diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-01-06 10:55:42 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2024-01-09 07:29:16 +0100 |
| commit | d0d3071e99eb65edb888c26ef2fdc9e038438887 (patch) | |
| tree | 23deb6f335c302f5741fc587afbe6d4e7ca04a0c /interface-definitions/interfaces_openvpn.xml.in | |
| parent | 864524ba86b0a4d57ab64d6e9398c3fd5eb2fce4 (diff) | |
| download | vyos-1x-d0d3071e99eb65edb888c26ef2fdc9e038438887.tar.gz vyos-1x-d0d3071e99eb65edb888c26ef2fdc9e038438887.zip | |
https: T5902: remove virtual-host configuration
We have not seen the adoption of the https virtual-host CLI option.
What it did?
* Create multiple webservers each listening on a different IP/port
(but in the same VRF)
* All webservers shared one common document root
* All webservers shared the same SSL certificates
* All webservers could have had individual allow-client configurations
* API could be enabled for a particular virtual-host but was always enabled on
the default host
This configuration tried to provide a full webserver via the CLI but VyOS is a
router and the Webserver is there for an API or to serve files for a local-ui.
Changes
Remove support for virtual-hosts as it's an incomplete and thus mostly useless
"thing". Migrate all allow-client statements to one top-level allow statement.
Diffstat (limited to 'interface-definitions/interfaces_openvpn.xml.in')
| -rw-r--r-- | interface-definitions/interfaces_openvpn.xml.in | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/interface-definitions/interfaces_openvpn.xml.in b/interface-definitions/interfaces_openvpn.xml.in index addf3c1ab..389b5b5c9 100644 --- a/interface-definitions/interfaces_openvpn.xml.in +++ b/interface-definitions/interfaces_openvpn.xml.in @@ -720,14 +720,7 @@ </leafNode> #include <include/pki/certificate.xml.i> #include <include/pki/ca-certificate-multi.xml.i> - <leafNode name="dh-params"> - <properties> - <help>Diffie Hellman parameters (server only)</help> - <completionHelp> - <path>pki dh</path> - </completionHelp> - </properties> - </leafNode> + #include <include/pki/dh-params.xml.i> <leafNode name="crypt-key"> <properties> <help>Static key to use to authenticate control channel</help> |