diff options
author | Christian Poessinger <christian@poessinger.com> | 2022-09-17 20:36:22 +0200 |
---|---|---|
committer | Christian Poessinger <christian@poessinger.com> | 2022-09-17 20:36:22 +0200 |
commit | a4feb96af9ac45aff41ded1744cf302b5c5a9e7e (patch) | |
tree | 360c1585b2033d80a5341b068bc63314e41d85c3 /LICENSE | |
parent | 1fe8d3b4b92409beace926b6d0913b5001b46f42 (diff) | |
download | vyos-1x-a4feb96af9ac45aff41ded1744cf302b5c5a9e7e.tar.gz vyos-1x-a4feb96af9ac45aff41ded1744cf302b5c5a9e7e.zip |
wireguard: T4702: actively revoke peer if it gets disabled
When any configured peer is set to `disable` while the Wireguard tunnel is up
and running it does not get actively revoked and removed. This poses a security
risk as connections keep beeing alive.
Whenever any parameter of a peer changes we actively remove the peer and fully
recreate it on the fly.
Diffstat (limited to 'LICENSE')
0 files changed, 0 insertions, 0 deletions