From df704a7cb884e879d8c905782aaf869daab31fab Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Thu, 4 Aug 2022 20:55:25 +0200
Subject: macsec: T4537: macsec_csindex can be set even without encryption

(cherry picked from commit 0943ac00412b0049b7a20a54e27e7b8025726598)
---
 data/templates/macsec/wpa_supplicant.conf.tmpl | 6 ------
 1 file changed, 6 deletions(-)

(limited to 'data/templates/macsec')

diff --git a/data/templates/macsec/wpa_supplicant.conf.tmpl b/data/templates/macsec/wpa_supplicant.conf.tmpl
index 04f3700fc..65747ea6f 100644
--- a/data/templates/macsec/wpa_supplicant.conf.tmpl
+++ b/data/templates/macsec/wpa_supplicant.conf.tmpl
@@ -69,12 +69,6 @@ network={
     # mka_priority (Priority of MKA Actor) is in 0..255 range with 255 being
     # default priority
     mka_priority={{ security.mka.priority }}
-
-    # macsec_csindex: IEEE 802.1X/MACsec cipher suite
-    # 0 = GCM-AES-128
-    # 1 = GCM-AES-256
-{# security.cipher is a mandatory key #}
-    macsec_csindex={{ '1' if security.cipher is vyos_defined('gcm-aes-256') else '0' }}
 {% endif %}
 
 {%   if security.replay_window is defined %}
-- 
cgit v1.2.3