From 0066932f89646cd5d50be80992dc52626be282c6 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 12 Sep 2012 12:18:00 -0400
Subject: [PATCH] Print a nice large warning on the PPTP page about it no
 longer being considered secure.

---
 usr/local/www/vpn_pptp.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/usr/local/www/vpn_pptp.php b/usr/local/www/vpn_pptp.php
index 81395edf03..7b74040568 100755
--- a/usr/local/www/vpn_pptp.php
+++ b/usr/local/www/vpn_pptp.php
@@ -294,6 +294,7 @@ function enable_change(enable_over) {
 <form action="vpn_pptp.php" method="post" name="iform" id="iform">
 <?php if ($input_errors) print_input_errors($input_errors); ?>
 <?php if ($savemsg) print_info_box($savemsg); ?>
+<?php print_info_box(gettext("PPTP is no longer considered a secure VPN technology because it relies upon MS-CHAPv2 which has been compromised. If you continue to use PPTP be aware that intercepted traffic can be decrypted by a third party, so it should be considered unencrypted. We advise migrating to another VPN type such as OpenVPN or IPsec.<br/><br/><a href=\"https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/\">Read More</a>")); ?>
 <table width="100%" border="0" cellpadding="0" cellspacing="0">
   <tr><td class="tabnavtbl">
 <?php