OpenVPN Update?

Question

The deadline for the update for OpenVPN to stop using md5 has now passed, and even though Netgear said the update would be out before the deadline (I didn't really even believe it back then) here we are on May 3rd and there's still no update for our systems...
&nbsp;
Could someone at Netgear please chime in and explain why it's taken over a year to roll out this update, and why we're not over the deadline with no idea when you folks will provide us a working update?

dkleinknecht · Answer

So I guess this is the norm, right? Ignore&nbsp;problems until users just move on to a more reliable product? Glad I kept my Amplifi routers!

madbrain · Answer

MD5 was considered insecure for use in certificates nearly 10 years ago. Netgear does not now, and never has cared about security.
&nbsp;
&nbsp;

LuB · Answer

Netgear, can you please provide an update on when the&nbsp;firmware update is coming that will support&nbsp;SHA256 certificates in lieu of MD5 for OpenVPN. &nbsp;You released an update for the R8000 on 5/25. &nbsp;When will orbi RBR50&nbsp;be updated to support this?

KrikkeDR · Answer

An update on if&nbsp;they are working on the issue would be appreciated indeed.

dkleinknecht · Answer

At this point it's been over a month since the cutoff, and Netgear STILL has not provide any response that I would deem as valuable. This is honestly ridiculous as it's been a known thing for a year now, and they still have not addressed this. It really does feel like they're ignoring this in hopes it will just go away. Pathetic.

Forum Discussion

OpenVPN Update?

8 Replies