From e5c00692028d7e78ce7b15fd06976d0562042954 Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Thu, 2 Mar 2023 17:09:00 +0100 Subject: [PATCH] ditch Libre --- source/intro.rst | 3 +-- source/manual/firmware.rst | 7 ------- source/manual/install.rst | 11 ----------- source/manual/updates.rst | 1 - 4 files changed, 1 insertion(+), 21 deletions(-) diff --git a/source/intro.rst b/source/intro.rst index 83a2a083..15d8b8b7 100644 --- a/source/intro.rst +++ b/source/intro.rst @@ -95,8 +95,7 @@ The feature set of OPNsense includes high-end features such as forward caching proxy, traffic shaping, intrusion detection and easy OpenVPN client setup. The latest release is based on a recent FreeBSD for long-term support and uses a newly developed MVC-framework based on Phalcon. OPNsense’s focus on security -brings unique features such as the option to use LibreSSL instead of OpenSSL -(selectable in the GUI). +brings unique features such as easy to use one time password authentication for various components. The robust and reliable update mechanism gives OPNsense the ability to provide important security updates in a timely fashion. diff --git a/source/manual/firmware.rst b/source/manual/firmware.rst index 4c731d79..9564dab6 100644 --- a/source/manual/firmware.rst +++ b/source/manual/firmware.rst @@ -59,13 +59,6 @@ Settings The settings menu contains all available mirrors and options which you can choose for your installation. Usually the default options are good enough here, but if you want to choose a mirror more close to home you can do so here. -OPNsense supports two flavours for its TLS crypto stack, OpenSSL and LibreSSL. Our standard is `OpenSSL `__, but some more -security minded people favor OpenBSD's `LibreSSL `__ - -.. Note:: - - Since OpenSSL is more widely used, some software packages are not compatible with LibreSSL. - .. Tip:: diff --git a/source/manual/install.rst b/source/manual/install.rst index 0be05e47..5e52b70c 100644 --- a/source/manual/install.rst +++ b/source/manual/install.rst @@ -217,17 +217,6 @@ Media Filename Composition repository, see `README `__ --------------------- -OpenSSL and LibreSSL --------------------- - -OPNsense images are provided based upon `OpenSSL `__. -The `LibreSSL `__ flavor can be selected from within -the GUI (:menuselection:`System --> Firmware --> Settings`). In order to apply your choice an update -must be performed after save, which can include a reboot of the system. - -.. image:: ./images/firmware_flavour.png - ------------------------- Boot preparation diff --git a/source/manual/updates.rst b/source/manual/updates.rst index 35a3ade0..0566bdef 100644 --- a/source/manual/updates.rst +++ b/source/manual/updates.rst @@ -20,7 +20,6 @@ Update settings By navigating to :menuselection:`System --> Firmware --> Settings`, you can influence the firmware update settings: * **Fimware Mirror:** this influences where OPNsense tries to get its updates from. If you have troubles updating or searching for updates, or if your current mirror is running slowly, you can change it here. -* **Firmware Flavour:** OPNsense is available in different flavours. Currently, these flavours influence which cryptographic library to use: OpenSSL (the default) or its drop-in replacement LibreSSL. * **Release Type:** With this setting, you can switch between the regular fortnightly schedule of tested releases (Production) or the newest, not fully tested code (Development). **Please leave this setting on "Production", unless you fully understand the implications of switching.** --------------