summaryrefslogtreecommitdiff
path: root/interface-definitions/interfaces_openvpn.xml.in
diff options
context:
space:
mode:
authorAlex W <embezzle.dev@proton.me>2024-04-29 20:53:51 +0100
committerMergify <37929162+mergify[bot]@users.noreply.github.com>2024-04-30 06:30:40 +0000
commitef665adb7e44ef03e7f3e6f2cd1db88315ffcbe1 (patch)
tree681e917ed2394067e062a69817865688667bd994 /interface-definitions/interfaces_openvpn.xml.in
parent7edaf47f0f582459d5324da39cd0da0937c30fa9 (diff)
downloadvyos-1x-ef665adb7e44ef03e7f3e6f2cd1db88315ffcbe1.tar.gz
vyos-1x-ef665adb7e44ef03e7f3e6f2cd1db88315ffcbe1.zip
openconnect: T4982: Support defining minimum TLS version in openconnect VPN
(cherry picked from commit 9ff74d4370f0a5f66c303074796dab8b1ca5c4a5)
Diffstat (limited to 'interface-definitions/interfaces_openvpn.xml.in')
-rw-r--r--interface-definitions/interfaces_openvpn.xml.in28
1 files changed, 1 insertions, 27 deletions
diff --git a/interface-definitions/interfaces_openvpn.xml.in b/interface-definitions/interfaces_openvpn.xml.in
index f7e8f8b9f..bbfe91d88 100644
--- a/interface-definitions/interfaces_openvpn.xml.in
+++ b/interface-definitions/interfaces_openvpn.xml.in
@@ -755,33 +755,7 @@
<constraintErrorMessage>Peer certificate fingerprint must be a colon-separated SHA256 hex digest</constraintErrorMessage>
</properties>
</leafNode>
- <leafNode name="tls-version-min">
- <properties>
- <help>Specify the minimum required TLS version</help>
- <completionHelp>
- <list>1.0 1.1 1.2 1.3</list>
- </completionHelp>
- <valueHelp>
- <format>1.0</format>
- <description>TLS v1.0</description>
- </valueHelp>
- <valueHelp>
- <format>1.1</format>
- <description>TLS v1.1</description>
- </valueHelp>
- <valueHelp>
- <format>1.2</format>
- <description>TLS v1.2</description>
- </valueHelp>
- <valueHelp>
- <format>1.3</format>
- <description>TLS v1.3</description>
- </valueHelp>
- <constraint>
- <regex>(1.0|1.1|1.2|1.3)</regex>
- </constraint>
- </properties>
- </leafNode>
+ #include <include/tls-version-min.xml.i>
<leafNode name="role">
<properties>
<help>TLS negotiation role</help>