diff options
| author | Daniil Baturin <daniil@vyos.io> | 2022-09-15 15:07:40 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-09-15 15:07:40 +0100 |
| commit | e57146723fd791d71ac9659f9247a8827c151c97 (patch) | |
| tree | c75c86280700659da8eb2b53eaa8fdf7d3406b62 /src/conf_mode/interfaces-openvpn.py | |
| parent | b9678136eac767ece3d5a5e53f9f2b9c47c7477a (diff) | |
| parent | 3629f376c26bbc22b94fbd5e9bbe789d08e2caa6 (diff) | |
| download | vyos-1x-e57146723fd791d71ac9659f9247a8827c151c97.tar.gz vyos-1x-e57146723fd791d71ac9659f9247a8827c151c97.zip | |
Merge pull request #1539 from sever-sever/T4679-eq
openvpn: T4679: Fix incorrect verify local and remote address 1.3
Diffstat (limited to 'src/conf_mode/interfaces-openvpn.py')
| -rwxr-xr-x | src/conf_mode/interfaces-openvpn.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/conf_mode/interfaces-openvpn.py b/src/conf_mode/interfaces-openvpn.py index 7d20b3fd0..fe5898282 100755 --- a/src/conf_mode/interfaces-openvpn.py +++ b/src/conf_mode/interfaces-openvpn.py @@ -43,6 +43,7 @@ from vyos.util import chown from vyos.util import chmod_600 from vyos.util import cmd from vyos.util import dict_search +from vyos.util import is_list_equal from vyos.util import makedir from vyos.validate import is_addr_assigned @@ -159,7 +160,7 @@ def verify(openvpn): elif v6remAddr and not v6loAddr: raise ConfigError('IPv6 "remote-address" requires IPv6 "local-address"') - if (v4loAddr == v4remAddr) or (v6remAddr == v4remAddr): + if is_list_equal(v4loAddr, v4remAddr) or is_list_equal(v6loAddr, v6remAddr): raise ConfigError('"local-address" and "remote-address" cannot be the same') if dict_search('local_host', openvpn) in dict_search('local_address', openvpn): |