vyos-1x.git/data/templates/openvpn, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2026-06-19T11:27:43+00:00openvpn: T8998: fix ccd-exclusive without client-config-dir2026-06-19T11:27:43+00:00Nataliia Solomkonatalirs1985@gmail.com2026-06-19T11:10:56+00:00urn:sha1:e6c87a4697e2e80f056f745c6321f3015e76ff1b
Emit `client-config-dir` when `reject-unconfigured-clients` is set,
even without server client entries, so OpenVPN does not crash-loop.
openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels2026-01-12T13:44:32+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2025-12-31T07:50:21+00:00urn:sha1:61487b13da8dc270907633a3140bd0cc2aa0926a
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces
(used as fallback cipher in site-to-site mode)
- Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
T6183: interfaces openvpn: suppport specifying IP protocol version2024-08-14T04:47:05+00:00Lucas Christianlucas@lucasec.com2024-08-12T06:06:02+00:00urn:sha1:18ea3673a105d9d12699afb2607c81412dde441bOPENVPN: T6555: fix name to bridge2024-08-02T14:10:51+00:00fett0fernando.gmaidana@gmail.com2024-08-02T14:10:51+00:00urn:sha1:d5ae708581d453e2205ad4cf8576503f42e262b6OPENVPN: T6555: add server-bridge options in mode server2024-07-31T18:21:25+00:00fett0fernando.gmaidana@gmail.com2024-07-31T18:21:25+00:00urn:sha1:4acad3eb8d9be173b76fecafc32b0c70eae9b192OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphers2024-07-25T10:07:02+00:00srividya0208a.srividya@vyos.io2024-07-15T10:30:00+00:00urn:sha1:b62b2f5f8a9c4f0a7dc26bce1f15843651119256T5474: establish common file name pattern for XML conf mode commands2023-12-31T22:49:48+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
T5728: OpenVPN server replace first_host_address to vpn_gateway2023-11-12T14:50:13+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-11-12T14:50:13+00:00urn:sha1:480711c329a38b773bb0b8f64f0e50dfc4ea4437
Some OpenVPN clients (OpenVPN3) do not understand address of
gateway for the pushed networks. It leads that pushed routes are
not installed at all.
Replace `subnet | first_host_address` to the `vpn_gateway` to fix it
openvpn: T5634: Remove support for insecure DES and Blowfish ciphers2023-10-12T00:30:25+00:00Daniil Baturindaniil@baturin.org2023-10-09T16:30:12+00:00urn:sha1:941c5adfaca2c7e3318b2ba0e7f36c37acaa53c1Merge pull request #1637 from ordex/T32142023-09-14T14:37:20+00:00Daniil Baturindaniil@vyos.io2023-09-14T14:37:20+00:00urn:sha1:599016be1ac0b659a4baf696d5be7db9a36a2fea
openvpn: T3214: fix server-ipv6 and nopool handling