vyos-1x.git/src/migration-scripts/openvpn/0-to-1, branch feature/T9082-codeql-cpp

openvpn: T8304: fix migration for des, bf128 or bf256 cipher; use 3des instead

2026-03-06T19:14:56+00:00

This extends the CLI migration from commit 941c5adfaca2c7 ("openvpn: T5634: Remove support for insecure DES and Blowfish ciphers") by not only deleting insecure DES and Blowfish ciphers, but providing an alternative (3DES). If no cipher is defined, this will result in OpenVPN service not starting at all, as the implicit defined BF-CBC cipher is no longer supported by OpenSSL 3.0.0.

T7591: remove copyright years from source files

2025-06-28T21:16:52+00:00

The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors /g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice

migration: T6007: convert all migration scripts to load as module

2024-06-26T20:38:41+00:00

openvpn: T5634: fix permissions on migration file

2023-10-12T15:26:36+00:00

openvpn: T5634: Remove support for insecure DES and Blowfish ciphers

2023-10-12T00:30:25+00:00