vyos-1x.git/src/migration-scripts/openvpn, branch currentVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=current2026-03-06T19:14:56+00:00openvpn: T8304: fix migration for des, bf128 or bf256 cipher; use 3des instead2026-03-06T19:14:56+00:00Christian Breunigchristian@breunig.cc2026-03-05T18:49:28+00:00urn:sha1:89e037a7d85cf9525418d521dcdf427545161948
This extends the CLI migration from commit 941c5adfaca2c7 ("openvpn: T5634:
Remove support for insecure DES and Blowfish ciphers") by not only deleting
insecure DES and Blowfish ciphers, but providing an alternative (3DES).
If no cipher is defined, this will result in OpenVPN service not starting at
all, as the implicit defined BF-CBC cipher is no longer supported by
OpenSSL 3.0.0.
openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnels2026-01-12T13:44:32+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2025-12-31T07:50:21+00:00urn:sha1:61487b13da8dc270907633a3140bd0cc2aa0926a
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces
(used as fallback cipher in site-to-site mode)
- Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
T7591: remove copyright years from source files2025-06-28T21:16:52+00:00Christian Breunigchristian@breunig.cc2025-06-28T18:51:21+00:00urn:sha1:1478516ae437f19ebeb7d6ff9b83dd74f8e76758
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
vyos.configtree: T6620: allow list_nodes() to work on non-existent paths2024-07-29T18:16:43+00:00Daniil Baturindaniil@baturin.org2024-07-29T18:16:43+00:00urn:sha1:30111fa493c72e7182854f295bc88d9eecccf419
and return an empty list in that case
(handy for migration scripts and the like)
OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphers2024-07-25T10:07:02+00:00srividya0208a.srividya@vyos.io2024-07-15T10:30:00+00:00urn:sha1:b62b2f5f8a9c4f0a7dc26bce1f15843651119256openvpn: T6591: deprecate OpenVPN server net30 topology (#3825)2024-07-18T18:33:24+00:00Daniil Baturindaniil@vyos.io2024-07-18T18:33:24+00:00urn:sha1:e2b05343b30d2f989968532106e792cbaf75ecf6migration: T6007: convert all migration scripts to load as module2024-06-26T20:38:41+00:00John Estabrookjestabro@vyos.io2024-06-20T01:16:05+00:00urn:sha1:26740a8d583f64dc0a27b59dd4ae303056972c0bopenvpn: T5487: make migration script executable2024-06-15T12:20:44+00:00Christian Breunigchristian@breunig.cc2024-06-15T12:20:44+00:00urn:sha1:87ba7f67db0381df8a9d15b8f17a19082bd1d553
Migration script introduced in commit 0f669a226 ("openvpn: T5487: Remove
eprecated option --cipher for server and client mode") lacked executable
permission.
openvpn: T5487: Remove eprecated option --cipher for server and client mode2024-06-11T15:04:18+00:00Nataliia Solomkonatalirs1985@gmail.com2024-06-11T15:04:18+00:00urn:sha1:0f669a22615a18c3cd8da2f65f3ed79686992320openvpn: T5634: fix permissions on migration file2023-10-12T15:26:36+00:00John Estabrookjestabro@vyos.io2023-10-12T15:26:36+00:00urn:sha1:e65117532b486253e6417c4e0e047a04de767dc3