Re: Fwd: LEAF for PC Engines APU1D Board

Hi Bob

Am 12.05.2021 um 15:14 schrieb Bob von Knobloch:
>>
>> So you should be fine with a minimal installation.
>> Could you specify the more modern crypto requirement? I have mostly 
>> dropped openvpn for wireguard, a lot smaller and less load.
>>
>> The clients (mostly windows would no longer support the crypto 
> algorithms in the old version (mainly TLS IIRC), without degrading the 
> crypto level. I expect newer clients cannot even downgrade.

OK I get the idea and then upgrading from WRAP (I still use them) puts 
you in a different performance group.

> I'll stay wit openvpn as it has served us well and I'm used to it.
> I have scripts that generate  certificates for each of our users (small 
> firm - 10 users not far from CH - Black Forest).
> I generate new sets of user certificates each year (started off with 6 
> months, but that became too heavy to keep all users updated).

I am not sure supporting windows clients makes certificate maintenance 
_easy_ but you must have found a procedure to handle it in your environment.

cheers

ET

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/