When reviweing OpenVPN/openvpn#231 I noticed this was
missing from Changes.rst.

Signed-off-by: Frank Lichtenheld <fr...@lichtenheld.com>
---
 Changes.rst           | 5 +++++
 src/openvpn/options.c | 1 -
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/Changes.rst b/Changes.rst
index 4942a580..dc829032 100644
--- a/Changes.rst
+++ b/Changes.rst
@@ -176,6 +176,11 @@ TLS 1.0 and 1.1 are deprecated
     a PRNG is better left to a crypto library. So we use the PRNG
     mbed TLS or OpenSSL now.
 
+``--keysize`` has been removed
+    The ``--keysize`` option was only useful to change the key length when 
using the
+    BF, CAST6 or RC2 ciphers. For all other ciphers the key size is fixed with 
the
+    chosen cipher. As OpenVPN v2.6 no longer supports any of these variable 
length
+    ciphers, this option was removed as well to avoid confusion.
 
 Compression no longer enabled by default
     Unless an explicit compression option is specified in the configuration,
diff --git a/src/openvpn/options.c b/src/openvpn/options.c
index a5f6d244..34291edf 100644
--- a/src/openvpn/options.c
+++ b/src/openvpn/options.c
@@ -4176,7 +4176,6 @@ options_postprocess_pull(struct options *o, struct 
env_set *es)
  *
  * --cipher
  * --auth
- * --keysize
  * --secret
  * --no-replay
  *
-- 
2.34.1



_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to