summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-02-23 20:23:42 +0100
committerGitHub <noreply@github.com>2023-02-23 20:23:42 +0100
commitb652a66119c73042f5e141e6733605edb66b5eea (patch)
tree5a3ba6fed7ce44e6d46d389b424e460ad1a841d7
parent702441a072bc43b5776ecc6fe041371153aa26c7 (diff)
parent3fd4d5b9c595b43dddbb75cf0748450b36a5610a (diff)
downloadvyos-1x-b652a66119c73042f5e141e6733605edb66b5eea.tar.gz
vyos-1x-b652a66119c73042f5e141e6733605edb66b5eea.zip
Merge pull request #1842 from sever-sever/T5027
T5027: Enable legacy provider to support current ciphers
-rw-r--r--data/templates/openvpn/server.conf.j23
1 files changed, 3 insertions, 0 deletions
diff --git a/data/templates/openvpn/server.conf.j2 b/data/templates/openvpn/server.conf.j2
index 6dd4ef88d..af866f2a6 100644
--- a/data/templates/openvpn/server.conf.j2
+++ b/data/templates/openvpn/server.conf.j2
@@ -213,6 +213,9 @@ keysize 256
data-ciphers {{ encryption.ncp_ciphers | openvpn_ncp_ciphers }}
{% endif %}
{% endif %}
+# https://vyos.dev/T5027
+# Required to support BF-CBC (default ciphername when none given)
+providers legacy default
{% if hash is vyos_defined %}
auth {{ hash }}