diff options
| author | Nataliia Solomko <natalirs1985@gmail.com> | 2024-06-11 18:04:18 +0300 |
|---|---|---|
| committer | Nataliia Solomko <natalirs1985@gmail.com> | 2024-06-11 18:04:18 +0300 |
| commit | 0f669a22615a18c3cd8da2f65f3ed79686992320 (patch) | |
| tree | 217d18dbb2a6dfa4c0b431d9196110c8a1daee99 /src/conf_mode/interfaces_openvpn.py | |
| parent | 82607438d6df5291c581d802c7a2a98eabe084ff (diff) | |
| download | vyos-1x-0f669a22615a18c3cd8da2f65f3ed79686992320.tar.gz vyos-1x-0f669a22615a18c3cd8da2f65f3ed79686992320.zip | |
openvpn: T5487: Remove eprecated option --cipher for server and client mode
Diffstat (limited to 'src/conf_mode/interfaces_openvpn.py')
| -rwxr-xr-x | src/conf_mode/interfaces_openvpn.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/conf_mode/interfaces_openvpn.py b/src/conf_mode/interfaces_openvpn.py index 627cc90ba..017010a61 100755 --- a/src/conf_mode/interfaces_openvpn.py +++ b/src/conf_mode/interfaces_openvpn.py @@ -515,6 +515,10 @@ def verify(openvpn): print('Warning: using dh-params and EC keys simultaneously will ' \ 'lead to DH ciphers being used instead of ECDH') + if dict_search('encryption.cipher', openvpn): + raise ConfigError('"encryption cipher" option is deprecated for TLS mode. ' + 'Use "encryption ncp-ciphers" instead') + if dict_search('encryption.cipher', openvpn) == 'none': print('Warning: "encryption none" was specified!') print('No encryption will be performed and data is transmitted in ' \ |