diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-01-06 10:55:42 +0100 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2024-01-10 07:11:39 +0000 |
| commit | 34eadcf2f74ae57342997bed77ce64bddd34219b (patch) | |
| tree | d84308c16a8e892b047877cb4e20c702ee5574f5 /interface-definitions/interfaces_openvpn.xml.in | |
| parent | a9ed12de93425a9e9637a61e5b7f17ae01575242 (diff) | |
| download | vyos-1x-34eadcf2f74ae57342997bed77ce64bddd34219b.tar.gz vyos-1x-34eadcf2f74ae57342997bed77ce64bddd34219b.zip | |
https: T5902: remove virtual-host configuration
We have not seen the adoption of the https virtual-host CLI option.
What it did?
* Create multiple webservers each listening on a different IP/port
(but in the same VRF)
* All webservers shared one common document root
* All webservers shared the same SSL certificates
* All webservers could have had individual allow-client configurations
* API could be enabled for a particular virtual-host but was always enabled on
the default host
This configuration tried to provide a full webserver via the CLI but VyOS is a
router and the Webserver is there for an API or to serve files for a local-ui.
Changes
Remove support for virtual-hosts as it's an incomplete and thus mostly useless
"thing". Migrate all allow-client statements to one top-level allow statement.
(cherry picked from commit d0d3071e99eb65edb888c26ef2fdc9e038438887)
Diffstat (limited to 'interface-definitions/interfaces_openvpn.xml.in')
| -rw-r--r-- | interface-definitions/interfaces_openvpn.xml.in | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/interface-definitions/interfaces_openvpn.xml.in b/interface-definitions/interfaces_openvpn.xml.in index dadf5cb48..f7e8f8b9f 100644 --- a/interface-definitions/interfaces_openvpn.xml.in +++ b/interface-definitions/interfaces_openvpn.xml.in @@ -736,14 +736,7 @@ </leafNode> #include <include/pki/certificate.xml.i> #include <include/pki/ca-certificate-multi.xml.i> - <leafNode name="dh-params"> - <properties> - <help>Diffie Hellman parameters (server only)</help> - <completionHelp> - <path>pki dh</path> - </completionHelp> - </properties> - </leafNode> + #include <include/pki/dh-params.xml.i> <leafNode name="crypt-key"> <properties> <help>Static key to use to authenticate control channel</help> |