[arch-dev-public] Build openvpn in --enable-password-save option
I haven't seen TomK in a while, so I'm bringing this to the list: The auth-user-pass option of openvpn allows you to specify a plaintext file containing a username and a password. However, this feature is disabled by default. This means that everyone who wants to use it will have to rebuild openvpn. I want to enable the --enable-password-save option in our openvpn package. IMO, our users are smart enough to know the security implications of saving a password in a plaintext file. Enabling this option is completely safe if you don't use this feature. What do you think?
Thomas Bächler schrieb:
I haven't seen TomK in a while, so I'm bringing this to the list: The auth-user-pass option of openvpn allows you to specify a plaintext file containing a username and a password. However, this feature is disabled by default. This means that everyone who wants to use it will have to rebuild openvpn.
I want to enable the --enable-password-save option in our openvpn package. IMO, our users are smart enough to know the security implications of saving a password in a plaintext file. Enabling this option is completely safe if you don't use this feature.
What do you think?
NVM, I met TomK on IRC and he told me to go ahead.
On Fri, 11 Jul 2008, Thomas Bächler wrote:
Thomas Bächler schrieb:
I haven't seen TomK in a while, so I'm bringing this to the list: The auth-user-pass option of openvpn allows you to specify a plaintext file containing a username and a password. However, this feature is disabled by default. This means that everyone who wants to use it will have to rebuild openvpn.
I want to enable the --enable-password-save option in our openvpn package. IMO, our users are smart enough to know the security implications of saving a password in a plaintext file. Enabling this option is completely safe if you don't use this feature.
What do you think?
NVM, I met TomK on IRC and he told me to go ahead.
openvpn is a core package so it should go in testing for signoff. You just committed it to extra. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
On Fri, 11 Jul 2008, Eric Belanger wrote:
On Fri, 11 Jul 2008, Thomas Bächler wrote:
Thomas Bächler schrieb:
I haven't seen TomK in a while, so I'm bringing this to the list: The auth-user-pass option of openvpn allows you to specify a plaintext file containing a username and a password. However, this feature is disabled by default. This means that everyone who wants to use it will have to rebuild openvpn.
I want to enable the --enable-password-save option in our openvpn package. IMO, our users are smart enough to know the security implications of saving a password in a plaintext file. Enabling this option is completely safe if you don't use this feature.
What do you think?
NVM, I met TomK on IRC and he told me to go ahead.
openvpn is a core package so it should go in testing for signoff. You just committed it to extra.
I just fixed it. Please start a signoff thread. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
participants (2)
-
Eric Belanger
-
Thomas Bächler