vyos-1x.git/smoketest/configs/vpn-openvpn, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2026-01-12T13:44:32+00:00openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels2026-01-12T13:44:32+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2025-12-31T07:50:21+00:00urn:sha1:61487b13da8dc270907633a3140bd0cc2aa0926a
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces
(used as fallback cipher in site-to-site mode)
- Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
smoketest: T7738: provide OpenVPN test certificates for migration tests2025-12-02T20:41:39+00:00Christian Breunigchristian@breunig.cc2025-12-02T06:15:07+00:00urn:sha1:b4299d7b9af8cdac63472423b2b567a4569e9a63
This adds necessary embedded certificates to validate the migration logic added
in commit 63cc76fa236 ("openvpn: T7738: avoid duplicate certs during 1.3 -> 1.4
migration").
The CA used was generated using EasyRSA as described in our documentation:
https://docs.vyos.io/en/1.3/configuration/interfaces/openvpn.html#generate-x-509-certificate-and-keys