
with Debian dir 5e8196d02f26c4d63556a6dd9332ec86b95574cd
Diffstat (limited to 'src/openvpn/options.c')
| -rw-r--r-- | src/openvpn/options.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/src/openvpn/options.c b/src/openvpn/options.c index 3f9164c..d1adfb6 100644 --- a/src/openvpn/options.c +++ b/src/openvpn/options.c @@ -2189,6 +2189,15 @@ options_postprocess_verify_ce(const struct options *options, const struct connec { msg(M_USAGE, "--management-client-(user|group) can only be used on unix domain sockets"); } + + if (options->management_addr + && !(options->management_flags & MF_UNIX_SOCK) + && (!options->management_user_pass)) + { + msg(M_WARN, "WARNING: Using --management on a TCP port WITHOUT " + "passwords is STRONGLY discouraged and considered insecure"); + } + #endif /* |