diff options
| author | Jörg Frings-Fürst <debian@jff.email> | 2018-07-29 14:11:02 +0200 |
|---|---|---|
| committer | Jörg Frings-Fürst <debian@jff.email> | 2018-07-29 14:11:02 +0200 |
| commit | 64639e6dd78c89be61bbffeefcbd7a8d1e38178f (patch) | |
| tree | 828e090fe91751afd157fb1ceb48c153dcb6568b /src/openvpn/options.c | |
| parent | 3408a277eb3293c0c29d50c66b42727ad31181aa (diff) | |
| parent | 53de4f8356a1c5d5b2f0903499087adcc8854c57 (diff) | |
Merge branch 'feature/upstream' into develop
Diffstat (limited to 'src/openvpn/options.c')
| -rw-r--r-- | src/openvpn/options.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/src/openvpn/options.c b/src/openvpn/options.c index 3f9164c..d1adfb6 100644 --- a/src/openvpn/options.c +++ b/src/openvpn/options.c @@ -2189,6 +2189,15 @@ options_postprocess_verify_ce(const struct options *options, const struct connec { msg(M_USAGE, "--management-client-(user|group) can only be used on unix domain sockets"); } + + if (options->management_addr + && !(options->management_flags & MF_UNIX_SOCK) + && (!options->management_user_pass)) + { + msg(M_WARN, "WARNING: Using --management on a TCP port WITHOUT " + "passwords is STRONGLY discouraged and considered insecure"); + } + #endif /* |