Hi all,

I activated the VPN Server on my Deco X50, based on OpenVPN. This is by default Certificate-based only. However when checking the certificates, I noticed that this is based on RSA 1024 bit keys, which is considered no longer secure since many years.

Does somebody know if there is any possibility to update they keys/certificates to either ECC or longer keys?

Common Name: ChangeMe

Subject Alternative Names:

Organization: TP-Link

Organization Unit: SOHO-I18N

Locality: ShenZhen

State: GD

Country: CN

Valid From: June 4, 2023

Valid To: June 1, 2033

Issuer: ChangeMe, TP-Link

Key Size: 1024 bit. This key size is too low and may be vulnerable. You should generate a new CSR with a key size of at least 2048 bit and get a new certificate.

Serial Number: ff925474b9eeb99d