I setup a hand-me-down Ubiquiti Unifi UDR for testing. When I setup the OpenVPN server on it and downloaded the client, I was shocked to see that it still uses SHA1 for auth. 
I seem to recall this getting updated in Merlin a long time ago, by integrating later versions of OpenVPN Server into his configs. Does anyone attempt to keep Ubiquiti on their toes for stuff like this? IIRC, SHA1 was deprecated as incredibly easy to crack around 2011 or so. I'm also not sure that the cipher AES-256-CBC is supported on later versions of OpenVPN server, but that could just be my failing memory. 
I seriously doubt that my VPN use would be incredibly useful to anyone, but it just doesn't seem right that a 1-man code warrior can update his ASUS code so much better than a bazillion dollar corporation does!
Do they only treat their lower end routers like this, or do their uber-expensive enterprise grade boxes have this same deficiency?
This is part of the client.opvn file created by the UDR:
The UDR has the latest released updates :
Unifi OS: 4.4.11
Network 10.0.162
So yeah, no excuses.
Or are there?
Any thoughts? Thanks!
I seem to recall this getting updated in Merlin a long time ago, by integrating later versions of OpenVPN Server into his configs. Does anyone attempt to keep Ubiquiti on their toes for stuff like this? IIRC, SHA1 was deprecated as incredibly easy to crack around 2011 or so. I'm also not sure that the cipher AES-256-CBC is supported on later versions of OpenVPN server, but that could just be my failing memory. I seriously doubt that my VPN use would be incredibly useful to anyone, but it just doesn't seem right that a 1-man code warrior can update his ASUS code so much better than a bazillion dollar corporation does!
Do they only treat their lower end routers like this, or do their uber-expensive enterprise grade boxes have this same deficiency?This is part of the client.opvn file created by the UDR:
auth-user-passremote-cert-tls servercipher AES-256-CBCcomp-lzoverb 3auth SHA1key-direction 1The UDR has the latest released updates :
Unifi OS: 4.4.11
Network 10.0.162
So yeah, no excuses.
Or are there?Any thoughts? Thanks!
