diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-08-30 19:43:51 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-13 21:06:12 +0200 |
| commit | 585c491b3ee5c02a0367bf2bd752fe4510200c6a (patch) | |
| tree | 04d82e00c077418c4ab9f14cac17cdf4d682c9b1 /interface-definitions/include | |
| parent | b7e0a79b7c028cf604fb3becef3f74ae0f1f06cc (diff) | |
| download | vyos-1x-585c491b3ee5c02a0367bf2bd752fe4510200c6a.tar.gz vyos-1x-585c491b3ee5c02a0367bf2bd752fe4510200c6a.zip | |
openvpn: T8264: migrate away DCO the Kernel module cannot serve
"offload dco" was accepted next to tap, static keys, compression, CBC
ciphers and raw options OpenVPN refuses to offload, because 2.6 ignored the
module altogether. Those combinations now fail verify(), which would break
config load on upgrade, so drop the request instead.
The migration has to mirror verify_dco() exactly: anything it keeps that
verify() turns away leaves a router unable to commit its own configuration.
Diffstat (limited to 'interface-definitions/include')
| -rw-r--r-- | interface-definitions/include/version/openvpn-version.xml.i | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/interface-definitions/include/version/openvpn-version.xml.i b/interface-definitions/include/version/openvpn-version.xml.i index 6bc2b2da6..19a95e6db 100644 --- a/interface-definitions/include/version/openvpn-version.xml.i +++ b/interface-definitions/include/version/openvpn-version.xml.i @@ -1,3 +1,3 @@ <!-- include start from include/version/openvpn-version.xml.i --> -<syntaxVersion component='openvpn' version='5'></syntaxVersion> +<syntaxVersion component='openvpn' version='6'></syntaxVersion> <!-- include end --> |